last executing test programs: 7m39.216337084s ago: executing program 2 (id=3391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x4, &(0x7f0000000040)=r7, 0x4) r8 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x4c, 0x0, 0x4) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0xa4, 0x0, 0x4, 0x10, 0x0, 0x2, 0x80202, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10004, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x14, 0x9, 0x1008, 0x1, 0x7, 0x40, 0xc, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x13, r6, 0x4) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x1) close(r10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x401, 0x422a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x2c, 0x1) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNSETDEBUG(r0, 0x4004743c, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18007990e74925c5000000000000000000002f0000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 7m39.03647969s ago: executing program 2 (id=3395): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff000000000000000901000000020000000000000802000000000061"], 0x0, 0x44}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa0", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m38.573547594s ago: executing program 2 (id=3398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x2000000000000216, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0, 0x880, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x633, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x3, 0x3, 0xb, 0x2, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x2a, &(0x7f0000000200)=""/42, 0x41100, 0x82, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x1, 0xe, 0xffffffff}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7], &(0x7f0000000d00)=[{0x1, 0x3, 0xe, 0xe}, {0x5, 0x3, 0xe}, {0x3, 0x2, 0x5, 0x5}, {0x0, 0x3, 0xb}, {0x1, 0x3, 0xf, 0x9}, {0x1, 0x2, 0x1, 0x6}], 0x10, 0x8000}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r11, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x19, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36e", 0x0}, 0x50) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r13, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000000099c02067216d31cf0d61d25ee444ccaae0dfb1e5798ab4b01f2066cadf7019a2137a6ceeccf7c75065da86ac333800f2230b7726872c94c4ef169e248300d384", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r14, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r14}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 7m37.464280498s ago: executing program 2 (id=3405): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x6, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x1}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x810400, 0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)="245df917557147ca08b351c44e2a65da269c9e98e7a916b45767dd3b727c4f4b7317d8a7c6edf83265394241a4f4") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x5, 0x2, 0x1, 0xa}, {0x3, 0xfffffffd, 0x0, 0x1}, {0x0, 0x4, 0x3}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020c0c000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001040)={r2, r1}, 0x1) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000000000001d1e010e7126", 0xf}, {&(0x7f00000014c0)}, {&(0x7f0000001100)="b66209510ac8e19c066b378b24f005dedc172453a30a062c4d3a7efa076778442a421409b786f502a313c990467e4356094b592728cf113fd6f586e038ad956879e45e7df694392e8361a309aa24f5e804eccfc503", 0x55}], 0x3}, 0x0) 7m37.276554713s ago: executing program 2 (id=3408): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, 0x0, 0xb) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/190, 0xbe}], 0x1, &(0x7f00000006c0)=""/194, 0xc2}, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x60731, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x43, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="110000005e0033"], 0xfe33) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="925e11604e775a147bed31d570a15fc78b6e2909526269d49be028d5583e533cea0175c7c4e956b47d53ee4b73f49579b690512e9f6f21d2d37642afd6c0c1af47bc92a606692975c5f212a84b8d61071e65d35a", @ANYBLOB="f12e1d9687e7dd3da2eb51298103a9b242e06e758f114e07816afa855f934d83f147fc9cc0c90de5f19b65acb0968e8d86be4a5fd51ad385ada5f1df7c25cacc042776321b37b803644b0340ab9bedf9bb50ad4f0e1511f827f059bacd725a6323fe31c1204f06810addfc0f421b279af0a84d0984cb068fa49816138390e75ca94b0a7266acc13fef6b323bfd461d042380b9d8fcb0a0d4bbd2f4c1aa90bdef2ee2cc95b772e931da7394846002187a89549921d87e4c63379dbd424ac911fcb2cc28cd866446bacb2bec1fb93d5559155de9bce083d400ca8b942e696a98d45b8c51b03793a6ccbfee5679b99899d884", @ANYRESHEX=r1], 0xfe33) 7m36.324180973s ago: executing program 2 (id=3421): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x10040, 0x9199, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='Epids '], 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x8, 0x401, 0x10001, 0x10008, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r6, &(0x7f0000000400)="5841633913148ff7a35c8669202ed373df0415f0c9a5ccfb83c634e0f419e1029571bc5abbc28f56d9", &(0x7f0000000580)=""/22}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20008000}, 0x4000080) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000210081044e81f782db44b90402000000008000000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8db52b49816277cf4090000001fb791643a101ecec9456d6845dfe1d9db22f3d233de7929623df5c74ffe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40deee4edef3d939acd92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x47}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x0, 0xa, 0x9, 0x20}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x3, 0x0, 0x2, 0x0, 0x0, 0x10, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}]}, &(0x7f0000000300)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x10, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r8, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="0d2ffee9dfee48930000000000000000e46381805dfd7f1671121100000000009500000000000000e937c99d1c741f0e49238b5d5db81a0ad7912107f9322b1fb8d6dc4ade0fe349de05cbf84c488656fbf81b6baec1923f025cb98106660b8e13106b022da655758b035633cb1e3cc2e195"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r10, &(0x7f0000000100)=0x1, 0x12) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7m21.256907383s ago: executing program 32 (id=3421): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x10040, 0x9199, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='Epids '], 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x8, 0x401, 0x10001, 0x10008, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r6, &(0x7f0000000400)="5841633913148ff7a35c8669202ed373df0415f0c9a5ccfb83c634e0f419e1029571bc5abbc28f56d9", &(0x7f0000000580)=""/22}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20008000}, 0x4000080) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000210081044e81f782db44b90402000000008000000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8db52b49816277cf4090000001fb791643a101ecec9456d6845dfe1d9db22f3d233de7929623df5c74ffe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40deee4edef3d939acd92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x47}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x0, 0xa, 0x9, 0x20}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ldst={0x3, 0x0, 0x2, 0x0, 0x0, 0x10, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}]}, &(0x7f0000000300)='syzkaller\x00', 0xff, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x5, 0x10, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r8, 0x1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="0d2ffee9dfee48930000000000000000e46381805dfd7f1671121100000000009500000000000000e937c99d1c741f0e49238b5d5db81a0ad7912107f9322b1fb8d6dc4ade0fe349de05cbf84c488656fbf81b6baec1923f025cb98106660b8e13106b022da655758b035633cb1e3cc2e195"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r10, &(0x7f0000000100)=0x1, 0x12) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 21.780335405s ago: executing program 4 (id=6158): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffca7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r2 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000000046a09ffb1a5b0df97e65f192238ac38c5a55f32510544bd7d9144e694b1434ac2d6da3328f4b1a61801366ca801995063230fdce99ad10a0087f0bce03", @ANYRES32], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x29, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x5}, 0x84002, 0xca, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0xe, 0x0, 0x40008}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYBLOB=','], 0x9a) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000030000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r8}, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a1, 0x0) sendmsg$unix(r9, &(0x7f0000000280)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff}}}], 0x20, 0x4040000}, 0x48000) socketpair(0x1d, 0x4, 0x0, &(0x7f0000000380)) (async) socketpair(0x1d, 0x4, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.511105293s ago: executing program 1 (id=6162): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x8000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'blkio'}, {0x2b, 'net_prio'}, {0x2b, 'perf_event'}]}, 0x1d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) (async) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x8000) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'blkio'}, {0x2b, 'net_prio'}, {0x2b, 'perf_event'}]}, 0x1d) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) 21.30358923s ago: executing program 1 (id=6165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="95"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000000)="8d0643de7ebb5e0d29f1b1d944a1e9175eb3308f459a0d66e1ab91cc18a53050ac8aeeaf60dfb70a8c4e39f1d2767098c5a05dafb44b869d23aba1f4caf31c977dfa5af6697758babc9344b198ce0d69fa86df3a971409f04d0b5f5185e61961a2", &(0x7f0000000080)=""/229, &(0x7f0000000180)="0a033061f0b004bcc4e65163", &(0x7f00000001c0)="29f0c5521365b1a414ec166dee829682968cea3cb4570aa41d07fb63201e785bd1ac481966912d7e908cebace2baea17c2a6e0e1fd61c04522580ae1cefb1c47f1389fc5f7b3a50e1a15942f25a4d352aa40e46aa6e92f93a3e7366a1f17f06502b99bd71c18eeed8f77eb3ff49e4231780a65afe97901ffffffd7c2704a682d3563bbe9efc0ec15c1a00972ad8912163a81cb11cabb1aef2455ef78e5236078bc347e9aa663ab8e664a6723", 0x401, r1}, 0x38) 21.191310033s ago: executing program 1 (id=6166): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='[*%.^\'\x00') r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000027000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 21.051505188s ago: executing program 0 (id=6169): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000300), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRESDEC=r1, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008511000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0x10, 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000300), 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRESDEC=r1, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008511000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 20.899869452s ago: executing program 3 (id=6170): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0xa8, 0x4, 0x0, 0x3, 0xa018, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x100284, 0x7, 0x100, 0x2, 0x8, 0x81d, 0x100, 0x0, 0xf109, 0x0, 0x2}) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@rfm={0x25, 0x2, "bf4c484a1fa00081a00200000000bb00"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 20.795491815s ago: executing program 0 (id=6171): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000690007010000f8ffffffb702000008000000b70300000300000085000000170000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000690007010000f8ffffffb702000008000000b70300000300000085000000170000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000040) close(r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0xfffffffffffffffd, 0x0, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc1}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0xf, 0x33, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010102]}, @noop, @cipso={0x86, 0x26, 0x6f292e7411a7d3e0, [{0x6, 0x5, "8e9c20"}, {0x2, 0x8, "5d7b079987a5"}, {0x0, 0x11, "2e0b8f051503d3a93c350c328eba91"}, {0x0, 0x2}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xfc, 0x0, 0x3, [0x3, 0x400, 0x6cb, 0x40, 0x0, 0x4]}, @noop, @ssrr={0x89, 0x13, 0xde, [@broadcast, @private=0xa010101, @multicast1, @local]}, @ssrr={0x89, 0x1f, 0x1d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa410100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x148}, 0x4041800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x24d, 0x7}, {0x4, 0x9, 0x9}, {0x7, 0x8, 0x8}]}]}, {0x0, [0x30, 0x30, 0x0, 0x30, 0x30]}}, &(0x7f0000000680)=""/199, 0x4f, 0xc7, 0x1, 0x3af1, 0x10000}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@enum64={0xd, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x24d, 0x7}, {0x4, 0x9, 0x9}, {0x7, 0x8, 0x8}]}]}, {0x0, [0x30, 0x30, 0x0, 0x30, 0x30]}}, &(0x7f0000000680)=""/199, 0x4f, 0xc7, 0x1, 0x3af1, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x44, 0x3, 0x3, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, r4, 0x3, 0x5, 0x5, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r5) (async) close(r5) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) unlink(&(0x7f0000000240)='./file0\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="3fe7", 0x2}], 0x1}, 0x4) (async) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="3fe7", 0x2}], 0x1}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 20.560453712s ago: executing program 3 (id=6172): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000580081044e81f782db44b904021d080009000200df55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce5e61fd3acff96ceec14f80080000000000000048ee4bf3b6e0d869d8dc531f4d1030547aa25de38d1c77d5ab0500132afde1da60d6318e627abae3b924ae1f8c828e38f4125292761f3f16288f98aec5d7d283696d596878b5cf1249d18526d44ed41109b1158c7eeaeabcbd67", 0xd8}], 0x1}, 0x42880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x13100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedd07910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa", @ANYRES32], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x2c, 0x0, &(0x7f0000000080)="630b001a3eee80dcb95b0e4afdb20104bb14155fbc8e58d5164e49bae8fabb501b7d80c2a1933f2af92ceca6", 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="08000000040000000400000000000000b58450d0c9d888e89d29cf7b8b1b66f097c15109b6a4b2646e6883ccc3b288c05cf7a6607cde2673d6889ffe2e7ffdce496b15", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x8, 0xfa2e, 0x2, 0x800, r6, 0x3561, '\x00', 0x0, r7, 0x2, 0x2, 0x0, 0xe}, 0x50) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3, 0x4004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000)) ioctl$TUNSETLINK(r8, 0x400454cd, 0x336) 20.364708068s ago: executing program 4 (id=6173): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1000a, 0x5}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0xa7efbadaeaa12d3a, r0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000080), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0xaf, 0x3, 0xfffff800, 0x2401, 0x1, 0xc68, '\x00', 0x0, r2, 0x4, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1e, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0x114b52a52d668c37, 0x1, 0x0, r7}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1e, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x200}, @map_fd={0x18, 0x114b52a52d668c37, 0x1, 0x0, r7}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) 20.238095603s ago: executing program 4 (id=6174): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113340000000000bfa000000000000007000000ee0016055e03010000000000250500000000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee6ffd0bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e27370001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fddc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347fc7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b4980000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x30141380, &(0x7f0000000200)="b77b7735e207d8fcb8fde9d4f2e74a2fcb1b93f03249c88c3712c7dd2cdd57bd62cc48a82fd0e8884d919ec713aa1e0a78239b34c62b28493daaed06c0b81df56e7742b5219d6d2bd81910542f711ac5d6e12838b9ca5a02ca62c17fe4e71afbb2cb9b73a6dfb86ce02b63919112f766f52665e24a757df2ee2d93a1f06d13eec48a239ffe39a4e925193cd3ff628235337a29fdabcb75e42cf6598527af9d3b448fd9767834ef194ff7476db3eec293af6c78be506520af7f1523c934b1a96b315c723415438987bb7b2d8bbba39be6aa47dbf71acc2586fcfca8fc499a8905", 0xe0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="55b5a549a38f645301eee8f03372a24ab64868d0f6354aec050f3cb37d2ebc02edb13adcc2e2d3c3c1e7d4e64192936439b51564ccfd417e2f0fb6bde4ec4bc6b681226b463fa56df4b4ec7dcc99b63cc54567b845646f263c01ab389c22e163b4dbf7bc3904911580d1c2a86f9a029c5fbec3820708b92596827159ccbb7418fe88019368351d94c940a58b8d6cb91fe210f4672315e5d7f2ffd6d21209bc5d17f6a72dca8afa2887fe5792eb4720f7666e45c1414e30f519816f31ec5b38d25f3eb18dde3bf3c57db525b7d1b3f4f039934d7aeb8c08b1c365b6b28d39673b707501385b2e38b5e74940f583") r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x1ff, [{0x5, 0x3, 0x7}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x80e}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x5f, 0x30, 0x2e, 0x61, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000680)=""/173, 0x50, 0xad, 0x1, 0x91}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0xffff, 0x6, 0x514, 0xa040, 0x1, 0xff, '\x00', r1, r3, 0x1, 0x1, 0x1, 0x0, @value=r4}, 0x50) 20.156350345s ago: executing program 3 (id=6175): socket$kcm(0x10, 0x2, 0x0) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000080000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xf9, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xcc, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004", @ANYBLOB='@\x00'/20, @ANYBLOB="02000000030000000400"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1}, 0x0, &(0x7f00000008c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x6}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r7}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$kcm(0xa, 0x2, 0x73) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_subtree(r9, 0x0, 0x0) 20.154903115s ago: executing program 1 (id=6176): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x8, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x20002, 0x8, 0x0, 0x3, 0xfffe}, 0x0, 0x3, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB="00000000001b00d8ac761d7e11162d9aa47a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d70696473202bf4df63bfb26aaa1c198edcd6726c696d6974202d637075736574202d6e65745f636c73202d6465766963657320"], 0x28) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)) r4 