last executing test programs: 7.428568311s ago: executing program 4 (id=3609): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000451000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000240)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1620070020000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2, @ANYRES64=0x0], 0x20) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) r3 = perf_event_open(&(0x7f00000002c0)={0x4, 0xdfd6feaff94f5e6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='(\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r5, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0xffffffff877bf30d, 0x7}, 0x0, 0x0, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x555) r8 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x801c581f, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800", @ANYRESHEX], 0x0}, 0x94) r9 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x6e, &(0x7f0000000000)=r12, 0xe0) 6.477373566s ago: executing program 4 (id=3620): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01000700000200db6c000000000000000000020000000000"], &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xd, r2, 0x0) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x891b, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x0, 0xcc, 0x80, 0x0, 0x6, 0xd2, 0x0, 0x5, 0x120, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000340)}, 0x100042, 0x0, 0xfffff800, 0x7, 0x6, 0x6, 0x2, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0x5, r0, 0x2) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7f200bf395e2ee40000000000000000004000"/36], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES16=r6, @ANYBLOB="0000000000000000b7030c95d8000007000000020000180100002020702500000000002020207b1a000000bfa100000000000007010000f8ffffffb70200b70300000000000085000000060000009500"/96], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1806000000000000000000000000000718120000247508b329f7bb3aa6f14b155b04b19362471bec14bfe82b90d5e3ef3777ce3ac14e8fd76e940b", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="13a04724960e3f928082628304fe071628699ff54901d28b9ca37847d668339d123b40f3c08288656949c33066087d2181cac97b1042549e9877abcf4a9c847a4f04b868ae4e980fc07bebb4eef6985cd3782315cef52698c42fba85ebd368694919053a09040c38d369d4413722ac0c05015fb20fac40dc56416934f5c219e12b41ee1017ac4f9bcfd2727a45a88cfe2364c4e3b504197cd0aa8600c534dcb7a36ad534b6df4976b9a431490f8c987df6b37fd3bcffdc949c04afa2f1e850ed7be776b4bf"], 0x0, 0x26}, 0x28) (async) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r7, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8a, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 4.554689266s ago: executing program 2 (id=3630): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x3, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xea8b}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000440)='GPL\x00', 0x3, 0x4f, &(0x7f0000000500)=""/79, 0x40f00, 0x4c, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x3ff, 0x7ff}, 0x10, 0x11c81, r2, 0x5, &(0x7f0000000780)=[r0], &(0x7f0000000800)=[{0x1, 0x1, 0xe, 0x4}, {0x4, 0x3, 0xd, 0xb}, {0x0, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x4, 0x8}, {0x3, 0x5, 0x1, 0x4}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffff00000001) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async, rerun: 32) socket$kcm(0xf, 0x3, 0x2) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000054090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x8018, 0x0, 0x3, 0x9, 0x6, 0x0, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x6c020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2}, 0x206, 0x2000000003, 0x0, 0x0, 0x8000000000000009, 0x2, 0x0, 0x0, 0x8f3, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0100000000000000fffffff70030615f5f002e305f"], &(0x7f0000000200)=""/138, 0x46, 0x8a, 0x1}, 0x28) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.396646644s ago: executing program 4 (id=3631): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x1880, 0x0, 0xc2ba, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, 0x0}, 0x4c810) 4.382295134s ago: executing program 1 (id=3632): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_config_ext={0x6, 0x10}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x1f, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000440), 0x8, 0xd1, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$sock(r3, &(0x7f0000002a80)={&(0x7f0000000800)=@can={0x1d, r4}, 0x80, &(0x7f0000002900)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="736c400ae5d522c1b0211b9bfb61492521d6c37a120673d8b75e505a492820582bd3fcd995ee3110f067e2f3653a79028f2a9034122a296d0655205b8e9db1c0c7d5e56dcbab23979a979dfd14b7c82f761330560068380bfcd14b1d91adb07b13be4883", 0x64}, {0x0}, {&(0x7f0000002740)="a310d2d49aba6c08ff0df70a913ed568df6ca44dd9508773749aa849a121c388e83471529f668df35e37550fd54e594fa35fd3d93cafbb5b6452584016f4b2a082169167f175a1609332f8e6257c993105862f", 0x53}, {&(0x7f00000027c0)="7133db7a0189b28b2a17c8ce1e0a618f2186", 0x12}, {0x0}, {&(0x7f0000002840)="b4b638a1b8113b77501f7f384360e3e5f8289d89593c856641b03aa3166f9e3dbaaf8e89bf249a20d5200f0728189942363676fad0ccc7ecb0d4ac29cbf8283a16a7cd5b01e504039f5191de2a9c48f8f66fffe92efeb3a9868f79d34ce6a02d45c05e5d5254ba5e2e94b3687de2c8819764dc7c9caedb9ac61813c5a565c990fbfab458b09e72001a16784441a5e8d252f5fbef5555cdbde2179647e7", 0x9d}], 0x7, &(0x7f0000002980)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x10002}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x45}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xc8f}}], 0xf0}, 0x24040004) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xca4b, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xf8, &(0x7f0000000500)=""/248, 0x41000, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r0, r5], &(0x7f0000000780)=[{0x1, 0x5, 0xd, 0x3}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x86dd, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x2c, &(0x7f0000001140), 0x4) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x1b, &(0x7f0000000040), 0x4) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x1000000000000, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r11, &(0x7f0000000000), 0x2a979d) 4.186489834s ago: executing program 0 (id=3634): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd63, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1622}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x60042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.04461365s ago: executing program 0 (id=3635): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x84801, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x105084, 0x0, 0xfffffffc, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x602, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) sendmsg$kcm(r1, &(0x7f0000002680)={&(0x7f00000008c0)=@can, 0x80, 0x0}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) sendmsg$inet(r1, 0x0, 0x4008810) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.894953887s ago: executing program 4 (id=3636): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x40, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @local, 0xa}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="524b4d8178fc71a2d627923b60967b91d5eb40fd55577f024e0419c6d96bae747ba149c4bea94f35507e18e81607b41d2394a1a263028c", 0x37}], 0x1, &(0x7f00000001c0)=[{0x18, 0x10f, 0x8, "da471ccd0e"}, {0x30, 0x10a, 0xa5c, "2ddb02740101d1643ef1913bbeb90d24210ac40af644d5755c92bc0b"}, {0x88, 0x113, 0xba, "e9d0b8dfad08181e4cd8ae3297a5620658d4bf9350e89e693f9d1370c3bb9022ee25d894703990e952fdeffc61e477ba3bc81139f723ab531b29e822807e4e2469138b0ff49c5c105aab240b931bfa0569337eadefdfb92e6b4fc35f7cdaa732328f74bab0a543799075ec34287ccfaf73b0bb"}, {0x30, 0x117, 0xa, "4757f500dd77afb3fcc1ecc41a40f35d187c04b6d64b3dde75"}, {0x28, 0x88, 0xffffffd8, "e6be8a07a3ee2e229e8e4338b4362fbf4fe1"}, {0x90, 0x10d, 0xa, "f11e41cae97de175f30c7e7919e122be44f9d381bce9d6eaf53abaf7ecaeb959f678a7afbbb7f2238e86f1a0c6aa955571d15f59dfb27a6db2ccbe5dc270686205e2fabd77bdd7d81f9f96142f130ad7f7b611f7a2640def6681fb3cadeb34310531870e129656fb967ec5ea0f34bdc8d675e079e24131645fcb6a0b7c230a"}], 0x1b8}, 0x20004881) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket$kcm(0x10, 0x2, 0x4) (async) close(0xffffffffffffffff) (async) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) (async) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 3.871038028s ago: executing program 0 (id=3637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x90120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r0, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c40)=@o_path={&(0x7f0000000300)='./file0\x00', r4, 0x4000, r0}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @union={0x10, 0x5, 0x0, 0x5, 0x0, 0x9, [{0xd, 0x4, 0xffffffff}, {0xd, 0x4, 0x8}, {0x2, 0x4, 0x6}, {0x4, 0x5, 0x6}, {0xb, 0x3}]}]}, {0x0, [0x5f]}}, &(0x7f00000003c0)=""/230, 0x6f, 0xe6, 0x1, 0x7f, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x5, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/167}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r7}, &(0x7f0000001780)=0x18, &(0x7f00000017c0)='%-010d \x00'}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x7, &(0x7f0000000840)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0x2, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x4, 0x3, 0x1, 0x27, 0x5}, @jmp={0x5, 0x1, 0x5, 0x0, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x8, 0x4, 0x8, 0x100, 0xfffffffffffffffc}], &(0x7f0000000880)='syzkaller\x00', 0x7, 0xde, &(0x7f00000008c0)=""/222, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xa, 0x1}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a00)=[{0x5, 0x4, 0xc, 0xa}, {0x5, 0x5, 0xf, 0x7}, {0x1, 0x1, 0x9, 0x2}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x4, 0x5}, {0x2, 0x1, 0x6, 0x9}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0xe, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdb}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x647a}}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0xd, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x5, 0x80000000, 0xff}, 0x10, r6, r8, 0x0, &(0x7f0000000b40)=[r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x4}, 0x38) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 1.873606492s ago: executing program 0 (id=3638): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x6, 0x8, 0x80000000000000, 0x2, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) sendmsg$inet(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000400)='U', 0x1}], 0x1}, 0x4000089) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.872519162s ago: executing program 2 (id=3640): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @mcast2, 0x8}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="6dbca1b3faef0ae4d89d1b6e55c60c0e6e129dcbccc340d5c51ae26400432c306cda415d57349a88ed258c24c1661fe382b56d669f", 0x35}, {&(0x7f0000000100)}, {&(0x7f0000000140)="594693cc6bda6b5b071b99964e4cb794bbda18de6e2639c6bc9b4ab44dd0a162e7b131d95f05e6e82541b4eb360f5ce229f4320bd2531983084a2b1115b8b857c70ab1ffbf7fe8d6bb176767b5dfd4c13bc28cd465ca05c71e1fc711e3fece0c785b27ee94e88e671b309420a6b825de9a95e758bc919775cd1bdda2aed93c14fca7da1ba52ad86e46d90b31591ae9ebdd87a843b1", 0x95}, {&(0x7f0000000200)="43e92aa5f94551e9cc587bfeefcc290027e3d1cb90876966c9135092f1b676abd3d3649af390e7c82102c861b318abc2943e4539b2767704452aa5cb065d604512c181ccd6e482047b926fde2ad7151f5da3999bcdb85c629672f808f593f023b5318889ab864b8d65c29854bacc5928acd6a56d2277740b5603b94a3198c2fd31cbf7bf3deed64a4ba445bd48f489b0fbed6a5cdb834df8729114db79c1b0782977eb203bf310a335d24e531ad62177", 0xb0}], 0x4, &(0x7f0000000300)}, 0x4040040) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x9, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x5}}]}, {0x0, [0x0, 0x30, 0x0, 0x2e, 0x0, 0x61, 0x30, 0x3052c9fa69de9557]}}, &(0x7f0000000840)=""/126, 0x4e, 0x7e, 0x0, 0x5}, 0x28) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1e, 0x100, 0x5, 0x8, 0x59404, r1, 0x8, '\x00', r2, r4, 0x0, 0x1, 0x1, 0x0, @value=r5, @void, @value=r6}, 0x50) recvmsg(r6, &(0x7f0000000b80)={&(0x7f0000000940)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/119, 0x77}, {&(0x7f0000000a40)=""/156, 0x9c}], 0x2, &(0x7f0000000b40)=""/10, 0xa}, 0x1) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r0}, 0x8) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000c00)=0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=r3, 0x4) close(r6) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000c80)) sendmsg$kcm(r6, &(0x7f0000001e80)={&(0x7f0000000cc0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)}], 0x2, &(0x7f0000001dc0)=[{0x98, 0x114, 0x3, "894545645b6abf3410558d50bdfc1fe73cdcb3391422e7e49fc2a537d2ed57a29998c20402a7897a5daa8f271acc85b0cf55d7f5f6e67873ee868c5bff5981ab6f2abb6a59d8d6deb497ab51c0f8283c53b127c4a4a35b35b2d609d6b005a74a7144017404d75f2ea5b4564d833218d7156273f05d68ebb2d18f0d1015970c17f2152d"}], 0x98}, 0xc095) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000001f00)={0x6, &(0x7f0000001ec0)=[{0x7, 0xcc, 0x3, 0x3}, {0x0, 0x40, 0x3, 0x8000}, {0xe2c, 0xaf, 0x0, 0x8}, {0x7, 0x6, 0x1, 0x1}, {0x2, 0x92, 0x4, 0xfff}, {0x9, 0x4, 0x6, 0x10000}]}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002040)={&(0x7f0000001f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@func={0xe, 0x0, 0x0, 0xc, 0x1}, @fwd={0xc}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x35, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x30, 0x0]}}, &(0x7f0000001fc0)=""/86, 0x76, 0x56, 0x0, 0xfffffffb, 0x10000, @value=r8}, 0x28) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002080)={r6}, 0x8) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f00000020c0)) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002100)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x4, '\x00', r2, r5, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002300)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x7, 0x12, &(0x7f0000002180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x401}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x2e, r9, 0x8, &(0x7f0000002280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000022c0)={0x2, 0x7, 0x4}, 0x10, r12, r6, 0x8, 0x0, &(0x7f0000002340)=[{0x1, 0x1, 0x8, 0x4}, {0x1, 0x3, 0xe, 0x2}, {0x4, 0x4, 0x0, 0xa}, {0x5, 0x4, 0x0, 0xf61b75173e4a028}, {0x2, 0x1, 0xa, 0xa}, {0x5, 0x4, 0xc, 0x3}, {0x0, 0x2, 0x1, 0x7}, {0x2, 0x5, 0x10, 0x1}], 0x10, 0x15e}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003640)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003740)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000002480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000002580)='GPL\x00', 0xc43b, 0x1000, &(0x7f00000025c0)=""/4096, 0x40f00, 0x4, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000035c0)={0x3, 0x6}, 0x8, 0x10, &(0x7f0000003600)={0x4, 0x2, 0x7, 0xb}, 0x10, r3, 0x0, 0x6, &(0x7f0000003680)=[r13, r6, r7, r10], &(0x7f00000036c0)=[{0x5, 0x5, 0x6, 0x3}, {0x5, 0x1, 0x8, 0x9}, {0x4, 0x4, 0xd, 0x6}, {0x1, 0x2, 0x3}, {0x2, 0x3, 0x7, 0xb}, {0xfffffff7, 0x1, 0x0, 0x1}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b80)={r13, 0x20, &(0x7f0000003b40)={&(0x7f0000003a00)=""/178, 0xb2, 0x0, &(0x7f0000003ac0)=""/114, 0x72}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003c80)={0x13, 0x8, &(0x7f0000003800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f45abc8, 0x0, 0x0, 0x0, 0x8}, @alu={0x0, 0x0, 0x2, 0xa, 0x5, 0x100, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x4, 0x2, 0x2, 0xfffffffffffffff4, 0x1}]}, &(0x7f0000003840)='syzkaller\x00', 0x80000000, 0xf1, &(0x7f0000003880)=""/241, 0x40f00, 0x20, '\x00', r2, @fallback=0x8, r4, 0x8, &(0x7f0000003980)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000039c0)={0x3, 0x8, 0x10001, 0x4515}, 0x10, r14, r10, 0x6, &(0x7f0000003bc0)=[0x1, r7, r6, r10], &(0x7f0000003c00)=[{0x4, 0x2, 0x6, 0x1}, {0x5, 0x3, 0x2, 0xa}, {0x3, 0x1, 0x5, 0x4}, {0x3, 0x2, 0x4, 0xb}, {0x4, 0x4, 0x4, 0x4}, {0x4, 0x5, 0x0, 0x1}], 0x10, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f0000003fc0)={&(0x7f0000003d40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000003d80)="70681d924f366dfbd44eb7ebc0e294c67bbba9aaffaf334df4735f55977266928836f303e60093367cdfc78dc01663a4b2628dd506a074ab2c15c8e8f8af50b68e62fbcb85a87a83460e697f3c8c3e344a97b6217a1ec707dce548d6ecce43a2dab5d1c71aded9c7cd563e80659cf1901403bbfbb0870372acf84692e7916c4b221597ba80780d32c06dd9b4be4ea9553333d662c00b84f71bec5044badfb207e97900675e1460a2e02c670da25f5fb0ef3b5409aba8faacd123bb25e0a9ad9d20383db421c4db41dcbcbba9cf1bdf7b9fc2e20ec8bacab6133f", 0xda}], 0x1, &(0x7f0000003ec0)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x7c, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@broadcast, 0x40}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@empty, 0x3}, {@local, 0x3}, {@multicast2, 0xfffffff9}]}, @ssrr={0x89, 0xb, 0xdf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp={0x44, 0x10, 0x2e, 0x0, 0xd, [0x5, 0x8, 0xd76]}, @lsrr={0x83, 0x1b, 0x38, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x28}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @end, @lsrr={0x83, 0x17, 0x10, [@multicast2, @local, @rand_addr=0x64010100, @multicast1, @local]}, @lsrr={0x83, 0x1f, 0x44, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @loopback, @multicast2, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x82, 0xa, "9291877374d0e43f"}, @end]}}}], 0xf8}, 0x4044844) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004000)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x10000, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x50) 1.872038752s ago: executing program 1 (id=3641): socket$kcm(0xa, 0x0, 0x0) (async) r0 = socket$kcm(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0}, 0x18) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x12, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0xb, 0xb, 0x0, 0x50, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x54}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000280)='GPL\x00', 0x4, 0x5e, &(0x7f00000002c0)=""/94, 0x1e00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x8, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x1, 0x1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x1, 0x5, 0x1}, {0x1, 0x1, 0xb, 0x2}, {0x4, 0x1, 0xa, 0xb}], 0x10, 0x66ce6a93}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x12, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0xb, 0xb, 0x0, 0x50, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x54}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000280)='GPL\x00', 0x4, 0x5e, &(0x7f00000002c0)=""/94, 0x1e00, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x8, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x1, 0x1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x1, 0x5, 0x1}, {0x1, 0x1, 0xb, 0x2}, {0x4, 0x1, 0xa, 0xb}], 0x10, 0x66ce6a93}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=r2, 0xc, 0x0, 0x4, &(0x7f0000000680)=[0x0], 0x1, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x830d}, 0x0, 0x4, 0xfffffffe, 0x0, 0x2, 0x0, 0x200, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000451000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r7, 0x0, 0x1, &(0x7f0000000240)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r7, r8, 0x0, 0x20, r8, @void, @void, @void, @value=r9}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r7, r8, 0x0, 0x20, r8, @void, @void, @void, @value=r9}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@fallback=r3, r4, 0x12, 