last executing test programs: 26.491891738s ago: executing program 1 (id=1779): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r0, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES16=r0], 0x31) socket$kcm(0x29, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x4080) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="4e202a3a2a20727700f74bda57ab1cf33c79f0bc7a2958d488eb8e63a8419b25ce1626710ca986b9fc129a19d2fc0cd10043ed905153cae86df11535f0903f0f17c3814ba7aecbe27ac171e0c2dba594c9bec6e946961d64012fedb2be412ddc4652de85f812213e6f35132e5f3c2326f6cb8f8d714bed522b6632ea421571b1"], 0x9) r7 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r7, &(0x7f0000000500)=ANY=[], 0x8) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x15, 0x0, 0x0) gettid() syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 24.424359212s ago: executing program 4 (id=1794): r0 = socket$kcm(0xa, 0x2, 0x88) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) socketpair(0x1, 0x4, 0x2, &(0x7f0000000280)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000600000009"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000080)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x24000004) 24.126106591s ago: executing program 2 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x430400, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5f, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x20400000}, 0x94) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async, rerun: 32) socket$kcm(0x1e, 0x4, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005beadd49d6eb7aa716b73073cf7b87f8b99a3ddde49ca1525d1e143f00bd0e3881af0ec6d48e2d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 23.82209389s ago: executing program 1 (id=1797): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d08040000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300fffc07600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x100000000}, 0xa4, 0xf40, 0x0, 0x0, 0x0, 0x0, 0xfe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x100000000}, 0xa4, 0xf40, 0x0, 0x0, 0x0, 0x0, 0xfe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="df333b89f8000000000000000000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) (async) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xec60, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x51}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x8, 0x8, 0x11}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b00)=@generic={&(0x7f0000000580)='./file0\x00', r10}, 0x18) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f00000029c0)={&(0x7f0000000380)=@phonet={0x23, 0x7, 0x9, 0x8}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000dc0)="e4a75d50d6", 0x5}], 0x1, &(0x7f0000001700)=[{0x10, 0x1, 0x2}], 0x10}, 0x810) (async) sendmsg$kcm(r11, &(0x7f00000029c0)={&(0x7f0000000380)=@phonet={0x23, 0x7, 0x9, 0x8}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000dc0)="e4a75d50d6", 0x5}], 0x1, &(0x7f0000001700)=[{0x10, 0x1, 0x2}], 0x10}, 0x810) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x16, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{0x1, 0x1, 0xf, 0x1}, {0x4, 0x3, 0x3, 0xc}, {0x0, 0x2, 0x1, 0xa}, {0x0, 0x1, 0xe}, {0x3, 0x5, 0x10, 0xc}, {0x2, 0x5, 0x5, 0xb}, {0x5, 0x5, 0xb, 0xc}, {0x5, 0x1, 0x2, 0x6}], 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(r12, 0x800454e1, &(0x7f0000000340)=r13) (async) ioctl$TUNSETFILTEREBPF(r12, 0x800454e1, &(0x7f0000000340)=r13) 23.545904054s ago: executing program 3 (id=1798): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000a0000000000008001000000", @ANYRES32, @ANYBLOB="000000000000001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="b986000000000000000000020000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x54}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r5, 0x12) openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) 22.925608236s ago: executing program 4 (id=1799): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffdd, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0xfdb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8}, 0x58c8, 0x0, 0xfffffffc, 0xf5bd6bfa3122ac26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x8, r1, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x6, 0x0, 0x0, 0x0, 0xfdb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8}, 0x58c8, 0x0, 0xfffffffc, 0xf5bd6bfa3122ac26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x8, r1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xf00, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x80, &(0x7f00000001c0)}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xf00, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x80, &(0x7f00000001c0)}, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socketpair(0x1a, 0x4, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a80)={0x0, 0x0, 0x0, &(0x7f00000019c0), 0x6}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a80)={0x0, 0x0, 0x0, &(0x7f00000019c0), 0x6}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) sendmsg$inet(r3, 0x0, 0x40) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="3400000036000b637198b38c0287fca20a0c0e0420004bab17dfed727f05bf373a5cebf5b6a70bd6f7b36f4f0a943db2a3ed919e", 0x34}], 0x1}, 0x40000) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) (async) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)=r0) (async) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)=r0) 22.916539598s ago: executing program 0 (id=1800): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)="aabcbc0b17f4360f7bf25ca7217645c0f3a281706c3a23c40b6905d48b82d2b01c82c8b3ae1776245cdcab1e9774a8b307ea7069325efb492859927c308dcfdc5660f7a5d6fbd038abf5a33b57b088696c57f94d651be9b9728a21f66a278df2e1e95aacf710c548d781f46c0b04a587", 0x70}, {&(0x7f0000000200)="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", 0xf00}, {0x0}], 0x3, &(0x7f0000001340)=[{0xe8, 0x115, 0x9, "3b4e64be995839d4c1991da1b2b35a7f976e11e258a3a1d6a8960eb6fdae642a2a94b06576cbedb410014498f0ed3675d63b540cc13532d45221470de4215a2ff6c3aeff7903a840ec0261dfbb669eb0e00295757ecb7080fd2363e092d2144e996f24dbf47ae99cf6177f7dfb17fe9582cb2019d0090841dbf3cb3ab7954f76b073ff48466a299736b16a3f6d9592ea9d655ed94ebb73b8253f299f2b6cf00ff6d6eaa79cfb5b706c90e36de4a22ff49d08bf636f02ab4f3dd3d4c06a80c83a3308f546638994ddbf833cb51376ce18316f5fb750c0"}, {0x78, 0x10d, 0x1, "f176c4155bf7e8aa3cc857f43f394a4e155e16d22164a10b51edb0fe3afe46399109937fb2b4a39a206b3ce03b34c4cc2b54e1ad3ab8f47f80544ac3a21a7479464fcc3b43e83ee044b41adbc22517ca4056d80553aa4982e3305718445b1a2e0d"}], 0x160}, 0x4000004) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001100)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05", @ANYRES16=r2], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="b4080000faffffff72113b00000006008510000002000000b7000000c200000000009500001200000000000000000000fbc7ae17f029bf93ebee799d7fefebf64c3db00c8bb5baf1cc8970f147ffe222968385276751d00c730701f297ef3bb3c25e8c7c5a6ed05b418ba1a4a755e6be1680542bca8ba0ecd6a37b1bcadfecb85103dc541100850b86da455f45bbd1be10f9a29f2aa8242e46ba5e1db6b9280889a7bdef5e8e3540cdc4ed83"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r8}, 0x38) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000900000004000000020000060400000003000000000000000500000000000000000000615f57"], &(0x7f0000003680)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) openat$cgroup(r9, 0x0, 0x200002, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, 0x0, &(0x7f00000002c0)=""/187}, 0x20) (async) recvmsg$kcm(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/72, 0x48}], 0x1, &(0x7f00000015c0)=""/130, 0x82}, 0x12063) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x10) close(0x3) 22.573878427s ago: executing program 0 (id=1801): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90424fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000240)=r9, 0x8) 18.055831052s ago: executing program 3 (id=1802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104c00000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 17.956485365s ago: executing program 4 (id=1803): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="100000000400de24b5ef26e247d91452616bb8c800fc0400000002000000000000001db121162514fdb27438e11f766bcdee2328004298aa7e710bb8999cceba4ae68977526baebe32ec7c4a860be52e624b8b124c55199d962664b05742afd37f7f4d29676cc10c217c6893fd852382eb948f5b36d0231272a27cf0a3107db17146bfde07276e7e68fd93361d10ffc4db5ee4580849a811c680034df680a5b4f1978b396be9de3b5e0ce6e24751d25b1d423267bd96b4c5bee8d56df15163ba5c4a22620a321b08", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) (async) r3 = socket$kcm(0xa, 0x5, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0xe, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000740)=""/182, 0x27, 0xb6, 0x1, 0x7}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7c, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x0, 0x1, 0x9, 0xa, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x49}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0xa, 0xa, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x86, &(0x7f00000004c0)=""/134, 0x41000, 0x14, '\x00', 0x0, @fallback=0x22, r5, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r4, 0x3, &(0x7f0000000880)=[r1, r2], &(0x7f00000008c0)=[{0x5, 0x1, 0xf, 0x7}, {0x0, 0x4, 0x1, 0x4}, {0x2, 0x4, 0xa, 0x5}], 0x10, 0xcb8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x30, 0x0, 0x5000) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800001e85000000a5000000950000000002000084fcf00d2335fade40db51d80cd9b034ac299d0e5adfb5aba5ceee897d4a2ed92c47d34a55dab34a1969358cc3180005124c95776425fb4f8bd6e2bed538d0dcd35f06de635a139d363af7b96e660b63f832a615e0157890a20dae45b4a9c5dadc8fd73a8d5112afe47b2204ae0b03b4bf3a6c1ebbfcd5dd29d400"/166], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) 17.902092917s ago: executing program 0 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000080)='GPL\x00', 0x2, 0x9a, &(0x7f0000000180)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, &(0x7f0000000140)=r0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17.901710087s ago: executing program 1 (id=1805): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x2, 0x8}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@union={0x4, 0x7, 0x0, 0x5, 0x0, 0x1, [{0x4, 0x0, 0x7}, {0xd, 0x5, 0xffffffe0}, {0x9, 0x0, 0x101}, {0x1, 0x0, 0x6}, {0xb, 0x1, 0xfffffff5}, {0xc, 0x4, 0x2}, {0x2, 0x1, 0x6}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0xa}, @typedef={0x10, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x0, 0x2e]}}, &(0x7f0000000200)=""/54, 0x99, 0x36, 0x1, 0x6}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff9, '\x00', 0x0, r1, 0x2, 0x5, 0x2}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000300fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x36}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @generic={0x44, 0x2}]}}}], 0x18}, 0x200040c4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20) 17.896198399s ago: executing program 2 (id=1806): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x420000002614) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 17.838086012s ago: executing program 3 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00|\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) recvmsg(r1, &(0x7f0000000ac0)={&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/227, 0xe3}], 0x6, &(0x7f0000000a00)=""/174, 0xae}, 0x40000000) 17.710030521s ago: executing program 0 (id=1808): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000380)=0xa0da) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f0000000000), 0x0, 0x4}, 0xfffffffffffffed6) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x20004800) recvmsg$kcm(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x42) r6 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x200400c1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.631350469s ago: executing program 4 (id=1809): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0xffffff0b}, 0x1}}, 0x80, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 17.606845175s ago: executing program 1 (id=1810): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0xfffffed3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x7}, 0x380c, 0x0, 0x51, 0x0, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101202, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 17.049897182s ago: executing program 1 (id=1811): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03b2", 0x2}], 0x1}, 0xa) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x200000}, 0x11b950, 0x1, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x20040010) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff9f, 0x1, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x80000001}, 0x158c8, 0x0, 0x6eb, 0x4, 0x0, 0x0, 0x63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000e00), 0x2}, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r5, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004885) socket$kcm(0x10, 0x8, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xd}, 0x0, 0x6, 0xa0000002, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) socket$kcm(0x10, 0x2, 0x0) 17.049168923s ago: executing program 4 (id=1812): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0xb0a2, 0xac5d, 0x3d3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x100, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0xbf4}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e06800000011000000000000002900000032000000fc0000000000000014000000000000000000000002000000"], 0x68}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000002580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x3, 0x4, 0x5, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000041580000000000000000000200edc33497b54e"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x1c, &(0x7f0000000c40)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="000000000000000085200000040000001f46000100000000062b0104080000009500000000000000711450000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000940)='syzkaller\x00', 0x4, 0x7e, &(0x7f0000000980)=""/126, 0x41100, 0x12, '\x00', 0x0, @sk_msg=0xb8cf908a679ec8f1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0x1, 0x2, 0x401}, 0x10, 0x0, r1, 0x7, &(0x7f0000000a80)=[r0, 0xffffffffffffffff, r0, r4, r0, r0, r0], &(0x7f0000000ac0)=[{0x0, 0x5, 0xe, 0xa}, {0x1, 0x2, 0x3, 0x7}, {0x3, 0x3, 0x4000010, 0x4}, {0x2, 0x5, 0xa, 0x9}, {0x5, 0x3, 0x2, 0x8}, {0x1, 0x5, 0x4, 0x7}, {0x2, 0x5, 0x8, 0x4}], 0x10, 0xa}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xff, 0x8004ff00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7000000}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000100)="8473ae8543ea4ba193ec34b89c30fc5a6612caaeb7b1a522a3bfcfc87794aab8647568325008e498bb", &(0x7f0000000200)=""/36}, 0x20) (async) openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb3", 0x38}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) 16.88604571s ago: executing program 4 (id=1813): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11c012, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/uts\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d88ea9896f37538e486dd6372ce22fdb911"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14}}], 0x18}, 0x4000801) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0xfffffffffffffea3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa", @ANYRESHEX=r0], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0900000004000000080000000800170000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xff00}, 0x48) 16.864769185s ago: executing program 2 (id=1814): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.753891841s ago: executing program 3 (id=1815): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x82044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000150400b03d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff070035060000f0000000170600000ee50014bf250000000000005d670000000000006507000006000000070500004c0001000f75000000000000bf54000000000000070400000400f9ff2d4401000000000095000000000000000500000000000000950007000000000001722fabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6155cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe74d599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f71b7eb70c174d885232e522aad0f13b0e5b43d837d040f813d0115387e36f092d9aaafe7afc637d3d107451f4854613cfd43ac63ad6141ddb0311b8c96fef49af414e49be7c23b2e8eb686fbcdd2dab4cbdb02e30e4e1a6c25b2791facac56e4c5dc036c8d80e5c7c206d24603be75850927e02fd4eea168681498d1170478408c43bb90d9df3964b64fee41745f6785419ac8de8788398e3653f34970988866043136ada4771bf8d96eeb0f565d626a3e9089"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x9a) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x9a) 16.728954566s ago: executing program 0 (id=1816): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xd0}, 0x480c4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x21580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x4, 0x54b8, 0x0, 0x0, 0x0, 0x2ac7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000680)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000500)=""/119, 0x77, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a0000000e0096a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001980)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.597164876s ago: executing program 3 (id=1817): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066f8020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115000200e48201fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd8}], 0x1}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4ffff00006c000079243d91a616b200"/32], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xcc, &(0x7f0000000240)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 16.527482462s ago: executing program 2 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x1f, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000740)='syzkaller\x00', 0xff, 0x72, &(0x7f0000000780)=""/114, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000000840)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002200356bd25a806f8c6394f91524fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x4, 0x6d, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3, 0x83}, 0x10134, 0x913d, 0xfffffffd, 0x0, 