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./cgroup/../file0/file0/file0/file0\x00', r3, 0x4000, r4}, 0x18) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) 20.030846769s ago: executing program 3 (id=6177): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4, 0x2}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x11}, 0x80000006, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) 20.018737579s ago: executing program 1 (id=6178): r0 = perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x9, 0x8, 0x7f, 0x0, 0xdc3, 0x1720, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x4}, 0x144, 0x7b118f60, 0x7, 0x4, 0x2, 0x5aa, 0xfff7, 0x0, 0x1200, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x84a2, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5eaa000000000000711013000000000095f4699c4ade0000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211053300fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x88160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x9022}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) close(r5) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) 20.017385459s ago: executing program 4 (id=6179): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], 'D'}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.887163023s ago: executing program 3 (id=6180): bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28) openat$cgroup_int(r2, 0x0, 0x2, 0x0) (async) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) (async) write$cgroup_int(r3, &(0x7f0000000040), 0x1) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) 19.819725285s ago: executing program 4 (id=6181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000e001600181100"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1, 0x0, 0x0, 0x200400d1}, 0xc4) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xd50a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfca, 0x1, @perf_config_ext={0x9, 0x1ef7}, 0x11efb, 0x4, 0x0, 0x8, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r6, 0x110, 0x2, &(0x7f0000000140)=r2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="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", 0x5d9}], 0x3}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r9, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x9}, 0x8) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000340)=r10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 19.809387346s ago: executing program 0 (id=6182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000780)=[{0xfffffffffffffffc}], 0x1}, 0x100) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700042005"], 0xfe33) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.748325348s ago: executing program 1 (id=6183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000000000000000008510eaff0500000085200000020000009500007b"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x20122, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x10000000001, 0x200, 0x4, 0x0, 0x19, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181d0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10) 19.631387401s ago: executing program 0 (id=6184): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0xff, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xfffd, 0x8, 0x1, 0x8, 0x2020005, 0x8, 0x0, 0x5, 0x0, 0x8000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0xff, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xfffd, 0x8, 0x1, 0x8, 0x2020005, 0x8, 0x0, 0x5, 0x0, 0x8000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) 19.199882964s ago: executing program 0 (id=6185): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum64={0x4, 0x5, 0x0, 0x13, 0x0, 0x1, [{0x80000002, 0x2, 0xf}, {0x10, 0x9, 0x9}, {0xc, 0xaf6b, 0x8}, {0x3, 0x7, 0x80000882}, {0x6, 0x7c3f2b2c, 0xf3c}]}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002580)=""/9, 0x67, 0x9, 0x1, 0x28f0c5d9}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r1, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x0, 0x0, &(0x7f0000000b00)='syzkaller\x00', 0x3, 0x6c, &(0x7f0000000b40)=""/108, 0x0, 0x64, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000cc0)={0x2, 0x2, 0x40, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[r3, r1, r5, r1], 0x0, 0x10, 0x1000}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80, '\x00', r2, r0, 0x0, 0x4, 0x3}, 0x50) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) 19.199366934s ago: executing program 0 (id=6186): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0xfffffa51, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x84a7cc0d3bba48bb) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x3, @mcast1}, 0x80, 0x0}, 0x400c080) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x80, 0x0, 0x400000000000000f, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x18aeb, 0x4, 0x98, 0x8, 0x2, 0xfffff271, 0xfffc, 0x0, 0x3, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="050008"]) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)=ANY=[]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff9c, 0x0}, 0x100) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) recvmsg$kcm(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=r2], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9, @ANYRES32=r4, @ANYBLOB="ac141411cf26000100000000280000000000000000000000070000000144140707"], 0x48}, 0x200040c4) 15.508414757s ago: executing program 4 (id=6187): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0xb, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x24}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0xe, [{0xd, 0x1, 0x5}, {0xd, 0x2, 0x8}, {0x3, 0x4, 0x43f}, {0xa, 0x0, 0x2}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @datasec={0x1, 0x7, 0x0, 0xf, 0x2, [{0x4, 0x7ff, 0x6e9}, {0x1, 0xff, 0x10}, {0x3, 0xd4af, 0xfffffff9}, {0x1, 0x4, 0xfa72}, {0x8, 0x8, 0x81}, {0x5, 0x7, 0xffffffff}, {0x1, 0x16, 0x200}], "ea08"}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x30, 0x2e, 0x2e, 0x61, 0x0]}}, &(0x7f0000000340)=""/4096, 0x11f, 0x1000, 0x1, 0x1, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000001580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001940)={0x1, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x16, 0x1c, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000001000000000000000100000085000000a80000008520000003000000186000000400000000000000c1000000182b0000", @ANYRES32, @ANYBLOB="00000000ffffffff180000000900000000000000100000002411fefffcffffff0331ff01020000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf0500000800000085000000a5000000c310180008000010954003f8f85fc693"], &(0x7f0000001480)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x4, '\x00', r4, @flow_dissector, r5, 0x8, &(0x7f00000018c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x7, 0xc}, 0x10, r6, r7, 0x2, &(0x7f00000019c0)=[r3, r0, r3], &(0x7f0000001a00)=[{0x9, 0x1, 0xa, 0xb}, {0x3, 0x2, 0x5, 0xa}]}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500004affffffffffffff0005930100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x50) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_type(r11, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000c40), 0x12) write$cgroup_type(r12, &(0x7f0000000280), 0x9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) 15.378267341s ago: executing program 3 (id=6188): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b9", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() (async) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000080000000f0000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe48cc1c63e7d221", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_clone(0x2016000, &(0x7f0000000340)="9eefcd80d5426655ddc98a8f80020d090a9dcac2e4ec69bc1b73add4834698556391304b4aa5c59f64f11d65d93b3701ea8931c734448c6cf236777a296a5d6d9003549c5b970b4e0cb875bd375edb2757c644fe6d882c27719a4290c04deeda8fd03bf60eec361e0ff595ea7575a8df33081cb8b6ff48e477d9c8563a39fb78825d82524827a7f4120d093f32d6d0948527a40de609dcd72dab248d42898fdcb72d223846950b571927251bdd2032f1a75223a4eb1e769c66b2cb1683a13a147c697c579c6bc85df5a7a694d23077f4b85ab691ed0e", 0xd6, &(0x7f0000000440), 0x0, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x0) close(r6) (async) close(r6) syz_open_procfs$namespace(r5, &(0x7f0000000580)='ns/user\x00') (async) syz_open_procfs$namespace(r5, &(0x7f0000000580)='ns/user\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ff922400e70000000000000000080000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x1006, &(0x7f0000000500)=""/4102, 0x0, 0x69}, 0x94) 4.282684579s ago: executing program 33 (id=6183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000000000000000008510eaff0500000085200000020000009500007b"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x20122, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x10000000001, 0x200, 0x4, 0x0, 0x19, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181d0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x80) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x22, &(0x7f0000000000)=r7, 0x10) 3.139649324s ago: executing program 34 (id=6186): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0xfffffa51, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x84a7cc0d3bba48bb) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x3, @mcast1}, 0x80, 0x0}, 0x400c080) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x80, 0x0, 0x400000000000000f, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x18aeb, 0x4, 0x98, 0x8, 0x2, 0xfffff271, 0xfffc, 0x0, 0x3, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="050008"]) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)=ANY=[]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff9c, 0x0}, 0x100) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) recvmsg$kcm(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=r2], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9, @ANYRES32=r4, @ANYBLOB="ac141411cf26000100000000280000000000000000000000070000000144140707"], 0x48}, 0x200040c4) 78.652668ms ago: executing program 35 (id=6187): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0xb, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x24}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @struct={0xa, 0x4, 0x0, 0x4, 0x0, 0xe, [{0xd, 0x1, 0x5}, {0xd, 0x2, 0x8}, {0x3, 0x4, 0x43f}, {0xa, 0x0, 0x2}]}, @func={0x9, 0x0, 0x0, 0xc, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}, @datasec={0x1, 0x7, 0x0, 0xf, 0x2, [{0x4, 0x7ff, 0x6e9}, {0x1, 0xff, 0x10}, {0x3, 0xd4af, 0xfffffff9}, {0x1, 0x4, 0xfa72}, {0x8, 0x8, 0x81}, {0x5, 0x7, 0xffffffff}, {0x1, 0x16, 0x200}], "ea08"}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x30, 0x5f, 0x2e, 0x30, 0x2e, 0x2e, 0x61, 0x0]}}, &(0x7f0000000340)=""/4096, 0x11f, 0x1000, 0x1, 0x1, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000001580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001940)={0x1, 0x0}, 0x8) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x16, 0x1c, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000001000000000000000100000085000000a80000008520000003000000186000000400000000000000c1000000182b0000", @ANYRES32, @ANYBLOB="00000000ffffffff180000000900000000000000100000002411fefffcffffff0331ff01020000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf0500000800000085000000a5000000c310180008000010954003f8f85fc693"], &(0x7f0000001480)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x4, '\x00', r4, @flow_dissector, r5, 0x8, &(0x7f00000018c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x7, 0xc}, 0x10, r6, r7, 0x2, &(0x7f00000019c0)=[r3, r0, r3], &(0x7f0000001a00)=[{0x9, 0x1, 0xa, 0xb}, {0x3, 0x2, 0x5, 0xa}]}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r9, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000500004affffffffffffff0005930100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x50) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_type(r11, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000c40), 0x12) write$cgroup_type(r12, &(0x7f0000000280), 0x9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) 0s ago: executing program 36 (id=6188): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1041a1, 0xc, 0x9, 0x1, 0x0, 0x300, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b9", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) gettid() (async) gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000080000000f0000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe48cc1c63e7d221", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_clone(0x2016000, &(0x7f0000000340)="9eefcd80d5426655ddc98a8f80020d090a9dcac2e4ec69bc1b73add4834698556391304b4aa5c59f64f11d65d93b3701ea8931c734448c6cf236777a296a5d6d9003549c5b970b4e0cb875bd375edb2757c644fe6d882c27719a4290c04deeda8fd03bf60eec361e0ff595ea7575a8df33081cb8b6ff48e477d9c8563a39fb78825d82524827a7f4120d093f32d6d0948527a40de609dcd72dab248d42898fdcb72d223846950b571927251bdd2032f1a75223a4eb1e769c66b2cb1683a13a147c697c579c6bc85df5a7a694d23077f4b85ab691ed0e", 0xd6, &(0x7f0000000440), 0x0, 0x0) r6 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x0) close(r6) (async) close(r6) syz_open_procfs$namespace(r5, &(0x7f0000000580)='ns/user\x00') (async) syz_open_procfs$namespace(r5, &(0x7f0000000580)='ns/user\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ff922400e70000000000000000080000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x1006, &(0x7f0000000500)=""/4102, 0x0, 0x69}, 0x94) kernel console output (not intermixed with test programs): and 0x0406 tx timeout [ 780.281693][T22202] batman_adv: batadv0: Adding interface: veth0_vlan [ 780.298241][T22202] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.335191][T22202] batman_adv: batadv0: Interface activated: veth0_vlan [ 781.026852][T22239] tipc: Started in network mode [ 781.044411][T22239] tipc: Node identity e, cluster identity 4711 [ 781.068551][T22239] tipc: Node number set to 14 [ 781.274141][T22248] netlink: 'syz.3.4395': attribute type 64 has an invalid length. [ 781.342767][T22250] netlink: 'syz.0.4396': attribute type 29 has an invalid length. [ 781.362353][T22250] netlink: 'syz.0.4396': attribute type 29 has an invalid length. [ 781.389589][T22250] netlink: 'syz.0.4396': attribute type 29 has an invalid length. [ 781.427663][T22250] netlink: 'syz.0.4396': attribute type 29 has an invalid length. [ 781.452937][T22252] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 781.475667][T22252] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 781.495739][T22252] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 781.623828][T22258] netlink: 'syz.0.4399': attribute type 16 has an invalid length. [ 781.648368][T22258] __nla_validate_parse: 3 callbacks suppressed [ 781.648404][T22258] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4399'. [ 781.693904][T22267] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4402'. [ 781.735568][T22267] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 785.050466][T22292] validate_nla: 4 callbacks suppressed [ 785.050486][T22292] netlink: 'syz.0.4409': attribute type 22 has an invalid length. [ 785.067378][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 785.255990][T22294] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.4410'. [ 785.364051][T22294] netlink: 'syz.1.4410': attribute type 3 has an invalid length. [ 785.384919][T22294] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4410'. [ 785.411468][T22297] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4412'. [ 785.506814][T22302] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4413'. [ 785.612869][T22304] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4414'. [ 785.643340][T22306] netlink: 'syz.1.4415': attribute type 16 has an invalid length. [ 785.694567][T22306] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4415'. [ 785.763055][T22304] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4414'. [ 785.997693][T22313] C: renamed from team_slave_0 (while UP) [ 786.029825][T22313] netlink: 'syz.4.4417': attribute type 3 has an invalid length. [ 786.038254][T22313] netlink: 'syz.4.4417': attribute type 1 has an invalid length. [ 786.779159][T22337] netlink: 'syz.1.4424': attribute type 2 has an invalid length. [ 786.799203][T22337] __nla_validate_parse: 2 callbacks suppressed [ 786.799222][T22337] netlink: 17263 bytes leftover after parsing attributes in process `syz.1.4424'. [ 786.827935][T22338] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.4424'. [ 787.496493][T22362] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4432'. [ 787.639597][T22366] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4433'. [ 788.237825][T22399] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4443'. [ 788.658728][T22407] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4445'. [ 788.704531][T22407] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 788.959183][T22411] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 789.030078][T22411] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.4447'. [ 789.390074][ T5776] Bluetooth: hci1: ISO packet for unknown connection handle 3637 [ 791.908226][T22438] netlink: 'syz.4.4456': attribute type 16 has an invalid length. [ 791.934645][T22438] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4456'. [ 792.027994][T22454] netlink: 'syz.0.4459': attribute type 3 has an invalid length. [ 792.902720][T22484] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4469'. [ 792.909328][T22491] netlink: 'syz.4.4471': attribute type 153 has an invalid length. [ 792.920760][T22491] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4471'. [ 792.925525][T22484] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4469'. [ 792.949220][T22485] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4469'. [ 792.959310][T22492] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4469'. [ 793.088323][T22497] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4471'. [ 793.099248][T22498] netlink: 'syz.1.4472': attribute type 17 has an invalid length. [ 793.460524][T22510] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.4478'. [ 793.470640][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4478'. [ 793.754131][T22528] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4483'. [ 793.920641][T22535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.928203][T22535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.937188][T22535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.946429][T22535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.966159][T22535] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 793.973735][T22535] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 794.005909][T22535] batman_adv: batadv0: Interface deactivated: 3â1 [ 794.012714][T22535] batman_adv: batadv0: Removing interface: 3â1 [ 794.129904][T22540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.170610][T22541] netlink: 'syz.1.4486': attribute type 29 has an invalid length. [ 794.202380][T22541] netlink: 'syz.1.4486': attribute type 29 has an invalid length. [ 794.221611][T22541] netlink: 'syz.1.4486': attribute type 29 has an invalid length. [ 794.235807][T22537] netlink: 'syz.4.4485': attribute type 10 has an invalid length. [ 794.258889][T22537] bridge0: port 3(syz_tun) entered disabled state [ 794.266573][T22537] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.276326][T22537] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.366047][T22537] bridge0: port 3(syz_tun) entered blocking state [ 794.373137][T22537] bridge0: port 3(syz_tun) entered forwarding state [ 794.380861][T22537] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.388155][T22537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.395723][T22537] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.402952][T22537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.451859][T22537] .