0x1025, r5, @void, @void, @void, @value=r9, r6}, 0x20) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) (async) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640), 0x97ff}], 0x2}, 0x0) 1.800522445s ago: executing program 4 (id=3642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x18, &(0x7f0000000580)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d040000000000000000000002040000000400000000000007000000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) close(0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x18, &(0x7f0000000580)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d040000000000000000000002040000000400000000000007000000000000000061"], 0x0, 0x52}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x8000) (async) 1.753788608s ago: executing program 3 (id=3643): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x93, 0xb6, &(0x7f0000000540)="d7c727597906ff419484393c0ce16d7bc003d381088d34a4ffefdb65984de57e04c314684f81943737c6ac8663fccf8c7d6ffecde36ae928b4e43eef02edac46249e78dbfe77f28062c3e99733b5832ecc8a8bc3a395576447337e28ba16d3317b6972534e2431a6f50087919ab6ea5b6aa351265c4d8de3bfab4fe265e225722662b2cca73fe10c310d36ea6fe52d47175aca", &(0x7f0000000600)=""/182, 0xffffffff, 0x0, 0xa2, 0x58, &(0x7f00000006c0)="bbbeb24c586ab7794213f3a67435a2055fba66ae2f335ca9d1da419a709377fc72642df6fa1943077408814b7ac3a4faf3ce74d9b923d3111b2b70b5f7f79a97b278c23c3dc9f84fffa2fe6ff124cfad401b47ca1ad9c4a4a344b9f74943af35593cbeb5df5512715ea6d7074289ffec6b69cc1ceee40ae9d1496379905a1811ae6ec468600d1ff7efc9626907358d110807e08ec711c27f79c2cadba3d275f26f42", &(0x7f0000000840)="42ea6ab2f6e0baeba1f3fe78dae7a3b1a8ed2a1c604e63ddec70e69a5240354c617a14334f2d9d7c0a6d6fb72f6e0ca36e576636adfbc40093d23bc3633864b63246bc6097dfafe95ab8cacc909af916027ffc0548ad6aee", 0x4, 0x0, 0xfffffff9}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="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"], 0x1db0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f93224fc60320011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x6, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYBLOB="6e6642388ec154cefc5f03ce95558197281d930952b555", @ANYRES16=r5, @ANYBLOB="fdca56197ec317a427ec455d9bd6bf6ca931e5c8fdd6e27e9b97e546434462f413fa8967427640531cf1050ea74b9e36d94700cf5333a5e445a8677969c08b80c23fbc345be54064055c044b22ea371eb19084bca01528e37472147cdd91d30c7719526bc5cece862d991449dbbfb94e139bd30e7365e360292571b29b0f62de1a6d5deb05252550eda3b050bd7c6719d17b7ac57adfbbfa12d08eb300ce5d73ef0bbcb2b3a8152d971f2b609eff8c35521e", @ANYRES8=r4], &(0x7f0000000080)='GPL\x00', 0x808000, 0xcc, &(0x7f00000000c0)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r4}, 0x94) 1.682315701s ago: executing program 2 (id=3644): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000b40)={0x2, &(0x7f0000000180)=[{0x20, 0x3, 0x5, 0xfffff034}, {0x16, 0x1, 0x5, 0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000b40)={0x2, &(0x7f0000000180)=[{0x20, 0x3, 0x5, 0xfffff034}, {0x16, 0x1, 0x5, 0x6}]}) (async) 1.348353677s ago: executing program 1 (id=3645): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000b3000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r1, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x92, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x8, 0x1, 0xb, 0xffffffffffffffe0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000017c0)={0x7, 0x400}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x6, 0xd}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001840)=[r0, r0], &(0x7f0000001880)=[{0x1, 0x4, 0xa, 0xb}, {0x0, 0x5, 0x8, 0x2}, {0x0, 0x5, 0xf, 0xc}, {0x1, 0x5, 0x7}, {0x2, 0x5, 0x4}, {0x4, 0x1, 0x10, 0xc}], 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000b3000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r1, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x92, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=0xffffffffffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x8, 0x1, 0xb, 0xffffffffffffffe0, 0x1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000017c0)={0x7, 0x400}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x6, 0xd}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001840)=[r0, r0], &(0x7f0000001880)=[{0x1, 0x4, 0xa, 0xb}, {0x0, 0x5, 0x8, 0x2}, {0x0, 0x5, 0xf, 0xc}, {0x1, 0x5, 0x7}, {0x2, 0x5, 0x4}, {0x4, 0x1, 0x10, 0xc}], 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 1.338827627s ago: executing program 3 (id=3646): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000047}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x0, 0x10000000}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) 1.299006789s ago: executing program 2 (id=3647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="9d49f71dbffda8162b0c238a1f2e", 0x0, 0x9, 0x0, 0x1, 0x0, &(0x7f00000005c0)='h', 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c003, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="bf4b3e9e3a9e9a758f8ea2a244a7", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) r4 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r7, &(0x7f0000000800), 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400006000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493", 0x3a}, {&(0x7f0000000300)="fac102009987453e751fbe5a8ab7ad583303ba38660ca6e0cf5e6279a614e86700ed", 0x22}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r8}) sendmsg$tipc(r2, 0x0, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd5, &(0x7f0000000300)=""/213}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x26, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000200)=0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000058331a00c600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) 1.220718753s ago: executing program 1 (id=3648): r0 = getpid() perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x10}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008d"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x729000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000000c0)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r1, &(0x7f0000000380)="66e3901f58c4c46859a171c40c6738c434f796ec7fecf2b6ff78ce90cb4ee7d48f5a7586a250ee9bc8338b2e2f9c2d4fa3c93e66092a080f611155b8137e602045755637c01d04cae44d893a83a3d9fc1d97dd233bc37cc45b8a6e7decd0d9863d49b7accb7d77dc0d5627bedeee5acc90a616a05471fa0d021864b1ccf1a4032d07a84145bf085c2ff61cbcf4d969e7e53b2e8a5334842ec97d6b011cf269f2925debd3a130eb0a194dd202fe5760bf187904cf1023ea693ba944e03c264be72ff7cbeb02fd169fad49394ff105ae8121ee9023ef22e299e479efae76eab5305d157c62daebeb1d54eb8c73d7d6cb3796f6de1021"}, 0x20) 1.141279057s ago: executing program 3 (id=3649): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x200000000000923d, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) close(r1) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='1-'], 0x31) 1.043615231s ago: executing program 3 (id=3650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) (async) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x28978793a6bfe40d, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7f) 896.595308ms ago: executing program 0 (id=3651): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002e000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="17724b568c149730350c352f658c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002e000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="17724b568c149730350c352f658c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 896.320628ms ago: executing program 2 (id=3652): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002f00)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000009157a270", 0x89}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 844.00962ms ago: executing program 4 (id=3653): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0xa, 0x1000, 0xb3, 0x7f}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 772.530344ms ago: executing program 3 (id=3654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000004004000000040000000204000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0xb, 0x7, 0xf3, 0x10, 0x0, 0x6, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5cc2, 0x2, @perf_bp={&(0x7f0000000a40), 0xc}, 0x0, 0x4, 0x9, 0x9, 0x9, 0xffff0000, 0x7, 0x0, 0x8, 0x0, 0x4c44}, 0x0, 0xc, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f00000009c0)={0x3, 0x80, 0xc, 0x3, 0xf, 0x4, 0x0, 0x5, 0x80020, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x4340, 0x6e109d9, 0x8f, 0x2, 0x6, 0x41, 0x79, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x3, r5, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0xe, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000740)=""/182, 0x27, 0xb6, 0x1, 0x7}, 0x28) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2600, 0x0, 0x9, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001000e50e34ceb956a5f383fb027b52067dfbac68c1a0000000000000000400000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000002c0)=r11, 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r13, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r12, &(0x7f0000001ac0)={0x0, 0x3a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r14, &(0x7f00000004c0)=ANY=[], 0xfdef) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2}}, 0x0, 0xfffffd73, 0x0, 0xfffffffd}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r15, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r16, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x1c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x0, 0x1, 0x9, 0xa, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x49}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0xa, 0xa, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x86, &(0x7f00000004c0)=""/134, 0x41000, 0x14, '\x00', 0x0, @fallback=0x22, r6, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r16, r4, 0x3, &(0x7f0000000880)=[r2, r3], &(0x7f00000008c0)=[{0x5, 0x1, 0xf, 0x7}, {0x0, 0x4, 0x1, 0x4}, {0x2, 0x4, 0xa, 0x5}], 0x10, 0xcb8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080400f7ffffff000000001c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 680.546398ms ago: executing program 2 (id=3655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x2, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x200020000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0x72}, 0x40, 0x5, 0x0, 0x0, 0x3, 0x7, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000200000000006000000850000006100000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000934c645b0123bed12db71700000051b20000000080000000000000c9327a4f653e2c6e3bf46261f69b56c34c69ea5f391a5ce1c8460211095d1317ddbb4f5d181cdff8100238cb7a177ccf4f7bd51cc1819ef42e4689fca9e406a9a295792cd1cf97c2860d2001dfe2190c174d4894", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) 673.501868ms ago: executing program 0 (id=3656): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000100), 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f0000000300)=""/200, 0xc8}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}, 0x40000000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a847e0ffff00124000632f77", 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x7, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x36) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180063f10004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000100), 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f0000000300)=""/200, 0xc8}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}, 0x40000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a847e0ffff00124000632f77", 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x29, 0x7, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x36) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180063f10004500", 0x2e}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feae5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f44925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbe358ba1aa84339698c800ba3d80585abedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334abc6370663fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f0946", 0x407}], 0x2}, 0x0) (async) 514.039906ms ago: executing program 3 (id=3657): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000cc0), 0x8}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x6}, 0x0, 0x0, 0xfffffffd, 0x3, 0x1e, 0x0, 0xfffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001004000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff0000000015040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe0000000079130000000000006f000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$kcm(0xa, 0x2, 0x73) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES64=r6], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x0) (async) r8 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) close(r7) (async) close(r7) recvmsg(r8, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x5}, 0x80) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 236.581999ms ago: executing program 1 (id=3658): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) socketpair(0x15, 0x6, 0x80, &(0x7f00000002c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b2af8ff00000000b50900000000ffffdbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="000000000000000000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000bab7988fad74478839366ed8d8239d552a03a60d1129345bcf48accfe259df8903858cae6fe75ed5af53a146fca00a564bbf29fddf8b8c9a2d3983332756cb6b9671e0a0d380ec65d847857af71c657e57fe7ada81cf9be5159c476feaf7f8800c1c23cbff6c4ff7b548bd0a7806aba714da903ba878947778444a528c01423d2a2ea065edbc77e69d85a792ab2f53a07a82b245b311ce5f000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=3659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000100700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f7ff0000b7040000000000008500000082000000180100002020732500000000002032207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000ece47c33db1123214dc66875b0b61ee4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) kernel console output (not intermixed with test programs): 6] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2332'. [ 511.413079][T14223] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2334'. [ 511.504894][T14220] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2335'. [ 511.668908][T14234] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2340'. [ 512.249826][T14251] syz_tun: refused to change device tx_queue_len [ 512.266324][T14251] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 512.796218][T14273] delete_channel: no stack [ 512.824951][T14273] delete_channel: no stack [ 512.933937][T14275] __nla_validate_parse: 1 callbacks suppressed [ 512.933978][T14275] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2354'. [ 512.995504][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.021128][T14282] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.2354'. [ 513.037475][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.048134][T14282] bridge: RTM_NEWNEIGH with invalid ether address [ 513.089661][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.105901][T14288] ip6gretap0: mtu less than device minimum [ 513.122632][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.157089][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.201336][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.250650][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.267959][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.292294][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.323951][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.347357][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.387608][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.417186][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.432947][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.444285][T14286] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2355'. [ 513.454109][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.469964][T14292] validate_nla: 65 callbacks suppressed [ 513.469978][T14292] netlink: 'syz.3.2358': attribute type 2 has an invalid length. [ 513.490612][T14286] openvswitch: netlink: Flow actions attr not present in new flow. [ 513.657805][T14304] device sit0 left promiscuous mode [ 513.729772][T14305] device sit0 entered promiscuous mode [ 517.048897][T14432] netlink: 'syz.3.2389': attribute type 10 has an invalid length. [ 517.268487][T14432] device wlan1 left promiscuous mode [ 517.335407][T14432] team0: Port device wlan1 added [ 517.366299][T14438] netlink: 'syz.1.2391': attribute type 21 has an invalid length. [ 517.419653][T14446] tun0: tun_chr_ioctl cmd 2148553947 [ 518.154377][T14460] netlink: 'syz.0.2396': attribute type 13 has an invalid length. [ 518.178896][T14460] __nla_validate_parse: 31 callbacks suppressed [ 518.178935][T14460] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2396'. [ 518.291068][T14466] netlink: 'syz.4.2398': attribute type 16 has an invalid length. [ 518.306424][T14466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2398'. [ 518.681073][T14476] netlink: 'syz.2.2401': attribute type 29 has an invalid length. [ 518.724708][T14476] netlink: 'syz.2.2401': attribute type 29 has an invalid length. [ 518.775979][T14476] netlink: 'syz.2.2401': attribute type 29 has an invalid length. [ 518.971990][T14486] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 519.024368][T14486] netlink: 'syz.0.2404': attribute type 11 has an invalid length. [ 519.046646][T14486] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2404'. [ 519.615688][T14501] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 519.693967][T14501] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 519.731372][T14501] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2408'. [ 519.802446][T14485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.962925][T14504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2408'. [ 520.007603][T14506] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 520.253726][T14506] device veth0_macvtap left promiscuous mode [ 520.668151][T14513] netlink: 'syz.0.2412': attribute type 11 has an invalid length. [ 521.012371][T14535] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 521.092554][T14541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2415'. [ 521.255671][T14535] team0: Device gre0 is of different type [ 521.351156][T14530] can: request_module (can-proto-0) failed. [ 521.710122][T14530] can: request_module (can-proto-0) failed. [ 522.095587][T14546] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.2419'. [ 522.207783][T14552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2421'. [ 522.846385][T14562] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2424'. [ 522.902860][T14564] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2424'. [ 522.948807][T14566] netlink: 'syz.0.2425': attribute type 10 has an invalid length. [ 526.107168][T14566] device wg1 entered promiscuous mode [ 526.118600][T14566] team0: Device wg1 is of different type [ 526.160089][T14572] netlink: 'syz.2.2426': attribute type 2 has an invalid length. [ 526.192444][T14586] netlink: 'syz.2.2426': attribute type 2 has an invalid length. [ 527.144373][T14621] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.2438'. [ 527.249788][T14612] netlink: 'syz.2.2436': attribute type 16 has an invalid length. [ 527.354851][T14612] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2436'. [ 527.400106][T14626] netlink: 'syz.0.2437': attribute type 4 has an invalid length. [ 