0x40001}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xf6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x20000002, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) r6 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20000000800}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd04, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 16.135841332s ago: executing program 3 (id=1819): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x200fffe, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x800, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)}], 0x1}, 0x24000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="d0ffffff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50) (async) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x9, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x82d7) (async) recvmsg(0xffffffffffffffff, 0x0, 0x2141) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) (async) socketpair(0xb, 0x3, 0xff, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async) socket$kcm(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000400000000000000008000009021fe025471f2fa"], 0x0, 0x80000000, 0xd1, &(0x7f00000001c0)=""/209, 0x40f00, 0xe8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x20002, 0x9, 0x7}, 0x10, 0x0, 0x0, 0xfffffffffffffe60, &(0x7f00000004c0)=[r0], 0x0, 0x10, 0x4}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aaf87e35e9a2b9c1fa587ec9df3638bdb872c3d8ae3aaf956af1e80f210f"], 0x50) 16.086296183s ago: executing program 1 (id=1820): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000f8e9416b7becb55bef53920b5f2fc2a0cd447f7df4bc8b586035863051a341efe9dc9200000000bf1339672594fcd95e1c6854af6266e985a41e339682964e4ccf271a88b44ed49d9965c34494e0f52623d636213169335184c8620a87834d877530808c7b1d70f95b836dd1de5a4b3beaf5d8896e9a0f3ee83a5816546fa245aab8b8b0f68de1413f899ebcb77bd7f959f28a30b9e67584850d568ca5a329f77f011ddf2f3dead0c015f03d709b8aa01c7ed40ae456449c6b54fe74fa27c9d5545c209ad8479c491bef838c8d138ff5c5ea3d3bdd4a795f1f9b02103f2506c8a4"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fff, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x86f, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffa, 0x0, 0x4}, 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 15.745501261s ago: executing program 2 (id=1821): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x2d, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, r3, 0x2, 0x2, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000900)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d81500010000fd000000000000a500ffff7a010401a80016002000034004000000035c0461c9d67f6f940071ae509b156a45a4342e875fab7cb6cec6cf6efb80acbf07a290457f0189b316277ce06bbacecbec4c0000000000000080001fb791643a5ee4ce1b141993c034e253fe8efe7c9f8775560d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1d1ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a21", 0xd8}], 0x1}, 0x400c044) 15.580878529s ago: executing program 0 (id=1822): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001e4ffffa9860755bb7980000000179513a16be64003db43d35c72fe2791f80166f3b6ea501eaf18e5546615c0a2701df421528997c1e96236e34c060a6c3577866d1f804baa4cd9356cbd9d5e49049003b1f0f7343617b46a1b66435212f1bd566c960c87101b27aa9f7f28dc70a811d695acfe1e55eeef5d9849ce4b6cd7f92ef35d5f350eb7d399940da5137b575abd4e773db356e32c85db7eb42cec6588e38b596192d90f19e53e07877cd7e034219f535936cf823106f2fe5ebd1785476ea9e2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x4240, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x58d1120ebe64cc85) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@nl=@unspec={0x0, 0x0, 0xa00}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x44800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) setsockopt$sock_attach_bpf(r0, 0x10e, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'veth0_to_hsr\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 15.540018449s ago: executing program 2 (id=1823): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 1.250229243s ago: executing program 32 (id=1813): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x11c012, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/uts\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d88ea9896f37538e486dd6372ce22fdb911"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14}}], 0x18}, 0x4000801) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0xfffffffffffffea3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa", @ANYRESHEX=r0], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0900000004000000080000000800170000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xff00}, 0x48) 214.375591ms ago: executing program 33 (id=1822): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001e4ffffa9860755bb7980000000179513a16be64003db43d35c72fe2791f80166f3b6ea501eaf18e5546615c0a2701df421528997c1e96236e34c060a6c3577866d1f804baa4cd9356cbd9d5e49049003b1f0f7343617b46a1b66435212f1bd566c960c87101b27aa9f7f28dc70a811d695acfe1e55eeef5d9849ce4b6cd7f92ef35d5f350eb7d399940da5137b575abd4e773db356e32c85db7eb42cec6588e38b596192d90f19e53e07877cd7e034219f535936cf823106f2fe5ebd1785476ea9e2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x4240, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x58d1120ebe64cc85) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@nl=@unspec={0x0, 0x0, 0xa00}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x44800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) setsockopt$sock_attach_bpf(r0, 0x10e, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0xb, &(0x7f0000000000)=r3, 0x4) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'veth0_to_hsr\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r8, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 161.078593ms ago: executing program 34 (id=1820): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000f8e9416b7becb55bef53920b5f2fc2a0cd447f7df4bc8b586035863051a341efe9dc9200000000bf1339672594fcd95e1c6854af6266e985a41e339682964e4ccf271a88b44ed49d9965c34494e0f52623d636213169335184c8620a87834d877530808c7b1d70f95b836dd1de5a4b3beaf5d8896e9a0f3ee83a5816546fa245aab8b8b0f68de1413f899ebcb77bd7f959f28a30b9e67584850d568ca5a329f77f011ddf2f3dead0c015f03d709b8aa01c7ed40ae456449c6b54fe74fa27c9d5545c209ad8479c491bef838c8d138ff5c5ea3d3bdd4a795f1f9b02103f2506c8a4"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x7fff, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x86f, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffa, 0x0, 0x4}, 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 50.427788ms ago: executing program 35 (id=1823): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 0s ago: executing program 36 (id=1819): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x200fffe, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x800, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)}], 0x1}, 0x24000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="d0ffffff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50) (async) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x9, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x82d7) (async) recvmsg(0xffffffffffffffff, 0x0, 0x2141) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) (async) socketpair(0xb, 0x3, 0xff, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x56}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async) socket$kcm(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000400000000000000008000009021fe025471f2fa"], 0x0, 0x80000000, 0xd1, &(0x7f00000001c0)=""/209, 0x40f00, 0xe8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x20002, 0x9, 0x7}, 0x10, 0x0, 0x0, 0xfffffffffffffe60, &(0x7f00000004c0)=[r0], 0x0, 0x10, 0x4}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aaf87e35e9a2b9c1fa587ec9df3638bdb872c3d8ae3aaf956af1e80f210f"], 0x50) kernel console output (not intermixed with test programs): vsim0 netdevsim3: renamed from eth3 [ 83.019642][ T4277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.045204][ T4277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.081300][ T4277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.100812][ T4277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.113961][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.127251][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.154322][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.169685][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.193117][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.249276][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.260084][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.270933][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.282386][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.292395][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.318470][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.326849][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.366827][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.376566][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.387536][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.394855][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.404046][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.418615][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.427603][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.438494][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.445788][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.459142][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.489949][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.502340][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.541346][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.549536][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.576733][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.599613][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.609271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.619260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.628835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.639155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.648637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.657795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.666635][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.673766][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.684671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.694520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.721094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.730455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.739660][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.746829][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.757532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.767009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.777218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.786308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.809707][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.822272][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.836415][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.844271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.853502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.862461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.871157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.889588][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.902885][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.913005][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.928976][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.936627][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.967280][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.982842][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.992898][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.011519][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.029475][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.041478][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.053777][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.068575][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.080053][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.092775][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.131407][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.151419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.163844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.172843][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.180031][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.190273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.199284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.210258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.220563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.229998][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.238409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.250202][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.280908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.295900][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 84.298766][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 84.303750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.317687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.326966][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.334100][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.342057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.351281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.360243][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.367448][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.375497][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 84.376681][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 84.381578][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 84.394774][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.408197][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.421190][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.449293][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.490682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.507721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.519225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.534057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.543962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.558471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.584897][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.605354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.619176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.628709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.646600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.660563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.669040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.677255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.686169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.694688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.704046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.713391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.736693][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.763222][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.784025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.797457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.829590][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.858732][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.875907][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.895909][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.903068][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.912061][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.001195][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.012982][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.039951][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.047160][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.075479][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.111297][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.127567][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.149217][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.191632][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.221879][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.240369][ T4272] device veth0_vlan entered promiscuous mode [ 85.287308][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.296696][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.316927][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.355502][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.376238][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.391080][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.400191][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.416914][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.426050][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.442456][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.464572][ T4272] device veth1_vlan entered promiscuous mode [ 85.489005][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.499111][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.516186][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.536054][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.543613][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.591458][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.618346][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.628599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.646634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.663846][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.694388][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.709393][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.720410][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.744907][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.766421][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.803554][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.813656][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.824527][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.836725][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.872585][ T4272] device veth0_macvtap entered