`: (slave bridge0): Enslaving as an active interface with an up link [ 794.461687][T22544] netlink: 'syz.1.4486': attribute type 29 has an invalid length. [ 794.561482][T22548] netlink: 'syz.0.4488': attribute type 17 has an invalid length. [ 794.574966][T22548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.308424][T22586] can: request_module (can-proto-0) failed. [ 795.470917][T22598] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 796.967416][T22630] __nla_validate_parse: 4 callbacks suppressed [ 796.967433][T22630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4512'. [ 801.015651][T22690] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4529'. [ 801.066197][T22681] validate_nla: 1 callbacks suppressed [ 801.066374][T22681] netlink: 'syz.1.4526': attribute type 10 has an invalid length. [ 801.105488][T22681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4526'. [ 802.618439][T22736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 802.918573][T22735] netlink: 'syz.3.4539': attribute type 10 has an invalid length. [ 802.936551][T22752] netlink: 'syz.1.4543': attribute type 29 has an invalid length. [ 802.988950][T22735] bridge0: left allmulticast mode [ 803.038689][T22752] netlink: 'syz.1.4543': attribute type 29 has an invalid length. [ 803.077087][T22755] netlink: 'syz.1.4543': attribute type 29 has an invalid length. [ 803.148034][T22757] netlink: 'syz.1.4543': attribute type 29 has an invalid length. [ 803.543216][T22776] netlink: 'syz.1.4550': attribute type 2 has an invalid length. [ 803.546927][T22771] netlink: 'syz.0.4549': attribute type 29 has an invalid length. [ 803.571154][T22771] netlink: 'syz.0.4549': attribute type 29 has an invalid length. [ 803.608830][T22778] netlink: 'syz.0.4549': attribute type 29 has an invalid length. [ 805.638479][T22823] wlan0: mtu greater than device maximum [ 806.159488][T22844] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4568'. [ 806.261025][T14858] cgroup: fork rejected by pids controller in /syz3 [ 806.261261][T22843] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4568'. [ 806.496793][T22857] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4571'. [ 806.513233][T22857] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.4571'. [ 806.737486][T22723] syz_tun (unregistering): left allmulticast mode [ 806.744001][T22723] syz_tun (unregistering): left promiscuous mode [ 806.780872][T22723] bridge0: port 5(syz_tun) entered disabled state [ 807.035807][ T8978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.172056][T22868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4575'. [ 807.281800][T22868] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4575'. [ 807.283749][ T8978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.400162][T22873] validate_nla: 8 callbacks suppressed [ 807.400198][T22873] netlink: 'syz.4.4576': attribute type 29 has an invalid length. [ 807.562290][T22873] netlink: 'syz.4.4576': attribute type 29 has an invalid length. [ 807.694475][T22879] netlink: 'syz.0.4577': attribute type 29 has an invalid length. [ 807.730988][ T8978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.794131][T22875] netlink: 'syz.4.4576': attribute type 29 has an invalid length. [ 807.821369][T22879] netlink: 'syz.0.4577': attribute type 29 has an invalid length. [ 807.851879][T22882] netlink: 'syz.0.4577': attribute type 29 has an invalid length. [ 807.868687][T22877] netlink: 'syz.4.4576': attribute type 29 has an invalid length. [ 807.993351][ T8978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.026601][T22883] netlink: 'syz.0.4577': attribute type 29 has an invalid length. [ 808.052713][T22873] netlink: 'syz.4.4576': attribute type 29 has an invalid length. [ 808.624108][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 808.648206][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 808.660541][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 808.693946][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 808.715277][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 808.723402][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 808.880079][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.887101][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.558503][T22895] chnl_net:caif_netlink_parms(): no params data found [ 810.239021][T22895] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.284436][T22895] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.308274][T22895] bridge_slave_0: entered allmulticast mode [ 810.338579][T22895] bridge_slave_0: entered promiscuous mode [ 810.368343][T22895] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.390969][T22895] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.411047][T22895] bridge_slave_1: entered allmulticast mode [ 810.425945][T22895] bridge_slave_1: entered promiscuous mode [ 810.554081][T22895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.881416][ T5776] Bluetooth: hci2: command tx timeout [ 811.002665][T22895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.142185][T22895] team0: Port device team_slave_0 added [ 811.316436][T22895] team0: Port device team_slave_1 added [ 811.522022][T22895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.529383][T22895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.582444][T22895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.695179][T22895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.702182][T22895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.750673][T22895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.061496][T22962] netlink: 'syz.4.4589': attribute type 21 has an invalid length. [ 812.108426][T22895] hsr_slave_0: entered promiscuous mode [ 812.175592][T22895] hsr_slave_1: entered promiscuous mode [ 812.236490][T22895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.257068][T22895] Cannot create hsr debugfs directory [ 812.393677][T22978] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4592'. [ 812.530309][T22980] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4594'. [ 812.589996][T22980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.957470][ T5776] Bluetooth: hci2: command tx timeout [ 813.409728][ T8978] hsr_slave_0: left promiscuous mode [ 813.438299][ T8978] hsr0: left allmulticast mode [ 813.457139][ T8978] bridge0: port 4(hsr0) entered disabled state [ 813.479728][ T8978] bridge0: port 3(team0) entered disabled state [ 813.492861][ T8978] bridge_slave_1: left allmulticast mode [ 813.508882][ T8978] bridge_slave_1: left promiscuous mode [ 813.524917][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.538409][ T8978] bridge_slave_0: left allmulticast mode [ 813.546399][ T8978] bridge_slave_0: left promiscuous mode [ 813.553873][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.578318][ T8978] veth1_vlan: left promiscuous mode [ 813.583685][ T8978] veth0_vlan: left promiscuous mode [ 814.161390][ T8978] team_slave_1 (unregistering): left promiscuous mode [ 814.168788][ T8978] team_slave_1 (unregistering): left allmulticast mode [ 814.180616][ T8978] team0 (unregistering): Port device team_slave_1 removed [ 814.901241][T23034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4602'. [ 815.044680][ T5776] Bluetooth: hci2: command tx timeout [ 815.270446][T23034] C (unregistering): left promiscuous mode [ 815.284813][T23034] C (unregistering): left allmulticast mode [ 815.397582][T23034] team0: Port device C removed [ 815.913947][T23053] validate_nla: 1 callbacks suppressed [ 815.913965][T23053] netlink: 'syz.1.4609': attribute type 10 has an invalid length. [ 815.967104][T23053] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4609'. [ 816.250447][T22895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 816.332229][T22895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 816.414292][T22895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 816.477185][T22895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 816.600379][T23056] lo: entered allmulticast mode [ 816.876226][T22895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.968850][T22895] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.009860][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.017116][ T8978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.081315][T23078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4614'. [ 817.109520][T23078] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.124679][ T5776] Bluetooth: hci2: command tx timeout [ 817.194003][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.201309][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.704528][T23089] netlink: set zone limit has 8 unknown bytes [ 818.149761][T22895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.162255][T23103] netlink: 'syz.1.4618': attribute type 1 has an invalid length. [ 818.191735][T23103] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4618'. [ 818.223432][T23103] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4618'. [ 818.285370][T22895] veth0_vlan: entered promiscuous mode [ 818.307613][T23108] netlink: 'syz.0.4619': attribute type 27 has an invalid length. [ 818.315840][T23108] netlink: 'syz.0.4619': attribute type 4 has an invalid length. [ 818.324404][T23108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4619'. [ 818.343634][T22895] veth1_vlan: entered promiscuous mode [ 818.437366][T22895] veth0_macvtap: entered promiscuous mode [ 818.464084][T22895] veth1_macvtap: entered promiscuous mode [ 818.508727][T22895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.536522][T22895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.565428][T22895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.598125][T22895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.629228][T23118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4621'. [ 818.665312][T22895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.674080][T22895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.719663][T22895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.737611][T22895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.022694][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.056396][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.141893][T23135] netlink: 'syz.1.4624': attribute type 5 has an invalid length. [ 819.194387][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.214883][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.712059][T23161] netlink: 'syz.0.4629': attribute type 39 has an invalid length. [ 820.777921][T23186] netlink: 'syz.1.4634': attribute type 4 has an invalid length. [ 820.814592][T23186] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4634'. [ 822.251386][T23245] netlink: 'syz.0.4646': attribute type 46 has an invalid length. [ 822.301397][T23245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4646'. [ 822.580110][T23253] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.4649'. [ 822.637487][T23253] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 822.751956][T23253] netlink: 'syz.1.4649': attribute type 4 has an invalid length. [ 822.791480][T23265] netlink: 'syz.4.4651': attribute type 16 has an invalid length. [ 822.847757][T23265] netlink: 'syz.4.4651': attribute type 3 has an invalid length. [ 822.876654][T23265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4651'. [ 823.112035][T23274] netlink: 'syz.4.4654': attribute type 10 has an invalid length. [ 823.122925][T23274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4654'. [ 823.135154][T23274] team0: entered promiscuous mode [ 823.140421][T23274] C: entered promiscuous mode [ 823.147340][T23274] team_slave_1: entered promiscuous mode [ 823.153319][T23274] team0: entered allmulticast mode [ 823.160419][T23274] C: entered allmulticast mode [ 823.166867][T23274] team_slave_1: entered allmulticast mode [ 823.173698][T23274] bridge0: port 4(team0) entered blocking state [ 823.182070][T23274] bridge0: port 4(team0) entered disabled state [ 823.192730][T23274] bridge0: port 4(team0) entered blocking state [ 823.199278][T23274] bridge0: port 4(team0) entered forwarding state [ 823.649643][T23292] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4658'. [ 823.968435][T23306] netlink: 'syz.4.4664': attribute type 3 has an invalid length. [ 823.976844][T23301] netlink: 'syz.1.4662': attribute type 13 has an invalid length. [ 823.985067][T23306] netlink: 'syz.4.4664': attribute type 6 has an invalid length. [ 823.998633][T23306] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.4664'. [ 824.009772][T23301] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.4662'. [ 826.075763][T23328] syzkaller0: entered promiscuous mode [ 826.092268][T23333] netlink: 'syz.4.4672': attribute type 28 has an invalid length. [ 826.103332][T23328] syzkaller0: entered allmulticast mode [ 826.150314][T23333] netlink: 'syz.4.4672': attribute type 3 has an invalid length. [ 826.234673][T23333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4672'. [ 826.546167][T23330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4671'. [ 826.565340][T23335] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4671'. [ 829.320180][T23351] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 829.341919][T23351] validate_nla: 2 callbacks suppressed [ 829.341939][T23351] netlink: 'syz.4.4677': attribute type 3 has an invalid length. [ 829.383313][T23351] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.4677'. [ 829.527186][T23355] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4676'. [ 830.726658][T23361] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4679'. [ 830.928838][T23368] netlink: 'syz.1.4681': attribute type 4 has an invalid length. [ 830.937542][T23368] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4681'. [ 830.973868][T23372] netlink: 'syz.0.4683': attribute type 10 has an invalid length. [ 830.995152][T23372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4683'. [ 831.019994][T23372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.060789][T23377] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4685'. [ 831.082809][T23377] .`: (slave bond_slave_0): Releasing backup interface [ 831.103654][T23377] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 831.156571][T23382] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4687'. [ 832.435152][T23441] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4702'. [ 832.445023][T23441] tc_dump_action: action bad kind [ 832.842576][T23422] delete_channel: no stack [ 833.461272][T23471] netlink: 'syz.4.4712': attribute type 1 has an invalid length. [ 833.475679][T23471] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4712'. [ 833.668188][T23487] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4716'. [ 833.984115][T23482] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 (while UP) [ 834.339327][T23512] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 834.356861][T23518] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 834.498864][T23524] IPv6: Can't replace route, no match found [ 834.903572][T23536] netlink: 'syz.4.4730': attribute type 10 has an invalid length. [ 835.255212][T23555] __nla_validate_parse: 4 callbacks suppressed [ 835.255229][T23555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4734'. [ 835.281421][T23553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4736'. [ 835.459480][T23563] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.4737'. [ 835.492920][T23563] netlink: 'syz.3.4737': attribute type 9 has an invalid length. [ 835.501423][T23563] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4737'. [ 835.865976][T23574] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4741'. [ 837.061032][T23614] netlink: 'syz.3.4752': attribute type 9 has an invalid length. [ 837.136248][T23614] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4752'. [ 837.263885][T23616] netlink: 'syz.3.4752': attribute type 9 has an invalid length. [ 837.277734][T23616] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4752'. [ 837.920001][T23655] netlink: 'syz.4.4763': attribute type 3 has an invalid length. [ 837.923324][T23654] netlink: 'syz.0.4764': attribute type 6 has an invalid length. [ 837.939611][T23655] netlink: 'syz.4.4763': attribute type 4 has an invalid length. [ 837.952092][T23654] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4764'. [ 837.967154][T23655] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.4763'. [ 838.385300][T23662] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4766'. [ 840.272087][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 840.284886][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 840.301507][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 840.324657][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 840.334705][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 840.343047][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.387949][ T8978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.423245][T23730] netlink: 'syz.4.4788': attribute type 5 has an invalid length. [ 840.449035][T23736] netlink: 'syz.3.4789': attribute type 21 has an invalid length. [ 840.492164][ T8978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.637009][ T8978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.736324][ T8978] .