527.435680][T14626] netlink: 'syz.0.2437': attribute type 1 has an invalid length. [ 527.443923][T14626] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2437'. [ 527.879497][T14644] netlink: 'syz.2.2443': attribute type 3 has an invalid length. [ 527.887284][T14644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2443'. [ 528.008272][T14644] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2443'. [ 528.028068][T14644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 528.086821][T14644] net_ratelimit: 24 callbacks suppressed [ 528.086837][T14644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.481243][T14671] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2448'. [ 528.826883][T14679] netlink: 'syz.0.2450': attribute type 10 has an invalid length. [ 528.856997][T14679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2450'. [ 529.163129][T14686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2451'. [ 529.374834][T14686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2451'. [ 529.425212][T14686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2451'. [ 532.524742][T14703] netlink: 'syz.4.2454': attribute type 21 has an invalid length. [ 532.584301][T14703] netlink: 'syz.4.2454': attribute type 22 has an invalid length. [ 532.676110][T14703] netlink: 'syz.4.2454': attribute type 13 has an invalid length. [ 532.807936][T14703] __nla_validate_parse: 30 callbacks suppressed [ 532.807955][T14703] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.2454'. [ 533.272806][T14737] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 533.310216][T14737] netlink: 'syz.4.2458': attribute type 4 has an invalid length. [ 533.342490][T14737] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2458'. [ 533.372899][T14726] syz.1.2456[14726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.373625][T14728] device bond0 entered promiscuous mode [ 533.492060][T14740] netlink: 'syz.3.2459': attribute type 3 has an invalid length. [ 533.509764][T14728] device bond_slave_0 entered promiscuous mode [ 533.530955][T14740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2459'. [ 533.572809][T14728] device bond_slave_1 entered promiscuous mode [ 533.651467][T14728] device bridge_slave_1 entered promiscuous mode [ 535.954006][T14761] netlink: 'syz.3.2464': attribute type 29 has an invalid length. [ 535.963613][T14761] netlink: 'syz.3.2464': attribute type 29 has an invalid length. [ 535.998220][T14761] netlink: 'syz.3.2464': attribute type 29 has an invalid length. [ 536.427522][T14784] netlink: 'syz.3.2473': attribute type 2 has an invalid length. [ 536.443644][T14784] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2473'. [ 537.622026][T14825] validate_nla: 1 callbacks suppressed [ 537.622040][T14825] netlink: 'syz.4.2484': attribute type 10 has an invalid length. [ 537.945643][T14841] netlink: 'syz.3.2487': attribute type 3 has an invalid length. [ 537.960066][T14841] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2487'. [ 537.995281][T14844] netlink: 10879 bytes leftover after parsing attributes in process `syz.0.2489'. [ 538.490847][T14855] netlink: 'syz.4.2492': attribute type 4 has an invalid length. [ 538.525699][T14855] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2492'. [ 538.681041][T14863] netlink: 'syz.1.2494': attribute type 2 has an invalid length. [ 538.740221][T14863] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2494'. [ 538.802232][T14873] device syzkaller0 entered promiscuous mode [ 539.080451][T14886] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2499'. [ 539.090075][T14888] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2499'. [ 539.255429][T14899] netlink: 'syz.3.2500': attribute type 29 has an invalid length. [ 539.312237][T14899] netlink: 'syz.3.2500': attribute type 29 has an invalid length. [ 539.387548][T14893] netlink: 'syz.3.2500': attribute type 29 has an invalid length. [ 540.184143][T14935] netlink: 'syz.4.2507': attribute type 29 has an invalid length. [ 540.704881][T14935] netlink: 'syz.4.2507': attribute type 29 has an invalid length. [ 540.744462][T14937] netlink: 'syz.2.2509': attribute type 10 has an invalid length. [ 540.773885][T14937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2509'. [ 540.799584][T14937] bridge0: port 5(veth0_vlan) entered blocking state [ 540.826317][T14937] bridge0: port 5(veth0_vlan) entered disabled state [ 540.869261][T14952] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2511'. [ 540.869896][T14937] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 541.954518][T14972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2516'. [ 542.123378][T14985] bridge0: port 3(dummy0) entered disabled state [ 542.166776][T14985] device dummy0 left promiscuous mode [ 542.188605][T14985] bridge0: port 3(dummy0) entered disabled state [ 542.242720][T14985] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 543.005484][T15001] netlink: 3291 bytes leftover after parsing attributes in process `syz.1.2522'. [ 543.362686][T15013] IPv6: pim6reg1: Disabled Multicast RS [ 544.105557][T15028] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2530'. [ 544.352379][T15037] validate_nla: 4 callbacks suppressed [ 544.352414][T15037] netlink: 'syz.1.2534': attribute type 2 has an invalid length. [ 544.399904][T15037] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2534'. [ 544.646794][T15048] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2536'. [ 545.138071][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.191458][T15070] team0: Device wg1 is of different type [ 545.213895][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.274369][T15070] team0: Device wg1 is of different type [ 545.290196][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.308778][T15070] team0: Device wg1 is of different type [ 545.331911][T15080] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2544'. [ 545.348330][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.362749][T15070] team0: Device wg1 is of different type [ 545.385494][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.406434][T15070] team0: Device wg1 is of different type [ 545.439181][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.461232][T15070] team0: Device wg1 is of different type [ 545.498630][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.525192][T15070] team0: Device wg1 is of different type [ 545.557476][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.594420][T15070] team0: Device wg1 is of different type [ 545.642684][T15070] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 545.681113][T15070] team0: Device wg1 is of different type [ 545.720280][T15070] team0: Device wg1 is of different type [ 545.746138][T15070] team0: Device wg1 is of different type [ 545.810559][T15070] team0: Device wg1 is of different type [ 545.849094][T15070] team0: Device wg1 is of different type [ 545.883264][T15070] team0: Device wg1 is of different type [ 545.906254][T15070] team0: Device wg1 is of different type [ 546.057751][ T49] Bluetooth: hci3: ISO packet for unknown connection handle 62 [ 546.091646][T15106] IPv6: NLM_F_CREATE should be specified when creating new route [ 546.114647][T15106] IPv6: Can't replace route, no match found [ 546.189370][T15120] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2550'. [ 547.781662][T15166] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2561'. [ 548.022122][T15172] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.033073][T15172] IPv6: Can't replace route, no match found [ 548.053169][T15172] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.2564'. [ 548.200644][T15186] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2569'. [ 550.858702][T15206] device syz_tun entered promiscuous mode [ 550.875254][T15208] validate_nla: 12 callbacks suppressed [ 550.875269][T15208] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 550.906839][T15208] netlink: 'syz.2.2572': attribute type 4 has an invalid length. [ 550.918783][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2572'. [ 550.935076][T15212] netlink: 'syz.0.2575': attribute type 3 has an invalid length. [ 550.957865][T15212] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2575'. [ 551.244620][T15234] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2578'. [ 551.285210][T15232] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2578'. [ 551.307227][T15233] netlink: 'syz.4.2579': attribute type 21 has an invalid length. [ 551.347315][T15233] IPv6: NLM_F_CREATE should be specified when creating new route [ 551.359176][T15238] netlink: 'syz.4.2579': attribute type 1 has an invalid length. [ 551.394128][T15238] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.2579'. [ 551.418536][T15233] IPv6: Can't replace route, no match found [ 551.863224][T15251] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2583'. [ 552.340280][T15276] netlink: 'syz.2.2591': attribute type 2 has an invalid length. [ 552.365496][T15276] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2591'. [ 552.865122][T15278] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 552.962192][T15285] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 554.235108][T15301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2596'. [ 555.978586][T15312] device syzkaller0 entered promiscuous mode [ 556.425135][T15340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2602'. [ 556.428046][T15341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2602'. [ 556.565997][T15348] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2605'. [ 556.597436][T15348] openvswitch: netlink: Flow actions attr not present in new flow. [ 558.442429][T15347] netlink: 'syz.2.2605': attribute type 41 has an invalid length. [ 558.691054][T15357] netlink: 'syz.1.2606': attribute type 46 has an invalid length. [ 558.693349][T15364] netlink: 'syz.4.2609': attribute type 29 has an invalid length. [ 558.725595][T15364] netlink: 'syz.4.2609': attribute type 16 has an invalid length. [ 558.744051][T15364] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2609'. [ 558.807983][T15367] netlink: 'syz.0.2610': attribute type 3 has an invalid length. [ 558.847642][T15367] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2610'. [ 558.920265][T15368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2609'. [ 561.102636][T15404] netlink: 'syz.2.2618': attribute type 21 has an invalid length. [ 561.128115][T15404] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.368592][T15413] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2621'. [ 561.462548][T15413] device bond0 left promiscuous mode [ 561.475129][T15413] device bond_slave_0 left promiscuous mode [ 561.489846][T15413] device bond_slave_1 left promiscuous mode [ 561.494515][T15419] netlink: 'syz.2.2622': attribute type 2 has an invalid length. [ 561.516551][T15413] device netdevsim0 left promiscuous mode [ 561.528717][T15419] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2622'. [ 561.540501][T15413] device bridge_slave_1 left promiscuous mode [ 561.560599][T15413] : port 1(bond0) entered disabled state [ 561.593676][T15413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.638405][T15413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.672517][T15413] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 561.686583][T15413] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 561.705120][T15413] bond0 (unregistering): Released all slaves [ 561.717585][T15426] device sit0 left promiscuous mode [ 561.981172][T15440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2627'. [ 562.041253][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 562.384806][T15460] netlink: 15007 bytes leftover after parsing attributes in process `syz.3.2633'. [ 562.859643][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.865986][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.908047][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 563.917246][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 564.293453][T15485] netlink: 'syz.2.2639': attribute type 11 has an invalid length. [ 564.353487][T15485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2639'. [ 564.445763][T15489] netlink: 'syz.2.2639': attribute type 11 has an invalid length. [ 564.500829][T15489] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2639'. [ 564.587558][T15482] device syzkaller0 entered promiscuous mode [ 564.625533][T15491] netlink: 'syz.4.2641': attribute type 2 has an invalid length. [ 564.652756][T15491] netlink: 'syz.4.2641': attribute type 8 has an invalid length. [ 564.670944][T15491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2641'. [ 564.673529][T15480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.393703][T15495] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.2642'. [ 566.406203][T15510] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2646'. [ 566.848677][T15521] netlink: 'syz.1.2647': attribute type 10 has an invalid length. [ 567.917040][T15542] netlink: 'syz.3.2653': attribute type 2 has an invalid length. [ 567.945393][T15542] netlink: 'syz.3.2653': attribute type 8 has an invalid length. [ 567.977595][T15542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2653'. [ 568.000570][T15548] netlink: 'syz.3.2653': attribute type 2 has an invalid length. [ 568.008772][T15548] netlink: 'syz.3.2653': attribute type 8 has an invalid length. [ 568.031092][T15551] netlink: 'syz.0.2656': attribute type 3 has an invalid length. [ 568.033897][T15545] netlink: 'syz.2.2655': attribute type 2 has an invalid length. [ 568.044342][T15548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2653'. [ 568.063452][T15546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2654'. [ 568.067076][T15551] netlink: 'syz.0.2656': attribute type 1 has an invalid length. [ 568.078720][T15546] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2654'. [ 568.087550][T15551] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2656'. [ 568.174321][T15545] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2655'. [ 568.181082][T15560] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2656'. [ 568.621381][T15579] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2662'. [ 569.428222][T15610] netlink: zone id is out of range [ 569.454596][T15610] netlink: zone id is out of range [ 569.470047][T15610] netlink: zone id is out of range [ 569.485706][T15610] netlink: zone id is out of range [ 569.495745][T15610] netlink: zone id is out of range [ 569.520493][T15610] netlink: zone id is out of range [ 569.542690][T15610] netlink: zone id is out of range [ 569.587959][T15610] netlink: zone id is out of range [ 569.598891][T15610] netlink: zone id is out of range [ 569.617052][T15610] netlink: zone id is out of range [ 569.895456][T15639] validate_nla: 5 callbacks suppressed [ 569.895489][T15639] netlink: 'syz.2.2676': attribute type 25 has an invalid length. [ 569.912834][T15639] netlink: 'syz.2.2676': attribute type 29 has an invalid length. [ 570.293633][T15656] netlink: 'syz.1.2681': attribute type 21 has an invalid length. [ 570.466243][T15662] netlink: 'syz.2.2683': attribute type 1 has an invalid length. [ 570.836680][T15656] netlink: 'syz.1.2681': attribute type 2 has an invalid length. [ 571.568886][T15704] __nla_validate_parse: 5 callbacks suppressed [ 571.568904][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 571.611640][T15704] netlink: 'syz.4.2692': attribute type 39 has an invalid length. [ 571.838094][T15707] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2695'. [ 571.887121][T15720] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2696'. [ 571.900765][T15711] delete_channel: no stack [ 571.912053][T15712] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2696'. [ 572.230173][T15725] netlink: 'syz.3.2698': attribute type 2 has an invalid length. [ 572.272500][T15729] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2699'. [ 572.335993][T15729] device hsr_slave_0 left promiscuous mode [ 572.367516][T15729] device hsr_slave_1 left promiscuous mode [ 572.563688][T15723] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2697'. [ 572.660856][T15725] device .*! entered promiscuous mode [ 574.128814][T15777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2711'. [ 574.276754][T15777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2711'. [ 574.345206][T15781] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2711'. [ 575.137001][T15784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2711'. [ 575.249301][T15797] device syzkaller0 entered promiscuous mode [ 575.433057][T15815] netlink: 'syz.0.2717': attribute type 10 has an invalid length. [ 576.442162][T15815] device team0 left promiscuous mode [ 576.447636][T15815] device team_slave_0 left promiscuous mode [ 576.465901][T15815] device team_slave_1 left promiscuous mode [ 576.472609][T15815] : port 2(team0) entered disabled state [ 576.505099][T15824] netlink: 'syz.1.2719': attribute type 2 has an invalid length. [ 576.521048][T15825] netlink: 'syz.1.2719': attribute type 2 has an invalid length. [ 577.988348][T15849] netlink: 'syz.2.2726': attribute type 2 has an invalid length. [ 579.950940][T15842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.978963][T15849] device 0 entered promiscuous mode [ 580.339623][T15864] __nla_validate_parse: 2 callbacks suppressed [ 580.339679][T15864] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2729'. [ 580.368993][T15864] net_ratelimit: 35 callbacks suppressed [ 580.369005][T15864] netlink: zone id is out of range [ 580.382331][T15864] netlink: zone id is out of range [ 580.388834][T15864] netlink: zone id is out of range [ 580.405049][T15864] netlink: zone id is out of range [ 580.429436][T15864] netlink: zone id is out of range [ 580.435137][T15864] netlink: zone id is out of range [ 580.479432][T15864] netlink: zone id is out of range [ 580.485317][T15864] netlink: zone id is out of range [ 580.497615][T15864] netlink: zone id is out of range [ 580.503881][T15864] netlink: zone id is out of range [ 580.655697][T15878] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.2734'. [ 580.696202][T15878] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 581.234038][T15902] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2742'. [ 581.269426][T15902] netlink: 'syz.3.2742': attribute type 10 has an invalid length. [ 581.287726][T15902] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2742'. [ 581.661026][T15911] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2746'. [ 581.778346][T15911] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2746'. [ 582.188457][T15919] netlink: 'syz.3.2749': attribute type 27 has an invalid length. [ 582.205619][T15919] netlink: 'syz.3.2749': attribute type 25 has an invalid length. [ 582.426145][T15919] netlink: 'syz.3.2749': attribute type 39 has an invalid length. [ 584.571330][T16004] netlink: 'syz.0.2766': attribute type 6 has an invalid length. [ 584.593147][T16004] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2766'. [ 585.485177][T16029] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2772'. [ 585.511763][T16031] netlink: 'syz.3.2773': attribute type 7 has an invalid length. [ 585.595511][T16031] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.2773'. [ 585.649679][T16034] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2773'. [ 585.693857][T16040] netlink: 'syz.1.2774': attribute type 3 has an invalid length. [ 585.698235][T16032] netlink: 153060 bytes leftover after parsing attributes in process `syz.3.2773'. [ 