promiscuous mode [ 85.902995][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.918246][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.940016][ T4273] device veth0_vlan entered promiscuous mode [ 85.950856][ T4272] device veth1_macvtap entered promiscuous mode [ 85.963985][ T4277] device veth0_vlan entered promiscuous mode [ 85.987114][ T4274] device veth0_vlan entered promiscuous mode [ 86.000138][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.010645][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.020832][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.031551][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.044570][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.060019][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.090136][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.105654][ T4273] device veth1_vlan entered promiscuous mode [ 86.114023][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.126137][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.134126][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.144311][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.159212][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.169026][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.177672][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.186008][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.194628][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.207904][ T4274] device veth1_vlan entered promiscuous mode [ 86.224629][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.261540][ T4277] device veth1_vlan entered promiscuous mode [ 86.274653][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.283402][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.294244][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.302756][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.312364][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.327137][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.336288][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.345009][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.354105][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.365728][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 86.375372][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 86.402025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.411984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.421588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.430244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.451423][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 86.457575][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 86.457715][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 86.489721][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.499945][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.508874][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.518106][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.533701][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.543128][ T4274] device veth0_macvtap entered promiscuous mode [ 86.566224][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.586506][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.596045][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.606184][ T4273] device veth0_macvtap entered promiscuous mode [ 86.618660][ T4277] device veth0_macvtap entered promiscuous mode [ 86.635964][ T4274] device veth1_macvtap entered promiscuous mode [ 86.662054][ T4273] device veth1_macvtap entered promiscuous mode [ 86.684613][ T4277] device veth1_macvtap entered promiscuous mode [ 86.778478][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.805881][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.841966][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.872524][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.880975][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.891785][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.902321][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.918181][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.929077][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.951236][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.962333][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.974529][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.989352][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.000361][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.014170][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.032698][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.042347][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.062718][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.079348][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.094988][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.116373][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.145457][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.171718][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.203062][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.213325][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.223939][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.241208][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.259403][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.277257][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.293018][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.309044][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.327480][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.338300][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.347561][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.358816][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.370749][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.387951][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.402079][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.420468][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.444959][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.454870][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.463228][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.478519][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.507257][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.537230][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.558084][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.588312][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.609633][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.636191][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.647474][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.658135][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.674682][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.682731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.697789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.709151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.720652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.733654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.751196][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.762585][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.774918][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.785263][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.818091][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.833693][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.850865][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.859852][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.013113][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.036252][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.149145][ T4275] device veth0_vlan entered promiscuous mode [ 88.173313][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.183766][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.236776][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.243875][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.253351][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.281126][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.293138][ T4275] device veth1_vlan entered promiscuous mode [ 88.330258][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.340006][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.359947][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.363790][ C0] hrtimer: interrupt took 85440 ns [ 88.375763][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.383639][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.407298][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.440011][ T4366] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 88.446174][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 88.453088][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 88.478685][ T4366] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 88.489178][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.498972][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.510518][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.527576][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 88.527645][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 88.533628][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 88.549000][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.558356][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.581708][ T4275] device veth0_macvtap entered promiscuous mode [ 88.596177][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.614320][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.624183][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.641210][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.659719][ T4275] device veth1_macvtap entered promiscuous mode [ 88.669797][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.689230][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.689714][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.709884][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.715190][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.734515][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.776200][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.801939][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.850084][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.879114][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.895147][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.919451][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.932690][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.948376][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.961742][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.979496][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.024219][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.039052][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.097086][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.184020][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.243579][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.264454][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.321182][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.399769][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.439537][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.453841][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.474983][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.537198][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.548252][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.889935][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.935383][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.975000][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.007041][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566908][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.574824][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.627348][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.671556][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.703731][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.736479][ T4405] netlink: 'syz.0.13': attribute type 2 has an invalid length. [ 90.744212][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.903504][ T27] cfg80211: failed to load regulatory.db [ 92.532079][ T4430] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.21'. [ 92.916398][ T4437] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.25'. [ 92.963119][ T4440] netlink: 'syz.1.24': attribute type 3 has an invalid length. [ 93.048767][ T4440] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.24'. [ 93.913336][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.923782][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.058204][ T4457] device bridge_slave_1 left promiscuous mode [ 94.078027][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.117462][ T4457] device bridge_slave_0 left promiscuous mode [ 94.133192][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.325359][ T4472] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 94.337245][ T4473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33'. [ 94.362398][ T4472] device macvlan0 entered promiscuous mode [ 94.530185][ T4472] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 94.612106][ T4473] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33'. [ 94.830674][ T4474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.33'. [ 94.857843][ T4487] netlink: 'syz.1.36': attribute type 21 has an invalid length. [ 94.876494][ T4487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.36'. [ 94.891540][ T4487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36'. [ 95.158826][ T4491] netlink: 'syz.2.38': attribute type 3 has an invalid length. [ 95.204658][ T4491] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.38'. [ 95.640992][ T4507] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.41'. [ 96.080234][ T4509] netlink: 'syz.2.42': attribute type 2 has an invalid length. [ 96.147858][ T4509] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 98.031148][ T4527] Driver unsupported XDP return value 0 on prog (id 101) dev N/A, expect packet loss! [ 98.615101][ T4535] __nla_validate_parse: 1 callbacks suppressed [ 98.615121][ T4535] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.50'. [ 98.683264][ T4535] netlink: zone id is out of range [ 98.710135][ T4535] netlink: zone id is out of range [ 98.715978][ T4535] netlink: zone id is out of range [ 98.723779][ T4535] netlink: zone id is out of range [ 98.868259][ T4535] netlink: del zone limit has 4 unknown bytes [ 99.066819][ T4562] netlink: 'syz.0.53': attribute type 2 has an invalid length. [ 99.084143][ T4558] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 99.206769][ T4557] netlink: 'syz.0.53': attribute type 10 has an invalid length. [ 99.278170][ T4557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 100.268034][ T4558] team0: Port device dummy0 added [ 100.318690][ T4562] device 0 entered promiscuous mode [ 100.324802][ T4557] netlink: 'syz.0.53': attribute type 10 has an invalid length. [ 100.345684][ T4557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 100.556489][ T4569] netlink: 'syz.3.57': attribute type 16 has an invalid length. [ 100.564625][ T4569] netlink: 152 bytes leftover after parsing attributes in process `syz.3.57'. [ 101.587693][ T4592] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.62'. [ 101.662730][ T4592] tc_dump_action: action bad kind [ 101.971867][ T4600] netlink: 152 bytes leftover after parsing attributes in process `syz.0.60'. [ 102.254802][ T4612] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 102.356511][ T4612] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 103.530131][ T4644] netlink: 'syz.3.76': attribute type 33 has an invalid length. [ 103.563115][ T4644] netlink: 152 bytes leftover after parsing attributes in process `syz.3.76'. [ 103.606732][ T4644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.287930][ T4651] Zero length message leads to an empty skb [ 105.949569][ T26] audit: type=1800 audit(1790622772.707:2): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.83" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 105.970020][ T4681] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 106.013160][ T4681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 106.063222][ T4683] netlink: 'syz.1.85': attribute type 29 has an invalid length. [ 106.063711][ T4681] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.082328][ T4683] netlink: 'syz.1.85': attribute type 29 has an invalid length. [ 106.145432][ T4688] netlink: 'syz.1.85': attribute type 29 has an invalid length. [ 106.548000][ T4681] syz.0.83 (4681) used greatest stack depth: 20160 bytes left [ 107.330894][ T4710] device syzkaller0 entered promiscuous mode [ 109.243186][ T4731] netlink: 'syz.3.96': attribute type 49 has an invalid length. [ 109.263685][ T4741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 109.272730][ T4742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 109.297065][ T4749] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.100'. [ 109.920164][ T4773] netlink: 'syz.1.107': attribute type 10 has an invalid length. [ 110.059226][ T4773] team0: Port device geneve1 added [ 111.683136][ T4801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.115'. [ 111.965967][ T4810] syz.1.118 uses obsolete (PF_INET,SOCK_PACKET) [ 112.034948][ T4810] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 112.151376][ T4810] team0: Device nlmon0 is of different type [ 112.219238][ T4815] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.119'. [ 112.338232][ T4820] netlink: 'syz.2.121': attribute type 2 has an invalid length. [ 112.351968][ T4820] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.121'. [ 113.027975][ T4828] netlink: 'syz.3.123': attribute type 21 has an invalid length. [ 113.100313][ T4828] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.123'. [ 113.569821][ T4844] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 113.616819][ T4844] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.129'. [ 114.680297][ T4882] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.136'. [ 116.004763][ T4911] netlink: 763 bytes leftover after parsing attributes