last executing test programs: 8m25.166338322s ago: executing program 0 (id=565): socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2b, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0xf00, 0x0}, 0x2020) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0xc027, &(0x7f00000006c0)=[{&(0x7f0000000700)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)="d8000000180081064e81f782db4cb904021d0800fd02fe02e8fe50a10a000400250000000c600e41b0000900ac0008032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r5, 0x12, 0x1, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000380)=r7) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 8m21.090357175s ago: executing program 0 (id=576): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = syz_clone(0x20000, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000006c0)=r1, 0x12) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 8m20.3542637s ago: executing program 0 (id=580): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0a00000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ff010000000000000000ccba84bd92c74953048f7285", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000540)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x5, 0xe, 0x0, &(0x7f0000000600)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="04000001000000000000000000000000711232000000000095000000000000007416435c7419a37d7e316b121edbdedf9191554fa6ea8ee059dc2e7ca590dabdd7eeb346a5bdc0d4032b46bffeada80655f8def8fe00e52733a7d27d8dc363d05a0213ef533ad84cf0d2aabd"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x102a21, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000b00)={0x0, 0x3e1, &(0x7f0000000b40)=[{&(0x7f0000000b80)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x2b, &(0x7f0000000000), 0x42) recvmsg$kcm(r1, &(0x7f0000001300)={&(0x7f0000000c80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/91, 0x5b}, {&(0x7f0000000e00)=""/177, 0xb1}, {&(0x7f0000000ec0)=""/8, 0x8}, {&(0x7f0000000f00)=""/36, 0x24}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/129, 0x81}, {&(0x7f0000001080)=""/81, 0x51}, {&(0x7f0000001100)=""/79, 0x4f}, {&(0x7f0000001180)=""/80, 0x50}], 0xa, &(0x7f00000012c0)=""/53, 0x35}, 0x100) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000180)=@phonet={0x23, 0xd, 0x1, 0x4}, 0x80, 0x0}, 0xc4140) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="000000000000000000000095a114", 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 8m18.758019631s ago: executing program 0 (id=587): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x2, 0xfffffffd, 0x8, 0x4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000640)=0x78) socket$kcm(0x1e, 0x4, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, &(0x7f0000000440), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000900)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x17}, 0x80, 0x0}, 0x60000c5) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) (async) r6 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36de77c620243ba2511d", 0x19, 0x0, &(0x7f00000007c0), &(0x7f0000000800)="c64a872dd706c0090ce36fa79aa8c3728714772f7ab5b6a3bfd0a315c9650a9fabb65be4cfc36b30e06c73694d1cab5ca138865a49973ad4cfbbe994d1d10a271ae892173fa232b1043fa87749862a38ba661180d01e11edb8bbd9011abf4a7c8f6346f9170499004ed81c43300a72972206064002ec3799035e73ab908a02cfab18b594c18565b138cf550722a0db358dae8248dede3aa0545372f3f5557165b7123be7ffd2b9f7e75fc9937f2111b621f0209f282189d5caea90b75b9b64d7d68dd781f0670d47c312e154f6158d4e983262fc041718") (async) syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)="c04a07fc8b805e531e1da65d63b864955d1356754edd0b9647ef82f4e9af3cab6695316b12e72f42983d5e5f45871183da") (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000036c0)={0xffffffffffffffff, 0x0, 0xd0, 0x1000, &(0x7f0000000500)="a9547f4eb6aa51e8d0e035a678ca5e0c4e5537dbd8c298b8f4941686cf1b8d1d3d655ce64e006697e4c0684676fc1023292175cb52f0317326c567a5b47b5654635f85b2dbed4e07633af38afc860a2b3a2ac50cbc71755d182f057821f363bfa8b275a6c6eda7b5a9a16ea64c099a9fcac2e3e911718dc5d689697a7ac6a6580ed8e055551571f677bd1aeae9c9df0999db0855464db0c9094e02513ff3ffefc8aae96a83f5c6ad363784dd68f9d95e0d9fbd04465a2e74b7f64f97a34e22123c2a66762664d76d50e8d381ad034772", &(0x7f0000002580)=""/4096, 0xffff, 0x0, 0x94, 0x80, &(0x7f0000003580)="91251bd2604df11923cb3e502b75bee2f99ab3b8d1ee054914f2149f306ad7358065800669102d643c957b1d3b2ae61182fc9cf260afc3b76d6d0db4090c8b57ba0afa9efc5c258871f26324c945d4c64d42c8d4b875403e8d168383f2399fa48c364385de8085d6148dd09eb1d5be23b565738f7dc298ad9420bb73120d3812af96bcc1e8b52670e2387cede13f175097787547", &(0x7f0000003640)="ad00145ee302caacd9082565d1690555b5b8ab024fab35fcfc6d933fbd302762bf021f49d476ee98e4f9976f8e4cbb7eb654a68ae6548415962715770350e7af7d31cd759af83a6f46659abe3d8f12a1f76c2c981cd3a259b9f7b8b3ca1f952f9e2258d47079e75218b6874dbc8ad13d3142118ad445e5aa39c6d1f8d61e2f5c", 0x2, 0x0, 0x47}, 0x50) sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x98, 0x20048040}, 0x40) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x18, 0x110, 0x1, '\x00\x00'}, {0x10, 0x110, 0xa}], 0x28}, 0xfc40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)}, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) 8m13.846302869s ago: executing program 0 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x4004010) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x703}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@map=0x1, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x0, 0x0, &(0x7f0000000e00)='GPL\x00', 0x0, 0xdd, &(0x7f0000000e40)=""/221, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xd, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000fc0), &(0x7f0000001000)=[{0x1, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x8f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='2\x00\x00\x00P\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="2ced7c615df22fd8032ae232a61830f94f2b4193fad93244b6a2eec59fd7d58e3d444b70ea9b740f5e38f9d5", @ANYRES64=r2], 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r6, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001240)={r7, &(0x7f0000001280)="45d4"}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x16, 