585.727762][T16040] netlink: 'syz.1.2774': attribute type 4 has an invalid length. [ 585.781002][T16040] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.2774'. [ 586.254018][T16060] netlink: 'syz.2.2777': attribute type 2 has an invalid length. [ 586.310537][T16060] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2777'. [ 586.445122][T16071] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2780'. [ 586.719623][T16086] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2782'. [ 586.786792][T16086] netlink: 'syz.3.2782': attribute type 21 has an invalid length. [ 586.797978][T16086] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2782'. [ 586.896514][T16094] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 586.922603][T16094] dvmrp1: linktype set to 768 [ 587.444616][T16099] tap0: tun_chr_ioctl cmd 1074025677 [ 587.479746][T16099] tap0: linktype set to 6 [ 587.506769][T16104] device sit0 left promiscuous mode [ 587.900973][T16125] netlink: 'syz.3.2792': attribute type 1 has an invalid length. [ 587.918218][T16125] netlink: 'syz.3.2792': attribute type 1 has an invalid length. [ 587.941450][T16125] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2792'. [ 589.446998][T16159] netlink: 'syz.2.2800': attribute type 7 has an invalid length. [ 589.513776][T16162] netlink: 'syz.2.2800': attribute type 8 has an invalid length. [ 589.558964][T16162] netlink: 'syz.2.2800': attribute type 1 has an invalid length. [ 589.930399][T16181] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 589.948329][T16181] netlink: 'syz.3.2808': attribute type 4 has an invalid length. [ 589.975019][T16171] netlink: 'syz.0.2806': attribute type 10 has an invalid length. [ 590.361171][T16171] team0: Device nlmon0 is of different type [ 590.398205][T16171] netlink: 'syz.0.2806': attribute type 10 has an invalid length. [ 590.419071][T16171] team0: Device nlmon0 is of different type [ 590.436716][T16171] team0: Device nlmon0 is of different type [ 590.475625][T16171] team0: Device nlmon0 is of different type [ 590.501981][T16171] team0: Device nlmon0 is of different type [ 590.544362][T16171] team0: Device nlmon0 is of different type [ 590.584801][T16171] team0: Device nlmon0 is of different type [ 590.852057][T16208] __nla_validate_parse: 5 callbacks suppressed [ 590.852074][T16208] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2818'. [ 590.872911][T16208] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.2818'. [ 590.992932][T16214] syz.0.2821[16214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 590.993067][T16214] syz.0.2821[16214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.921785][T16226] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2824'. [ 592.117053][T16235] validate_nla: 7 callbacks suppressed [ 592.117068][T16235] netlink: 'syz.0.2826': attribute type 29 has an invalid length. [ 592.201019][T16251] netlink: 'syz.3.2827': attribute type 29 has an invalid length. [ 592.220262][T16235] netlink: 'syz.0.2826': attribute type 29 has an invalid length. [ 592.338710][T16251] netlink: 'syz.3.2827': attribute type 29 has an invalid length. [ 592.343299][T16234] netlink: 'syz.0.2826': attribute type 29 has an invalid length. [ 592.357061][T16256] netlink: 'syz.3.2827': attribute type 29 has an invalid length. [ 592.386461][T16235] netlink: 'syz.0.2826': attribute type 29 has an invalid length. [ 592.426138][T16259] netlink: 'syz.3.2827': attribute type 29 has an invalid length. [ 592.538351][T16263] netlink: 'syz.3.2827': attribute type 29 has an invalid length. [ 592.640393][T16264] netlink: 'syz.3.2827': attribute type 29 has an invalid length. [ 593.591136][T16301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2837'. [ 593.830566][T16303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2838'. [ 594.012895][T16308] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 594.225993][T16317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.236218][T16317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.243996][T16317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.267990][T16317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.276653][T16317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 594.290764][T16317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 594.310391][ T4325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.331336][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 594.503515][ T4325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.575996][T16324] sctp: [Deprecated]: syz.3.2843 (pid 16324) Use of int in maxseg socket option. [ 594.575996][T16324] Use struct sctp_assoc_value instead [ 594.598240][ T4325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.030571][ T4325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.228707][T16336] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.2845'. [ 595.806789][T16316] chnl_net:caif_netlink_parms(): no params data found [ 596.022552][ T4325] device 0 left promiscuous mode [ 596.378084][T16317] Bluetooth: hci4: command 0x0409 tx timeout [ 596.747038][T16370] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2849'. [ 597.454111][T16370] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 598.143556][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.178108][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.231411][T16316] device bridge_slave_0 entered promiscuous mode [ 598.458264][ T49] Bluetooth: hci4: command 0x041b tx timeout [ 598.497166][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.511031][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.617408][T16316] device bridge_slave_1 entered promiscuous mode [ 599.389229][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.519551][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.681271][T16316] team0: Port device team_slave_0 added [ 599.707583][T16316] team0: Port device team_slave_1 added [ 599.785675][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.796118][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.842371][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.894791][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.920848][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.005857][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.538241][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 602.618392][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 603.021394][T16316] device hsr_slave_0 entered promiscuous mode [ 603.056699][T16316] device hsr_slave_1 entered promiscuous mode [ 603.067286][T16316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.088924][T16316] Cannot create hsr debugfs directory [ 603.316195][T16488] sock: sock_timestamping_bind_phc: sock not bind to device [ 603.929471][T16498] device syzkaller0 entered promiscuous mode [ 604.409557][ T4325] device hsr_slave_0 left promiscuous mode [ 604.442984][ T4325] device veth1_macvtap left promiscuous mode [ 604.449840][ T4325] device veth0_macvtap left promiscuous mode [ 604.874551][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 604.909542][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 609.072932][T16316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.100124][T16316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.140895][T16316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.171295][T16316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.443433][T16564] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2878'. [ 609.568069][T16316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.591654][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.607496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.679272][T16316] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.686255][T16574] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2882'. [ 609.722523][T16574] net_ratelimit: 3543 callbacks suppressed [ 609.722566][T16574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.765262][T16579] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2883'. [ 609.798445][T16579] netlink: zone id is out of range [ 609.838026][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.846662][T16579] netlink: zone id is out of range [ 609.879912][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.896754][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.904015][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.914709][T16579] netlink: del zone limit has 4 unknown bytes [ 609.924023][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.966324][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.976075][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.002410][T13135] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.009590][T13135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.046226][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.073017][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.137977][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 610.153086][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.175781][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 610.203833][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.233231][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.259782][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.289539][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.319209][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.338456][T16607] validate_nla: 23 callbacks suppressed [ 610.338471][T16607] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 610.380527][T16607] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2887'. [ 610.427374][T16316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.447245][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.034410][T16634] netlink: 'syz.3.2894': attribute type 2 has an invalid length. [ 611.050648][T16634] netlink: 'syz.3.2894': attribute type 1 has an invalid length. [ 611.075124][T16634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2894'. [ 611.114466][T16634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.244232][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 611.268056][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 611.326090][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.395587][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.413331][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.462937][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.483387][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.524635][T16316] device veth0_vlan entered promiscuous mode [ 611.572655][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.589219][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.606428][T16316] device veth1_vlan entered promiscuous mode [ 611.615589][T16666] sctp: [Deprecated]: syz.3.2898 (pid 16666) Use of int in max_burst socket option deprecated. [ 611.615589][T16666] Use struct sctp_assoc_value instead [ 611.628435][T16668] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2899'. [ 611.697926][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 611.706165][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 611.738091][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.747661][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.783752][T16316] device veth0_macvtap entered promiscuous mode [ 611.796472][T16316] device veth1_macvtap entered promiscuous mode [ 611.844419][T16316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.880026][T16316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.913579][T16316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.947194][T16316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.981016][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.990537][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 612.013372][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 612.049645][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 612.083726][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 612.112547][T16316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.123090][T16316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.163526][T16316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.199252][T16316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.231623][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.251605][T16316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.290047][T16316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.317105][T16316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.338133][T16316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.356345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 612.375594][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.673170][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.698380][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.793323][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 612.868801][T13135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.893125][T13135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.963131][T16700] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2903'. [ 613.037199][T16700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 613.138279][T16700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.205199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 613.231384][T16702] tipc: Started in network mode [ 613.264439][T16702] tipc: Node identity 9215a268, cluster identity 4711 [ 613.348085][T16702] tipc: Node number set to 2450891368 [ 613.366375][T16716] netlink: 'syz.3.2906': attribute type 2 has an invalid length. [ 613.430325][T16716] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 613.685365][T16728] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2834'. [ 614.377303][T16742] netlink: 'syz.0.2912': attribute type 2 has an invalid length. [ 614.418515][T16742] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2912'. [ 614.608616][T16741] netlink: 'syz.0.2912': attribute type 2 has an invalid length. [ 614.636378][T16741] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2912'. [ 614.888691][T16753] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2915'. [ 615.066067][T16756] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2915'. [ 615.732362][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 615.742226][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 615.750374][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 615.776561][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 615.784790][ T49] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 615.792337][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 616.605570][T16795] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2920'. [ 616.734951][T16801] netlink: 'syz.2.2922': attribute type 2 has an invalid length. [ 616.777361][T16801] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2922'. [ 616.844492][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.880960][T16805] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 617.127094][T16805] team0: Device gre0 is of different type [ 617.261986][T16774] chnl_net:caif_netlink_parms(): no params data found [ 617.404901][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.457179][T16833] netlink: 'syz.0.2925': attribute type 21 has an invalid length. [ 617.477204][T16833] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2925'. [ 617.503859][T16833] netlink: 'syz.0.2925': attribute type 4 has an invalid length. [ 617.526739][T16833] netlink: 'syz.0.2925': attribute type 5 has an invalid length. [ 617.544617][T16833] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2925'. [ 617.686996][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.818372][T16317] Bluetooth: hci5: command 0x0409 tx timeout [ 617.831196][ T4325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.940421][T16846] netlink: 'syz.2.2927': attribute type 21 has an invalid length. [ 619.217084][T16774] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.239284][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.257345][T16774] device bridge_slave_0 entered promiscuous mode [ 619.383148][T16774] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.398744][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.406702][T16774] device bridge_slave_1 entered promiscuous mode [ 619.533009][T16774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.556414][ T4325] tipc: Left network mode [ 619.559707][T16875] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2931'. [ 619.596115][T16774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.720700][T16774] team0: Port device team_slave_0 added [ 619.765244][T16881] tipc: Started in network mode [ 619.794596][T16881] tipc: Node identity 9215a268, cluster identity 4711 [ 619.833765][T16881] tipc: Node number set to 2450891368 [ 619.897881][T16317] Bluetooth: hci5: command 0x041b tx timeout [ 619.916527][T16774] team0: Port device team_slave_1 added [ 620.045740][T16774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.067923][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.138521][T16774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.246267][T16774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.260807][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.420019][T16774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.493711][T16905] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 620.535667][T16905] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2936'. [ 620.601631][T16774] device hsr_slave_0 entered promiscuous mode [ 620.632814][T16774] device hsr_slave_1 entered promiscuous mode [ 620.648983][T16774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.656567][T16774] Cannot create hsr debugfs directory [ 621.892094][T16943] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2947'. [ 621.916797][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2946'. [ 621.978133][T16317] Bluetooth: hci5: command 0x040f tx timeout [ 622.065263][T16938] netlink: 'syz.0.2946': attribute type 10 has an invalid length. [ 622.298959][T16956] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.2950'. [ 622.393541][T16956] netlink: zone id is out of range [ 622.483069][T16774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 622.520471][T16774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 622.571913][T16968] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.2950'. [ 622.573416][T16774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.645495][T16774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.687445][T16968] netlink: zone id is out of range [ 622.907702][T16978] netlink: 'syz.1.2954': attribute type 3 has an invalid length. [ 622.943591][T16774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.992472][T16978] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2954'. [ 623.221386][T16984] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2956'. [ 623.233512][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.253463][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.265642][T16984] netlink: zone id is out of range [ 623.282080][T16984] netlink: zone id is out of range [ 623.300448][T16774] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.308185][T16984] netlink: zone id is out of range [ 623.348177][T16984] netlink: zone id is out of range [ 623.354570][T16984] netlink: zone id is out of range [ 623.360306][T16989] netlink: 'syz.0.2958': attribute type 2 has an invalid length. [ 623.386030][T16984] netlink: zone