in process `syz.0.141'. [ 116.599752][ T4926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.148'. [ 117.621945][ T4958] netlink: 'syz.1.157': attribute type 3 has an invalid length. [ 117.693944][ T4958] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.157'. [ 117.727137][ T4957] netlink: 'syz.1.157': attribute type 3 has an invalid length. [ 117.749637][ T4957] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.157'. [ 118.124526][ T4987] tap0: tun_chr_ioctl cmd 2147767520 [ 118.255471][ T4994] netlink: 10 bytes leftover after parsing attributes in process `syz.3.162'. [ 118.641827][ T5008] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.169'. [ 119.210040][ T5016] netlink: 'syz.1.172': attribute type 10 has an invalid length. [ 122.467876][ T5016] team0: Device veth0_vlan failed to register rx_handler [ 122.624549][ T5016] syz.1.172 (5016) used greatest stack depth: 20048 bytes left [ 122.720274][ T5041] netlink: 'syz.3.180': attribute type 7 has an invalid length. [ 123.007543][ T5044] netlink: 'syz.1.181': attribute type 5 has an invalid length. [ 125.510383][ T5112] netlink: 152 bytes leftover after parsing attributes in process `syz.3.200'. [ 129.190132][ T4292] Bluetooth: hci3: ISO packet for unknown connection handle 15 [ 131.664357][ T5246] netlink: 'syz.1.218': attribute type 21 has an invalid length. [ 131.718039][ T5252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.219'. [ 131.782152][ T5252] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.037710][ T5265] delete_channel: no stack [ 132.042847][ T5265] delete_channel: no stack [ 132.849993][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856929][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.890158][ T5200] wlan1: Trigger new scan to find an IBSS to join [ 135.963879][ T5323] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.235'. [ 136.011656][ T5323] netlink: zone id is out of range [ 136.032240][ T5323] netlink: zone id is out of range [ 136.051831][ T5323] netlink: zone id is out of range [ 136.062874][ T5323] netlink: zone id is out of range [ 136.126565][ T5323] netlink: zone id is out of range [ 136.151635][ T5323] netlink: zone id is out of range [ 136.172679][ T5323] netlink: zone id is out of range [ 136.194938][ T5323] netlink: zone id is out of range [ 136.229878][ T5323] netlink: zone id is out of range [ 136.264931][ T5323] netlink: zone id is out of range [ 136.813030][ T5346] netlink: 'syz.0.241': attribute type 39 has an invalid length. [ 137.907597][ T5202] wlan1: Trigger new scan to find an IBSS to join [ 138.594086][ T5374] netlink: 'syz.1.247': attribute type 2 has an invalid length. [ 138.622632][ T5374] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 138.650077][ T5374] netlink: 'syz.1.247': attribute type 4 has an invalid length. [ 138.673556][ T5374] netlink: 208312 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.848741][ T5200] wlan1: Creating new IBSS network, BSSID 92:ec:71:72:78:57 [ 139.223553][ T5378] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.249'. [ 139.389440][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'. [ 140.211511][ T5419] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 140.238153][ T5419] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.258'. [ 141.669782][ T5457] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 141.858743][ T5457] team0: Port device dummy0 removed [ 141.947583][ T5457] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.787624][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.804868][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.046335][ T5474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.065169][ T5474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.466475][ T5487] netlink: 'syz.1.271': attribute type 2 has an invalid length. [ 145.553885][ T5487] netlink: 'syz.1.271': attribute type 4 has an invalid length. [ 145.606081][ T5487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.271'. [ 145.949172][ T5497] netlink: 188 bytes leftover after parsing attributes in process `syz.4.274'. [ 152.746062][ T5598] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.306'. [ 152.937670][ T5601] netlink: 'syz.2.306': attribute type 4 has an invalid length. [ 152.982260][ T5601] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.306'. [ 153.395808][ T5598] syz.2.306 (5598) used greatest stack depth: 16256 bytes left [ 154.581744][ T5645] netlink: 'syz.3.316': attribute type 21 has an invalid length. [ 154.658293][ T5645] netlink: 'syz.3.316': attribute type 20 has an invalid length. [ 155.928622][ T5665] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.322'. [ 158.422595][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.481106][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.938342][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.953163][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.922909][ T5769] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.352'. [ 162.858046][ T5790] netlink: 'syz.3.356': attribute type 21 has an invalid length. [ 162.888978][ T5790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.356'. [ 162.919853][ T5790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 163.158013][ T5796] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 163.491513][ T5808] netlink: 'syz.0.360': attribute type 27 has an invalid length. [ 163.545097][ T5808] netlink: 152 bytes leftover after parsing attributes in process `syz.0.360'. [ 163.563933][ T5808] net_ratelimit: 6 callbacks suppressed [ 163.563956][ T5808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.863302][ T5816] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 163.892739][ T5816] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 163.983948][ T5816] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 164.045560][ T5814] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 164.213668][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.233552][ T5814] team0: Port device bond0 added [ 164.259337][ T5820] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 165.284619][ T5821] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 165.317442][ T5831] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.365'. [ 165.879810][ T5859] netlink: 'syz.4.373': attribute type 10 has an invalid length. [ 167.980438][ T5916] netlink: 10 bytes leftover after parsing attributes in process `syz.3.389'. [ 168.206365][ T5926] netlink: 'syz.1.393': attribute type 29 has an invalid length. [ 168.232756][ T5926] netlink: 'syz.1.393': attribute type 29 has an invalid length. [ 168.257794][ T5928] netlink: 'syz.1.393': attribute type 29 has an invalid length. [ 168.326423][ T5931] netlink: 'syz.4.392': attribute type 19 has an invalid length. [ 168.847242][ T5211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.260656][ T5960] netlink: 'syz.3.400': attribute type 3 has an invalid length. [ 169.296875][ T5960] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.400'. [ 169.335487][ T5958] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 169.532483][ T5958] team0: Port device macvlan0 added [ 169.698709][ T5968] netlink: 'syz.4.404': attribute type 2 has an invalid length. [ 169.752237][ T5971] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 169.761259][ T5968] netlink: 164 bytes leftover after parsing attributes in process `syz.4.404'. [ 169.798089][ T5971] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.403'. [ 169.881198][ T5968] netlink: 144 bytes leftover after parsing attributes in process `syz.4.404'. [ 169.955176][ T5979] netlink: 164 bytes leftover after parsing attributes in process `syz.3.406'. [ 169.989713][ T5981] netlink: 164 bytes leftover after parsing attributes in process `syz.3.406'. [ 172.133283][ T6019] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 172.996049][ T6032] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.417'. [ 174.120207][ T6070] netlink: 'syz.4.428': attribute type 2 has an invalid length. [ 174.149870][ T6070] netlink: 10 bytes leftover after parsing attributes in process `syz.4.428'. [ 174.625391][ T6077] netlink: 'syz.1.431': attribute type 29 has an invalid length. [ 174.669525][ T6077] netlink: 'syz.1.431': attribute type 29 has an invalid length. [ 174.730114][ T6082] netlink: 'syz.1.431': attribute type 29 has an invalid length. [ 175.178334][ T6089] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 175.237385][ T6089] netlink: 152 bytes leftover after parsing attributes in process `syz.4.433'. [ 175.485955][ T6089] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 175.984010][ T6106] netlink: 'syz.2.436': attribute type 21 has an invalid length. [ 176.028501][ T6106] netlink: 132 bytes leftover after parsing attributes in process `syz.2.436'. [ 176.690753][ T6120] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.441'. [ 176.985375][ T6123] netlink: 'syz.4.442': attribute type 21 has an invalid length. [ 177.007322][ T6123] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 177.049056][ T6123] netlink: 144 bytes leftover after parsing attributes in process `syz.4.442'. [ 177.451733][ T6135] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 177.525737][ T6135] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 177.544014][ T6135] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.445'. [ 177.611066][ T6136] bridge0: port 3(team0) entered blocking state [ 177.646717][ T6136] bridge0: port 3(team0) entered disabled state [ 177.667345][ T6136] device team0 entered promiscuous mode [ 177.701166][ T6136] device team_slave_0 entered promiscuous mode [ 177.709062][ T6136] device team_slave_1 entered promiscuous mode [ 177.734678][ T6136] device geneve1 entered promiscuous mode [ 177.740815][ T6136] device macvlan0 entered promiscuous mode [ 177.753444][ T6136] bridge0: port 3(team0) entered blocking state [ 177.760042][ T6136] bridge0: port 3(team0) entered forwarding state [ 178.125955][ T6138] netlink: 148 bytes leftover after parsing attributes in process `syz.0.446'. [ 181.166756][ T6146] netlink: 'syz.4.448': attribute type 21 has an invalid length. [ 181.174594][ T6146] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 181.780693][ T6167] device wlan1 entered promiscuous mode [ 181.939695][ T6167] netlink: 'syz.0.451': attribute type 3 has an invalid length. [ 181.958700][ T6167] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.451'. [ 182.040390][ T6172] syz.2.454[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.040596][ T6172] syz.2.454[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.454494][ T6186] netlink: 'syz.1.456': attribute type 40 has an invalid length. [ 182.543688][ T6190] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 182.647066][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.687300][ T6190] device bridge_slave_1 left promiscuous mode [ 182.700894][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.754606][ T6190] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 182.780827][ T6185] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.457'. [ 182.796159][ T6185] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.457'. [ 183.087296][ T6185] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.457'. [ 183.593588][ T6209] netlink: 'syz.1.463': attribute type 21 has an invalid length. [ 184.349632][ T6218] netlink: 128 bytes leftover after parsing attributes in process `syz.4.465'. [ 184.395301][ T6218] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 184.430285][ T6218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.398695][ T6244] netlink: 'syz.1.474': attribute type 25 has an invalid length. [ 185.411935][ T6244] netlink: 'syz.1.474': attribute type 25 has an invalid length. [ 185.977315][ T4292] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 185.987435][ T4292] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 185.999208][ T4292] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 186.009014][ T4292] CPU: 0 PID: 4292 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 186.016638][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.026741][ T4292] Workqueue: hci1 hci_rx_work [ 186.031496][ T4292] Call Trace: [ 186.034813][ T4292] [ 186.037769][ T4292] dump_stack_lvl+0x188/0x24e [ 186.042727][ T4292] ? show_regs_print_info+0x12/0x12 [ 186.047984][ T4292] ? load_image+0x410/0x410 [ 186.052549][ T4292] sysfs_create_dir_ns+0x26a/0x290 [ 186.057707][ T4292] ? __lock_acquire+0x7c40/0x7c40 [ 186.062769][ T4292] ? sysfs_warn_dup+0xa0/0xa0 [ 186.067483][ T4292] ? do_raw_spin_unlock+0x11d/0x230 [ 186.072713][ T4292] kobject_add_internal+0x617/0xca0 [ 186.077956][ T4292] kobject_add+0x160/0x230 [ 186.082417][ T4292] ? kobject_init+0x1c0/0x1c0 [ 186.087123][ T4292] ? __raw_spin_lock_init+0x41/0x100 [ 186.092437][ T4292] ? klist_children_get+0x50/0x50 [ 186.097519][ T4292] ? get_device_parent+0x121/0x3e0 [ 186.102668][ T4292] device_add+0x470/0x1050 [ 186.107138][ T4292] hci_conn_add_sysfs+0xd1/0x1e0 [ 186.112112][ T4292] le_conn_complete_evt+0xf93/0x15c0 [ 186.117459][ T4292] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 186.123735][ T4292] ? bt_info+0x180/0x180 [ 186.128013][ T4292] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 186.133690][ T4292] ? mutex_unlock+0x10/0x10 [ 186.138222][ T4292] ? skb_pull_data+0xec/0x1f0 [ 186.142927][ T4292] hci_le_enh_conn_complete_evt+0x185/0x460 [ 186.148872][ T4292] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 186.155329][ T4292] ? hci_remote_host_features_evt+0x230/0x230 [ 186.161444][ T4292] hci_event_packet+0x7b3/0x1290 [ 186.166409][ T4292] ? lock_chain_count+0x20/0x20 [ 186.171290][ T4292] ? bis_list+0x280/0x280 [ 186.175645][ T4292] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 186.181574][ T4292] ? kcov_remote_start+0x50f/0x810 [ 186.186720][ T4292] ? lockdep_hardirqs_on+0x94/0x140 [ 186.191952][ T4292] ? hci_send_to_monitor+0x9c/0x4a0 [ 186.197193][ T4292] hci_rx_work+0x3eb/0xd40 [ 186.201631][ T4292] ? _raw_spin_unlock+0x40/0x40 [ 186.206519][ T4292] ? process_one_work+0x7b4/0x1160 [ 186.211667][ T4292] process_one_work+0x8ab/0x1160 [ 186.216658][ T4292] ? worker_detach_from_pool+0x240/0x240 [ 186.222318][ T4292] ? _raw_spin_lock_irq+0x86/0xf0 [ 186.227391][ T4292] ? _raw_spin_lock_irq+0xb7/0xf0 [ 186.232472][ T4292] ? _raw_spin_lock_irqsave+0x100/0x100 [ 186.238056][ T4292] ? wq_worker_running+0x97/0x190 [ 186.243132][ T4292] worker_thread+0xaf5/0x12a0 [ 186.247849][ T4292] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 186.253829][ T4292] kthread+0x29d/0x330 [ 186.257920][ T4292] ? worker_clr_flags+0x1a0/0x1a0 [ 186.262990][ T4292] ? kthread_blkcg+0xd0/0xd0 [ 186.267609][ T4292] ret_from_fork+0x1f/0x30 [ 186.272065][ T4292] [ 186.285127][ T4292] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.298323][ T4292] Bluetooth: hci1: failed to register connection device [ 187.209573][ T6275] device syzkaller0 entered promiscuous mode [ 187.651390][ T6294] can: request_module (can-proto-0) failed. [ 188.374842][ T4292] Bluetooth: hci1: command 0x2016 tx timeout [ 189.956429][ T6296] netlink: 'syz.1.486': attribute type 25 has an invalid length. [ 189.964202][ T6296] netlink: 'syz.1.486': attribute type 28 has an invalid length. [ 189.972929][ T6298] netlink: 'syz.2.489': attribute type 10 has an invalid length. [ 189.984515][ T6298] netlink: 2 bytes leftover after parsing attributes in process `syz.2.489'. [ 189.995786][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.003400][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.039085][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.046351][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.054769][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.061994][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.093370][ T6298] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.103886][ T6306] netlink: 59667 bytes leftover after parsing attributes in process `syz.3.491'. [ 190.134223][ T6317] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 190.164306][ T6317] netlink: 55 bytes leftover after parsing attributes in process `syz.1.494'. [ 190.333729][ T6318] netlink: 14 bytes leftover after parsing attributes in process `syz.1.494'. [ 190.455354][ T4292] Bluetooth: hci1: command 0x2016 tx timeout [ 190.485922][ T6318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.513278][ T6318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.564367][ T6318] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 190.587676][ T6318] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 190.617302][ T6318] bond0 (unregistering): Released all slaves [ 190.640505][ T6331] netlink: 128 bytes leftover after parsing attributes in process `syz.2.497'. [ 190.663565][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 190.687222][ T6331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.814895][ T6336] netlink: 'syz.3.500': attribute type 16 has an invalid length. [ 190.839710][ T6336] netlink: 156 bytes leftover after parsing attributes in process `syz.3.500'. [ 192.438135][ T6390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 192.465341][ T6390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 192.490937][ T6390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 192.545419][ T6388] netlink: 'syz.0.517': attribute type 2 has an invalid length. [ 192.553936][ T6388] netlink: 'syz.0.517': attribute type 8 has an invalid length. [ 192.571050][ T6388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.517'. [ 193.812213][ T6430] ¥: port 1(team0) entered blocking state [ 193.855313][ T6430] ¥: port 1(team0) entered disabled state [ 193.876796][ T6430] device team0 entered promiscuous mode [ 193.897256][ T6430] device team_slave_0 entered promiscuous mode [ 193.903730][ T6430] device team_slave_1 entered promiscuous mode [ 193.968854][ T6426] device team0 left promiscuous mode [ 193.990275][ T6426] device team_slave_0 left promiscuous mode [ 194.019747][ T6426] device team_slave_1 left promiscuous mode [ 194.058684][ T6426] ¥: port 1(team0) entered disabled state [ 194.289878][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.296304][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.484509][ T4292] Bluetooth: hci3: unexpected event 0x12 length: 151 > 8 [ 196.116620][ T6472] can: request_module (can-proto-0) failed. [ 196.445637][ T6484] __nla_validate_parse: 6 callbacks