`: (slave netdevsim0): Releasing backup interface [ 840.746289][ T8978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.953529][T23752] netlink: 'syz.3.4791': attribute type 3 has an invalid length. [ 840.966257][T23752] __nla_validate_parse: 3 callbacks suppressed [ 840.966274][T23752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4791'. [ 841.297596][T23731] chnl_net:caif_netlink_parms(): no params data found [ 841.474300][T23777] mac80211_hwsim hwsim78 wlan0: entered promiscuous mode [ 841.488479][T23777] mac80211_hwsim hwsim78 wlan0: entered allmulticast mode [ 842.152662][T23731] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.164576][T23731] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.172920][T23731] bridge_slave_0: entered allmulticast mode [ 842.180990][T23731] bridge_slave_0: entered promiscuous mode [ 842.190636][T23731] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.198042][T23731] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.205753][T23731] bridge_slave_1: entered allmulticast mode [ 842.213036][T23731] bridge_slave_1: entered promiscuous mode [ 842.337920][T23731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.394401][ T5777] Bluetooth: hci1: command tx timeout [ 842.413511][T23731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.561020][T23812] netlink: 'syz.3.4804': attribute type 10 has an invalid length. [ 842.603097][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.624928][T23812] bridge_slave_1: left allmulticast mode [ 842.630909][T23812] bridge_slave_1: left promiscuous mode [ 842.638917][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.683954][T23812] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 842.724451][T23820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4804'. [ 842.768410][T23731] team0: Port device team_slave_0 added [ 842.832254][T23731] team0: Port device team_slave_1 added [ 843.010629][T23731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.028206][T23731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.049465][T23830] netlink: 'syz.0.4806': attribute type 3 has an invalid length. [ 843.061955][T23731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.074455][T23830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4806'. [ 843.087915][T23731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.102154][T23731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.155009][T23731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.587684][T23731] hsr_slave_0: entered promiscuous mode [ 843.604597][T23731] hsr_slave_1: entered promiscuous mode [ 843.617039][T23731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 843.634416][T23731] Cannot create hsr debugfs directory [ 844.004639][T23875] netlink: 'syz.3.4815': attribute type 11 has an invalid length. [ 844.056487][T23875] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4815'. [ 844.306289][T23883] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 844.481454][ T5777] Bluetooth: hci1: command tx timeout [ 844.948828][T23898] netlink: 'syz.4.4819': attribute type 3 has an invalid length. [ 844.995701][T23898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4819'. [ 845.611167][T23731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 846.072200][T23916] netlink: 'syz.4.4825': attribute type 10 has an invalid length. [ 846.227425][T23916] team0: Device hsr_slave_0 failed to register rx_handler [ 846.349638][T23731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 846.455523][ T8978] hsr_slave_0: left promiscuous mode [ 846.471348][ T8978] bridge_slave_1: left allmulticast mode [ 846.495478][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.523958][ T8978] bridge_slave_0: left allmulticast mode [ 846.549942][ T8978] bridge_slave_0: left promiscuous mode [ 846.556635][ T5777] Bluetooth: hci1: command tx timeout [ 846.575796][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.702619][ T8978] veth1_macvtap: left promiscuous mode [ 846.710600][ T8978] veth0_macvtap: left promiscuous mode [ 846.871759][T23951] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.4831'. [ 848.636572][ T5777] Bluetooth: hci1: command tx timeout [ 849.652702][ T8978] team0 (unregistering): Port device geneve1 removed [ 849.809351][ T8978] team0 (unregistering): Port device hsr0 removed [ 849.916301][ T8978] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 849.967299][ T8978] team0 (unregistering): Port device team_slave_1 removed [ 850.017728][ T8978] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.068949][ T8978] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.140127][ T8978] .` (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 850.379740][ T8978] .` (unregistering): (slave team0): Releasing backup interface [ 850.420192][ T8978] .` (unregistering): Released all slaves [ 850.549065][T23731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.568490][T23952] netlink: 'syz.4.4830': attribute type 5 has an invalid length. [ 850.594448][T23731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.637355][T23957] netlink: 'syz.3.4832': attribute type 4 has an invalid length. [ 850.651435][T23957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4832'. [ 851.268656][T23731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.343048][T23731] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.405993][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.413183][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.514895][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.522113][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.623089][T23985] netlink: 'syz.0.4838': attribute type 12 has an invalid length. [ 851.644775][T23985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4838'. [ 852.279624][T23731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.361569][T24012] pim6reg1: entered promiscuous mode [ 852.391249][T24012] pim6reg1: entered allmulticast mode [ 852.491797][T23731] veth0_vlan: entered promiscuous mode [ 852.536387][T23731] veth1_vlan: entered promiscuous mode [ 852.667106][T23731] veth0_macvtap: entered promiscuous mode [ 852.697735][T23731] veth1_macvtap: entered promiscuous mode [ 852.813379][T24022] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4846'. [ 852.933066][T23731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.968317][T23731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.994659][T23731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.014882][T23731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.029480][T23731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.044122][T23731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.057208][T23731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.070879][T23731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.108439][T23731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.128256][T23731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.137694][T23731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.148639][T23731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.277007][T24048] netlink: 'syz.0.4850': attribute type 2 has an invalid length. [ 853.442276][T24046] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.4850'. [ 853.585977][T12540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.630235][T12540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.745659][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.753939][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.989171][T24059] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4780'. [ 854.680003][T24072] netlink: 'syz.3.4857': attribute type 21 has an invalid length. [ 854.709955][T24075] netlink: 'syz.1.4858': attribute type 29 has an invalid length. [ 854.741579][T24075] netlink: 'syz.1.4858': attribute type 29 has an invalid length. [ 854.811306][T24078] netlink: 'syz.4.4859': attribute type 15 has an invalid length. [ 854.869967][T24078] netlink: 'syz.4.4859': attribute type 16 has an invalid length. [ 854.945406][T24078] netlink: 'syz.4.4859': attribute type 20 has an invalid length. [ 854.953315][T24078] netlink: 'syz.4.4859': attribute type 21 has an invalid length. [ 855.031728][T24078] netlink: 'syz.4.4859': attribute type 23 has an invalid length. [ 855.735851][T24082] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4860'. [ 856.830629][T24101] syzkaller0: entered promiscuous mode [ 856.836512][T24102] netlink: 192188 bytes leftover after parsing attributes in process `syz.4.4867'. [ 856.844553][T24101] syzkaller0: entered allmulticast mode [ 856.875887][T24102] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 856.983727][T24107] validate_nla: 5 callbacks suppressed [ 856.983742][T24107] netlink: 'syz.1.4869': attribute type 12 has an invalid length. [ 857.024428][T24107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4869'. [ 858.064890][T24138] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4877'. [ 858.116433][T24131] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4876'. [ 858.136705][T24138] ksmbd: Unknown IPC event: 0, ignore. [ 859.192940][T24164] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4886'. [ 859.294736][T24168] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4886'. [ 859.350834][T24164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4886'. [ 859.394311][T24170] netlink: 'syz.1.4889': attribute type 10 has an invalid length. [ 859.408901][T24170] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4889'. [ 859.618965][T24164] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.4886'. [ 860.222073][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 860.233958][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 860.242793][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 860.251033][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 860.260871][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 860.270831][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 860.406065][ T3480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.445352][T24193] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4895'. [ 860.532094][ T3480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.692287][ T3480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.730627][T24189] chnl_net:caif_netlink_parms(): no params data found [ 860.800719][ T3480] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 860.811549][ T3480] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.006679][T24189] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.014530][T24189] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.021902][T24189] bridge_slave_0: entered allmulticast mode [ 861.030198][T24189] bridge_slave_0: entered promiscuous mode [ 861.046348][T24189] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.052620][T24217] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4900'. [ 861.056848][T24189] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.088667][T24189] bridge_slave_1: entered allmulticast mode [ 861.102040][T24189] bridge_slave_1: entered promiscuous mode [ 861.114779][T24212] netlink: 'syz.1.4899': attribute type 10 has an invalid length. [ 861.215957][T24212] team0: Device hsr_slave_0 failed to register rx_handler [ 861.395364][T24189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.406060][T24222] netlink: 'syz.4.4901': attribute type 13 has an invalid length. [ 861.416921][T24222] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.4901'. [ 861.459502][T24189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.549505][T24189] team0: Port device team_slave_0 added [ 861.590068][T24189] team0: Port device team_slave_1 added [ 861.614286][ T3480] tipc: Left network mode [ 861.666720][T24189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.683076][T24189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.753951][T24189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.324854][ T5776] Bluetooth: hci3: command tx timeout [ 862.545231][T24189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.562818][T24189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.608871][T24189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.891938][T24255] IPv6: Can't replace route, no match found [ 863.130098][T24189] hsr_slave_0: entered promiscuous mode [ 863.147176][T24189] hsr_slave_1: entered promiscuous mode [ 863.182320][T24189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.198554][T24189] Cannot create hsr debugfs directory [ 863.878944][T24279] __nla_validate_parse: 2 callbacks suppressed [ 863.878962][T24279] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.4914'. [ 863.939608][T24279] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.4914'. [ 864.405611][ T5776] Bluetooth: hci3: command tx timeout [ 865.549254][T24300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4918'. [ 865.558866][T24317] netlink: 'syz.4.4921': attribute type 1 has an invalid length. [ 865.573960][T24317] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4921'. [ 865.591091][T24317] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4921'. [ 865.741977][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4921'. [ 866.242188][ T5776] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 866.279868][T24334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4925'. [ 866.301244][T24334] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4925'. [ 866.331316][T24189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 866.483749][ T5776] Bluetooth: hci3: command tx timeout [ 866.501514][T24189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 866.607131][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.622999][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.643942][ T3480] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 866.652528][ T3480] batman_adv: batadv0: Removing interface: virt_wifi0 [ 866.673064][ T3480] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 866.683920][ T3480] batman_adv: batadv0: Removing interface: veth0_vlan [ 866.743505][ T3480] veth1_macvtap: left allmulticast mode [ 866.753222][ T3480] veth1_macvtap: left promiscuous mode [ 866.763280][ T3480] veth0_macvtap: left promiscuous mode [ 866.778400][ T3480] veth1_vlan: left promiscuous mode [ 866.794893][ T3480] veth0_vlan: left promiscuous mode [ 867.776405][ T3480] hsr_slave_0 (unregistering): left promiscuous mode [ 867.783437][ T3480] hsr_slave_0 (unregistering): left allmulticast mode [ 867.793306][ T3480] team0 (unregistering): Port device hsr_slave_0 removed [ 867.927632][ T3480] team_slave_1 (unregistering): left promiscuous mode [ 867.935540][ T3480] team_slave_1 (unregistering): left allmulticast mode [ 867.944118][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 867.988927][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.357457][ T3480] bond0 (unregistering): Released all slaves [ 868.403941][T24353] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4927'. [ 868.414397][T24189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 868.518682][T24189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 868.540903][T24394] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4934'. [ 868.563418][ T5776] Bluetooth: hci3: command tx timeout [ 868.683123][T24189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.736181][T24189] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.765793][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.772975][ T8978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.820395][T17436] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.827587][T17436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.267423][ T5776] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 869.267458][ T5776] Bluetooth: unknown link type 101 [ 869.281153][ T5776] Bluetooth: hci1: connection err: -111 [ 869.513168][T24189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.616157][T24189] veth0_vlan: entered promiscuous mode [ 869.651555][T24189] veth1_vlan: entered promiscuous mode [ 869.804776][T24189] veth0_macvtap: entered promiscuous mode [ 869.827041][T24189] veth1_macvtap: entered promiscuous mode [ 869.869482][T24189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.904424][T24189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.923828][T24189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.943115][T24189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.979297][T24189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.016608][T24189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.044389][T24189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.062193][T24189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.084541][T24189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.103876][T24189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.147126][T24189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.175572][T24189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.196561][T24189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.223574][T24189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.321033][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.328770][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.385496][T24463] syzkaller0: entered promiscuous mode [ 870.391772][T24463] syzkaller0: entered allmulticast mode [ 873.055467][T16421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.063321][T16421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.174921][ T8978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.187192][ T8978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.231539][T24497] netlink: 'syz.1.4955': attribute type 41 has an invalid length. [ 873.342356][T24501] netlink: 'syz.0.4888': attribute type 10 has an invalid length. [ 873.352915][T24501] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4888'. [ 873.583806][T24512] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4958'. [ 873.948198][T24527] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 873.974433][T24525] netlink: 'syz.1.4969': attribute type 29 has an invalid length. [ 873.979260][T24527] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4958'. [ 874.008692][T24527] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 874.034011][T24525] netlink: 'syz.1.4969': attribute type 29 has an invalid length. [ 874.070322][T24525] netlink: 539 bytes leftover after parsing attributes in process `syz.1.4969'. [ 874.130219][T24532] netlink: 'syz.3.4963': attribute type 10 has an invalid length. [ 874.192965][T24532] team0: Device wg1 is of different type [ 875.643048][T24556] syzkaller0: entered promiscuous mode [ 875.652161][T24556] syzkaller0: entered allmulticast mode [ 876.594317][T24570] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4972'. [ 876.618512][T24570] C: left promiscuous mode [ 876.623287][T24570] C: left allmulticast mode [ 876.669980][T24570] team0: Port device C removed [ 876.692301][T24570] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 880.380042][T24592] netlink: 'syz.1.4976': attribute type 6 has an invalid length. [ 880.388024][T24592] netlink: 'syz.1.4976': attribute type 1 has an invalid length. [ 880.397458][T24592] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.4976'. [ 884.541644][T24619] netlink: 'syz.1.4985': attribute type 21 has an invalid length. [ 884.558461][T24619] netlink: 'syz.1.4985': attribute type 1 has an invalid length. [ 884.566833][T24619] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4985'. [ 