id is out of range [ 623.396586][T16984] netlink: zone id is out of range [ 623.405975][T16984] netlink: zone id is out of range [ 623.504643][T16996] netlink: 'syz.0.2958': attribute type 10 has an invalid length. [ 623.542402][T16996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2958'. [ 623.684644][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.695737][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.783357][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.790712][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.856069][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.908680][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.012602][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.019879][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.058200][T16317] Bluetooth: hci5: command 0x0419 tx timeout [ 624.156645][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.196195][T16989] device 0 entered promiscuous mode [ 624.305634][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.312303][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.328213][T16996] netlink: 'syz.0.2958': attribute type 10 has an invalid length. [ 624.340195][T16996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2958'. [ 624.378215][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.388256][ T8030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.798260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.821086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.832245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.845994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.973698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.009493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.028315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.049143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.077401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.107123][T16774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.145632][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.154858][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.181937][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.189671][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.208616][ T4325] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 625.232323][ T4325] batman_adv: batadv0: Removing interface: virt_wifi0 [ 625.248995][ T4325] batman_adv: batadv0: Interface deactivated: vlan1 [ 625.262367][ T4325] batman_adv: batadv0: Removing interface: vlan1 [ 625.369863][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.375609][T17046] netlink: 'syz.3.2969': attribute type 9 has an invalid length. [ 625.390250][T17046] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2969'. [ 625.409991][ T4325] device veth1_macvtap left promiscuous mode [ 627.016113][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.057597][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.233869][ T4325] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 627.258336][ T4325] bond0 (unregistering): Released all slaves [ 627.375591][T17044] device wlan1 entered promiscuous mode [ 627.386388][T17054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2971'. [ 627.429367][T17065] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2973'. [ 627.457989][T17065] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2973'. [ 627.493951][T17065] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2973'. [ 627.890880][T17073] device batadv0 entered promiscuous mode [ 628.132816][T17098] device bridge_slave_0 left promiscuous mode [ 628.178750][T17098] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.443530][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.460500][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.485553][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.912783][T17120] netlink: 'syz.1.2982': attribute type 2 has an invalid length. [ 628.965209][T17120] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2982'. [ 629.121409][T17120] netlink: 'syz.1.2982': attribute type 2 has an invalid length. [ 630.090863][T17132] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2985'. [ 630.576107][T17158] mac80211_hwsim hwsim42 @: renamed from wlan0 [ 630.652426][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.672348][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.709455][T17161] netlink: 'syz.1.2990': attribute type 3 has an invalid length. [ 630.722380][T17161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2990'. [ 630.773158][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.798552][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.848981][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.882657][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.908825][T16774] device veth0_vlan entered promiscuous mode [ 631.043167][T16774] device veth1_vlan entered promiscuous mode [ 631.198013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 631.216282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.265659][T16774] device veth0_macvtap entered promiscuous mode [ 631.307678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.332374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.375104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 631.421013][T17184] netlink: 'syz.1.2994': attribute type 21 has an invalid length. [ 631.450597][T17184] netlink: 'syz.1.2994': attribute type 6 has an invalid length. [ 631.543440][T17184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2994'. [ 631.638282][T16774] device veth1_macvtap entered promiscuous mode [ 633.105324][T17197] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.2996'. [ 633.148115][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 633.217014][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.248611][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.267856][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.287850][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.308868][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.316229][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 633.329975][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 633.366619][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.380957][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.391143][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.401883][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.413403][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.432195][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 633.441522][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 633.474214][T16774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.497138][T16774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.507175][T16774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.516119][T16774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.561459][T17216] netlink: 'syz.2.2999': attribute type 10 has an invalid length. [ 633.597056][T17216] device wg1 entered promiscuous mode [ 633.603510][T17216] team0: Device wg1 is of different type [ 633.712341][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.731460][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.742239][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 633.775809][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.784627][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.793264][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 634.443778][T17232] netlink: 'syz.1.3002': attribute type 29 has an invalid length. [ 634.485176][T17232] netlink: 'syz.1.3002': attribute type 29 has an invalid length. [ 634.548411][T17232] netlink: 'syz.1.3002': attribute type 11 has an invalid length. [ 634.609624][T17239] netlink: 'syz.4.3003': attribute type 10 has an invalid length. [ 634.617503][T17239] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3003'. [ 634.645057][T17232] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3002'. [ 635.424342][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.435665][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.445351][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.455202][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.463509][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 635.471510][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.922848][T17231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.175334][T17254] netlink: 'syz.1.3016': attribute type 11 has an invalid length. [ 636.203884][T17254] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3016'. [ 636.540537][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.569230][T17259] netlink: 'syz.2.3008': attribute type 21 has an invalid length. [ 636.587182][T17259] netlink: 'syz.2.3008': attribute type 6 has an invalid length. [ 636.604561][T17259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3008'. [ 636.653614][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.849260][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.934598][T17251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.972268][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.081498][T17249] chnl_net:caif_netlink_parms(): no params data found [ 637.256210][T17277] device pim6reg1 entered promiscuous mode [ 637.421721][T17249] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.433474][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.442863][T17249] device bridge_slave_0 entered promiscuous mode [ 637.479799][T17249] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.498234][T16317] Bluetooth: hci3: command 0x0409 tx timeout [ 637.501423][T17249] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.552280][T17249] device bridge_slave_1 entered promiscuous mode [ 637.590340][T17290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3015'. [ 637.733201][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.759626][ T11] device 0 left promiscuous mode [ 637.771384][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.829330][ T11] device .*! left promiscuous mode [ 637.874797][T17299] device lo entered promiscuous mode [ 637.896596][T17299] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 638.006304][ T11] tipc: Left network mode [ 638.040645][T17249] team0: Port device team_slave_0 added [ 638.060198][T17249] team0: Port device team_slave_1 added [ 638.124270][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.144943][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.220548][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.248984][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.270475][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.348750][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.577856][T16317] Bluetooth: hci3: command 0x041b tx timeout [ 641.436398][T17350] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3022'. [ 641.659633][T16317] Bluetooth: hci3: command 0x040f tx timeout [ 641.679320][T17358] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3024'. [ 642.140797][T17249] device hsr_slave_0 entered promiscuous mode [ 642.173451][T17249] device hsr_slave_1 entered promiscuous mode [ 642.274000][T17249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.314498][T17249] Cannot create hsr debugfs directory [ 642.496240][T17347] netlink: 'syz.4.3025': attribute type 21 has an invalid length. [ 642.637349][T17347] netlink: 'syz.4.3025': attribute type 6 has an invalid length. [ 642.762709][T17347] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3025'. [ 643.475927][T17388] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3030'. [ 643.737946][T16317] Bluetooth: hci3: command 0x0419 tx timeout [ 645.045294][T17447] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.3041'. [ 648.214584][T17466] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.3043'. [ 648.383277][T17249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 648.400791][T17249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 648.453400][T17249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 648.491727][T17249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.581389][T17469] netlink: 'syz.1.3044': attribute type 2 has an invalid length. [ 648.619706][T17469] netlink: 'syz.1.3044': attribute type 3 has an invalid length. [ 648.668016][T17469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3044'. [ 648.888779][ T11] team0: Port device wlan1 removed [ 648.935306][T17479] netlink: 'syz.0.3045': attribute type 21 has an invalid length. [ 648.958353][T17479] netlink: 'syz.0.3045': attribute type 6 has an invalid length. [ 649.003572][T17479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3045'. [ 650.044113][T17496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.055714][T17496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.079716][T17496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.087526][T17496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.156003][T17492] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3049'. [ 650.181162][T17495] netlink: 'syz.2.3049': attribute type 10 has an invalid length. [ 650.204134][T17495] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3049'. [ 650.241484][ T11] device hsr_slave_0 left promiscuous mode [ 650.257811][ T11] device hsr_slave_1 left promiscuous mode [ 650.278176][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.288492][ T11] device bridge_slave_0 left promiscuous mode [ 650.294725][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.421861][ T11] device veth1_macvtap left promiscuous mode [ 650.425322][T17517] net_ratelimit: 3545 callbacks suppressed [ 650.425336][T17517] sock: sock_set_timeout: `syz.1.3052' (pid 17517) tries to set negative timeout [ 650.438370][ T11] device veth1_vlan left promiscuous mode [ 650.480140][ T11] device veth0_vlan left promiscuous mode [ 652.247564][ T11] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 652.603666][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 652.665260][ T11] team0 (unregistering): Port device team_slave_1 removed [ 652.719671][ T11] team0 (unregistering): Port device team_slave_0 removed [ 652.766984][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.001177][ T11] bond0 (unregistering): (slave team0): Releasing backup interface [ 653.013264][ T11] team0 (unregistering): Port device bridge0 removed [ 653.044564][ T11] bond0 (unregistering): Released all slaves [ 653.147687][T17249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.183609][T17551] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3059'. [ 653.247472][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.281552][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.346574][T17249] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.386986][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.430944][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 653.454082][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.461258][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.527404][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 653.546089][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 653.601910][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 653.633276][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.640436][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.685122][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 653.701026][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.764550][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.818041][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.938879][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.987246][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.022417][T12962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.106601][T17249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 654.208353][T17249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.250864][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.286341][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.315107][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.346714][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.430357][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.512178][T17596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3068'. [ 654.563096][T17596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3068'. [ 654.682724][T17596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3068'. [ 654.856094][T17596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3068'. [ 655.494958][T17605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3069'. [ 655.974048][T17605] bond0: (slave bond_slave_0): Releasing backup interface [ 656.015882][T17605] device bond_slave_0 left promiscuous mode [ 656.139711][T17605] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 656.255296][T17622] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3073'. [ 656.702738][T12046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.741181][T12046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.804371][T17249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.896180][T17645] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3076'. [ 656.911105][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 656.934070][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.056305][T17645] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 657.083388][T17645] CPU: 1 PID: 17645 Comm: syz.2.3076 Not tainted syzkaller #0 [ 657.090899][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.100967][T17645] Call Trace: [ 657.104257][T17645] [ 657.107196][T17645] dump_stack_lvl+0x188/0x24e [ 657.111903][T17645] ? show_regs_print_info+0x12/0x12 [ 657.117124][T17645] ? load_image+0x410/0x410 [ 657.121665][T17645] sysfs_warn_dup+0x8a/0xa0 [ 657.126195][T17645] sysfs_do_create_link_sd+0xc0/0x110 [ 657.131600][T17645] device_add+0x83b/0x1050 [ 657.136047][T17645] wiphy_register+0x1d8b/0x2aa0 [ 657.140943][T17645] ? cfg80211_event_work+0x40/0x40 [ 657.146070][T17645] ? minstrel_ht_alloc+0x894/0xa20 [ 657.151199][T17645] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 657.157316][T17645] ieee80211_register_hw+0x2d48/0x39f0 [ 657.162802][T17645] ? ieee80211_register_hw+0xf41/0x39f0 [ 657.168359][T17645] ? ieee80211_register_hw+0xf41/0x39f0 [ 657.173932][T17645] ? ieee80211_tasklet_handler+0x20/0x20 [ 657.179581][T17645] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 657.185502][T17645] ? __debug_object_init+0xed/0x440 [ 657.190732][T17645] ? memset+0x1e/0x40 [ 657.194731][T17645] ? __hrtimer_init+0x189/0x270 [ 657.199611][T17645] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 657.205368][T17645] ? memcpy+0x3c/0x60 [ 657.209374][T17645] hwsim_new_radio_nl+0xab7/0xc90 [ 657.214433][T17645] genl_family_rcv_msg_doit+0x22f/0x350 [ 657.219981][T17645] ? end_current_label_crit_section+0x170/0x170 [ 657.226222][T17645] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 657.232116][T17645] ? bpf_lsm_capable+0x5/0x10 [ 657.236789][T17645] ? security_capable+0x85/0xb0 [ 657.241637][T17645] genl_rcv_msg+0x601/0x790 [ 657.246140][T17645] ? genl_bind+0x360/0x360 [ 657.250547][T17645] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 657.256890][T17645] netlink_rcv_skb+0x1ef/0x440 [ 657.261645][T17645] ? genl_bind+0x360/0x360 [ 657.266053][T17645] ? netlink_ack+0x1160/0x1160 [ 657.270817][T17645] ? down_read+0x1a8/0x2d0 [ 657.275232][T17645] genl_rcv+0x24/0x40 [ 657.279204][T17645] netlink_unicast+0x7ad/0x920 [ 657.283970][T17645] netlink_sendmsg+0x8ad/0xbd0 [ 657.288736][T17645] ? netlink_getsockopt+0x550/0x550 [ 657.293930][T17645] ? apparmor_socket_sendmsg+0x8a/0x330 [ 657.299473][T17645] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 657.304746][T17645] ? security_socket_sendmsg+0x7c/0xa0 [ 657.310198][T17645] ? netlink_getsockopt+0x550/0x550 [ 657.315389][T17645] ____sys_sendmsg+0x5ed/0x9a0 [ 657.320150][T17645] ? __sys_sendmsg_sock+0x30/0x30 [ 657.325164][T17645] ? __import_iovec+0x306/0x510 [ 657.330021][T17645] ? import_iovec+0x6f/0xa0 [ 657.334520][T17645] ___sys_sendmsg+0x2a2/0x360 [ 657.339196][T17645] ? __sys_sendmsg+0x2a0/0x2a0 [ 657.343989][T17645] __se_sys_sendmsg+0x1c3/0x2b0 [ 657.348848][T17645] ? __x64_sys_sendmsg+0x80/0x80 [ 657.353795][T17645] ? lockdep_hardirqs_on+0x94/0x140 [ 657.358991][T17645] do_syscall_64+0x4c/0xa0 [ 657.363397][T17645] ? clear_bhb_loop+0x60/0xb0 [ 657.368063][T17645] ? clear_bhb_loop+0x60/0xb0 [ 657.372734][T17645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.378625][T17645] RIP: 0033:0x7f960939e159 [ 657.383034][T17645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.402636][T17645] RSP: 002b:00007f960a1cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.411129][T17645] RAX: ffffffffffffffda RBX: 00007f9609625fa0 RCX: 00007f960939e159 [ 657.419094][T17645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 657.427053][T17645] RBP: 00007f960943506b R08: 0000000000000000 R09: 0000000000000000 [ 657.435014][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.442974][T17645] R13: 00007f9609626038 R14: 00007f9609625fa0 R15: 00007fffb4142ff8 [ 657.450951][T17645] [ 657.547143][T17249] device veth0_vlan entered promiscuous mode [ 657.567830][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.576547][T17639] netlink: 'syz.0.3075': attribute type 2 has an invalid length. [ 657.599519][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.639712][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.657356][T17639] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.3075'. [ 657.670855][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.796693][T17249] device veth1_vlan entered promiscuous mode [ 657.853901][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 658.014402][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 658.032413][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 658.054909][T17249] device veth0_macvtap entered promiscuous mode [ 658.155823][T17249] device veth1_macvtap entered promiscuous mode [ 658.183127][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.199331][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.213040][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.225235][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.243985][T17249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.290354][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 658.307969][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.322689][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.331902][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.344361][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.366605][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.381430][T17249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.391905][T17249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.406890][T17249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.447354][T13137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.458652][T13137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.481117][T17249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.495338][T17249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.504817][T17249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.518385][T17249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.725261][T13135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.742584][T13135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.770177][T13137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.821802][T13135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.831118][T13135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.864386][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 660.460941][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.470341][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.482771][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.491985][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.510863][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 660.519023][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.581295][T17740] netlink: 'syz.4.3089': attribute type 16 has an invalid length. [ 660.652353][T17740] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3089'. [ 660.863901][T17747] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3090'. [ 662.540610][T16317] Bluetooth: hci2: command 0x0409 tx timeout [ 663.295601][T13137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.472760][T13137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.626129][T13137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.674361][T17787] netlink: 'syz.0.3097': attribute type 2 has an invalid length. [ 663.723939][T17787] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3097'. [ 663.816799][T13137] device netdevsim0 left promiscuous mode [ 663.837587][T13137] bridge0: port 3(netdevsim0) entered disabled state [ 663.940801][T13137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.174310][T17739] chnl_net:caif_netlink_parms(): no params data found [ 664.281660][T17800] netlink: 16358 bytes leftover after parsing attributes in process `syz.0.3099'. [ 664.507540][T13137] device .*! left promiscuous mode [ 664.587747][T17739] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.613106][T17739] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.620884][T16317] Bluetooth: hci2: command 0x041b tx timeout [ 664.641606][T17739] device bridge_slave_0 entered promiscuous mode [ 664.672856][T17813] netlink: 'syz.0.3102': attribute type 10 has an invalid length. [ 664.702324][T17813] device veth0_macvtap left promiscuous mode [ 664.790788][T13137] device 0 left promiscuous mode [ 664.817535][T17739] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.825105][T17739] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.833845][T17739] device bridge_slave_1 entered promiscuous mode [ 664.906319][T13137] tipc: Left network mode [ 664.934089][T17739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.960024][T17739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.152896][T17739] team0: Port device team_slave_0 added [ 665.169634][T17739] team0: Port device team_slave_1 added [ 665.336614][T17841] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 665.457359][T17739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.466944][T17739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.494795][T17739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.548133][T17739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.555116][T17739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.589187][T17739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.363631][T17739] device hsr_slave_0 entered promiscuous mode [ 666.385595][T17739] device hsr_slave_1 entered promiscuous mode [ 666.697957][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 668.137583][T17739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.177684][T17739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.228110][T17739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.375628][T17739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.431846][T13137] device vlan0 left promiscuous mode [ 668.461913][T13137] : port 1(vlan0) entered disabled state [ 668.512186][T13137] bridge0: port 4(team0) entered disabled state [ 668.534398][T13137] device bridge_slave_1 left promiscuous mode [ 668.555555][T13137] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.602061][T13137] device bridge_slave_0 left promiscuous mode [ 668.612984][T13137] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.657477][T13137] device veth1_macvtap left promiscuous mode [ 668.671268][T13137] device veth1_vlan left promiscuous mode [ 668.778107][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 669.295295][T13137] device team_slave_1 left promiscuous mode [ 669.306300][T13137] team0 (unregistering): Port device team_slave_1 removed [ 669.345774][T13137] device team_slave_0 left promiscuous mode [ 669.353820][T13137] team0 (unregistering): Port device team_slave_0 removed [ 669.730212][T17933] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.025245][T17966] netlink: 'syz.0.3130': attribute type 41 has an invalid length. [ 670.344754][T17739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.484222][T17739] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.524294][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 670.559171][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 670.689152][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 670.726296][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.775816][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.783034][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.918632][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 670.960109][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 671.009122][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.016339][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.140791][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 671.180192][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.280526][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 671.409534][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 671.483620][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.591031][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.652578][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.723973][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.777275][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.822625][ T4541] wlan1: Trigger new scan to find an IBSS to join [ 671.846044][T17989] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 672.034393][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 672.121299][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 672.187162][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 672.247539][T17739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.360819][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.406573][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.462739][T17739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.573687][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.637399][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.854873][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.895617][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.000545][T17739] device veth0_vlan entered promiscuous mode [ 674.017544][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.103999][ T5196] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.147095][T17739] device veth1_vlan entered promiscuous mode [ 674.326090][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.364680][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 674.476139][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.557582][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.627056][T17739] device veth0_macvtap entered promiscuous mode [ 674.683522][T17739] device veth1_macvtap entered promiscuous mode [ 674.756743][T17739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.828362][T17739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.896280][T17739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.973289][T17739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.030135][T17739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.083433][T17739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.112972][T17739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.120541][T18046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3144'. [ 675.144881][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 675.163400][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.186509][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.218163][T17739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.247840][T17739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.287842][T17739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.299758][T17739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.315529][T17739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.331392][T17739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.352012][T17739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.376176][T18057] netlink: 'syz.1.3148': attribute type 16 has an invalid length. [ 675.411095][T18057] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3148'. [ 675.449177][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.468328][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.493949][T18059] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3148'. [ 675.531456][T17739] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.571740][T17739] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.590783][T17739] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.618742][T17739] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.750146][T18057] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3148'. [ 675.820907][ T5199] wlan1: Trigger new scan to find an IBSS to join [ 675.976743][T13135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.011474][T13135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.028838][T13135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 676.156489][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.180452][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.201491][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 676.325813][T18082] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3153'. [ 676.389382][T18082] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 676.425338][T18082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.516926][T18084] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3153'. [ 676.581026][T18097] netlink: 'syz.0.3155': attribute type 2 has an invalid length. [ 676.623066][T18097] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3155'. [ 676.904757][T18100] netlink: 'syz.3.3156': attribute type 2 has an invalid length. [ 676.953770][T18100] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3156'. [ 677.184291][T13137] wlan1: Creating new IBSS network, BSSID 82:18:48:f6:30:c0 [ 677.214414][T18104] netlink: 'syz.1.3157': attribute type 17 has an invalid length. [ 677.228520][T18104] netlink: 'syz.1.3157': attribute type 16 has an invalid length. [ 677.247446][T18104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3157'. [ 677.279775][T18111] netlink: 'syz.3.3156': attribute type 13 has an invalid length. [ 677.317989][T18111] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3156'. [ 677.944624][T18111] erspan0: refused to change device tx_queue_len [ 679.191439][T18181] netlink: 'syz.4.3170': attribute type 33 has an invalid length. [ 679.325736][T18186] netlink: 'syz.1.3171': attribute type 3 has an invalid length. [ 679.394681][T18188] device syzkaller0 entered promiscuous mode [ 680.204370][T18217] __nla_validate_parse: 6 callbacks suppressed [ 680.204387][T18217] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3180'. [ 680.454204][T18231] netlink: 'syz.0.3184': attribute type 153 has an invalid length. [ 680.476230][T18231] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.3184'. [ 681.165557][T18254] : port 1(ip6gretap0) entered blocking state [ 681.241241][T18254] : port 1(ip6gretap0) entered disabled state [ 681.345636][T18254] device ip6gretap0 entered promiscuous mode [ 681.634392][T18267] netlink: 'syz.2.3189': attribute type 2 has an invalid length. [ 682.109938][T18296] device syzkaller0 entered promiscuous mode [ 684.296658][T18314] bridge0: port 3(batadv0) entered blocking state [ 684.303711][T18314] bridge0: port 3(batadv0) entered disabled state [ 684.328026][T18329] : port 1(ip6gretap0) entered blocking state [ 684.334511][T18329] : port 1(ip6gretap0) entered disabled state [ 684.378706][T18329] device ip6gretap0 entered promiscuous mode [ 684.406107][T18330] device ip6gretap0 left promiscuous mode [ 684.414605][T18330] : port 1(ip6gretap0) entered disabled state [ 684.473164][T18339] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3202'. [ 684.585929][T18338] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3204'. [ 684.596137][T12962] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 684.605511][T12962] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 684.625397][T18340] netlink: 'syz.4.3204': attribute type 11 has an invalid length. [ 684.640011][T18338] netlink: zone id is out of range [ 684.645719][T18340] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3204'. [ 684.661461][T18338] netlink: zone id is out of range [ 684.667214][T18338] netlink: zone id is out of range [ 684.677717][T18338] netlink: zone id is out of range [ 684.686112][T18338] netlink: zone id is out of range [ 684.692192][T18338] netlink: zone id is out of range [ 684.699165][T18338] netlink: zone id is out of range [ 684.704872][T18338] netlink: zone id is out of range [ 684.710814][T18338] netlink: zone id is out of range [ 684.736956][T18337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.256190][T18380] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3214'. [ 685.321667][T18383] netlink: 'syz.2.3215': attribute type 12 has an invalid length. [ 685.348487][T18377] can: request_module (can-proto-0) failed. [ 685.740003][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.746367][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.393184][T18406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3221'. [ 688.424354][T18419] : port 1(team0) entered blocking state [ 688.437250][T18419] : port 1(team0) entered disabled state [ 688.473143][T18419] device team0 entered promiscuous mode [ 688.500080][T18419] device team_slave_0 entered promiscuous mode [ 688.506389][T18419] device team_slave_1 entered promiscuous mode [ 688.596925][T18420] device team0 left promiscuous mode [ 688.617210][T18420] device team_slave_0 left promiscuous mode [ 688.627598][T18420] device team_slave_1 left promiscuous mode [ 688.655397][T18420] : port 1(team0) entered disabled state [ 689.259984][T18442] netlink: 'syz.4.3232': attribute type 5 has an invalid length. [ 690.144041][T18466] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.3237'. [ 690.171115][T18467] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.3237'. [ 690.342477][T18477] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3239'. [ 690.383156][T18477] openvswitch: netlink: Flow key attr not present in new flow. [ 690.562221][T18487] netlink: 'syz.4.3244': attribute type 10 has an invalid length. [ 690.646184][T18487] team0: Port device geneve1 added [ 691.218834][T18512] netlink: 'syz.4.3252': attribute type 10 has an invalid length. [ 691.412486][T18529] netlink: 'syz.4.3256': attribute type 3 has an invalid length. [ 691.443705][T18529] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3256'. [ 691.496144][T18533] netlink: 'syz.3.3259': attribute type 15 has an invalid length. [ 