suppressed [ 196.445655][ T6484] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.545'. [ 196.565297][ T6488] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 196.570050][ T6484] netlink: zone id is out of range [ 196.625285][ T6484] netlink: zone id is out of range [ 196.664972][ T6484] netlink: zone id is out of range [ 196.680976][ T6484] netlink: zone id is out of range [ 196.748601][ T6484] netlink: zone id is out of range [ 196.753836][ T6484] netlink: zone id is out of range [ 196.809378][ T6484] netlink: zone id is out of range [ 196.814593][ T6484] netlink: zone id is out of range [ 196.925739][ T6484] netlink: zone id is out of range [ 196.957462][ T6484] netlink: get zone limit has 8 unknown bytes [ 197.121802][ T6491] device veth1_macvtap left promiscuous mode [ 197.250760][ T6488] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 197.282047][ T6499] device veth0_to_bridge entered promiscuous mode [ 197.312985][ T6503] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 197.337591][ T6505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.548'. [ 197.504450][ T6486] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 197.633206][ T6508] device syzkaller0 entered promiscuous mode [ 199.883143][ T5066] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 200.883393][ T6511] netlink: 'syz.4.550': attribute type 21 has an invalid length. [ 200.891458][ T6511] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.900422][ T6511] IPv6: Can't replace route, no match found [ 201.545948][ T6567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 201.555714][ T6567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 201.569230][ T6567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 201.580855][ T6567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.567'. [ 202.112237][ T6575] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.571'. [ 202.213446][ T6575] device bridge_slave_1 entered promiscuous mode [ 203.811279][ T6605] netlink: 'syz.0.575': attribute type 25 has an invalid length. [ 203.838865][ T6605] netlink: 'syz.0.575': attribute type 29 has an invalid length. [ 203.962052][ T6611] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.581'. [ 204.829204][ T6651] tipc: Started in network mode [ 204.834960][ T6651] tipc: Node identity 9215a268, cluster identity 4711 [ 204.863675][ T6651] tipc: Node number set to 2450891368 [ 205.192824][ T6669] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 205.222839][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.233787][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.294576][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.303393][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.314222][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.322601][ T6669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.497364][ T6669] team0: Port device bridge0 added [ 206.024460][ T6699] netlink: 'syz.1.606': attribute type 19 has an invalid length. [ 206.078705][ T6699] netlink: 172 bytes leftover after parsing attributes in process `syz.1.606'. [ 206.352797][ T6705] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.398910][ T6705] netlink: 1 bytes leftover after parsing attributes in process `syz.3.608'. [ 206.606939][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 206.613035][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 206.619172][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 206.625304][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 206.625355][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 207.122475][ T6725] netlink: 'syz.2.611': attribute type 29 has an invalid length. [ 207.159321][ T6725] netlink: 'syz.2.611': attribute type 29 has an invalid length. [ 207.173513][ T6724] netlink: 188 bytes leftover after parsing attributes in process `syz.3.610'. [ 207.302596][ T6729] netlink: 'syz.2.611': attribute type 4 has an invalid length. [ 207.330261][ T6729] netlink: 152 bytes leftover after parsing attributes in process `syz.2.611'. [ 207.472027][ T6729] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 210.737503][ T6802] netlink: 'syz.1.629': attribute type 11 has an invalid length. [ 210.765284][ T6802] netlink: 'syz.1.629': attribute type 2 has an invalid length. [ 210.785329][ T6802] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.629'. [ 211.477887][ T6816] netlink: 'syz.4.631': attribute type 46 has an invalid length. [ 211.580866][ T6819] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 211.911893][ T6827] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.636'. [ 212.098153][ T6831] netlink: 'syz.1.638': attribute type 10 has an invalid length. [ 212.134864][ T6831] bridge0: port 3(team0) entered disabled state [ 212.144221][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.283389][ T6831] team0: Device bridge0 is already an upper device of the team interface [ 214.791734][ T6879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.647'. [ 218.779577][ T6869] device syzkaller0 entered promiscuous mode [ 218.787617][ T6879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.647'. [ 218.801531][ T6900] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 218.812803][ T6900] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.651'. [ 218.848938][ T6898] netlink: 'syz.4.651': attribute type 27 has an invalid length. [ 218.869363][ T6899] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.651'. [ 219.064420][ T6902] netlink: 'syz.2.652': attribute type 10 has an invalid length. [ 219.098552][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.105935][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.178681][ T6902] bond0: (slave bridge0): Releasing backup interface [ 219.481433][ T6928] netlink: 'syz.1.655': attribute type 2 has an invalid length. [ 219.558610][ T6928] netlink: 'syz.1.655': attribute type 3 has an invalid length. [ 219.616610][ T6928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.655'. [ 219.645956][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.653898][ T6902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.662353][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.670130][ T6902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.742495][ T6902] team0: Port device bridge0 added [ 220.211945][ T6939] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.658'. [ 221.145646][ T6974] netlink: 198388 bytes leftover after parsing attributes in process `syz.4.667'. [ 221.514492][ T6997] netlink: 'syz.2.673': attribute type 7 has an invalid length. [ 221.670580][ T7000] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.674'. [ 221.724978][ T7007] netlink: 'syz.3.675': attribute type 14 has an invalid length. [ 222.181885][ T7017] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.680'. [ 222.342188][ T7019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.681'. [ 222.510858][ T7024] netlink: 'syz.4.683': attribute type 21 has an invalid length. [ 222.667848][ T7025] netlink: 'syz.0.682': attribute type 21 has an invalid length. [ 222.992885][ T7034] netlink: 'syz.3.679': attribute type 11 has an invalid length. [ 223.107210][ T7034] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.679'. [ 223.366890][ T7047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.668542][ T7060] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.694'. [ 226.338196][ T7103] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.704'. [ 226.893105][ T7130] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.709'. [ 227.119131][ T7132] device syzkaller0 entered promiscuous mode [ 230.901434][ T5215] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 231.816128][ T7155] device lo entered promiscuous mode [ 232.019797][ T7159] netlink: 'syz.3.715': attribute type 21 has an invalid length. [ 232.599499][ T7171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.720'. [ 232.793632][ T7188] __sock_release: fasync list not empty! [ 234.744707][ T7218] device sit0 entered promiscuous mode [ 235.033602][ T7234] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 235.054554][ T7234] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.733'. [ 235.485403][ T7223] netlink: 14 bytes leftover after parsing attributes in process `syz.0.731'. [ 238.467145][ T7223] team0: Port device team_slave_0 removed [ 238.968899][ T7252] netlink: 'syz.3.740': attribute type 21 has an invalid length. [ 238.977092][ T7252] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.370488][ T7266] netlink: 'syz.2.745': attribute type 6 has an invalid length. [ 239.420721][ T7266] netlink: 168 bytes leftover after parsing attributes in process `syz.2.745'. [ 240.302943][ T7294] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 240.371394][ T7294] bond0: (slave netdevsim0): Releasing backup interface [ 240.460934][ T7294] bridge0: port 3(netdevsim0) entered blocking state [ 240.476268][ T7294] bridge0: port 3(netdevsim0) entered disabled state [ 240.533281][ T7294] device netdevsim0 entered promiscuous mode [ 240.633134][ T4293] Bluetooth: hci3: ISO packet for unknown connection handle 62 [ 240.984603][ T7318] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 240.996201][ T7318] syzkaller1: group set to 778 [ 241.009644][ T7320] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 241.122097][ T7306] netlink: 'syz.1.756': attribute type 29 has an invalid length. [ 241.165770][ T7306] netlink: 'syz.1.756': attribute type 29 has an invalid length. [ 241.337983][ T7332] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.762'. [ 241.359102][ T7331] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 241.531305][ T7331] team0: Port device geneve1 added [ 241.661596][ T7338] netlink: 'syz.3.764': attribute type 29 has an invalid length. [ 241.670594][ T7338] netlink: 'syz.3.764': attribute type 29 has an invalid length. [ 241.680118][ T7339] netlink: 'syz.3.764': attribute type 29 has an invalid length. [ 243.247212][ T7369] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.771'. [ 243.261283][ T7369] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.771'. [ 243.435782][ T7373] netlink: 'syz.3.773': attribute type 4 has an invalid length. [ 243.455355][ T7373] netlink: 152 bytes leftover after parsing attributes in process `syz.3.773'. [ 243.858030][ T7399] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.777'. [ 246.314500][ T7422] validate_nla: 2 callbacks suppressed [ 246.314516][ T7422] netlink: 'syz.4.783': attribute type 27 has an invalid length. [ 246.684270][ T7422] bond0: (slave bond_slave_0): Releasing backup interface [ 247.059937][ T7436] netlink: 'syz.0.787': attribute type 10 has an invalid length. [ 247.368538][ T7436] team0: Device wg1 is of different type [ 247.689618][ T7447] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.713974][ T7447] netlink: 1 bytes leftover after parsing attributes in process `syz.4.790'. [ 247.791007][ T7469] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.793'. [ 248.273273][ T7482] netlink: 'syz.4.796': attribute type 21 has an invalid length. [ 248.287276][ T7482] netlink: 164 bytes leftover after parsing attributes in process `syz.4.796'. [ 248.482441][ T7486] syz.4.796[7486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.521766][ T7499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.802'. [ 249.663367][ T7501] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 250.447267][ T7540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.814'. [ 250.478243][ T7540] netlink: 60 bytes leftover after parsing attributes in process `syz.4.814'. [ 250.525352][ T7543] netlink: 60 bytes leftover after parsing attributes in process `syz.4.814'. [ 250.581500][ T7540] netlink: 'syz.4.814': attribute type 21 has an invalid length. [ 250.606459][ T7540] netlink: 128 bytes leftover after parsing attributes in process `syz.4.814'. [ 250.632251][ T7540] netlink: 'syz.4.814': attribute type 4 has an invalid length. [ 250.671630][ T7540] netlink: 'syz.4.814': attribute type 5 has an invalid length. [ 250.696417][ T7540] netlink: 3 bytes leftover after parsing attributes in process `syz.4.814'. [ 250.707968][ T7543] netlink: 56 bytes leftover after parsing attributes in process `syz.4.814'. [ 250.836844][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.844108][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.939734][ T7556] device bridge_slave_1 left promiscuous mode [ 250.975499][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.023293][ T7556] device bridge_slave_0 left promiscuous mode [ 251.059635][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.116003][ T7556] team0: Port device bridge0 removed [ 251.127596][ T7566] delete_channel: no stack [ 251.133224][ T7566] delete_channel: no stack [ 251.208883][ T7560] netlink: 'syz.4.820': attribute type 10 has an invalid length. [ 251.255555][ T7567] netlink: 'syz.4.820': attribute type 10 has an invalid length. [ 251.387090][ T7567] team0: Port device wlan1 added [ 251.739761][ T7580] netlink: 'syz.4.824': attribute type 21 has an invalid length. [ 251.846037][ T7582] netlink: 'syz.4.824': attribute type 21 has an invalid length. [ 252.162420][ T7592] netlink: 'syz.1.826': attribute type 11 has an invalid length. [ 252.202795][ T7594] netlink: 'syz.0.823': attribute type 3 has an invalid length. [ 253.787348][ T7596] __nla_validate_parse: 5 callbacks suppressed [ 253.787363][ T7596] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.826'. [ 254.313482][ T7611] netlink: 'syz.2.828': attribute type 2 has an invalid length. [ 254.333077][ T7612] netlink: 'syz.2.828': attribute type 2 has an invalid length. [ 254.353120][ T7611] netlink: 10 bytes leftover after parsing attributes in process `syz.2.828'. [ 254.380592][ T7612] netlink: 10 bytes leftover after parsing attributes in process `syz.2.828'. [ 255.454622][ T7640] netlink: 'syz.2.837': attribute type 21 has an invalid length. [ 255.619521][ T7642] netlink: 'syz.3.838': attribute type 16 has an invalid length. [ 255.655162][ T7642] netlink: 'syz.3.838': attribute type 3 has an invalid length. [ 255.704953][ T7642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.838'. [ 255.727723][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734125][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.932331][ T7646] netlink: 'syz.3.838': attribute type 10 has an invalid length. [ 257.969744][ T7688] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.849'. [ 257.999952][ T7688] netlink: zone id is out of range [ 258.010265][ T7688] netlink: zone id is out of range [ 258.023075][ T7688] netlink: zone id is out of range [ 258.039942][ T7688] netlink: zone id is out of range [ 258.060607][ T7688] netlink: zone id is out of range [ 258.070795][ T7688] netlink: zone id is out of range [ 258.080962][ T7688] netlink: zone id is out of range [ 258.097164][ T7688] netlink: zone id is out of range [ 258.102622][ T7688] netlink: zone id is out of range [ 258.118872][ T7688] netlink: zone id is out of range [ 260.168288][ T7700] netlink: 'syz.1.853': attribute type 13 has an invalid length. [ 260.189908][ T7700] netlink: 128 bytes leftover after parsing attributes in process `syz.1.853'. [ 260.694756][ T7716] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.856'. [ 261.130714][ T7731] netlink: 'syz.1.864': attribute type 3 has an invalid length. [ 261.151670][ T7731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.864'. [ 261.203604][ T7737] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.863'. [ 261.507116][ T7739] raw_sendmsg: syz.2.865 forgot to set AF_INET. Fix it! [ 263.073553][ T7768] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.874'. [ 263.949555][ T7791] netlink: 'syz.2.877': attribute type 21 has an invalid length. [ 264.509662][ T7800] netlink: 'syz.0.880': attribute type 13 has an invalid length. [ 264.535181][ T7800] netlink: 152 bytes leftover after parsing attributes in process `syz.0.880'. [ 264.585964][ T7800] erspan0: refused to change device tx_queue_len [ 264.592881][ T7800] net_ratelimit: 141 callbacks suppressed [ 264.592897][ T7800] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 264.680904][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.881'. [ 266.003789][ T7843] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 266.039834][ T7843] dvmrp1: linktype set to 769 [ 266.069843][ T7844] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 266.088750][ T7844] dvmrp1: linktype set to 769 [ 266.105388][ T7842] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 266.629165][ T7865] netlink: 'syz.0.897': attribute type 3 has an invalid length. [ 266.713308][ T7865] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 266.739017][ T7867] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 266.756921][ T7865] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.897'. [ 266.796899][ T7868] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 266.831619][ T7871] netlink: 'syz.2.898': attribute type 4 has an invalid length. [ 266.843626][ T7867] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 266.874675][ T7876] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 266.907728][ T7871] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.898'. [ 267.084177][ T7867] device syzkaller0 entered promiscuous mode [ 268.310517][ T7897] netlink: 763 bytes leftover after parsing attributes in process `syz.2.904'. [ 268.459538][ T7899] netlink: 'syz.4.905': attribute type 10 has an invalid length. [ 268.646460][ T7899] team0 (unregistering): Port device team_slave_0 removed [ 268.686353][ T7899] team0 (unregistering): Port device team_slave_1 removed [ 268.720342][ T7899] team0 (unregistering): Port device wlan1 removed [ 269.016760][ T7917] netlink: 'syz.3.910': attribute type 3 has an invalid length. [ 269.029521][ T7917] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.910'. [ 269.257818][ T7919] netlink: 14 bytes leftover after parsing attributes in process `syz.4.911'. [ 269.457945][ T7923] netlink: 'syz.2.913': attribute type 3 has an invalid length. [ 269.489554][ T7919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.502410][ T7923] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.913'. [ 269.627549][ T7930] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.915'. [ 269.640911][ T7919] bond0 (unregistering): Released all slaves [ 269.648614][ T7930] openvswitch: netlink: Flow actions attr not present in new flow. [ 