884.577244][T24622] netlink: 'syz.0.4987': attribute type 10 has an invalid length. [ 884.588989][T24622] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 884.598762][T24623] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4986'. [ 884.644435][T24622] Dead loop on virtual device ip6_vti0, fix it urgently! [ 884.683869][T24617] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.4984'. [ 885.011910][T24637] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4990'. [ 885.028198][T24631] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4988'. [ 885.070556][T24637] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 885.700213][T24655] netlink: 'syz.1.4995': attribute type 153 has an invalid length. [ 885.721879][T24655] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4995'. [ 885.910075][T24662] netlink: 'syz.1.4997': attribute type 8 has an invalid length. [ 885.944926][T24662] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.4997'. [ 886.224487][T24672] netlink: 'syz.3.5000': attribute type 29 has an invalid length. [ 886.328465][T24672] netlink: 'syz.3.5000': attribute type 29 has an invalid length. [ 886.381652][T24673] netlink: 'syz.3.5000': attribute type 29 has an invalid length. [ 886.429322][T24676] netlink: 'syz.3.5000': attribute type 29 has an invalid length. [ 886.519443][T24672] netlink: 'syz.3.5000': attribute type 29 has an invalid length. [ 887.015384][T24679] netlink: 'syz.3.5001': attribute type 2 has an invalid length. [ 887.068417][T24679] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5001'. [ 887.390474][T24694] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5006'. [ 887.429345][T24694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.651111][T24704] netlink: 'syz.4.5017': attribute type 3 has an invalid length. [ 887.663467][T24704] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5017'. [ 887.689064][T24704] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5017'. [ 887.878159][T24707] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5009'. [ 888.551564][T24715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.561857][T24706] bridge0: port 2(batadv0) entered blocking state [ 890.569287][T24706] bridge0: port 2(batadv0) entered disabled state [ 890.577590][T24706] batadv0: entered allmulticast mode [ 890.584636][T24706] batadv0: entered promiscuous mode [ 890.591879][T24706] bridge0: port 2(batadv0) entered blocking state [ 890.598482][T24706] bridge0: port 2(batadv0) entered forwarding state [ 890.618505][T24719] netlink: 'syz.1.5014': attribute type 10 has an invalid length. [ 890.633216][T24719] team0: Device nlmon0 is of different type [ 890.662975][T24721] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5015'. [ 890.700490][T24721] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5015'. [ 890.777485][T24730] veth0_vlan: entered allmulticast mode [ 890.889354][T11490] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 890.899330][T11490] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 890.909940][T24729] bridge0: port 2(batadv0) entered disabled state [ 890.916646][T24729] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.392315][T24751] netlink: 123072 bytes leftover after parsing attributes in process `syz.3.5026'. [ 891.415336][T24751] validate_nla: 2 callbacks suppressed [ 891.415350][T24751] netlink: 'syz.3.5026': attribute type 4 has an invalid length. [ 891.432067][T24751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5026'. [ 891.462829][T24751] .`: renamed from bond0 [ 891.729031][T24763] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5028'. [ 891.756181][T24768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5027'. [ 891.913012][T24780] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5032'. [ 892.133865][T24787] netlink: 'syz.4.5033': attribute type 2 has an invalid length. [ 892.146003][T24787] netlink: 'syz.4.5033': attribute type 8 has an invalid length. [ 892.166397][T24787] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5033'. [ 892.207542][T24786] netlink: 'syz.4.5033': attribute type 2 has an invalid length. [ 892.226065][T24786] netlink: 'syz.4.5033': attribute type 8 has an invalid length. [ 892.251978][T24786] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5033'. [ 892.856187][T24810] netlink: 'syz.4.5039': attribute type 8 has an invalid length. [ 892.864727][T24810] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5039'. [ 892.902874][T24814] netlink: 668 bytes leftover after parsing attributes in process `syz.3.5040'. [ 892.919083][T24815] netlink: 668 bytes leftover after parsing attributes in process `syz.3.5040'. [ 892.929005][T24814] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 892.939095][T24815] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 892.953496][T24814] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 892.965357][T24815] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 893.388427][T24834] netlink: 'syz.1.5042': attribute type 10 has an invalid length. [ 893.414443][T24834] hsr0: entered promiscuous mode [ 893.420037][T24834] bridge0: port 3(hsr0) entered blocking state [ 893.435107][T24834] bridge0: port 3(hsr0) entered disabled state [ 893.444093][T24834] hsr0: entered allmulticast mode [ 893.451615][T24834] hsr_slave_0: entered allmulticast mode [ 893.457650][T24834] hsr_slave_1: entered allmulticast mode [ 893.466715][T24834] bridge0: port 3(hsr0) entered blocking state [ 893.473125][T24834] bridge0: port 3(hsr0) entered forwarding state [ 893.849132][T24848] netlink: 'syz.3.5047': attribute type 2 has an invalid length. [ 893.924333][T24842] netlink: 'syz.1.5046': attribute type 9 has an invalid length. [ 896.129214][T24895] netlink: 'syz.1.5061': attribute type 30 has an invalid length. [ 896.480152][T24895] __nla_validate_parse: 4 callbacks suppressed [ 896.480172][T24895] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5061'. [ 896.526535][T24891] nlmon0: entered promiscuous mode [ 896.533068][T24891] nlmon0: entered allmulticast mode [ 896.550103][T24891] team0: Device nlmon0 is of different type [ 897.602941][T24905] validate_nla: 1 callbacks suppressed [ 897.602960][T24905] netlink: 'syz.1.5064': attribute type 27 has an invalid length. [ 898.023049][T24916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.036365][T24916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.047535][T24916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.068331][T24916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.089213][T24916] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.109951][T24916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.145098][T24916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 898.174670][T24917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5067'. [ 899.583830][T24945] netlink: 'syz.3.5074': attribute type 10 has an invalid length. [ 899.777947][T24960] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5075'. [ 900.335887][T24977] syzkaller0: entered promiscuous mode [ 900.341518][T24977] syzkaller0: entered allmulticast mode [ 907.367199][T25079] netlink: 'syz.1.5110': attribute type 153 has an invalid length. [ 907.395214][T25079] netlink: 'syz.1.5110': attribute type 1 has an invalid length. [ 907.404318][T25079] __nla_validate_parse: 4 callbacks suppressed [ 907.404334][T25079] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.5110'. [ 907.553023][T25086] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5113'. [ 907.586157][T25086] netdevsim netdevsim4 ÿÿÿÿÿÿ: entered allmulticast mode [ 907.623731][T25088] pim6reg1: entered promiscuous mode [ 907.644608][T25088] pim6reg1: entered allmulticast mode [ 908.121261][T25102] netlink: 'syz.4.5117': attribute type 1 has an invalid length. [ 908.143783][T25102] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5117'. [ 908.273170][T25108] netlink: 'syz.1.5119': attribute type 30 has an invalid length. [ 908.304797][T25109] netlink: 'syz.1.5119': attribute type 30 has an invalid length. [ 908.807584][T25137] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5127'. [ 909.985973][T25150] netlink: 'syz.1.5132': attribute type 3 has an invalid length. [ 909.994032][T25150] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5132'. [ 910.262439][T25154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.687481][T25162] syzkaller0: entered promiscuous mode [ 910.693067][T25162] syzkaller0: entered allmulticast mode [ 910.766110][T25162] netlink: 'syz.4.5136': attribute type 9 has an invalid length. [ 910.796945][T25162] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5136'. [ 911.107314][ T5776] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 913.452942][T25178] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.5140'. [ 913.464709][T25183] netlink: 'syz.3.5142': attribute type 19 has an invalid length. [ 913.945549][T25213] ªªªªªª: renamed from vlan0 (while UP) [ 914.043671][T25218] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5150'. [ 914.054418][T25218] netlink: get zone limit has 4 unknown bytes [ 914.275343][T25226] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5153'. [ 914.504528][T25237] netlink: 'syz.4.5155': attribute type 9 has an invalid length. [ 914.538685][T25237] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.5155'. [ 915.196057][T25260] ±ÿ: renamed from lo (while UP) [ 915.220660][T25260] netlink: 209032 bytes leftover after parsing attributes in process `syz.4.5161'. [ 915.234080][T25260] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5161'. [ 915.282829][T25262] netlink: 'syz.1.5164': attribute type 29 has an invalid length. [ 915.302718][T25262] netlink: 'syz.1.5164': attribute type 29 has an invalid length. [ 915.415559][T25267] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5166'. [ 915.612201][T25265] netlink: 'syz.4.5165': attribute type 1 has an invalid length. [ 915.622271][T25265] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.5165'. [ 915.721692][T25278] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5169'. [ 915.802097][T25281] sit0: entered allmulticast mode [ 916.013890][T25283] sit0: entered promiscuous mode [ 918.228213][T25310] netlink: 'syz.1.5178': attribute type 9 has an invalid length. [ 918.557335][T25318] netlink: 'syz.1.5183': attribute type 2 has an invalid length. [ 919.320677][T25344] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5189'. [ 919.815683][T25353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5193'. [ 920.358823][T25364] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 920.821938][T25381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.831291][T25381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.843791][T25381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.864604][T25381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.070986][T25391] batadv0: left allmulticast mode [ 921.083432][T25391] batadv0: left promiscuous mode [ 921.097796][T25391] bridge0: port 2(batadv0) entered disabled state [ 921.148554][T25391] bridge_slave_0: left allmulticast mode [ 921.158724][T25391] bridge_slave_0: left promiscuous mode [ 921.168965][T25391] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.873680][T25399] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.5208'. [ 921.924923][T25399] netlink: 'syz.4.5208': attribute type 1 has an invalid length. [ 922.039095][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5206'. [ 922.054607][T25394] netlink: 'syz.1.5207': attribute type 21 has an invalid length. [ 922.062883][T25394] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5207'. [ 922.598456][T25427] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5216'. [ 922.660039][T25433] C: renamed from team_slave_0 (while UP) [ 922.670442][T25433] netlink: 'syz.3.5219': attribute type 1 has an invalid length. [ 922.690923][T25433] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5219'. [ 923.123451][T25444] netlink: 'syz.3.5222': attribute type 9 has an invalid length. [ 923.170819][T25444] netlink: 175856 bytes leftover after parsing attributes in process `syz.3.5222'. [ 924.773340][T25486] netlink: 'syz.3.5234': attribute type 10 has an invalid length. [ 924.784332][T25486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5234'. [ 924.795077][T25486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.207810][T25508] team0: Port device team_slave_0 removed [ 925.257492][T25508] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5240'. [ 925.420805][T25515] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5242'. [ 925.629737][T25528] netlink: 'syz.0.5246': attribute type 21 has an invalid length. [ 925.654804][T25528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5246'. [ 925.697317][T25528] netlink: 'syz.0.5246': attribute type 3 has an invalid length. [ 925.718174][T25528] netlink: 'syz.0.5246': attribute type 1 has an invalid length. [ 925.726858][T25528] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.5246'. [ 926.146026][T25535] delete_channel: no stack [ 926.257809][T25550] netlink: 'syz.4.5252': attribute type 1 has an invalid length. [ 926.306673][T25550] netlink: 'syz.4.5252': attribute type 2 has an invalid length. [ 926.334399][T25550] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5252'. [ 926.344227][T25550] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 926.623078][T25563] netlink: 'syz.4.5255': attribute type 10 has an invalid length. [ 926.633407][T25563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5255'. [ 926.790177][T25567] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 926.937054][T25577] netlink: 'syz.4.5258': attribute type 2 has an invalid length. [ 926.953219][T25577] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5258'. [ 926.982692][T25577] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5258'. [ 927.345540][T25597] sctp: [Deprecated]: syz.3.5265 (pid 25597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 927.345540][T25597] Use struct sctp_sack_info instead [ 927.418533][T25599] netlink: 199516 bytes leftover after parsing attributes in process `syz.4.5264'. [ 927.861814][T25618] tap0: tun_chr_ioctl cmd 1074025677 [ 927.892706][T25618] tap0: linktype set to 825 [ 927.904728][T25621] netlink: 'syz.4.5272': attribute type 3 has an invalid length. [ 928.497633][T25641] netlink: 'syz.4.5278': attribute type 33 has an invalid length. [ 929.281184][T25664] netpci0: tun_chr_ioctl cmd 2147767519 [ 929.290257][T25665] netpci0: tun_chr_ioctl cmd 2147767519 [ 929.870509][T25684] __nla_validate_parse: 11 callbacks suppressed [ 929.870526][T25684] netlink: 64795 bytes leftover after parsing attributes in process `syz.3.5292'. [ 930.509833][T25702] validate_nla: 2 callbacks suppressed [ 930.509853][T25702] netlink: 'syz.0.5298': attribute type 19 has an invalid length. [ 930.757881][T25702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5298'. [ 935.438534][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 936.834090][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.840888][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.430609][T25723] netlink: 'syz.0.5303': attribute type 10 has an invalid length. [ 940.682701][T25724] syzkaller0: entered promiscuous mode [ 940.714498][T25724] syzkaller0: entered allmulticast mode [ 940.754498][T25723] netlink: 'syz.0.5303': attribute type 39 has an invalid length. [ 940.762826][T25731] netlink: 'syz.3.5304': attribute type 27 has an invalid length. [ 946.740240][T25743] netlink: 'syz.0.5307': attribute type 5 has an invalid length. [ 946.748188][T25742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5308'. [ 946.769628][T25742] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5308'. [ 946.797460][T25745] netlink: 'syz.3.5308': attribute type 39 has an invalid length. [ 947.197097][T25784] netlink: 'syz.4.5319': attribute type 3 has an invalid length. [ 947.201228][T25782] netlink: 'syz.0.5318': attribute type 17 has an invalid length. [ 947.214067][T25784] netlink: 'syz.4.5319': attribute type 1 has an invalid length. [ 947.224561][T25782] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5318'. [ 947.383520][T25790] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5320'. [ 947.439369][T25790] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 947.687708][T25800] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5322'. [ 947.764377][T25800] openvswitch: netlink: Flow actions attr not present in new flow. [ 947.838056][T25803] netlink: 'syz.4.5323': attribute type 22 has an invalid length. [ 947.847627][T25803] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.5323'. [ 948.172716][T25812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5326'. [ 948.231602][T25812] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5326'. [ 948.321774][T25814] netlink: 'syz.0.5326': attribute type 39 has an invalid length. [ 948.393529][T25818] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5327'. [ 948.406146][T25820] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.5328'. [ 948.870413][T25842] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 948.967841][T25852] netlink: 'syz.1.5335': attribute type 39 has an invalid length. [ 949.278762][T25864] netlink: 'syz.0.5339': attribute type 2 has an invalid length. [ 949.328334][T25866] netlink: 'syz.1.5340': attribute type 39 has an invalid length. [ 949.459911][T25869] team0: Device vxcan1 is of different type [ 953.976092][T25888] delete_channel: no stack [ 954.109726][T25928] validate_nla: 3 callbacks suppressed [ 954.109744][T25928] netlink: 'syz.4.5357': attribute type 17 has an invalid length. [ 954.165331][T25928] __nla_validate_parse: 9 callbacks suppressed [ 954.165346][T25928] netlink: 160 bytes leftover after parsing attributes in process `syz.4.5357'. [ 954.870436][T25957] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5361'. [ 955.200603][T25968] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5368'. [ 955.658723][T25979] netlink: 'syz.3.5372': attribute type 6 has an invalid length. [ 955.842350][T25981] team0: Port device team_slave_0 removed [ 956.015299][T25991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5376'. [ 956.081059][T25991] hsr_slave_0: left promiscuous mode [ 956.231447][T25991] hsr_slave_1: left promiscuous mode [ 956.951280][T26010] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.5381'. [ 959.227346][T26054] netlink: 'syz.4.5393': attribute type 40 has an invalid length. [ 959.611068][T26054] netlink: 'syz.4.5393': attribute type 40 has an invalid length. [ 959.663363][T26071] netlink: 'syz.1.5398': attribute type 6 has an invalid length. [ 959.702331][T26071] netlink: 'syz.1.5398': attribute type 3 has an invalid length. [ 959.744223][T26071] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.5398'. [ 960.183475][T26080] netlink: 'syz.1.5399': attribute type 21 has an invalid length. [ 