691.556812][T18533] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3259'. [ 691.805591][T18536] netlink: 'syz.0.3257': attribute type 3 has an invalid length. [ 691.834686][T18536] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3257'. [ 694.705786][T18555] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 694.745622][T18568] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 694.778957][T18568] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3260'. [ 694.818878][T18555] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3260'. [ 695.684836][T18597] netlink: 'syz.0.3273': attribute type 15 has an invalid length. [ 695.731756][T18597] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3273'. [ 695.860500][T18597] netlink: 'syz.0.3273': attribute type 49 has an invalid length. [ 695.995947][T18622] netlink: 'syz.4.3275': attribute type 10 has an invalid length. [ 696.023168][T18622] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3275'. [ 696.273309][T18622] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.280810][T18622] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.347800][T18622] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.354998][T18622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.362469][T18622] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.369617][T18622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.418888][T18622] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 696.449838][T18625] device sit0 entered promiscuous mode [ 696.493194][T18641] netlink: 'syz.3.3281': attribute type 2 has an invalid length. [ 696.662033][T18641] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 696.698228][T18641] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3281'. [ 697.302206][T18659] netlink: 'syz.3.3286': attribute type 21 has an invalid length. [ 697.332009][T18659] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.3286'. [ 698.070091][T18681] netlink: 197348 bytes leftover after parsing attributes in process `syz.3.3293'. [ 698.188517][T18699] netlink: 'syz.1.3294': attribute type 3 has an invalid length. [ 698.232236][T18699] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3294'. [ 698.409932][T18703] netlink: 'syz.0.3297': attribute type 2 has an invalid length. [ 698.430221][T18703] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3297'. [ 698.457017][T18704] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3297'. [ 698.917474][T18709] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3300'. [ 699.544452][T18726] team0: Device gre0 is of different type [ 699.678024][T18747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3307'. [ 699.804317][T18753] validate_nla: 5 callbacks suppressed [ 699.804333][T18753] netlink: 'syz.0.3309': attribute type 22 has an invalid length. [ 699.886672][T18760] netlink: 'syz.4.3310': attribute type 1 has an invalid length. [ 700.267328][T18770] device syzkaller0 entered promiscuous mode [ 700.447214][T18776] IPv6: NLM_F_CREATE should be specified when creating new route [ 700.457576][T18776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.464866][T18776] IPv6: NLM_F_CREATE should be set when creating new route [ 700.472184][T18776] IPv6: NLM_F_CREATE should be set when creating new route [ 700.479442][T18776] IPv6: NLM_F_CREATE should be set when creating new route [ 700.764774][T18790] netlink: 'syz.1.3319': attribute type 11 has an invalid length. [ 700.772986][T18790] __nla_validate_parse: 1 callbacks suppressed [ 700.772998][T18790] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3319'. [ 700.775545][T18785] netlink: 'syz.4.3318': attribute type 3 has an invalid length. [ 700.811070][T18785] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3318'. [ 700.836225][T18787] netlink: 'syz.4.3318': attribute type 3 has an invalid length. [ 700.836415][T18788] netlink: 'syz.4.3318': attribute type 3 has an invalid length. [ 700.853418][T18787] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3318'. [ 700.856943][T18788] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3318'. [ 701.620196][T18789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.749760][T18777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.757126][T18781] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3316'. [ 703.525167][T18823] netlink: 'syz.0.3327': attribute type 46 has an invalid length. [ 703.815364][T18843] netlink: 'syz.3.3334': attribute type 10 has an invalid length. [ 704.234878][T18843] team0: Device wg1 is of different type [ 704.324571][T18850] netlink: 'syz.0.3335': attribute type 2 has an invalid length. [ 704.348058][T18850] netlink: 149924 bytes leftover after parsing attributes in process `syz.0.3335'. [ 704.989032][T18879] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 705.570741][T18877] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3343'. [ 705.614057][T18877] netlink: zone id is out of range [ 705.638746][T18877] netlink: zone id is out of range [ 705.674195][T18877] netlink: zone id is out of range [ 705.724292][T18877] netlink: zone id is out of range [ 705.758286][T18877] netlink: zone id is out of range [ 705.772512][T18877] netlink: zone id is out of range [ 705.783384][T18877] netlink: zone id is out of range [ 705.795312][T18877] netlink: zone id is out of range [ 705.807332][T18877] netlink: zone id is out of range [ 706.102610][T18907] netlink: 'syz.2.3351': attribute type 21 has an invalid length. [ 706.144369][T18907] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3351'. [ 706.155981][T18907] netlink: 'syz.2.3351': attribute type 4 has an invalid length. [ 706.193041][T18907] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3351'. [ 706.211810][T18906] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3350'. [ 706.535342][T18937] netlink: 'syz.3.3355': attribute type 10 has an invalid length. [ 706.608769][T18937] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.636121][T18937] bond0: (slave team0): Enslaving as an active interface with an up link [ 706.728143][T18940] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3357'. [ 707.128838][T18954] netlink: 'syz.0.3358': attribute type 3 has an invalid length. [ 707.136640][T18954] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3358'. [ 708.158694][T18989] netlink: 'syz.3.3369': attribute type 17 has an invalid length. [ 708.184656][T18989] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3369'. [ 708.269388][T18996] netlink: 'syz.3.3369': attribute type 17 has an invalid length. [ 708.277255][T18996] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3369'. [ 708.313433][T18988] netlink: 'syz.1.3367': attribute type 13 has an invalid length. [ 708.326562][T18988] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3367'. [ 708.378911][T18988] syz_tun: refused to change device tx_queue_len [ 708.461074][T19002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.499095][T19002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.528770][T19002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.536549][T19002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.006983][T19054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3382'. [ 710.056017][T19054] device hsr_slave_0 left promiscuous mode [ 710.062473][T12046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 710.084371][T19054] device hsr_slave_1 left promiscuous mode [ 710.362077][T19056] Q6\bY4: renamed from lo [ 710.413767][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.421497][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.433185][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.446804][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.458043][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.465686][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.491884][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.499454][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.506915][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.515764][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.523623][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.531883][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.539433][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.546884][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.554426][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.562316][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.569900][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.577361][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.584877][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.592543][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.600173][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.607641][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.615766][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.623469][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.631086][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.638601][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.646049][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.653551][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.661470][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.669275][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.677290][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.684826][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.692312][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.700104][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.707960][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.715420][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.723045][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.731376][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.738983][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.746428][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.753934][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.761860][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.769378][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.776822][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.784375][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.791865][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.799372][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.806815][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.814308][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.821798][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.829400][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.836845][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.844397][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.851925][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.859580][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.867464][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.874980][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.882480][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.890250][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.898161][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.905616][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.913141][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.920677][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.928189][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 710.935638][T16317] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 711.334983][T19085] netlink: 'syz.3.3393': attribute type 2 has an invalid length. [ 711.366812][T19085] netlink: 'syz.3.3393': attribute type 8 has an invalid length. [ 711.415007][T19085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3393'. [ 711.465516][T19091] netlink: 'syz.1.3394': attribute type 10 has an invalid length. [ 711.690581][T19108] netlink: 'syz.3.3397': attribute type 2 has an invalid length. [ 711.830885][T19108] device 0 entered promiscuous mode [ 711.874714][T19112] netlink: 'syz.4.3398': attribute type 1 has an invalid length. [ 711.887518][T19112] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3398'. [ 712.566246][T19140] netlink: 'syz.3.3404': attribute type 3 has an invalid length. [ 712.577398][T19138] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3402'. [ 712.627897][T19140] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3404'. [ 712.706943][T19146] netlink: 'syz.3.3404': attribute type 3 has an invalid length. [ 712.787850][T19146] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3404'. [ 714.188853][T19183] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3415'. [ 714.210212][T19183] net_ratelimit: 131 callbacks suppressed [ 714.210225][T19183] netlink: zone id is out of range [ 714.242513][T19188] netlink: 'syz.4.3415': attribute type 3 has an invalid length. [ 714.267258][T19183] netlink: zone id is out of range [ 714.277415][T19188] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3415'. [ 714.301834][T19183] netlink: zone id is out of range [ 714.319316][T19183] netlink: zone id is out of range [ 714.327075][T19183] netlink: zone id is out of range [ 714.334513][T19183] netlink: zone id is out of range [ 714.342423][T19183] netlink: zone id is out of range [ 714.355206][T19183] netlink: zone id is out of range [ 714.364070][T19183] netlink: zone id is out of range [ 714.376115][T19183] netlink: zone id is out of range [ 714.543188][T19194] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.3418'. [ 717.720138][T19261] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 717.770079][T19265] netlink: 'syz.1.3434': attribute type 1 has an invalid length. [ 717.792080][T19265] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3434'. [ 718.089964][T19277] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 718.093526][T19276] netlink: 16022 bytes leftover after parsing attributes in process `syz.1.3438'. [ 718.107668][T19277] netlink: 'syz.4.3439': attribute type 3 has an invalid length. [ 718.126006][T19277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3439'. [ 718.195610][T19261] team0: Device gre0 is of different type [ 718.539044][T16317] Bluetooth: hci4: command 0x0406 tx timeout [ 718.667949][T19264] device wlan1 entered promiscuous mode [ 718.674491][T19267] netlink: 'syz.3.3435': attribute type 3 has an invalid length. [ 718.686772][T19267] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.3435'. [ 720.446573][T19347] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.3454'. [ 721.515537][T19359] netlink: 'syz.0.3457': attribute type 3 has an invalid length. [ 721.535518][T19359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3457'. [ 721.608378][T19362] netlink: 'syz.1.3455': attribute type 21 has an invalid length. [ 721.627938][T19362] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3455'. [ 721.749249][T19364] device vcan0 entered promiscuous mode [ 721.755077][T19364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.813906][T19367] netlink: 'syz.0.3460': attribute type 7 has an invalid length. [ 721.846145][T19372] net_ratelimit: 7 callbacks suppressed [ 721.846162][T19372] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0200:ac14:140a with DS=0x31 [ 721.982037][T19377] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3460'. [ 722.046058][T19377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 722.109780][T19377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.422229][T19398] netlink: 'syz.1.3468': attribute type 2 has an invalid length. [ 722.441720][T19398] netlink: 'syz.1.3468': attribute type 4 has an invalid length. [ 722.463149][T19398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3468'. [ 722.742704][T19401] : port 1(ip6gretap0) entered blocking state [ 722.768251][T19401] : port 1(ip6gretap0) entered disabled state [ 722.836947][T19401] device ip6gretap0 entered promiscuous mode [ 722.928680][T19409] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3472'. [ 724.109484][T19422] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3474'. [ 724.353510][T19438] netlink: 'syz.3.3478': attribute type 10 has an invalid length. [ 724.361793][T19438] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3478'. [ 724.386119][T19438] bond0: (slave team0): Releasing backup interface [ 724.740193][T19457] netlink: 'syz.0.3483': attribute type 4 has an invalid length. [ 725.734552][T19516] netlink: 'syz.0.3497': attribute type 10 has an invalid length. [ 725.758258][T19516] device batadv0 left promiscuous mode [ 725.764071][T19516] bridge0: port 3(batadv0) entered disabled state [ 725.806551][T19516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.819194][T19516] team0: Port device batadv0 added [ 725.835240][T19518] netlink: 'syz.4.3500': attribute type 10 has an invalid length. [ 726.234131][T19531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3503'. [ 726.283293][T19537] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3504'. [ 726.744044][T19537] device syzkaller0 entered promiscuous mode [ 727.152544][T19548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3506'. [ 729.354051][T19557] netlink: 'syz.2.3509': attribute type 12 has an invalid length. [ 729.377902][T19557] netlink: 'syz.2.3509': attribute type 15 has an invalid length. [ 729.386144][T19561] netlink: 'syz.2.3509': attribute type 21 has an invalid length. [ 729.407519][T19568] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3511'. [ 729.447716][T19567] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3511'. [ 729.594061][T19572] netlink: 'syz.4.3512': attribute type 29 has an invalid length. [ 729.631892][T19572] netlink: 'syz.4.3512': attribute type 29 has an invalid length. [ 729.834380][T19576] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3515'. [ 729.876583][T19590] netlink: 'syz.3.3514': attribute type 2 has an invalid length. [ 729.914047][T19590] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 730.207504][T19602] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3520'. [ 730.482635][T19623] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3521'. [ 730.543370][T19624] netlink: 'syz.0.3521': attribute type 10 has an invalid length. [ 730.605232][T19624] team0 (unregistering): Port device team_slave_0 removed [ 730.628856][T19624] team0 (unregistering): Port device team_slave_1 removed [ 730.645167][T19624] team0 (unregistering): Port device batadv0 removed [ 730.654595][T19626] netlink: 'syz.1.3522': attribute type 3 has an invalid length. [ 730.670363][T19626] netlink: 'syz.1.3522': attribute type 1 has an invalid length. [ 730.696292][T19626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3522'. [ 730.916300][T19639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3525'. [ 730.937615][T19639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3525'. [ 730.956506][T19639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3525'. [ 731.000079][T19639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3525'. [ 731.735750][T19657] netlink: 'syz.1.3531': attribute type 4 has an invalid length. [ 733.211798][T19697] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 733.763159][T19727] delete_channel: no stack [ 734.689467][T19749] __nla_validate_parse: 4 callbacks suppressed [ 734.689510][T19749] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3556'. [ 734.709864][T19749] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3556'. [ 734.719738][T19749] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3556'. [ 735.414291][T19765] validate_nla: 6 callbacks suppressed [ 735.414305][T19765] netlink: 