269.733782][ T7923] device vlan0 entered promiscuous mode [ 269.773430][ T7923] team0: Port device vlan0 added [ 269.813045][ T7921] netlink: 156 bytes leftover after parsing attributes in process `syz.1.912'. [ 270.061639][ T7934] device hsr_slave_1 left promiscuous mode [ 271.349020][ T7960] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.921'. [ 271.651145][ T7974] validate_nla: 4 callbacks suppressed [ 271.651162][ T7974] netlink: 'syz.2.927': attribute type 29 has an invalid length. [ 271.732436][ T7974] netlink: 'syz.2.927': attribute type 29 has an invalid length. [ 271.896211][ T7983] device syzkaller0 entered promiscuous mode [ 271.955182][ T7990] netlink: 'syz.1.929': attribute type 21 has an invalid length. [ 271.980282][ T7990] netlink: 'syz.1.929': attribute type 6 has an invalid length. [ 272.051050][ T7990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'. [ 272.278466][ T8000] netlink: 60 bytes leftover after parsing attributes in process `syz.3.931'. [ 272.315269][ T7998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.931'. [ 272.707512][ T8006] netlink: 'syz.4.934': attribute type 39 has an invalid length. [ 273.231257][ T8008] netlink: 'syz.0.933': attribute type 2 has an invalid length. [ 273.245251][ T8008] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.933'. [ 273.327620][ T8018] netlink: 'syz.2.936': attribute type 29 has an invalid length. [ 273.359294][ T8018] netlink: 'syz.2.936': attribute type 29 has an invalid length. [ 273.585590][ T8039] device pim6reg1 entered promiscuous mode [ 274.445750][ T8053] netlink: 'syz.3.943': attribute type 2 has an invalid length. [ 274.453463][ T8053] netlink: 164 bytes leftover after parsing attributes in process `syz.3.943'. [ 274.891197][ T8063] netlink: 'syz.0.946': attribute type 16 has an invalid length. [ 274.905108][ T8063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.946'. [ 275.046560][ T8071] device syzkaller0 entered promiscuous mode [ 275.363099][ T8083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.952'. [ 276.439562][ T8091] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.954'. [ 277.241072][ T8137] validate_nla: 2 callbacks suppressed [ 277.241090][ T8137] netlink: 'syz.3.968': attribute type 21 has an invalid length. [ 277.331631][ T8137] netlink: 156 bytes leftover after parsing attributes in process `syz.3.968'. [ 277.373449][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 277.403873][ T8138] netlink: 156 bytes leftover after parsing attributes in process `syz.1.967'. [ 277.484185][ T8140] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 277.504248][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.967'. [ 277.545449][ T8140] device caif0 entered promiscuous mode [ 277.551210][ T8140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.598988][ T8137] sctp: [Deprecated]: syz.3.968 (pid 8137) Use of int in max_burst socket option deprecated. [ 277.598988][ T8137] Use struct sctp_assoc_value instead [ 277.962739][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 278.425791][ T8166] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.977'. [ 278.460994][ T8169] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.978'. [ 278.541072][ T8173] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.979'. [ 280.063607][ T8228] FAULT_INJECTION: forcing a failure. [ 280.063607][ T8228] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 280.165080][ T8228] CPU: 1 PID: 8228 Comm: syz.1.992 Not tainted syzkaller #0 [ 280.172510][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.182609][ T8228] Call Trace: [ 280.185929][ T8228] [ 280.188917][ T8228] dump_stack_lvl+0x188/0x24e [ 280.193671][ T8228] ? show_regs_print_info+0x12/0x12 [ 280.198920][ T8228] ? load_image+0x410/0x410 [ 280.203489][ T8228] ? __might_fault+0xa6/0x120 [ 280.208212][ T8228] should_fail_ex+0x390/0x4c0 [ 280.212941][ T8228] copyin+0x1b/0x120 [ 280.216884][ T8228] _copy_from_iter+0x447/0x1130 [ 280.221784][ T8228] ? copyout_mc+0x110/0x110 [ 280.226344][ T8228] ? mark_lock+0x94/0x320 [ 280.230718][ T8228] ? __lock_acquire+0x1465/0x7c40 [ 280.235779][ T8228] ? dev_get_by_index+0x1e/0x2d0 [ 280.240745][ T8228] ? dev_get_by_index+0x1e/0x2d0 [ 280.245719][ T8228] packet_sendmsg+0x2fcd/0x4c30 [ 280.250628][ T8228] ? __might_sleep+0xd0/0xd0 [ 280.255251][ T8228] ? perf_trace_lock+0xf8/0x390 [ 280.260153][ T8228] ? trace_event_raw_event_lock+0x230/0x230 [ 280.266126][ T8228] ? aa_sk_perm+0x81f/0x950 [ 280.270681][ T8228] ? aa_af_perm+0x340/0x340 [ 280.275227][ T8228] ? packet_getsockopt+0x980/0x980 [ 280.280390][ T8228] ? apparmor_socket_sendmsg+0x239/0x330 [ 280.286076][ T8228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 280.291394][ T8228] ? security_socket_sendmsg+0x7c/0xa0 [ 280.296889][ T8228] ? packet_getsockopt+0x980/0x980 [ 280.302036][ T8228] ____sys_sendmsg+0x5ed/0x9a0 [ 280.306854][ T8228] ? __sys_sendmsg_sock+0x30/0x30 [ 280.311915][ T8228] ? __import_iovec+0x306/0x510 [ 280.316822][ T8228] ? import_iovec+0x6f/0xa0 [ 280.321373][ T8228] ___sys_sendmsg+0x2a2/0x360 [ 280.326089][ T8228] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.330907][ T8228] ? __lock_acquire+0x7c40/0x7c40 [ 280.335997][ T8228] __se_sys_sendmsg+0x1c3/0x2b0 [ 280.340883][ T8228] ? __x64_sys_sendmsg+0x80/0x80 [ 280.345868][ T8228] ? lockdep_hardirqs_on+0x94/0x140 [ 280.351111][ T8228] do_syscall_64+0x4c/0xa0 [ 280.355574][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 280.360288][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 280.365037][ T8228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.371065][ T8228] RIP: 0033:0x7f459799e159 [ 280.375524][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.395184][ T8228] RSP: 002b:00007f4598875028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.403644][ T8228] RAX: ffffffffffffffda RBX: 00007f4597c25fa0 RCX: 00007f459799e159 [ 280.411662][ T8228] RDX: 000000006004089c RSI: 00002000000000c0 RDI: 0000000000000003 [ 280.419676][ T8228] RBP: 00007f4598875090 R08: 0000000000000000 R09: 0000000000000000 [ 280.427683][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.435696][ T8228] R13: 00007f4597c26038 R14: 00007f4597c25fa0 R15: 00007ffcd886c698 [ 280.443715][ T8228] [ 280.791981][ T8237] bridge0: port 4(batadv0) entered blocking state [ 280.845754][ T8237] bridge0: port 4(batadv0) entered disabled state [ 280.892113][ T8237] device batadv0 entered promiscuous mode [ 280.923314][ T8237] bridge0: port 4(batadv0) entered blocking state [ 280.930439][ T8237] bridge0: port 4(batadv0) entered forwarding state [ 280.979187][ T5189] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 280.988914][ T5189] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 281.953636][ T8263] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.1002'. [ 281.971288][ T8266] netlink: 'syz.1.1001': attribute type 3 has an invalid length. [ 282.013637][ T8266] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1001'. [ 282.368582][ T8275] netlink: 'syz.1.1005': attribute type 7 has an invalid length. [ 283.722458][ T8303] __nla_validate_parse: 1 callbacks suppressed [ 283.722477][ T8303] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1009'. [ 284.159782][ T8311] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1012'. [ 285.197780][ T8336] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1020'. [ 287.436730][ T8330] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1018'. [ 287.454360][ T8351] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 287.473132][ T8351] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1023'. [ 287.495495][ T8352] netlink: 'syz.2.1023': attribute type 46 has an invalid length. [ 287.774695][ T8360] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 287.830726][ T8360] device veth0_macvtap left promiscuous mode [ 288.021440][ T8361] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 288.033064][ T8371] syzkaller1: tun_chr_ioctl cmd 1074025688 [ 288.346435][ T8386] netlink: 'syz.1.1032': attribute type 3 has an invalid length. [ 288.354565][ T8386] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1032'. [ 288.488608][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.504194][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.539535][ T8388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.557318][ T8388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.307854][ T8417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.315519][ T8417] IPv6: NLM_F_CREATE should be set when creating new route [ 289.323748][ T8417] IPv6: NLM_F_CREATE should be set when creating new route [ 289.331336][ T8417] IPv6: NLM_F_CREATE should be set when creating new route [ 289.603938][ T8428] netlink: 'syz.0.1048': attribute type 10 has an invalid length. [ 289.656995][ T8428] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1048'. [ 292.347407][ T8465] netlink: 'syz.0.1054': attribute type 10 has an invalid length. [ 292.450417][ T8465] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.762887][ T8483] netlink: 'syz.0.1060': attribute type 12 has an invalid length. [ 292.928927][ T8494] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1064'. [ 293.333754][ T8502] netlink: 'syz.4.1065': attribute type 10 has an invalid length. [ 293.362966][ T8502] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1065'. [ 295.898742][ T8508] netlink: 'syz.3.1070': attribute type 3 has an invalid length. [ 295.923051][ T8518] netlink: 197960 bytes leftover after parsing attributes in process `syz.0.1069'. [ 295.945114][ T8508] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 295.973546][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1067'. [ 296.000236][ T8518] netlink: zone id is out of range [ 296.033734][ T8508] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1070'. [ 296.543552][ T8532] netlink: 'syz.3.1072': attribute type 39 has an invalid length. [ 297.626491][ T8558] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1080'. [ 297.663316][ T8560] netlink: 'syz.3.1081': attribute type 9 has an invalid length. [ 297.683561][ T8560] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1081'. [ 297.905674][ T8566] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 297.936244][ T8566] netlink: 'syz.1.1082': attribute type 8 has an invalid length. [ 297.955334][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1082'. [ 297.997947][ T8567] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 298.048289][ T8567] netlink: 'syz.1.1082': attribute type 8 has an invalid length. [ 298.060103][ T8567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1082'. [ 298.079946][ T8570] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1084'. [ 298.099905][ T8567] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 298.116690][ T8567] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.1082'. [ 298.382960][ T8579] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1087'. [ 298.842754][ T8611] netlink: 'syz.1.1094': attribute type 10 has an invalid length. [ 299.491604][ T8636] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 299.638551][ T8636] team0: Port device geneve1 added [ 299.697217][ T8642] netlink: 'syz.4.1103': attribute type 16 has an invalid length. [ 299.735188][ T8642] netlink: 'syz.4.1103': attribute type 3 has an invalid length. [ 301.230188][ T8669] netlink: 'syz.0.1111': attribute type 2 has an invalid length. [ 301.242891][ T8669] __nla_validate_parse: 5 callbacks suppressed [ 301.242928][ T8669] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1111'. [ 301.500704][ T8680] netlink: 611 bytes leftover after parsing attributes in process `syz.0.1116'. [ 301.884064][ T8693] netlink: 14526 bytes leftover after parsing attributes in process `syz.2.1118'. [ 302.096438][ T8700] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1121'. [ 302.122236][ T8700] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1121'. [ 302.640684][ T8723] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 302.660647][ T8723] syzkaller1: linktype set to 786 [ 303.476540][ T8745] validate_nla: 1 callbacks suppressed [ 303.476558][ T8745] netlink: 'syz.1.1134': attribute type 10 has an invalid length. [ 303.497617][ T8745] batman_adv: batadv0: Adding interface: netdevsim0 [ 303.504867][ T8745] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.540333][ T8745] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 305.861881][ T8759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1139'. [ 305.900264][ T8756] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.1140'. [ 306.052775][ T8769] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 306.062894][ T8769] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1143'. [ 306.403788][ T8778] tap0: tun_chr_ioctl cmd 35111 [ 306.563989][ T8779] device syzkaller0 entered promiscuous mode [ 306.716576][ T8785] netlink: 'syz.2.1148': attribute type 6 has an invalid length. [ 306.736913][ T8785] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.1148'. [ 307.250223][ T8797] netlink: 57083 bytes leftover after parsing attributes in process `syz.1.1151'. [ 308.461749][ T8809] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1155'. [ 309.372912][ T8827] delete_channel: no stack [ 311.694905][ T8795] netlink: 'syz.3.1152': attribute type 2 has an invalid length. [ 311.703861][ T8795] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1152'. [ 311.724719][ T8823] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1160'. [ 311.782827][ T8809] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 312.248212][ T8845] netlink: 'syz.3.1163': attribute type 3 has an invalid length. [ 312.312121][ T8849] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1167'. [ 312.342736][ T8845] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1163'. [ 312.411993][ T8849] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 312.808846][ T8862] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1168'. [ 314.008541][ T8894] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1177'. [ 314.026433][ T8894] openvswitch: netlink: Message has 6 unknown bytes. [ 314.451245][ T8902] netlink: 'syz.4.1180': attribute type 9 has an invalid length. [ 314.472265][ T8902] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1180'. [ 314.639055][ T8907] netlink: 'syz.2.1181': attribute type 21 has an invalid length. [ 314.651356][ T8907] netlink: 'syz.2.1181': attribute type 20 has an invalid length. [ 314.699054][ T8892] delete_channel: no stack [ 315.198708][ T8939] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 315.213537][ T8939] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1189'. [ 315.359223][ T8941] __sock_release: fasync list not empty! [ 317.169959][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177291][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.514855][ T8913] netlink: 'syz.2.1185': attribute type 21 has an invalid length. [ 319.718460][ T8954] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1194'. [ 319.852103][ T8961] netlink: 'syz.3.1196': attribute type 16 has an invalid length. [ 319.887730][ T8961] netlink: 'syz.3.1196': attribute type 3 has an invalid length. [ 319.910966][ T8961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1196'. [ 322.270692][ T9002] netlink: 'syz.4.1204': attribute type 16 has an invalid length. [ 322.314330][ T9002] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1204'. [ 322.533584][ T9026] device sit0 entered promiscuous mode [ 324.132909][ T9075] device bond0 entered promiscuous mode [ 324.151408][ T9075] device bond_slave_0 entered promiscuous mode [ 324.185758][ T9075] device bond_slave_1 entered promiscuous mode [ 324.215659][ T9075] device netdevsim0 entered promiscuous mode [ 325.000469][ T9097] device pim6reg1 entered promiscuous mode [ 325.439266][ T9128] tap0: tun_chr_ioctl cmd 1074025677 [ 325.444927][ T9128] tap0: linktype set to 776 [ 325.695040][ T9134] netlink: 'syz.3.1231': attribute type 21 has an invalid length. [ 326.418162][ T9160] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1238'. [ 326.570889][ T9162] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1237'. [ 326.643648][ T9166] netlink: 'syz.1.1239': attribute type 29 has an invalid length. [ 326.679211][ T9169] netlink: 'syz.2.1240': attribute type 4 has an invalid length. [ 326.704827][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 326.759530][ T9166] netlink: 'syz.1.1239': attribute type 29 has an invalid length. [ 326.807401][ T9178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1242'. [ 326.838124][ T9177] netlink: 'syz.1.1239': attribute type 12 has an invalid length. [ 326.870130][ T9177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1239'. [ 327.073347][ T9188] netlink: 'syz.0.1244': attribute type 29 has an invalid length. [ 327.101941][ T9188] netlink: 'syz.0.1244': attribute type 29 has an invalid length. [ 327.120584][ T9184] netlink: 'syz.2.1243': attribute type 10 has an invalid length. [ 327.169931][ T9184] team0: Device veth0_vlan is already a lower device of the team interface [ 327.192147][ T9188] netlink: 'syz.0.1244': attribute type 29 has an invalid length. [ 327.240996][ T9189] netlink: 'syz.0.1244': attribute type 29 has an invalid length. [ 327.628411][ T9207] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1247'. [ 328.444920][ T9240] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1256'. [ 329.199427][ T9269] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1265'. [ 329.400317][ T9273] device sit0 entered promiscuous mode [ 329.473484][ T9277] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1268'. [ 330.441877][ T9301] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1275'. [ 330.461613][ T9302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.468955][ T9302] IPv6: NLM_F_CREATE should be set when creating new route [ 330.476299][ T9302] IPv6: NLM_F_CREATE should be set when creating new route [ 330.483560][ T9302] IPv6: NLM_F_CREATE should be set when creating new route [ 331.507880][ T9331] validate_nla: 6 callbacks suppressed [ 331.507927][ T9331] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 331.638771][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 331.676911][ T9333] netlink: zone id is out of range [ 331.697556][ T9333] netlink: zone id is out of range [ 331.735224][ T9333] netlink: zone id is out of range [ 331.749966][ T9333] netlink: zone id is out of range [ 331.772676][ T9333] netlink: zone id is out of range [ 331.803085][ T9333] netlink: zone id is out of range [ 331.854749][ T9333] netlink: del zone limit has 4 unknown bytes [ 331.875925][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 331.892343][ T9340] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 331.911317][ T9333] netlink: zone id is out of range [ 331.920252][ T9340] device dummy0 entered promiscuous mode [ 331.937840][ T9333] netlink: zone id is out of range [ 331.947989][ T9333] netlink: zone id is out of range [ 331.954838][ T9340] team0: Port device dummy0 added [ 331.989838][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.047025][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.103453][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.165351][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.229751][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.292739][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.352355][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 332.409137][ T9333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1283'. [ 333.150546][ T9341] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 333.958112][ T9358] netlink: 'syz.0.1290': attribute type 21 has an invalid length. [ 335.812397][ T9406] device syzkaller0 entered promiscuous mode [ 336.312935][ T9437] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 336.344673][ T9437] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 336.374742][ T9434] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 336.436172][ T9434] netlink: 'syz.3.1310': attribute type 2 has an invalid length. [ 337.329839][ T9448] netlink: 'syz.4.1313': attribute type 11 has an invalid length. [ 337.338884][ T9448] __nla_validate_parse: 5 callbacks suppressed [ 337.338900][ T9448] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1313'. [ 337.995045][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.178757][ T9438] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1310'. [ 338.195191][ T9447] netlink: 'syz.4.1313': attribute type 16 has an invalid length. [ 338.203106][ T9447] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1313'. [ 338.235193][ T9447] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 338.748484][ T9463] device syzkaller0 entered promiscuous mode [ 342.441924][ T9479] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.1322'. [ 344.265045][ T9502] device syzkaller0 entered promiscuous mode [ 352.728481][ T9571] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.1343'. [ 352.786447][ T9572] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.1343'. [ 352.856037][ T9571] net_ratelimit: 74 callbacks suppressed [ 352.856056][ T9571] netlink: zone id is out of range [ 352.967253][ T9572] netlink: zone id is out of range [ 353.787853][ T9586] device syzkaller0 entered promiscuous mode [ 353.847276][ T9595] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 356.897743][ T9636] netlink: 'syz.2.1360': attribute type 39 has an invalid length. [ 357.153327][ T9640] netlink: 'syz.4.1361': attribute type 21 has an invalid length. [ 357.169822][ T9640] IPv6: Can't replace route, no match found [ 357.279912][ T9646] device syzkaller0 entered promiscuous mode [ 357.688591][ T9658] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1366'. [ 357.703450][ T9658] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 360.710706][ T9685] netlink: 'syz.0.1370': attribute type 21 has an invalid length. [ 361.344573][ T9713] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 361.573762][ T9717] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 361.589181][ T9717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1377'. [ 361.676088][ T9717] team0: Port device dummy0 removed [ 361.688418][ T9717] bridge0: port 2(dummy0) entered blocking state [ 361.696492][ T9717] bridge0: port 2(dummy0) entered disabled state [ 362.131992][ T9723] netlink: 'syz.4.1379': attribute type 3 has an invalid length. [ 362.179866][ T9723] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1379'. [ 362.396672][ T9741] device syzkaller0 entered promiscuous mode [ 363.459011][ T9766] netlink: 'syz.3.1387': attribute type 3 has an invalid length. [ 363.502755][ T9766] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1387'. [ 366.790320][ T9775] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.1388'. [ 367.452597][ T9784] device pim6reg1 entered promiscuous mode [ 367.896824][ T9797] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1392'. [ 368.345304][ T9801] IPv6: Can't replace route, no match found [ 368.525406][ T9804] IPv6: Can't replace route, no match found [ 368.687801][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1395'. [ 368.756319][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1395'. [ 368.777421][ T9811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1395'. [ 369.492673][ T9821] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 369.543565][ T9821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1397'. [ 369.837106][ T9830] tap0: tun_chr_ioctl cmd 1074025677 [ 369.842673][ T9830] tap0: linktype set to 774 [ 370.252834][ T9840] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 370.262906][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1403'. [ 370.274433][ T9840] device dummy0 entered promiscuous mode [ 370.312299][ T9840] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 370.487477][ T9843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1404'. [ 371.157348][ T9865] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1411'. [ 371.196213][ T9867] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1412'. [ 372.066132][ T9877] device syzkaller0 entered promiscuous mode [ 373.555328][ T9901] netlink: 'syz.2.1420': attribute type 27 has an invalid length. [ 373.586461][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 373.606069][ T9901] netlink: 'syz.2.1420': attribute type 3 has an invalid length. [ 373.623408][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1420'. [ 377.394511][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 377.631904][ T9967] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1426'. [ 377.694411][ T9968] netlink: 'syz.4.1427': attribute type 21 has an invalid length. [ 378.609797][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.616377][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857523][ T9993] netlink: 'syz.1.1432': attribute type 39 has an invalid length. [ 378.982700][T10006] netlink: 'syz.2.1436': attribute type 3 has an invalid length. [ 379.029999][T10006] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1436'. [ 379.049704][ T9993] device hsr_slave_1 left promiscuous mode [ 379.704340][T10026] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 380.026289][ T4293] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 380.116358][T10045] netlink: 'syz.4.1449': attribute type 1 has an invalid length. [ 381.148441][T10050] netlink: 'syz.4.1451': attribute type 10 has an invalid length. [ 381.405927][T10062] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1454'. [ 381.431578][T10062] bridge_slave_1: default FDB implementation only supports local addresses [ 381.547549][T10068] tap0: tun_chr_ioctl cmd 1074025675 [ 381.552916][T10068] tap0: persist disabled [ 381.662538][T10073] netlink: 'syz.3.1458': attribute type 9 has an invalid length. [ 381.671512][T10073] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1458'. [ 381.954621][T10072] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 382.863519][T10082] device syzkaller0 entered promiscuous mode [ 382.997990][T10109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1465'. [ 383.083100][T10113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1465'. [ 388.372927][T10168] netlink: 'syz.4.1483': attribute type 4 has an invalid length. [ 388.396648][T10168] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1483'. [ 388.482155][T10171] device syzkaller0 entered promiscuous mode [ 389.336976][T10209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1482'. [ 390.571996][T10195] device syzkaller0 entered promiscuous mode [ 390.586583][T10215] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 390.595443][T10216] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 391.604760][T10256] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1515'. [ 393.028035][T10256] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1515'. [ 393.639589][T10293] ¥: port 1(team0) entered blocking state [ 393.659836][T10293] ¥: port 1(team0) entered disabled state [ 393.670141][T10293] device team0 entered promiscuous mode [ 393.677687][T10293] device team_slave_1 entered promiscuous mode [ 393.740290][T10294] netlink: 'syz.2.1525': attribute type 16 has an invalid length. [ 393.761538][T10294] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1525'. [ 393.893521][T10302] netlink: 'syz.0.1529': attribute type 29 has an invalid length. [ 393.956684][T10302] netlink: 'syz.0.1529': attribute type 29 has an invalid length. [ 394.020461][T10303] netlink: 'syz.0.1529': attribute type 29 has an invalid length. [ 394.058207][T10307] netlink: 'syz.0.1529': attribute type 29 has an invalid length. [ 394.087811][T10308] netlink: 'syz.0.1529': attribute type 29 has an invalid length. [ 394.118225][T10302] netlink: 'syz.0.1529': attribute type 29 has an invalid length. [ 394.143053][T10309] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 394.329462][T10314] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1531'. [ 395.465993][T10331] netlink: 'syz.4.1537': attribute type 12 has an invalid length. [ 395.494707][T10331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1537'. [ 395.688377][T10328] device syzkaller0 entered promiscuous mode [ 395.752100][T10344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1541'. [ 398.528738][T10366] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1549'. [ 398.622896][T10370] netlink: 'syz.4.1547': attribute type 2 has an invalid length. [ 398.647339][T10370] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1547'. [ 398.685257][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1547'. [ 398.731101][T10374] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1552'. [ 398.969619][T10386] validate_nla: 4 callbacks suppressed [ 398.969633][T10386] netlink: 'syz.0.1555': attribute type 22 has an invalid length. [ 398.989850][T10388] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1556'. [ 399.019826][T10390] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1555'. [ 399.399415][T10408] bridge0: port 3(netdevsim0) entered blocking state [ 399.406388][T10408] bridge0: port 3(netdevsim0) entered forwarding state [ 399.485695][T10416] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1562'. [ 399.547448][T10416] openvswitch: netlink: Message has 6 unknown bytes. [ 399.702634][T10422] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.1563'. [ 401.579429][T10471] netlink: 'syz.3.1578': attribute type 2 has an invalid length. [ 401.914803][T10486] device wlan1 entered promiscuous mode [ 402.087485][T10476] netlink: 'syz.2.1580': attribute type 3 has an invalid length. [ 402.173626][T10476] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1580'. [ 402.875818][T10510] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 403.129545][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 403.648268][T10532] bridge0: port 3(team0) entered blocking state [ 403.654663][T10532] bridge0: port 3(team0) entered forwarding state [ 403.661569][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.668794][T10532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.710626][T10532] device bridge0 entered promiscuous mode [ 403.720129][ T5066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 403.917901][T10539] netlink: 'syz.0.1591': attribute type 39 has an invalid length. [ 407.387473][T10572] netlink: 'syz.2.1597': attribute type 11 has an invalid length. [ 407.435239][T10572] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1597'. [ 407.478225][T10576] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1597'. [ 407.568944][T10571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.929868][T10587] netlink: 'syz.3.1600': attribute type 39 has an invalid length. [ 407.976950][T10595] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1604'. [ 408.351945][T10598] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 408.369512][T10598] device veth1_macvtap left promiscuous mode [ 408.521331][T10599] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 408.677154][T10608] netlink: 'syz.0.1607': attribute type 2 has an invalid length. [ 408.768453][T10608] device 1 entered promiscuous mode [ 408.841090][T10609] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 408.864767][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'. [ 408.879410][T10615] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 408.913956][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'. [ 408.947377][T10609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 408.962501][T10616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'. [ 408.972008][T10615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 408.988464][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1608'. [ 409.056756][T10615] netlink: 'syz.0.1607': attribute type 10 has an invalid length. [ 409.154896][T10615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 410.425423][T10642] device hsr_slave_0 left promiscuous mode [ 411.470290][T10675] : port 1(syz_tun) entered blocking state [ 411.482524][T10675] : port 1(syz_tun) entered disabled state [ 411.495606][T10675] device syz_tun entered promiscuous mode [ 411.507758][T10672] netlink: 'syz.0.1619': attribute type 12 has an invalid length. [ 411.796444][T10687] netlink: 'syz.3.1622': attribute type 28 has an invalid length. [ 411.810302][T10687] netlink: 'syz.3.1622': attribute type 29 has an invalid length. [ 414.414079][T10715] netlink: 'syz.4.1630': attribute type 2 has an invalid length. [ 414.424219][T10716] netlink: 'syz.4.1630': attribute type 21 has an invalid length. [ 414.442985][T10716] __nla_validate_parse: 5 callbacks suppressed [ 414.443003][T10716] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1630'. [ 414.962834][ T4293] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 414.966904][T10736] netlink: 'syz.0.1636': attribute type 29 has an invalid length. [ 415.039250][T10736] netlink: 'syz.0.1636': attribute type 29 has an invalid length. [ 415.124695][T10735] netlink: 'syz.0.1636': attribute type 29 has an invalid length. [ 416.175160][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 416.667183][T10765] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 416.707748][T10765] netlink: 'syz.4.1645': attribute type 10 has an invalid length. [ 416.786582][T10765] device hsr0 entered promiscuous mode [ 416.862278][T10768] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 416.892630][T10768] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1643'. [ 417.007291][T10769] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 417.025295][T10776] netlink: 'syz.0.1647': attribute type 2 has an invalid length. [ 417.033085][T10776] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1647'. [ 417.388921][T10796] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1652'. [ 417.549676][T10804] delete_channel: no stack [ 417.601562][T10802] delete_channel: no stack [ 417.883157][T10808] netlink: 'syz.2.1656': attribute type 9 has an invalid length. [ 417.970264][T10808] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 418.073088][T10819] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1659'. [ 418.138184][T10819] bridge0: port 3(team0) entered disabled state [ 418.146130][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.212448][T10819] device bridge0 left promiscuous mode [ 418.424822][T10823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1660'. [ 418.967474][T10832] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1661'. [ 418.996565][T10829] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1661'. [ 419.382785][T10833] device syzkaller0 entered promiscuous mode [ 423.752864][T10869] validate_nla: 2 callbacks suppressed [ 423.752881][T10869] netlink: 'syz.1.1671': attribute type 21 has an invalid length. [ 423.774967][T10869] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 423.787352][T10869] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1671'. [ 423.827196][T10867] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1669'. [ 423.898076][T10903] netlink: 'syz.3.1678': attribute type 39 has an invalid length. [ 424.045372][T10909] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1680'. [ 424.287495][T10916] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1683'. [ 424.720471][T10929] netlink: 'syz.2.1684': attribute type 11 has an invalid length. [ 424.775266][T10929] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1684'. [ 425.137357][T10924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.816352][T10936] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 425.844610][T10936] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1690'. [ 425.996399][T10942] netlink: 'syz.3.1692': attribute type 3 has an invalid length. [ 426.037420][T10942] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1692'. [ 426.103352][T10940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1691'. [ 426.138507][T10940] : renamed from caif0 [ 426.313639][T10940] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 426.359975][T10961] netlink: 'syz.2.1694': attribute type 3 has an invalid length. [ 426.370255][T10961] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1694'. [ 426.512267][T10967] device syzkaller0 entered promiscuous mode [ 426.797809][T10974] netlink: 124861 bytes leftover after parsing attributes in process `syz.1.1697'. [ 428.503581][T10972] netlink: 'syz.1.1697': attribute type 6 has an invalid length. [ 430.502499][T11048] __nla_validate_parse: 1 callbacks suppressed [ 430.502517][T11048] netlink: 463 bytes leftover after parsing attributes in process `syz.3.1712'. [ 432.925447][T11057] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1715'. [ 432.950120][T11058] netlink: 'syz.4.1715': attribute type 19 has an invalid length. [ 432.959283][T11058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1715'. [ 433.482225][ T4293] Bluetooth: hci0: ISO packet for unknown connection handle 3152 [ 433.513223][T11072] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 433.736050][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.743966][T11081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.037035][T11085] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.1721'. [ 434.049738][T11085] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.078598][T11089] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.1721'. [ 434.093781][T11089] openvswitch: netlink: Flow actions attr not present in new flow. [ 434.537254][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.549642][T11081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.586590][T11081] bridge0: port 4(batadv0) entered disabled state [ 434.673035][T11081] device batadv0 left promiscuous mode [ 434.679367][T11081] bridge0: port 4(batadv0) entered disabled state [ 434.747172][T11095] netlink: 'syz.4.1722': attribute type 19 has an invalid length. [ 434.968771][T11105] tun0: tun_chr_ioctl cmd 1074025677 [ 434.990302][T11105] tun0: linktype set to 805 [ 434.995566][T11106] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1726'. [ 435.037059][T11103] netlink: 'syz.0.1726': attribute type 10 has an invalid length. [ 435.045739][T11103] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 435.187026][T11111] netlink: 'syz.4.1727': attribute type 21 has an invalid length. [ 435.256931][T11111] netlink: 'syz.4.1727': attribute type 12 has an invalid length. [ 435.321683][T11111] netlink: 'syz.4.1727': attribute type 13 has an invalid length. [ 435.335994][T11111] netlink: 'syz.4.1727': attribute type 14 has an invalid length. [ 435.349571][T11111] netlink: 'syz.4.1727': attribute type 15 has an invalid length. [ 435.365198][T11111] netlink: 'syz.4.1727': attribute type 16 has an invalid length. [ 435.383284][T11111] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.1727'. [ 435.502236][T11125] netlink: 'syz.3.1732': attribute type 10 has an invalid length. [ 435.589563][T11127] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1732'. [ 436.750292][T11142] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1734'. [ 437.751505][T11176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1743'. [ 438.049198][T11187] validate_nla: 3 callbacks suppressed [ 438.049213][T11187] netlink: 'syz.3.1746': attribute type 6 has an invalid length. [ 438.083734][T11187] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1746'. [ 438.880244][T11208] netlink: 'syz.3.1749': attribute type 2 has an invalid length. [ 438.916724][T11208] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1749'. [ 440.049131][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.055711][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.264260][T11244] netlink: 'syz.3.1759': attribute type 2 has an invalid length. [ 440.285317][T11244] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1759'. [ 440.434583][T11253] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1760'. [ 440.699573][T11267] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.1762'. [ 440.788609][T11268] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 440.908355][T11253] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1760'. [ 440.986758][T11275] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 441.025106][T11275] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.115840][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.123386][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.217819][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.225117][T11275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.232614][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.239821][T11275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.276802][T11275] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 441.289610][T11281] netlink: 'syz.2.1765': attribute type 13 has an invalid length. [ 441.312920][T11281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1765'. [ 441.549699][T11299] netlink: 'syz.4.1767': attribute type 2 has an invalid length. [ 441.597778][T11299] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1767'. [ 442.154429][T11304] netlink: 'syz.1.1766': attribute type 5 has an invalid length. [ 442.261711][T11316] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 442.278169][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1773'. [ 442.292123][T11316] device dummy0 entered promiscuous mode [ 442.368497][T11316] bond0: (slave dummy0): Releasing backup interface [ 442.400210][T11316] bridge0: port 3(dummy0) entered blocking state [ 442.421356][T11316] bridge0: port 3(dummy0) entered disabled state [ 443.217543][T11335] netlink: 'syz.3.1778': attribute type 7 has an invalid length. [ 443.280543][T11337] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1780'. [ 443.304557][T11335] device macvlan0 entered promiscuous mode [ 443.383435][T11337] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1780'. [ 443.468585][T11337] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 443.545818][T11338] netlink: 'syz.3.1778': attribute type 29 has an invalid length. [ 443.554015][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 443.595629][T11338] netlink: 'syz.3.1778': attribute type 29 has an invalid length. [ 443.641058][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 444.106699][T11353] netlink: 'syz.4.1782': attribute type 21 has an invalid length. [ 444.918043][T11382] netlink: 'syz.0.1790': attribute type 3 has an invalid length. [ 445.702487][T11407] device syzkaller0 entered promiscuous mode [ 446.971603][T11438] netlink: 'syz.0.1801': attribute type 9 has an invalid length. [ 447.002003][T11438] __nla_validate_parse: 9 callbacks suppressed [ 447.002020][T11438] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1801'. [ 447.250345][T11442] sctp: [Deprecated]: syz.0.1801 (pid 11442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.250345][T11442] Use struct sctp_sack_info instead [ 451.685260][T11454] netlink: 'syz.1.1805': attribute type 3 has an invalid length. [ 451.715649][T11454] netlink: 'syz.1.1805': attribute type 16 has an invalid length. [ 451.733908][T11454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1805'. [ 452.152749][T11468] device syzkaller0 entered promiscuous mode [ 452.181900][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 452.240859][T11468] syzkaller0: mtu greater than device maximum [ 452.472839][T10879] tipc: Subscription rejected, illegal request [ 452.750521][T11486] netlink: 'syz.2.1814': attribute type 3 has an invalid length. [ 452.770942][T11486] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1814'. [ 453.297829][T11498] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1817'. [ 453.583914][T11491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1816'. [ 453.635880][T11499] netlink: 'syz.0.1816': attribute type 10 has an invalid length. [ 453.676422][T11499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1816'. [ 453.697555][T11499] ¥: port 1(team0) entered disabled state [ 453.719021][T11499] bridge0: port 4(team0) entered blocking state [ 453.740455][T11499] bridge0: port 4(team0) entered disabled state [ 453.759311][T11499] bridge0: port 4(team0) entered blocking state [ 453.766705][T11499] bridge0: port 4(team0) entered forwarding state [ 453.816651][T11514] netlink: 'syz.2.1821': attribute type 3 has an invalid length. [ 453.831443][T11514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1821'. [ 480.367798][ T7] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2631 jiffies s: 49161 root: 0x2/. [ 480.382304][ T7] rcu: blocking rcu_node structures (internal RCU debug): [ 480.390492][ T7] Sending NMI from CPU 0 to CPUs 1: [ 480.395914][ C1] NMI backtrace for cpu 1 [ 480.395924][ C1] CPU: 1 PID: 11516 Comm: syz.0.1822 Not tainted syzkaller #0 [ 480.395940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 480.395950][ C1] RIP: 0010:mark_lock+0x9c/0x320 [ 480.396106][ C1] Code: 89 c7 41 81 e7 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 f2 b0 90 be 08 00 00 00 e8 8c c4 6e 00 4c 0f a3 3d 94 3d 4c 0f <73> 10 4b 8d 04 7f c1 e0 06 4c 8d b8 00 71 49 90 eb 24 48 c7 c0 40 [ 480.396121][ C1] RSP: 0018:ffffc900001df8a0 EFLAGS: 00000057 [ 480.396152][ C1] RAX: 0000000000000001 RBX: ffff88802c3d0000 RCX: ffffffff8164b4a4 [ 480.396164][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b0f240 [ 480.396175][ C1] RBP: 0000000000000009 R08: ffffffff90b0f247 R09: 1ffffffff2161e48 [ 480.396186][ C1] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000200 [ 480.396197][ C1] R13: dffffc0000000000 R14: ffff88802c3d0ba8 R15: 000000000000002d [ 480.396209][ C1] FS: 00007f4f9f47f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 480.396224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.396235][ C1] CR2: 000000110c33003b CR3: 0000000044449000 CR4: 00000000003506e0 [ 480.396251][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 480.396263][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 480.396274][ C1] Call Trace: [ 480.396279][ C1] [ 480.396286][ C1] __lock_acquire+0xdf7/0x7c40 [ 480.396316][ C1] ? __virt_addr_valid+0x188/0x540 [ 480.396373][ C1] ? verify_lock_unused+0x140/0x140 [ 480.396395][ C1] ? llist_add_batch+0x12b/0x180 [ 480.396436][ C1] ? find_next_clump8+0x1a0/0x1a0 [ 480.396452][ C1] ? __virt_addr_valid+0x467/0x540 [ 480.396477][ C1] ? arch_irq_work_raise+0x82/0xd0 [ 480.396521][ C1] ? irq_work_queue_on+0x198/0x260 [ 480.396588][ C1] lock_acquire+0x1bb/0x4a0 [ 480.396610][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 480.396664][ C1] ? read_lock_is_recursive+0x10/0x10 [ 480.396692][ C1] perf_event_output_forward+0xdf/0x2f0 [ 480.396716][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 480.396746][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 480.396770][ C1] ? perf_get_page_size+0x430/0x430 [ 480.396793][ C1] ? __lock_acquire+0x1465/0x7c40 [ 480.396821][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 480.396848][ C1] __perf_event_overflow+0x457/0x630 [ 480.396876][ C1] perf_swevent_event+0x315/0x570 [ 480.396902][ C1] ? perf_tp_event+0xc10/0xc10 [ 480.396926][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 480.396965][ C1] ? __perf_event_overflow+0x50a/0x630 [ 480.396994][ C1] perf_tp_event+0x36b/0xc10 [ 480.397020][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 480.397063][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 480.397078][ C1] ? sched_clock_cpu+0x6e/0x260 [ 480.397100][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 480.397127][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 480.397173][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 480.397216][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 480.397242][ C1] ? __irq_exit_rcu+0x147/0x230 [ 480.397263][ C1] ? irq_exit_rcu+0x20/0x20 [ 480.397280][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 480.397295][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 480.397320][ C1] trace_hardirqs_on+0x24/0x40 [ 480.397351][ C1] asm_sysvec_irq_work+0x16/0x20 [ 480.397365][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 480.397400][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 7b 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 480.397412][ C1] RSP: 0018:ffffc900001e0380 EFLAGS: 00000206 [ 480.397424][ C1] RAX: 710434ee36e54f00 RBX: 1ffff9200003c078 RCX: 710434ee36e54f00 [ 480.397436][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 480.397447][ C1] RBP: ffffc900001e0480 R08: ffffffff90b0f2cf R09: 1ffffffff2161e59 [ 480.397458][ C1] R10: dffffc0000000000 R11: fffffbfff2161e5a R12: 0000000000000246 [ 480.397468][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 480.397488][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 480.397503][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 480.397527][ C1] __rcu_read_unlock+0x78/0xd0 [ 480.397542][ C1] ip6_dst_lookup_tail+0x1010/0x1600 [ 480.397566][ C1] ? ip6_dst_lookup_tail+0x205/0x1600 [ 480.397584][ C1] ? ip6_dst_lookup+0x60/0x60 [ 480.397601][ C1] ? _get_random_bytes+0x250/0x250 [ 480.397639][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.397657][ C1] icmpv6_route_lookup+0xfe/0x5a0 [ 480.397718][ C1] ? icmpv6_xrlim_allow+0x640/0x640 [ 480.397740][ C1] ? dst_release+0x51/0x180 [ 480.397785][ C1] ? icmpv6_xrlim_allow+0x53d/0x640 [ 480.397805][ C1] ? dev_get_by_index+0x1e/0x2d0 [ 480.397844][ C1] ? dev_get_by_index+0x1e/0x2d0 [ 480.397861][ C1] icmp6_send+0x1091/0x1a60 [ 480.397883][ C1] ? icmp6_send+0xb7d/0x1a60 [ 480.397900][ C1] ? icmpv6_push_pending_frames+0x4b0/0x4b0 [ 480.397917][ C1] ? cpu_attach_domain+0x730/0x1090 [ 480.397934][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.397957][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 480.397979][ C1] ? ip6_negative_advice+0x310/0x310 [ 480.397997][ C1] ip6_link_failure+0x37/0x4c0 [ 480.398015][ C1] ? ip6_negative_advice+0x310/0x310 [ 480.398033][ C1] ndisc_error_report+0x10e/0x160 [ 480.398057][ C1] neigh_invalidate+0x23b/0x460 [ 480.398102][ C1] neigh_timer_handler+0x929/0x1090 [ 480.398125][ C1] call_timer_fn+0x1ac/0x670 [ 480.398176][ C1] ? neigh_release+0x80/0x80 [ 480.398195][ C1] ? call_timer_fn+0xcf/0x670 [ 480.398210][ C1] ? __run_timers+0x810/0x810 [ 480.398229][ C1] ? neigh_release+0x80/0x80 [ 480.398250][ C1] __run_timers+0x56c/0x810 [ 480.398264][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 480.398292][ C1] ? detach_timer+0x350/0x350 [ 480.398309][ C1] ? lock_chain_count+0x20/0x20 [ 480.398331][ C1] run_timer_softirq+0x63/0xf0 [ 480.398346][ C1] handle_softirqs+0x291/0x910 [ 480.398362][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 480.398378][ C1] ? do_softirq+0x210/0x210 [ 480.398390][ C1] ? hrtimer_interrupt+0x775/0x980 [ 480.398410][ C1] __irq_exit_rcu+0x13b/0x230 [ 480.398424][ C1] ? irq_exit_rcu+0x20/0x20 [ 480.398442][ C1] irq_exit_rcu+0x5/0x20 [ 480.398454][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 480.398480][ C1] [ 480.398484][ C1] [ 480.398489][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.398504][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 480.398525][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 480.398537][ C1] RSP: 0018:ffffc9000550efe0 EFLAGS: 00000206 [ 480.398549][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 710434ee36e54f00 [ 480.398558][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 480.398569][ C1] RBP: ffffc9000550f100 R08: dffffc0000000000 R09: 1ffffffff2161e4a [ 480.398580][ C1] R10: dffffc0000000000 R11: fffffbfff2161e4b R12: 0000000000000001 [ 480.398590][ C1] R13: 1ffff92000aa1e08 R14: 0000000000000246 R15: dffffc0000000000 [ 480.398609][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.398625][ C1] ? read_lock_is_recursive+0x10/0x10 [ 480.398648][ C1] ? lock_acquire+0x255/0x4a0 [ 480.398668][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 480.398716][ C1] fs_reclaim_acquire+0x94/0x100 [ 480.398742][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 480.398763][ C1] slab_pre_alloc_hook+0x2a/0x300 [ 480.398818][ C1] ? __vmalloc_node_range+0x584/0x1380 [ 480.398837][ C1] __kmem_cache_alloc_node+0x4f/0x270 [ 480.398855][ C1] ? __vmalloc_node_range+0x584/0x1380 [ 480.398873][ C1] __kmalloc_node+0xa2/0x240 [ 480.398935][ C1] __vmalloc_node_range+0x584/0x1380 [ 480.398964][ C1] ? free_vm_area+0x50/0x50 [ 480.398981][ C1] ? kvmalloc_node+0x6c/0x180 [ 480.399022][ C1] ? kvmalloc_node+0x6c/0x180 [ 480.399043][ C1] ? __kmalloc_node+0xe3/0x240 [ 480.399066][ C1] ? bpf_check+0x227/0x11010 [ 480.399084][ C1] vzalloc+0x75/0x80 [ 480.399101][ C1] ? bpf_check+0x227/0x11010 [ 480.399115][ C1] bpf_check+0x227/0x11010 [ 480.399129][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 480.399153][ C1] ? __perf_event_overflow+0x50a/0x630 [ 480.399178][ C1] ? perf_swevent_event+0x4ba/0x570 [ 480.399200][ C1] ? perf_tp_event+0xc10/0xc10 [ 480.399222][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 480.399239][ C1] ? __perf_event_overflow+0x50a/0x630 [ 480.399263][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 480.399278][ C1] ? perf_tp_event+0xa8e/0xc10 [ 480.399302][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 480.399340][ C1] ? verify_lock_unused+0x140/0x140 [ 480.399360][ C1] ? mark_lock+0x94/0x320 [ 480.399381][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 480.399409][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 480.399431][ C1] ? lock_chain_count+0x20/0x20 [ 480.399453][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.399468][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 480.399488][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.399505][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 480.399525][ C1] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 480.399544][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 480.399563][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 480.399578][ C1] ? __might_fault+0xc2/0x120 [ 480.399622][ C1] ? memset+0x1e/0x40 [ 480.399635][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 480.399654][ C1] bpf_prog_load+0x100e/0x1530 [ 480.399678][ C1] ? map_freeze+0x390/0x390 [ 480.399722][ C1] ? __sys_bpf+0x300/0x780 [ 480.399751][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 480.399766][ C1] ? security_bpf+0x7a/0xa0 [ 480.399825][ C1] __sys_bpf+0x5b8/0x780 [ 480.399846][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 480.399872][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.399892][ C1] __x64_sys_bpf+0x78/0x90 [ 480.399911][ C1] do_syscall_64+0x4c/0xa0 [ 480.399926][ C1] ? clear_bhb_loop+0x60/0xb0 [ 480.399940][ C1] ? clear_bhb_loop+0x60/0xb0 [ 480.399956][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.399998][ C1] RIP: 0033:0x7f4f9e59e159 [ 480.400011][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.400023][ C1] RSP: 002b:00007f4f9f47f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.400037][ C1] RAX: ffffffffffffffda RBX: 00007f4f9e825fa0 RCX: 00007f4f9e59e159 [ 480.400047][ C1] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005 [ 480.400057][ C1] RBP: 00007f4f9e63506b R08: 0000000000000000 R09: 0000000000000000 [ 480.400066][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.400074][ C1] R13: 00007f4f9e826038 R14: 00007f4f9e825fa0 R15: 00007ffc0211a8d8 [ 480.400090][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)