960.194307][T26080] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5399'. [ 960.433715][T26085] netlink: 'syz.0.5400': attribute type 21 has an invalid length. [ 960.443561][T26085] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5400'. [ 960.489619][T26083] netlink: 'syz.0.5400': attribute type 1 has an invalid length. [ 960.499552][T26083] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5400'. [ 960.540535][T26083] netlink: 'syz.0.5400': attribute type 1 has an invalid length. [ 960.566398][T26083] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5400'. [ 961.116876][T26105] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5406'. [ 961.133794][T26106] netlink: 'syz.1.5406': attribute type 28 has an invalid length. [ 961.143561][T26106] netlink: 'syz.1.5406': attribute type 29 has an invalid length. [ 961.153729][T26106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5406'. [ 961.862164][T26145] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.5417'. [ 962.029080][T26128] team0: Port device wlan1 added [ 962.131363][T26139] delete_channel: no stack [ 963.816695][T26205] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5438'. [ 963.913438][T26209] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.5441'. [ 964.557205][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 964.811746][T26244] __nla_validate_parse: 1 callbacks suppressed [ 964.811765][T26244] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5448'. [ 964.852524][T26244] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 965.117414][T26252] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5451'. [ 965.117668][T26251] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5451'. [ 965.247513][T26252] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5451'. [ 965.502159][T26262] validate_nla: 6 callbacks suppressed [ 965.502180][T26262] netlink: 'syz.3.5454': attribute type 10 has an invalid length. [ 965.678174][T26267] netlink: 'syz.4.5456': attribute type 29 has an invalid length. [ 965.723514][T26267] netlink: 'syz.4.5456': attribute type 29 has an invalid length. [ 965.817395][T26268] netlink: 'syz.4.5456': attribute type 29 has an invalid length. [ 965.858212][T26267] netlink: 'syz.4.5456': attribute type 8 has an invalid length. [ 965.884301][T26267] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5456'. [ 965.920054][T26268] netlink: 'syz.4.5456': attribute type 29 has an invalid length. [ 965.941036][T26267] netlink: 'syz.4.5456': attribute type 29 has an invalid length. [ 966.176675][T26288] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5459'. [ 966.961900][T26318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5469'. [ 967.005327][T26318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5469'. [ 967.282629][T26334] netlink: 53875 bytes leftover after parsing attributes in process `syz.4.5472'. [ 967.318440][T26317] delete_channel: no stack [ 967.990708][T26352] netlink: 'syz.1.5480': attribute type 10 has an invalid length. [ 968.532871][T26369] netlink: 'syz.0.5486': attribute type 1 has an invalid length. [ 968.552569][ T5776] Bluetooth: hci0: ISO packet for unknown connection handle 3847 [ 969.484435][T26396] can: request_module (can-proto-0) failed. [ 969.553968][T26401] netlink: 'syz.1.5495': attribute type 21 has an invalid length. [ 969.564203][T26401] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5495'. [ 970.626854][T26419] __nla_validate_parse: 1 callbacks suppressed [ 970.627155][T26419] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.5502'. [ 970.695492][T26421] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5503'. [ 970.705970][T26421] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 971.119241][T26428] IPv6: NLM_F_CREATE should be specified when creating new route [ 972.503330][T26469] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5518'. [ 972.537220][T26469] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 972.575273][T26469] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 972.657497][T26469] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5518'. [ 973.332715][T26482] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5521'. [ 973.374202][T26483] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5521'. [ 973.669887][T26498] validate_nla: 2 callbacks suppressed [ 973.669906][T26498] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 973.710821][T26498] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 973.726451][T26501] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 973.795959][T26498] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 976.951942][T26510] netlink: 'syz.1.5529': attribute type 39 has an invalid length. [ 977.028374][T26508] delete_channel: no stack [ 977.267760][T26526] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.5533'. [ 977.299358][T26524] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5532'. [ 977.367252][T26524] hsr_slave_0: left promiscuous mode [ 977.422132][T26524] hsr_slave_1: left promiscuous mode [ 977.742908][T26538] delete_channel: no stack [ 978.077886][T26526] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.5533'. [ 978.088122][T26534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 978.095440][T26534] IPv6: NLM_F_CREATE should be set when creating new route [ 978.102787][T26534] IPv6: NLM_F_CREATE should be set when creating new route [ 978.110099][T26534] IPv6: NLM_F_CREATE should be set when creating new route [ 980.450217][T26593] netlink: 'syz.1.5551': attribute type 3 has an invalid length. [ 980.494982][T26593] netlink: 'syz.1.5551': attribute type 7 has an invalid length. [ 980.549523][T26593] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.5551'. [ 980.826200][T26598] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.5552'. [ 980.998199][T26601] netlink: 'syz.1.5553': attribute type 3 has an invalid length. [ 981.113748][T26601] syz.1.5553: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 981.187126][T26601] CPU: 0 PID: 26601 Comm: syz.1.5553 Not tainted syzkaller #0 [ 981.194667][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.204759][T26601] Call Trace: [ 981.208061][T26601] [ 981.211016][T26601] dump_stack_lvl+0x18c/0x250 [ 981.215739][T26601] ? show_regs_print_info+0x20/0x20 [ 981.220976][T26601] ? load_image+0x420/0x420 [ 981.225519][T26601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 981.231976][T26601] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 981.238522][T26601] warn_alloc+0x246/0x340 [ 981.242898][T26601] ? stack_trace_save+0xaa/0x100 [ 981.247865][T26601] ? zone_watermark_ok_safe+0x230/0x230 [ 981.253432][T26601] ? kasan_set_track+0x5f/0x70 [ 981.258200][T26601] ? kasan_set_track+0x4e/0x70 [ 981.262964][T26601] ? __kasan_kmalloc+0x8f/0xa0 [ 981.267727][T26601] ? xsk_init_queue+0xad/0x100 [ 981.272489][T26601] ? xsk_setsockopt+0x4c9/0x750 [ 981.277335][T26601] ? do_sock_setsockopt+0x175/0x1a0 [ 981.282537][T26601] ? __x64_sys_setsockopt+0x182/0x200 [ 981.287912][T26601] __vmalloc_node_range+0x129/0x1320 [ 981.293227][T26601] ? free_vm_area+0x50/0x50 [ 981.297742][T26601] vmalloc_user+0x74/0x80 [ 981.302076][T26601] ? xskq_create+0xbf/0x170 [ 981.306579][T26601] xskq_create+0xbf/0x170 [ 981.310918][T26601] xsk_init_queue+0xad/0x100 [ 981.315512][T26601] xsk_setsockopt+0x4c9/0x750 [ 981.320196][T26601] ? xsk_poll+0x670/0x670 [ 981.324527][T26601] ? __fget_files+0x28/0x460 [ 981.329119][T26601] ? aa_sock_opt_perm+0x74/0x100 [ 981.334068][T26601] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 981.339624][T26601] ? security_socket_setsockopt+0x7e/0xa0 [ 981.345348][T26601] ? xsk_poll+0x670/0x670 [ 981.349679][T26601] do_sock_setsockopt+0x175/0x1a0 [ 981.354710][T26601] ? __fdget+0x180/0x210 [ 981.358966][T26601] __x64_sys_setsockopt+0x182/0x200 [ 981.364180][T26601] do_syscall_64+0x55/0xb0 [ 981.368606][T26601] ? clear_bhb_loop+0x40/0x90 [ 981.373287][T26601] ? clear_bhb_loop+0x40/0x90 [ 981.378053][T26601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.383958][T26601] RIP: 0033:0x7f3f5359ce59 [ 981.388379][T26601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.407992][T26601] RSP: 002b:00007f3f544af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 981.416433][T26601] RAX: ffffffffffffffda RBX: 00007f3f53815fa0 RCX: 00007f3f5359ce59 [ 981.424447][T26601] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 981.432457][T26601] RBP: 00007f3f53632e6f R08: 0000000000000004 R09: 0000000000000000 [ 981.440464][T26601] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 981.448472][T26601] R13: 00007f3f53816038 R14: 00007f3f53815fa0 R15: 00007ffdcd36fbe8 [ 981.456475][T26601] [ 981.488023][T26601] Mem-Info: [ 981.514331][T26601] active_anon:51766 inactive_anon:0 isolated_anon:0 [ 981.514331][T26601] active_file:18218 inactive_file:40309 isolated_file:0 [ 981.514331][T26601] unevictable:768 dirty:147 writeback:0 [ 981.514331][T26601] slab_reclaimable:11095 slab_unreclaimable:99037 [ 981.514331][T26601] mapped:35944 shmem:31651 pagetables:813 [ 981.514331][T26601] sec_pagetables:0 bounce:0 [ 981.514331][T26601] kernel_misc_reclaimable:0 [ 981.514331][T26601] free:1291288 free_pcp:8667 free_cma:0 [ 981.574033][T26601] Node 0 active_anon:210364kB inactive_anon:0kB active_file:72872kB inactive_file:161040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143776kB dirty:588kB writeback:0kB shmem:128268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11656kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no [ 981.694357][T26601] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 981.751037][T26601] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.795877][T26613] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5556'. [ 981.814293][T26613] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 981.884265][T26601] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 981.890490][T26601] Node 0 DMA32 free:1230716kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:227724kB inactive_anon:0kB active_file:72872kB inactive_file:160212kB unevictable:1536kB writepending:588kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:21392kB local_pcp:3332kB free_cma:0kB [ 981.963591][T26601] lowmem_reserve[]: 0 0 0 0 0 [ 981.977368][T26601] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 982.040751][T26601] lowmem_reserve[]: 0 0 0 0 0 [ 982.050730][T26618] netlink: 'syz.0.5558': attribute type 1 has an invalid length. [ 982.084538][T26618] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.5558'. [ 982.096914][T26601] Node 1 Normal free:3897904kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13896kB local_pcp:10184kB free_cma:0kB [ 982.164455][T26601] lowmem_reserve[]: 0 0 0 0 0 [ 982.223997][T26601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 982.294373][T26601] Node 0 DMA32: 1082*4kB (UE) 418*8kB (UE) 447*16kB (UME) 1015*32kB (UME) 772*64kB (UME) 450*128kB (UME) 81*256kB (UM) 69*512kB (UM) 54*1024kB (UME) 31*2048kB (U) 215*4096kB (UM) = 1209800kB [ 982.313457][T26601] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 982.325757][T26601] Node 1 Normal: 274*4kB (UME) 59*8kB (UME) 51*16kB (UME) 217*32kB (UME) 55*64kB (UME) 8*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3897904kB [ 982.446319][T26601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 982.490977][T26601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 982.526657][T26601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 982.592037][T26601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 982.644197][T26601] 101548 total pagecache pages [ 982.649024][T26601] 0 pages in swap cache [ 982.653197][T26601] Free swap = 124996kB [ 982.722111][T26601] Total swap = 124996kB [ 982.736762][T26601] 2097051 pages RAM [ 982.750795][T26601] 0 pages HighMem/MovableOnly [ 982.779488][T26601] 416931 pages reserved [ 982.807300][T26601] 0 pages cma reserved [ 983.212542][T26635] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5562'. [ 983.264406][T26635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 983.659839][T26642] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5563'. [ 983.780625][T26645] netlink: 'syz.3.5563': attribute type 10 has an invalid length. [ 983.821142][T26645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5563'. [ 983.927456][T26645] caif0: entered promiscuous mode [ 983.932978][T26645] caif0: entered allmulticast mode [ 983.964253][T26645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.263599][T26655] netlink: 'syz.1.5566': attribute type 2 has an invalid length. [ 984.368263][T26655] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5566'. [ 984.818289][T26666] netlink: 'syz.3.5568': attribute type 3 has an invalid length. [ 984.837588][T26666] netlink: 'syz.3.5568': attribute type 6 has an invalid length. [ 984.870523][T26666] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.5568'. [ 985.047925][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 985.431471][T26673] netlink: 'syz.3.5570': attribute type 10 has an invalid length. [ 985.559576][T26673] team0: Device ipvlan1 failed to register rx_handler [ 985.908933][T26691] sit0: left promiscuous mode [ 986.069401][T26693] netlink: 'syz.3.5577': attribute type 29 has an invalid length. [ 986.161066][T26694] sit0: entered promiscuous mode [ 986.249825][T26693] netlink: 'syz.3.5577': attribute type 29 has an invalid length. [ 986.269359][T26695] netlink: 'syz.3.5577': attribute type 29 has an invalid length. [ 987.772441][T26735] netlink: 'syz.3.5590': attribute type 10 has an invalid length. [ 987.781852][T26735] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.5590'. [ 988.413020][T26753] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5596'. [ 989.517273][T26785] netlink: 'syz.3.5604': attribute type 8 has an invalid length. [ 989.525316][T26785] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.5604'. [ 989.803859][T26801] netlink: 'syz.0.5608': attribute type 2 has an invalid length. [ 989.835292][T26801] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5608'. [ 990.737382][T26844] netlink: 'syz.1.5618': attribute type 6 has an invalid length. [ 990.745780][T26844] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5618'. [ 991.071911][T26844] sctp: [Deprecated]: syz.1.5618 (pid 26844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 991.071911][T26844] Use struct sctp_sack_info instead [ 991.825574][T26877] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5624'. [ 992.890829][T26900] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5629'. [ 993.032263][T26896] netlink: 'syz.4.5628': attribute type 10 has an invalid length. [ 993.049075][T26896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5628'. [ 993.058773][T26896] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 993.165167][T26898] syzkaller0: entered promiscuous mode [ 993.173612][T26898] syzkaller0: entered allmulticast mode [ 993.199506][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.207471][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.025479][T26941] netlink: 'syz.4.5640': attribute type 10 has an invalid length. [ 996.034894][T26941] bridge0: port 4(team0) entered disabled state [ 996.041531][T26941] bridge0: port 3(syz_tun) entered disabled state [ 996.048380][T26941] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.055799][T26941] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.071338][T26943] mac80211_hwsim hwsim85 .3ãc¤±: renamed from wlan1 [ 996.147273][T26943] netlink: 'syz.0.5641': attribute type 3 has an invalid length. [ 996.159079][T26943] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5641'. [ 996.449683][T26951] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.5642'. [ 996.634903][T26956] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5645'. [ 996.657441][T26956] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5645'. [ 996.670550][T26956] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5645'. [ 996.688097][T26960] netlink: 'syz.3.5646': attribute type 4 has an invalid length. [ 996.696514][T26960] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5646'. [ 996.975052][T26973] netlink: 'syz.1.5648': attribute type 3 has an invalid length. [ 996.983275][T26973] netlink: 'syz.1.5648': attribute type 275 has an invalid length. [ 997.431287][T26986] netlink: 'syz.3.5653': attribute type 29 has an invalid length. [ 997.473559][T26986] netlink: 'syz.3.5653': attribute type 29 has an invalid length. [ 997.519082][T26986] netlink: 'syz.3.5653': attribute type 29 has an invalid length. [ 997.544648][T26981] netlink: 'syz.3.5653': attribute type 29 has an invalid length. [ 998.464528][T27005] validate_nla: 3 callbacks suppressed [ 998.464546][T27005] netlink: 'syz.3.5656': attribute type 2 has an invalid length. [ 998.857894][T27012] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5662'. [ 998.920587][T27012] netlink: 'syz.4.5662': attribute type 3 has an invalid length. [ 998.930005][T27012] netlink: 136692 bytes leftover after parsing attributes in process `syz.4.5662'. [ 999.090186][T27018] netlink: 'syz.1.5664': attribute type 10 has an invalid length. [ 999.099496][T27018] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5664'. [ 999.315452][T27025] netlink: set zone limit has 8 unknown bytes [ 999.507818][T27030] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5667'. [ 999.747696][T27033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1000.139491][T27039] bridge0: port 4(team0) entered blocking state [ 1000.146770][T27039] bridge0: port 4(team0) entered disabled state [ 1000.153232][T27039] team0: entered allmulticast mode [ 1000.158908][T27039] team_slave_1: entered allmulticast mode [ 1000.174981][T27039] team0: entered promiscuous mode [ 1000.180083][T27039] team_slave_1: entered promiscuous mode [ 1000.195873][T27039] bridge0: port 4(team0) entered blocking state [ 1000.202262][T27039] bridge0: port 4(team0) entered forwarding state [ 1000.385541][T27057] netlink: 'syz.3.5676': attribute type 5 has an invalid length. [ 1001.762102][T27080] __nla_validate_parse: 3 callbacks suppressed [ 1001.762164][T27080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1002.218642][T27095] netlink: 'syz.3.5685': attribute type 41 has an invalid length. [ 1002.429274][T27109] netlink: 'syz.4.5690': attribute type 21 has an invalid length. [ 1002.437761][T27109] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1002.448979][T27109] netlink: 'syz.4.5690': attribute type 4 has an invalid length. [ 1002.988891][T27133] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5698'. [ 1003.268229][T27137] netlink: 'syz.4.5699': attribute type 9 has an invalid length. [ 1003.277477][T27137] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1004.081237][T27165] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5706'. [ 1004.159139][T27168] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5706'. [ 