'syz.4.3559': attribute type 21 has an invalid length. [ 735.510368][T19772] netlink: 58779 bytes leftover after parsing attributes in process `syz.0.3560'. [ 735.603798][T19781] netlink: 'syz.4.3559': attribute type 21 has an invalid length. [ 737.783481][T19837] netlink: 'syz.2.3572': attribute type 2 has an invalid length. [ 737.800945][T19828] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.3569'. [ 737.813693][T19837] netlink: 'syz.2.3572': attribute type 3 has an invalid length. [ 737.834143][T19837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3572'. [ 738.343579][T19851] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 738.715432][T19861] netlink: 'syz.3.3578': attribute type 3 has an invalid length. [ 738.735229][T19861] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3578'. [ 738.872838][T19873] __sock_release: fasync list not empty! [ 739.020014][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 739.166247][T19881] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3582'. [ 739.305016][T19886] netlink: 'syz.3.3584': attribute type 3 has an invalid length. [ 739.356743][T19886] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3584'. [ 739.359737][T19877] netlink: 'syz.4.3579': attribute type 4 has an invalid length. [ 739.648577][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3579'. [ 739.835575][T19868] __nla_validate_parse: 1 callbacks suppressed [ 739.835613][T19868] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.3579'. [ 740.682617][T19920] netlink: 'syz.1.3591': attribute type 21 has an invalid length. [ 741.279397][T19948] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3599'. [ 741.303032][T19955] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 741.325320][T19955] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 742.061407][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 743.822739][T19954] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 743.872094][T19965] device sit0 entered promiscuous mode [ 743.917358][T19963] device pim6reg1 entered promiscuous mode [ 744.004003][T19972] device syzkaller0 entered promiscuous mode [ 744.285973][T19995] netlink: 'syz.4.3604': attribute type 2 has an invalid length. [ 744.305313][T19995] netlink: 'syz.4.3604': attribute type 3 has an invalid length. [ 744.331663][T19995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3604'. [ 746.653090][T19998] netlink: 'syz.1.3605': attribute type 2 has an invalid length. [ 746.670333][T19998] netlink: 'syz.1.3605': attribute type 8 has an invalid length. [ 746.688085][T19998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3605'. [ 747.121840][T20029] netlink: 'syz.3.3614': attribute type 21 has an invalid length. [ 747.152730][T20029] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3614'. [ 747.198712][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.205046][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.312369][T20032] netlink: 'syz.1.3615': attribute type 10 has an invalid length. [ 747.503073][T20044] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3618'. [ 747.967019][T20061] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3622'. [ 748.232704][T20063] netlink: 'syz.4.3620': attribute type 10 has an invalid length. [ 748.358731][T20063] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3620'. [ 748.492093][T20054] netlink: 'syz.4.3620': attribute type 10 has an invalid length. [ 748.571803][T20054] wlan1: mtu greater than device maximum [ 748.715127][T20081] netlink: 'syz.3.3625': attribute type 2 has an invalid length. [ 748.798512][T20081] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3625'. [ 749.194845][T20096] netlink: 'syz.0.3628': attribute type 3 has an invalid length. [ 749.227938][T20096] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3628'. [ 749.798098][T20098] netlink: 'syz.0.3628': attribute type 21 has an invalid length. [ 749.836970][T20098] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3628'. [ 749.855110][T20098] netlink: 'syz.0.3628': attribute type 4 has an invalid length. [ 749.883926][T20098] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3628'. [ 750.418436][T20134] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3637'. [ 752.491485][T20161] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.525765][T20172] netlink: 'syz.3.3643': attribute type 3 has an invalid length. [ 752.562940][T20172] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.3643'. [ 752.676606][T20161] device bridge_slave_0 left promiscuous mode [ 752.692522][T20161] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.717662][T20149] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3638'. [ 752.727366][T20160] netlink: 'syz.3.3643': attribute type 21 has an invalid length. [ 753.062646][T20201] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3647'. [ 753.722580][T20226] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 753.743218][T20224] device syzkaller0 entered promiscuous mode [ 753.788785][T20226] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3656'. [ 753.867631][T20230] netlink: 'syz.0.3656': attribute type 1 has an invalid length. [ 753.890569][T20233] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3657'. [ 753.918240][T20230] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3656'. [ 754.218737][T20247] ================================================================== [ 754.226876][T20247] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 754.234699][T20247] Write of size 56 at addr ffff88807e76df90 by task syz.1.3659/20247 [ 754.242768][T20247] [ 754.245098][T20247] CPU: 0 PID: 20247 Comm: syz.1.3659 Not tainted syzkaller #0 [ 754.252560][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.262624][T20247] Call Trace: [ 754.265906][T20247] [ 754.268838][T20247] dump_stack_lvl+0x188/0x24e [ 754.273530][T20247] ? __lock_acquire+0x7c40/0x7c40 [ 754.278566][T20247] ? show_regs_print_info+0x12/0x12 [ 754.283774][T20247] ? load_image+0x410/0x410 [ 754.288294][T20247] ? __virt_addr_valid+0x467/0x540 [ 754.293422][T20247] ? __bpf_get_stackid+0x6c9/0x920 [ 754.298550][T20247] print_report+0xa8/0x210 [ 754.302986][T20247] kasan_report+0x10b/0x140 [ 754.307514][T20247] ? __bpf_get_stackid+0x6c9/0x920 [ 754.312638][T20247] kasan_check_range+0x235/0x290 [ 754.317587][T20247] ? __bpf_get_stackid+0x6c9/0x920 [ 754.322709][T20247] memcpy+0x3c/0x60 [ 754.326526][T20247] __bpf_get_stackid+0x6c9/0x920 [ 754.331481][T20247] bpf_get_stackid_pe+0x33f/0x400 [ 754.336518][T20247] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 754.341988][T20247] bpf_overflow_handler+0x6d1/0x790 [ 754.347202][T20247] ? bpf_overflow_handler+0xd9/0x790 [ 754.352498][T20247] ? perf_swevent_overflow+0x230/0x230 [ 754.357967][T20247] ? ct_irq_exit_irqson+0x113/0x170 [ 754.363183][T20247] ? __perf_event_account_interrupt+0x187/0x280 [ 754.369447][T20247] __perf_event_overflow+0x457/0x630 [ 754.374746][T20247] perf_swevent_event+0x315/0x570 [ 754.379785][T20247] ? perf_tp_event+0xc10/0xc10 [ 754.384573][T20247] ___perf_sw_event+0x498/0x6d0 [ 754.389441][T20247] ? ___perf_sw_event+0x184/0x6d0 [ 754.394483][T20247] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 754.400913][T20247] ? __lock_acquire+0x1465/0x7c40 [ 754.405966][T20247] ? verify_lock_unused+0x140/0x140 [ 754.411192][T20247] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 754.417186][T20247] ? lock_chain_count+0x20/0x20 [ 754.422056][T20247] __perf_sw_event+0x135/0x260 [ 754.426840][T20247] do_user_addr_fault+0x497/0xb20 [ 754.431905][T20247] ? trace_hardirqs_off_finish+0x86/0x180 [ 754.437644][T20247] exc_page_fault+0x60/0x100 [ 754.442255][T20247] asm_exc_page_fault+0x22/0x30 [ 754.447115][T20247] RIP: 0010:strncpy_from_user+0x148/0x340 [ 754.452848][T20247] Code: 00 00 00 4c 89 e6 e8 57 b0 44 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 754.472472][T20247] RSP: 0018:ffffc9000df67b50 EFLAGS: 00050246 [ 754.478546][T20247] RAX: ffffffff843d8669 RBX: ffffc9000df67c70 RCX: ffff88803f825a00 [ 754.486528][T20247] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 754.494503][T20247] RBP: 0000000000000000 R08: ffff88803f825a00 R09: 0000000000000003 [ 754.502480][T20247] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 754.510458][T20247] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 754.518439][T20247] ? strncpy_from_user+0x129/0x340 [ 754.523578][T20247] bpf_prog_load+0x200/0x1530 [ 754.528281][T20247] ? map_freeze+0x390/0x390 [ 754.532797][T20247] ? __might_fault+0xa6/0x120 [ 754.537490][T20247] ? __might_fault+0xa6/0x120 [ 754.542174][T20247] ? __might_fault+0xc2/0x120 [ 754.546856][T20247] ? __might_fault+0xa6/0x120 [ 754.551552][T20247] ? bpf_lsm_bpf+0x5/0x10 [ 754.555896][T20247] ? security_bpf+0x7a/0xa0 [ 754.560416][T20247] __sys_bpf+0x5b8/0x780 [ 754.564675][T20247] ? bpf_link_show_fdinfo+0x380/0x380 [ 754.570072][T20247] ? lock_chain_count+0x20/0x20 [ 754.574936][T20247] __x64_sys_bpf+0x78/0x90 [ 754.579367][T20247] do_syscall_64+0x4c/0xa0 [ 754.583794][T20247] ? clear_bhb_loop+0x60/0xb0 [ 754.588481][T20247] ? clear_bhb_loop+0x60/0xb0 [ 754.593168][T20247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.599074][T20247] RIP: 0033:0x7f3acff9e159 [ 754.603491][T20247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.623107][T20247] RSP: 002b:00007f3ad0f2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 754.631532][T20247] RAX: ffffffffffffffda RBX: 00007f3ad0225fa0 RCX: 00007f3acff9e159 [ 754.639509][T20247] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 754.647484][T20247] RBP: 00007f3ad003506b R08: 0000000000000000 R09: 0000000000000000 [ 754.655460][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.663434][T20247] R13: 00007f3ad0226038 R14: 00007f3ad0225fa0 R15: 00007fff614e1ad8 [ 754.671422][T20247] [ 754.674444][T20247] [ 754.676762][T20247] Allocated by task 20247: [ 754.681172][T20247] kasan_set_track+0x4b/0x70 [ 754.685775][T20247] __kasan_kmalloc+0x8e/0xa0 [ 754.690377][T20247] __kmalloc_node+0xb2/0x240 [ 754.694981][T20247] bpf_map_area_alloc+0x47/0xe0 [ 754.699838][T20247] prealloc_elems_and_freelist+0x86/0x1c0 [ 754.705571][T20247] stack_map_alloc+0x386/0x510 [ 754.710345][T20247] map_create+0x524/0xff0 [ 754.714685][T20247] __sys_bpf+0x38b/0x780 [ 754.718936][T20247] __x64_sys_bpf+0x78/0x90 [ 754.723359][T20247] do_syscall_64+0x4c/0xa0 [ 754.727779][T20247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.733684][T20247] [ 754.736008][T20247] Last potentially related work creation: [ 754.741718][T20247] kasan_save_stack+0x3a/0x60 [ 754.746404][T20247] __kasan_record_aux_stack+0xb2/0xc0 [ 754.751779][T20247] call_rcu+0x14f/0x950 [ 754.755942][T20247] __nf_register_net_hook+0x787/0x910 [ 754.761324][T20247] nf_register_net_hook+0xae/0x190 [ 754.766441][T20247] nf_register_net_hooks+0x40/0x1a0 [ 754.771646][T20247] nf_ct_netns_do_get+0x20f/0x5b0 [ 754.776682][T20247] nf_ct_netns_inet_get+0x3b/0x150 [ 754.781798][T20247] nf_conncount_init+0x123/0x380 [ 754.786753][T20247] ovs_ct_init+0x260/0x420 [ 754.791174][T20247] ovs_init_net+0x1e2/0x240 [ 754.795688][T20247] ops_init+0x360/0x5e0 [ 754.799852][T20247] setup_net+0x4f2/0xbd0 [ 754.804109][T20247] copy_net_ns+0x33e/0x5b0 [ 754.808533][T20247] create_new_namespaces+0x3ce/0x700 [ 754.813826][T20247] copy_namespaces+0x3ae/0x410 [ 754.818596][T20247] copy_process+0x199b/0x4070 [ 754.823276][T20247] kernel_clone+0x24b/0x900 [ 754.827786][T20247] __x64_sys_clone+0x1a7/0x220 [ 754.832559][T20247] do_syscall_64+0x4c/0xa0 [ 754.836974][T20247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.842876][T20247] [ 754.845195][T20247] The buggy address belongs to the object at ffff88807e76df80 [ 754.845195][T20247] which belongs to the cache kmalloc-cg-64 of size 64 [ 754.859332][T20247] The buggy address is located 16 bytes inside of [ 754.859332][T20247] 64-byte region [ffff88807e76df80, ffff88807e76dfc0) [ 754.872429][T20247] [ 754.874750][T20247] The buggy address belongs to the physical page: [ 754.881165][T20247] page:ffffea0001f9db40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e76d [ 754.891316][T20247] memcg:ffff888075ac8801 [ 754.895550][T20247] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 754.903136][T20247] raw: 00fff00000000200 ffffea0001eefd40 dead000000000003 ffff888017442780 [ 754.911716][T20247] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888075ac8801 [ 754.920288][T20247] page dumped because: kasan: bad access detected [ 754.926693][T20247] page_owner tracks the page as allocated [ 754.932396][T20247] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 13893, tgid 13889 (syz.1.2249), ts 493644515105, free_ts 493514419302 [ 754.950806][T20247] post_alloc_hook+0x173/0x1a0 [ 754.955578][T20247] get_page_from_freelist+0x206b/0x2180 [ 754.961127][T20247] __alloc_pages+0x1ec/0x4f0 [ 754.965715][T20247] alloc_slab_page+0x5d/0x180 [ 754.970393][T20247] new_slab+0x87/0x2d0 [ 754.974457][T20247] ___slab_alloc+0xbc5/0x1240 [ 754.979128][T20247] __kmem_cache_alloc_node+0x126/0x270 [ 754.984588][T20247] kmalloc_trace+0x26/0xe0 [ 754.989001][T20247] alloc_fdtable+0xca/0x2c0 [ 754.993504][T20247] dup_fd+0x743/0xa20 [ 754.997484][T20247] copy_files+0x72/0xe0 [ 755.001637][T20247] copy_process+0x180e/0x4070 [ 755.006311][T20247] kernel_clone+0x24b/0x900 [ 755.010809][T20247] __x64_sys_clone+0x1a7/0x220 [ 755.015574][T20247] do_syscall_64+0x4c/0xa0 [ 755.019986][T20247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.025884][T20247] page last free stack trace: [ 755.030545][T20247] free_unref_page_prepare+0x8e5/0x9e0 [ 755.036009][T20247] free_unref_page+0x2e/0x3f0 [ 755.040684][T20247] __unfreeze_partials+0x188/0x1e0 [ 755.045794][T20247] put_cpu_partial+0x17c/0x250 [ 755.050556][T20247] qlist_free_all+0x76/0xe0 [ 755.055059][T20247] kasan_quarantine_reduce+0x144/0x160 [ 755.060516][T20247] __kasan_krealloc+0x8d/0x1a0 [ 755.065283][T20247] krealloc+0xc1/0x100 [ 755.069345][T20247] do_check_common+0x4111/0xc560 [ 755.074307][T20247] bpf_check+0x3eb5/0x11010 [ 755.078803][T20247] bpf_prog_load+0x100e/0x1530 [ 755.083571][T20247] __sys_bpf+0x5b8/0x780 [ 755.087816][T20247] __x64_sys_bpf+0x78/0x90 [ 755.092247][T20247] do_syscall_64+0x4c/0xa0 [ 755.096661][T20247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.102559][T20247] [ 755.104876][T20247] Memory state around the buggy address: [ 755.110535][T20247] ffff88807e76de80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 755.118591][T20247] ffff88807e76df00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 755.126646][T20247] >ffff88807e76df80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 755.134700][T20247] ^ [ 755.140064][T20247] ffff88807e76e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 755.148117][T20247] ffff88807e76e080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 755.156172][T20247] ================================================================== [ 755.164236][T20247] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 755.171425][T20247] CPU: 0 PID: 20247 Comm: syz.1.3659 Not tainted syzkaller #0 [ 755.178876][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.188928][T20247] Call Trace: [ 755.192203][T20247] [ 755.195130][T20247] dump_stack_lvl+0x188/0x24e [ 755.199808][T20247] ? memcpy+0x3c/0x60 [ 755.203788][T20247] ? show_regs_print_info+0x12/0x12 [ 755.208988][T20247] ? load_image+0x410/0x410 [ 755.213499][T20247] panic+0x2d3/0x710 [ 755.217417][T20247] ? bpf_jit_dump+0xd0/0xd0 [ 755.221920][T20247] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 755.227815][T20247] ? _raw_spin_unlock+0x40/0x40 [ 755.232668][T20247] ? print_memory_metadata+0x314/0x400 [ 755.238134][T20247] check_panic_on_warn+0x80/0xa0 [ 755.243113][T20247] ? __bpf_get_stackid+0x6c9/0x920 [ 755.248232][T20247] end_report+0x66/0x110 [ 755.252478][T20247] kasan_report+0x118/0x140 [ 755.256991][T20247] ? __bpf_get_stackid+0x6c9/0x920 [ 755.262121][T20247] kasan_check_range+0x235/0x290 [ 755.267078][T20247] ? __bpf_get_stackid+0x6c9/0x920 [ 755.272209][T20247] memcpy+0x3c/0x60 [ 755.276038][T20247] __bpf_get_stackid+0x6c9/0x920 [ 755.280997][T20247] bpf_get_stackid_pe+0x33f/0x400 [ 755.286036][T20247] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 755.291513][T20247] bpf_overflow_handler+0x6d1/0x790 [ 755.296718][T20247] ? bpf_overflow_handler+0xd9/0x790 [ 755.302015][T20247] ? perf_swevent_overflow+0x230/0x230 [ 755.307474][T20247] ? ct_irq_exit_irqson+0x113/0x170 [ 755.312673][T20247] ? __perf_event_account_interrupt+0x187/0x280 [ 755.318922][T20247] __perf_event_overflow+0x457/0x630 [ 755.324223][T20247] perf_swevent_event+0x315/0x570 [ 755.329254][T20247] ? perf_tp_event+0xc10/0xc10 [ 755.334029][T20247] ___perf_sw_event+0x498/0x6d0 [ 755.338885][T20247] ? ___perf_sw_event+0x184/0x6d0 [ 755.343915][T20247] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 755.350343][T20247] ? __lock_acquire+0x1465/0x7c40 [ 755.355382][T20247] ? verify_lock_unused+0x140/0x140 [ 755.360583][T20247] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 755.366593][T20247] ? lock_chain_count+0x20/0x20 [ 755.371449][T20247] __perf_sw_event+0x135/0x260 [ 755.376220][T20247] do_user_addr_fault+0x497/0xb20 [ 755.381268][T20247] ? trace_hardirqs_off_finish+0x86/0x180 [ 755.386997][T20247] exc_page_fault+0x60/0x100 [ 755.391628][T20247] asm_exc_page_fault+0x22/0x30 [ 755.396476][T20247] RIP: 0010:strncpy_from_user+0x148/0x340 [ 755.402199][T20247] Code: 00 00 00 4c 89 e6 e8 57 b0 44 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 755.421807][T20247] RSP: 0018:ffffc9000df67b50 EFLAGS: 00050246 [ 755.427876][T20247] RAX: ffffffff843d8669 RBX: ffffc9000df67c70 RCX: ffff88803f825a00 [ 755.435847][T20247] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 755.443822][T20247] RBP: 0000000000000000 R08: ffff88803f825a00 R09: 0000000000000003 [ 755.451787][T20247] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 755.459763][T20247] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 755.467744][T20247] ? strncpy_from_user+0x129/0x340 [ 755.472870][T20247] bpf_prog_load+0x200/0x1530 [ 755.477567][T20247] ? map_freeze+0x390/0x390 [ 755.482074][T20247] ? __might_fault+0xa6/0x120 [ 755.486753][T20247] ? __might_fault+0xa6/0x120 [ 755.491426][T20247] ? __might_fault+0xc2/0x120 [ 755.496096][T20247] ? __might_fault+0xa6/0x120 [ 755.500783][T20247] ? bpf_lsm_bpf+0x5/0x10 [ 755.505111][T20247] ? security_bpf+0x7a/0xa0 [ 755.509616][T20247] __sys_bpf+0x5b8/0x780 [ 755.513868][T20247] ? bpf_link_show_fdinfo+0x380/0x380 [ 755.519248][T20247] ? lock_chain_count+0x20/0x20 [ 755.524117][T20247] __x64_sys_bpf+0x78/0x90 [ 755.528549][T20247] do_syscall_64+0x4c/0xa0 [ 755.532979][T20247] ? clear_bhb_loop+0x60/0xb0 [ 755.537653][T20247] ? clear_bhb_loop+0x60/0xb0 [ 755.542330][T20247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.548233][T20247] RIP: 0033:0x7f3acff9e159 [ 755.552646][T20247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.572248][T20247] RSP: 002b:00007f3ad0f2b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.580660][T20247] RAX: ffffffffffffffda RBX: 00007f3ad0225fa0 RCX: 00007f3acff9e159 [ 755.588632][T20247] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 755.596600][T20247] RBP: 00007f3ad003506b R08: 0000000000000000 R09: 0000000000000000 [ 755.604565][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.612531][T20247] R13: 00007f3ad0226038 R14: 00007f3ad0225fa0 R15: 00007fff614e1ad8 [ 755.620510][T20247] [ 755.623810][T20247] Kernel Offset: disabled [ 755.628127][T20247] Rebooting in 86400 seconds..