1004.194877][T27165] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5706'. [ 1004.253948][T27172] netlink: 'syz.0.5709': attribute type 4 has an invalid length. [ 1004.262214][T27172] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1004.648413][T27181] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5712'. [ 1005.980442][T27227] netlink: 'syz.1.5722': attribute type 10 has an invalid length. [ 1006.072497][T27225] can: request_module (can-proto-0) failed. [ 1006.665755][T27250] netlink: 'syz.3.5731': attribute type 11 has an invalid length. [ 1006.673812][T27250] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5731'. [ 1006.918924][T27263] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.5734'. [ 1006.961821][T27263] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.5734'. [ 1007.129866][T27286] netlink: 'syz.4.5737': attribute type 11 has an invalid length. [ 1007.148189][T27286] netlink: 'syz.4.5737': attribute type 1 has an invalid length. [ 1007.164247][T27286] netlink: 'syz.4.5737': attribute type 1 has an invalid length. [ 1007.177573][T27286] netlink: 'syz.4.5737': attribute type 2 has an invalid length. [ 1007.209207][T27286] netlink: 198100 bytes leftover after parsing attributes in process `syz.4.5737'. [ 1007.422197][T27299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5743'. [ 1008.964876][T27345] netlink: 'syz.0.5756': attribute type 3 has an invalid length. [ 1008.974479][T27345] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5756'. [ 1009.614160][T27377] ªªªªªª: renamed from vlan0 (while UP) [ 1010.087886][T27392] netlink: 'syz.1.5767': attribute type 25 has an invalid length. [ 1010.106143][T27392] netlink: 'syz.1.5767': attribute type 28 has an invalid length. [ 1010.643698][T27403] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1010.665616][T27403] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1010.688044][T27403] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1011.106277][T27420] netlink: 'syz.3.5773': attribute type 2 has an invalid length. [ 1011.147625][T27420] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.5773'. [ 1011.233327][T27428] netlink: 'syz.1.5778': attribute type 19 has an invalid length. [ 1012.275558][T27456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1013.228809][T27479] €Â0: renamed from batadv_slave_1 (while UP) [ 1013.763592][T27487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5796'. [ 1014.322644][T27498] À: port 1(vlan0) entered blocking state [ 1014.342338][T27498] À: port 1(vlan0) entered disabled state [ 1014.375681][T27498] vlan0: entered allmulticast mode [ 1014.380874][T27498] veth0_vlan: entered allmulticast mode [ 1014.418794][T27498] vlan0: entered promiscuous mode [ 1015.489204][T27491] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5794'. [ 1015.540265][T27491] bridge_slave_1: default FDB implementation only supports local addresses [ 1015.600837][T27519] netlink: 'syz.4.5805': attribute type 3 has an invalid length. [ 1015.609122][T27519] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5805'. [ 1016.680525][T27556] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5814'. [ 1016.691752][T27556] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1017.382138][T27590] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5825'. [ 1018.159398][T27606] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 1018.204433][T27606] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 1018.232661][T27607] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 1018.276724][T27607] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 1018.916273][T27638] netlink: 'syz.0.5836': attribute type 1 has an invalid length. [ 1018.959071][T27638] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1019.004293][T27638] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1019.572224][T27657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1020.934361][T27669] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.5847'. [ 1021.235458][T27675] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1021.257574][T27675] pim6reg0: ignored: set checksum disabled [ 1022.339841][T27693] netlink: 'syz.4.5854': attribute type 21 has an invalid length. [ 1022.387330][T27696] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5854'. [ 1023.443147][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1023.464609][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1023.476547][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1023.487509][T18874] syz_tun (unregistering): left allmulticast mode [ 1023.495720][T18874] syz_tun (unregistering): left promiscuous mode [ 1023.502220][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1023.510722][T18874] bridge0: port 3(syz_tun) entered disabled state [ 1023.519223][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1023.526832][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1023.879815][T12532] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.068276][T12532] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.267672][T12532] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.575040][T12532] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.641128][T27711] chnl_net:caif_netlink_parms(): no params data found [ 1024.868118][T27711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.887218][T27711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.907416][T27711] bridge_slave_0: entered allmulticast mode [ 1024.915646][T27711] bridge_slave_0: entered promiscuous mode [ 1024.964135][T27711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.971636][T27711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.005225][T27711] bridge_slave_1: entered allmulticast mode [ 1025.012570][T27711] bridge_slave_1: entered promiscuous mode [ 1025.213228][T27711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.265028][T27711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.422239][T27711] team0: Port device team_slave_0 added [ 1025.463205][T27711] team0: Port device team_slave_1 added [ 1025.600531][ T5776] Bluetooth: hci0: command tx timeout [ 1025.803101][T27754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5870'. [ 1025.938143][T27757] netlink: 'syz.0.5871': attribute type 33 has an invalid length. [ 1025.957059][T27757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1026.093747][T27711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.111741][T27711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.174254][T27711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.196509][T27711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.203502][T27711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.304161][T27711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.372266][T27770] netlink: 'syz.0.5875': attribute type 1 has an invalid length. [ 1026.421068][T27770] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5875'. [ 1026.628965][T27772] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.644399][T27772] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5874'. [ 1027.179662][T27711] hsr_slave_0: entered promiscuous mode [ 1027.194720][T27711] hsr_slave_1: entered promiscuous mode [ 1027.209466][T27711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.217676][T27711] Cannot create hsr debugfs directory [ 1027.678885][ T5776] Bluetooth: hci0: command tx timeout [ 1029.760468][ T5776] Bluetooth: hci0: command tx timeout [ 1030.646255][T27817] netlink: 'syz.1.5885': attribute type 21 has an invalid length. [ 1030.654592][T27817] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1030.663778][T27817] netlink: 'syz.1.5885': attribute type 4 has an invalid length. [ 1030.672018][T27817] netlink: 'syz.1.5885': attribute type 5 has an invalid length. [ 1030.680365][T27817] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1030.911490][T27827] netlink: 'syz.1.5888': attribute type 10 has an invalid length. [ 1031.484815][T27860] netlink: 'syz.0.5894': attribute type 3 has an invalid length. [ 1031.507500][T27860] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1031.718017][T27860] netlink: 'syz.0.5894': attribute type 6 has an invalid length. [ 1031.739281][T27860] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1031.852988][ T5776] Bluetooth: hci0: command tx timeout [ 1032.188866][T12532] vlan0: left allmulticast mode [ 1032.193789][T12532] veth0_vlan: left allmulticast mode [ 1032.224306][T12532] vlan0: left promiscuous mode [ 1032.229471][T12532] À: port 1(vlan0) entered disabled state [ 1032.283246][T12532] hsr_slave_0: left promiscuous mode [ 1032.292558][T12532] bridge0: port 4(team0) entered disabled state [ 1032.317479][T12532] bridge_slave_1: left allmulticast mode [ 1032.344218][T12532] bridge_slave_1: left promiscuous mode [ 1032.388023][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.406861][T12532] bridge_slave_0: left allmulticast mode [ 1032.422757][T12532] bridge_slave_0: left promiscuous mode [ 1032.432969][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.550737][T12532] veth1_macvtap: left promiscuous mode [ 1032.565412][T12532] veth0_macvtap: left promiscuous mode [ 1032.583793][T12532] veth1_vlan: left promiscuous mode [ 1032.599424][T12532] veth0_vlan: left promiscuous mode [ 1034.189614][T12532] team_slave_1 (unregistering): left promiscuous mode [ 1034.199081][T12532] team_slave_1 (unregistering): left allmulticast mode [ 1034.209964][T12532] team0 (unregistering): Port device team_slave_1 removed [ 1034.294050][T12532] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.601097][T12532] .` (unregistering): (slave bridge0): Releasing backup interface [ 1034.609698][T12532] .` (unregistering): Released all slaves [ 1034.734801][T27906] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5902'. [ 1034.853624][T27711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1034.897226][T27711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1034.920742][T27711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1034.922473][T27918] netlink: 'syz.1.5904': attribute type 29 has an invalid length. [ 1034.962383][T27918] netlink: 'syz.1.5904': attribute type 29 has an invalid length. [ 1034.971714][T27918] netlink: 'syz.1.5904': attribute type 29 has an invalid length. [ 1034.993994][T27711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1035.035538][T27918] netlink: 'syz.1.5904': attribute type 29 has an invalid length. [ 1035.639285][T27711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.796871][T27711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.843632][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.850892][T16421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.886394][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.893595][T16421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.456822][T27711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.193963][T27711] veth0_vlan: entered promiscuous mode [ 1037.210613][T27998] netlink: 'syz.3.5918': attribute type 10 has an invalid length. [ 1037.225858][T27998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5918'. [ 1037.252736][T27998] batman_adv: batadv0: Adding interface: veth0_vlan [ 1037.267477][T27998] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.301351][T27998] batman_adv: batadv0: Interface activated: veth0_vlan [ 1037.334862][T28004] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 1037.351481][T27711] veth1_vlan: entered promiscuous mode [ 1037.492099][T28008] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1037.526751][T27711] veth0_macvtap: entered promiscuous mode [ 1037.563438][T28004] netlink: 'syz.1.5919': attribute type 3 has an invalid length. [ 1037.597669][T27711] veth1_macvtap: entered promiscuous mode [ 1037.624845][T28004] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5919'. [ 1037.702267][T27711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.721206][T27711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.731548][T27711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.745942][T27711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.760486][T27711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.768389][T28009] netlink: 'syz.3.5921': attribute type 10 has an invalid length. [ 1037.778527][T28009] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1037.790159][T28009] team0: entered promiscuous mode [ 1037.804258][T28009] C: entered promiscuous mode [ 1037.810470][T28009] team_slave_1: entered promiscuous mode [ 1037.829119][T28009] team0: entered allmulticast mode [ 1037.838163][T28009] C: entered allmulticast mode [ 1037.843453][T28009] team_slave_1: entered allmulticast mode [ 1037.863843][T28009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1037.931933][T27711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.955304][T27711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.980152][T27711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 1038.004337][T27711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.016535][T27711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.046206][T27711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.057935][T27711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.071134][T27711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.086139][T27711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.329875][T12532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.367725][T12532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.424855][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.433684][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.930278][T28036] netlink: 'syz.4.5855': attribute type 10 has an invalid length. [ 1038.955733][T28036] hsr0: entered promiscuous mode [ 1038.961967][T28036] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1039.784983][T28054] netlink: 33087 bytes leftover after parsing attributes in process `syz.4.5937'. [ 1039.867758][T28063] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1039.879587][T28063] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1041.230644][T28085] netlink: 'syz.3.5947': attribute type 11 has an invalid length. [ 1041.240892][T28084] netlink: 'syz.3.5947': attribute type 2 has an invalid length. [ 1041.253897][T28084] netlink: 'syz.3.5947': attribute type 8 has an invalid length. [ 1041.285905][T28084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5947'. [ 1041.299480][T28101] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5950'. [ 1041.448909][T28105] netlink: 'syz.0.5952': attribute type 39 has an invalid length. [ 1041.792780][T28119] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5957'. [ 1042.659834][T28140] __nla_validate_parse: 2 callbacks suppressed [ 1042.659850][T28140] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5963'. [ 1043.992053][T28158] netlink: 'syz.3.5968': attribute type 10 has an invalid length. [ 1044.648740][T28178] netlink: 'syz.0.5973': attribute type 29 has an invalid length. [ 1044.671671][T28178] netlink: 'syz.0.5973': attribute type 29 has an invalid length. [ 1044.698851][T28182] netlink: 'syz.0.5973': attribute type 29 has an invalid length. [ 1044.720156][T28180] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5974'. [ 1044.751969][T28181] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5974'. [ 1045.118036][T28193] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1045.121465][T28191] netlink: 'syz.4.5977': attribute type 29 has an invalid length. [ 1045.144847][T28191] netlink: 'syz.4.5977': attribute type 29 has an invalid length. [ 1045.210464][T28198] netlink: 'syz.4.5977': attribute type 29 has an invalid length. [ 1045.463519][T28195] netlink: 'syz.1.5979': attribute type 10 has an invalid length. [ 1045.574691][T28209] netlink: 'syz.4.5982': attribute type 10 has an invalid length. [ 1045.582695][T28209] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5982'. [ 1045.592227][T28209] team0: entered promiscuous mode [ 1045.598429][T28209] team_slave_0: entered promiscuous mode [ 1045.605182][T28209] team_slave_1: entered promiscuous mode [ 1045.621433][T28209] team0: entered allmulticast mode [ 1045.653775][T28209] team_slave_0: entered allmulticast mode [ 1045.675688][T28209] team_slave_1: entered allmulticast mode [ 1045.708943][T28209] bridge0: port 3(team0) entered blocking state [ 1045.717914][T28209] bridge0: port 3(team0) entered disabled state [ 1045.745195][T28209] bridge0: port 3(team0) entered blocking state [ 1045.751634][T28209] bridge0: port 3(team0) entered forwarding state [ 1046.601326][T28243] netlink: 'syz.3.5992': attribute type 2 has an invalid length. [ 1046.609423][T28243] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.5992'. [ 1048.444950][T28245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1049.179406][T28252] batadv0: entered promiscuous mode [ 1049.399915][T28270] netlink: 'syz.1.6002': attribute type 10 has an invalid length. [ 1049.584210][T28270] wg1: entered promiscuous mode [ 1049.600226][T28270] wg1: entered allmulticast mode [ 1049.614716][T28270] team0: Device wg1 is of different type [ 1049.642024][T28275] netlink: 'syz.0.6005': attribute type 9 has an invalid length. [ 1049.651291][T28275] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6005'. [ 1050.129928][T28284] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6006'. [ 1051.151905][T28313] netlink: 'syz.1.6013': attribute type 10 has an invalid length. [ 1051.183880][T28313] netlink: 'syz.1.6013': attribute type 10 has an invalid length. [ 1051.208202][T28313] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.6013'. [ 1051.236136][T28313] openvswitch: netlink: Message has 4 unknown bytes. [ 1051.909165][T28329] mac80211_hwsim hwsim92 .3ãc¤±: renamed from wlan1 (while UP) [ 1051.993270][T28337] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1052.024443][T28337] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1052.085015][T28329] netlink: 'syz.4.6017': attribute type 3 has an invalid length. [ 1052.093080][T28329] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6017'. [ 1052.112877][T28337] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1052.158367][T28337] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1052.293042][T28346] netlink: 'syz.1.6022': attribute type 27 has an invalid length. [ 1052.326722][T28346] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6022'. [ 1052.379838][T28346] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1052.426771][T28347] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6022'. [ 1052.454942][T28347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1052.621399][T28358] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1052.903999][T28358] wg1: entered promiscuous mode [ 1052.911436][T28358] wg1: entered allmulticast mode [ 1052.919349][T28358] team0: Device wg1 is of different type [ 1053.013243][T28369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1053.265053][T28377] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6030'. [ 1054.290320][T28397] __nla_validate_parse: 4 callbacks suppressed [ 1054.290339][T28397] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6035'. [ 1054.609006][T28404] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 1054.641633][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.648526][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.122299][T28421] validate_nla: 10 callbacks suppressed [ 1055.122318][T28421] netlink: 'syz.1.6041': attribute type 10 has an invalid length. [ 1056.318758][T28421] veth1_macvtap: left promiscuous mode [ 1056.449011][T28427] syzkaller0: entered promiscuous mode [ 1056.456932][T28427] syzkaller0: entered allmulticast mode [ 1056.690325][T28445] netlink: 'syz.0.6046': attribute type 29 has an invalid length. [ 1057.266980][T28447] netlink: 'syz.3.6048': attribute type 29 has an invalid length. [ 1057.433888][T28460] netlink: 'syz.3.6048': attribute type 29 has an invalid length. [ 1059.240297][T28445] netlink: 'syz.0.6046': attribute type 29 has an invalid length. [ 1059.248552][T28450] netlink: 'syz.1.6049': attribute type 39 has an invalid length. [ 1059.258840][T28450] veth0_macvtap: left promiscuous mode [ 1059.284457][T28457] netlink: 'syz.1.6049': attribute type 21 has an invalid length. [ 1059.292338][T28457] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6049'. [ 1059.315148][T28447] netlink: 'syz.3.6048': attribute type 29 has an invalid length. [ 1059.359675][T28460] netlink: 'syz.3.6048': attribute type 29 has an invalid length. [ 1059.361404][T28464] netlink: 'syz.1.6051': attribute type 3 has an invalid length. [ 1059.378543][T28464] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1059.957444][T28506] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6061'. [ 1059.971610][T28506] bridge_slave_1: default FDB implementation only supports local addresses [ 1060.249934][T28512] validate_nla: 1 callbacks suppressed [ 1060.249952][T28512] netlink: 'syz.1.6062': attribute type 1 has an invalid length. [ 1060.291506][T28512] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.6062'. [ 1060.669032][T28519] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1061.816842][T28547] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6072'. [ 1066.109389][T28564] netlink: 'syz.0.6076': attribute type 21 has an invalid length. [ 1066.117369][T28564] netlink: 'syz.0.6076': attribute type 10 has an invalid length. [ 1066.125342][T28564] netlink: 'syz.0.6076': attribute type 12 has an invalid length. [ 1066.133162][T28564] netlink: 'syz.0.6076': attribute type 13 has an invalid length. [ 1066.141042][T28564] netlink: 'syz.0.6076': attribute type 14 has an invalid length. [ 1066.148910][T28564] netlink: 'syz.0.6076': attribute type 15 has an invalid length. [ 1066.158762][T28564] netlink: 'syz.0.6076': attribute type 16 has an invalid length. [ 1066.167270][T28564] netlink: 'syz.0.6076': attribute type 19 has an invalid length. [ 1066.175685][T28564] netlink: 'syz.0.6076': attribute type 21 has an invalid length. [ 1066.183849][T28564] netlink: 'syz.0.6076': attribute type 22 has an invalid length. [ 1066.191793][T28564] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1066.550410][T28597] netlink: 1039 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1066.568135][T28606] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1066.796206][T28623] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6090'. [ 1067.200997][T28629] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1067.234950][T28629] bridge_slave_1: default FDB implementation only supports local addresses [ 1068.268704][T28662] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1068.311745][T28662] openvswitch: netlink: IP tunnel dst address not specified [ 1068.398358][T28661] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1068.609594][T28677] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6109'. [ 1069.092563][T28699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6115'. [ 1071.651308][T28789] validate_nla: 8 callbacks suppressed [ 1071.651327][T28789] netlink: 'syz.1.6140': attribute type 10 has an invalid length. [ 1073.943631][T28789] team0: Device wg1 is of different type [ 1074.045939][T28802] netlink: 'syz.1.6144': attribute type 29 has an invalid length. [ 1074.073304][T28802] netlink: 'syz.1.6144': attribute type 29 has an invalid length. [ 1074.092769][T28802] netlink: 'syz.1.6144': attribute type 29 has an invalid length. [ 1074.110005][T28798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1074.397140][T28812] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6148'. [ 1075.050162][T28840] syzkaller0: entered promiscuous mode [ 1075.055892][T28840] syzkaller0: entered allmulticast mode [ 1075.069913][T28841] netlink: 'syz.0.6156': attribute type 9 has an invalid length. [ 1075.102975][T28841] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6156'. [ 1075.492537][T28866] netlink: 'syz.0.6163': attribute type 29 has an invalid length. [ 1075.547546][T28866] netlink: 'syz.0.6163': attribute type 29 has an invalid length. [ 1075.583794][T28872] netlink: 'syz.0.6163': attribute type 29 has an invalid length. [ 1075.592749][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6164'. [ 1075.612162][T28866] netlink: 'syz.0.6163': attribute type 29 has an invalid length. [ 1075.628689][T28866] netlink: 'syz.0.6163': attribute type 29 has an invalid length. [ 1075.660027][T28866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6163'. [ 1075.675505][T28866] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6163'. [ 1076.082308][T28890] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6170'. [ 1076.101596][T28890] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1076.201335][T28893] C: renamed from team_slave_0 [ 1076.219297][T28893] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6171'. [ 1076.545964][T28898] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1076.564352][T28898] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.6173'. [ 1077.298900][T28930] validate_nla: 4 callbacks suppressed [ 1077.299002][T28930] netlink: 'syz.0.6184': attribute type 10 has an invalid length. [ 1077.327806][T28930] netlink: 'syz.0.6184': attribute type 10 has an invalid length. [ 1093.056000][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1093.066165][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1093.074844][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1093.083037][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1093.091246][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1093.099093][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1094.159845][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1094.170318][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1094.179139][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1094.187536][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1094.196695][ T5777] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1094.204148][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1095.114225][ T5777] Bluetooth: hci4: command tx timeout [ 1096.243290][ T5777] Bluetooth: hci5: command tx timeout [ 1097.195776][ T5777] Bluetooth: hci4: command tx timeout [ 1097.655279][ T5776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1097.665572][ T5776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1097.673875][ T5776] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1097.682400][ T5776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1097.690525][ T5776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1097.698236][ T5776] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1097.827864][ T5777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1097.851055][ T5777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1097.859769][ T5777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1097.878487][ T5777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1097.887675][ T5777] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1097.898258][ T5777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1098.314276][ T5777] Bluetooth: hci5: command tx timeout [ 1099.274211][ T5777] Bluetooth: hci4: command tx timeout [ 1099.754347][ T5777] Bluetooth: hci6: command tx timeout [ 1099.995545][ T5777] Bluetooth: hci7: command tx timeout [ 1100.394218][ T5777] Bluetooth: hci5: command tx timeout [ 1101.354501][ T5777] Bluetooth: hci4: command tx timeout [ 1101.834248][ T5777] Bluetooth: hci6: command tx timeout [ 1102.081253][ T5777] Bluetooth: hci7: command tx timeout [ 1102.474186][ T5777] Bluetooth: hci5: command tx timeout [ 1103.914684][ T5777] Bluetooth: hci6: command tx timeout [ 1104.155676][ T5777] Bluetooth: hci7: command tx timeout [ 1105.994186][ T5777] Bluetooth: hci6: command tx timeout [ 1106.234213][ T5777] Bluetooth: hci7: command tx timeout [ 1116.083945][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.090519][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1148.878436][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 1153.188690][T28983] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1153.199232][T28983] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1153.207923][T28983] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1153.216327][T28983] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1153.224642][T28983] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1153.232091][T28983] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1154.249061][T28988] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1154.262717][T28988] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1154.272162][T28988] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1154.280483][T28988] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1154.288803][T28988] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1154.300183][T28988] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1157.348978][T28992] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1157.358870][T28992] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1157.367618][T28992] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1157.376510][T28992] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1157.384566][T28992] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1157.393086][T28992] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1158.382010][T28996] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1158.396558][T28996] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1158.407655][T28996] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1158.425897][T28996] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1158.434160][T28996] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1158.446222][T28996] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1177.519542][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.532182][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.404020][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1186.410775][ C0] rcu: 0-....: (10436 ticks this GP) idle=a4d4/1/0x4000000000000000 softirq=114191/114221 fqs=5142 [ 1186.422792][ C0] rcu: hardirqs softirqs csw/system [ 1186.429206][ C0] rcu: number: 1678940 269 0 [ 1186.435606][ C0] rcu: cputime: 17942 34545 31 ==> 52520(ms) [ 1186.443404][ C0] rcu: (t=10504 jiffies g=151025 q=1847 ncpus=2) [ 1186.449822][ C0] CPU: 0 PID: 28926 Comm: syz.1.6183 Not tainted syzkaller #0 [ 1186.457265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1186.467396][ C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x1f/0x80 [ 1186.473723][ C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d d0 d0 7c 7e 65 8b 15 d1 d0 7c 7e 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 74 4e 8b 91 f8 15 00 [ 1186.493393][ C0] RSP: 0018:ffffc90000007390 EFLAGS: 00000206 [ 1186.499475][ C0] RAX: ffffffff813b25b2 RBX: ffffffff81000000 RCX: ffff888038eeda00 [ 1186.507457][ C0] RDX: 0000000000000100 RSI: ffffffff8ac00000 RDI: ffffffff86364eba [ 1186.515426][ C0] RBP: ffffc90000007400 R08: ffffc90000007530 R09: 000000000000000b [ 1186.523384][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007c68 [ 1186.531418][ C0] R13: ffffc90000007468 R14: ffffffff86364eba R15: 0000000000000001 [ 1186.539578][ C0] FS: 00007f3f544af6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1186.548549][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1186.555124][ C0] CR2: 00005555734d04e8 CR3: 0000000052fda000 CR4: 00000000003506f0 [ 1186.563091][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1186.571048][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1186.579039][ C0] Call Trace: [ 1186.582309][ C0] [ 1186.585142][ C0] unwind_next_frame+0x1e2/0x2990 [ 1186.590204][ C0] ? mac80211_hwsim_beacon+0xbb/0x1b0 [ 1186.595571][ C0] ? mac80211_hwsim_beacon+0xbb/0x1b0 [ 1186.600938][ C0] ? stack_trace_save+0x100/0x100 [ 1186.606037][ C0] arch_stack_walk+0x144/0x190 [ 1186.610794][ C0] ? mac80211_hwsim_beacon+0xbb/0x1b0 [ 1186.616165][ C0] stack_trace_save+0xaa/0x100 [ 1186.620924][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1186.626037][ C0] kasan_set_track+0x4e/0x70 [ 1186.630621][ C0] ? kasan_set_track+0x4e/0x70 [ 1186.635366][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1186.640470][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 1186.645747][ C0] ? kmem_cache_alloc_node+0x1af/0x310 [ 1186.651218][ C0] ? __alloc_skb+0x103/0x2c0 [ 1186.655825][ C0] ? skb_copy+0x126/0x700 [ 1186.660144][ C0] ? mac80211_hwsim_tx_frame_no_nl+0xcb2/0x11e0 [ 1186.666482][ C0] ? mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1186.672127][ C0] ? mac80211_hwsim_beacon_tx+0x3df/0x770 [ 1186.677835][ C0] ? __iterate_interfaces+0x225/0x4c0 [ 1186.683267][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1186.690494][ C0] ? mac80211_hwsim_beacon+0xbb/0x1b0 [ 1186.695886][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1186.700731][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 1186.705838][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 1186.711118][ C0] ? __alloc_skb+0x103/0x2c0 [ 1186.715740][ C0] __alloc_skb+0x103/0x2c0 [ 1186.720235][ C0] skb_copy+0x126/0x700 [ 1186.724388][ C0] ? mac80211_hwsim_tx_frame_no_nl+0xca3/0x11e0 [ 1186.730654][ C0] mac80211_hwsim_tx_frame_no_nl+0xcb2/0x11e0 [ 1186.736737][ C0] ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0 [ 1186.742619][ C0] ? read_tsc+0xc/0x20 [ 1186.746692][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 1186.752494][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 1186.757945][ C0] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 1186.763487][ C0] __iterate_interfaces+0x225/0x4c0 [ 1186.768674][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1186.774931][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1186.782116][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1186.788345][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1186.795367][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1186.800553][ C0] ? hw_scan_work+0xf10/0xf10 [ 1186.805221][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1186.810418][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1186.815517][ C0] ? read_tsc+0x9/0x20 [ 1186.819584][ C0] hrtimer_run_softirq+0x177/0x290 [ 1186.824691][ C0] handle_softirqs+0x27d/0x820 [ 1186.829501][ C0] ? read_tsc+0x9/0x20 [ 1186.833570][ C0] ? ktime_get+0x24b/0x280 [ 1186.837988][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1186.842747][ C0] ? do_softirq+0x1a0/0x1a0 [ 1186.847267][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1186.852489][ C0] __irq_exit_rcu+0xd3/0x190 [ 1186.857078][ C0] ? irq_exit_rcu+0x20/0x20 [ 1186.861576][ C0] irq_exit_rcu+0x9/0x20 [ 1186.865811][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1186.871442][ C0] [ 1186.874364][ C0] [ 1186.877295][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1186.883568][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 1186.889557][ C0] Code: 26 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 3b 30 09 e8 7e 0b 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1186.909173][ C0] RSP: 0018:ffffc9000563f820 EFLAGS: 00000282 [ 1186.915234][ C0] RAX: f05e8d9f44bc5400 RBX: 0000000000000000 RCX: f05e8d9f44bc5400 [ 1186.923195][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 1186.931160][ C0] RBP: ffffc9000563f870 R08: ffffffff8e8ae5ef R09: 1ffffffff1d15cbd [ 1186.939236][ C0] R10: dffffc0000000000 R11: fffffbfff1d15cbe R12: ffff888038eeda00 [ 1186.947291][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 1186.955291][ C0] __schedule+0x15b6/0x4660 [ 1186.959803][ C0] ? perf_swevent_event+0x4be/0x570 [ 1186.964993][ C0] ? asan.module_dtor+0x20/0x20 [ 1186.969857][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 1186.976179][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1186.982162][ C0] ? preempt_schedule+0xc0/0xd0 [ 1186.987019][ C0] preempt_schedule_common+0x82/0xc0 [ 1186.992321][ C0] preempt_schedule+0xc0/0xd0 [ 1186.996992][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1187.002612][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1187.007806][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1187.013958][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1187.019198][ C0] _raw_spin_unlock_irq+0x40/0x50 [ 1187.024221][ C0] task_work_run+0x197/0x260 [ 1187.028813][ C0] ? task_work_cancel+0x220/0x220 [ 1187.033857][ C0] get_signal+0x11da/0x1390 [ 1187.038377][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1187.044101][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 1187.050347][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1187.055924][ C0] ? lock_chain_count+0x20/0x20 [ 1187.060819][ C0] ? get_sigframe_size+0x20/0x20 [ 1187.065772][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1187.071092][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1187.076727][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 1187.082191][ C0] do_syscall_64+0x61/0xb0 [ 1187.086608][ C0] ? clear_bhb_loop+0x40/0x90 [ 1187.091273][ C0] ? clear_bhb_loop+0x40/0x90 [ 1187.095939][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1187.101832][ C0] RIP: 0033:0x7f3f5359ce59 [ 1187.106243][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.125860][ C0] RSP: 002b:00007f3f544af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1187.134278][ C0] RAX: 0000000000000006 RBX: 00007f3f53815fa0 RCX: 00007f3f5359ce59 [ 1187.142282][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 1187.150255][ C0] RBP: 00007f3f53632e6f R08: 000000000000000a R09: 0000000000000000 [ 1187.158217][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1187.166202][ C0] R13: 00007f3f53816038 R14: 00007f3f53815fa0 R15: 00007ffdcd36fbe8 [ 1187.174187][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)