0xd, &(0x7f00000013c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r9, 0x0, 0xe, 0x0, &(0x7f0000001500)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@map=r7, r0, 0x20, 0x3c, 0x0, @void, @void, @void, @value, r2}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r1, 0x1e, 0x0, 0x3ff, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="18de342af8dc4f8c426d1414808e86ab4163790970021e7f10a6afa842d9da40c8d04e239f45ef3a252ba5a4e17aaba9696a6b5b82b2be2d056bfc64908b860f4bfedc4043cbe43e4e0dfc2f9a804281b7cf1070df457d2c550d0bb81e7c0ebc8f6edd126169458bc06cc07d51f1bedf9b9ee6a3310f4bb758eddd870606b2ddd971d31b4855eec6b8578eb7b3ef903f98e676bd6fe2d8c2055bdfd4", @ANYRES64=r12], 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400c4) socketpair(0x25, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) recvmsg(r11, &(0x7f0000000b80)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f00000009c0)=""/59, 0x3b}, {&(0x7f0000000a00)=""/165, 0xa5}], 0x4, &(0x7f0000000b00)=""/128, 0x80}, 0x4) socketpair(0x5, 0x3, 0x3, &(0x7f0000000040)) 8m13.250389289s ago: executing program 0 (id=615): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xffffffff, r2}, 0x38) sendmsg$unix(r1, &(0x7f0000001d80)={&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001d40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x81}, 0x40) 7m58.034956391s ago: executing program 32 (id=615): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xffffffff, r2}, 0x38) sendmsg$unix(r1, &(0x7f0000001d80)={&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001d40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x81}, 0x40) 2m54.571605872s ago: executing program 3 (id=1971): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001000), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001080)=r0, 0x4) sendmsg(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001140)="1f265855", 0x4}], 0x1}, 0x840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000", 0x30}], 0x1}, 0x20010) 2m54.417797858s ago: executing program 3 (id=1974): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x9, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0}, 0x40) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) (rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r3}, 0x8) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r3, 0x9, 0x0, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x8, &(0x7f0000000440)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], &(0x7f0000000480)='GPL\x00', 0x9, 0x98, &(0x7f00000004c0)=""/152, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x2b, r4, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x5, 0x2d4, 0x7}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f0000000600)=[r6, r3, r1, r0, r6, r3], &(0x7f0000000640)=[{0x1, 0x5, 0xb, 0x3}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000740)=r8, 0x4) (async, rerun: 32) close(r4) (rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x242801, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f00000007c0)) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000840)='memory.stat\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r8, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0xb3, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x6, 0x4, 0x7fff8000, 0x3, 0x80, r4, 0xffffffff, '\x00', r12, r6, 0x2, 0x5, 0x2}, 0x50) r13 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r13, &(0x7f0000000c40)={'pim6reg1', 0x32, 0x30}, 0xb) socket$kcm(0x29, 0x0, 0x0) (async) r14 = openat$cgroup_ro(r3, &(0x7f0000000cc0)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@map=r14, r3, 0x3, 0x2010, r11, @value=r6, @void, @void, @void, r7}, 0x20) (async) perf_event_open$cgroup(&(0x7f0000000d40)={0x3, 0x80, 0xeb, 0x10, 0xbd, 0x7, 0x0, 0x4, 0x420, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000d00), 0x4}, 0x100c00, 0x7, 0x9, 0x9, 0x0, 0xb3d0, 0x2, 0x0, 0x200, 0x0, 0x3}, r4, 0x7, r8, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@cgroup=r4, r14, 0x13, 0x8, 0x0, @void, @value=r6, @void, @void, r2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000e00)={0x0, r14}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x5, [@datasec={0x3, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x6, 0x9}, {0x2, 0x2b10, 0x468}, {0x2, 0xd, 0x5}], "d880"}]}, {0x0, [0x30, 0x61, 0x30]}}, &(0x7f0000000ec0)=""/46, 0x51, 0x2e, 0x0, 0x8107, 0x10000, @value=r3}, 0x28) ioctl$TUNGETVNETHDRSZ(r14, 0x800454d7, &(0x7f0000000f40)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r8, 0xe0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000001080)=[{}, {}], 0x10, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000012c0)={r8, r6}, 0xc) (async) perf_event_open(&(0x7f0000001300)={0x5, 0x80, 0x1, 0xc, 0x0, 0x3, 0x0, 0x9, 0x1000, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x36554f92, 0xe91e35c74b295d1a, @perf_config_ext={0xc28, 0x3}, 0x44, 0x0, 0x7, 0x0, 0x1, 0x1, 0xffff, 0x0, 0x59, 0x0, 0x6}, 0x0, 0x5, r11, 0x13) 2m54.121256368s ago: executing program 3 (id=1977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r0}, 0xc) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000f8ffffff0000000004000000850000003600000085000000080000"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r3, 0x0, 0x7, 0x0, &(0x7f0000000a80)="f7edad00000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000ac0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000b00), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000b40), 0x43) write$cgroup_subtree(r6, &(0x7f0000000b80)=ANY=[], 0xfdef) close(r6) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000bc0), 0x4) sendmsg$kcm(r7, &(0x7f0000000c00)={&(0x7f0000000c40)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4003b80", 0x2a}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000d40)={&(0x7f0000000d80)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000e40)="34662e584e610ce7a14add", 0xb}, {0x0}, {&(0x7f0000000e80)="a3a039e52623b35981bbdeb7d80ddcbef0f3ea89a6a9b2d634687611996797e7ad4200041d2f8a7bce7d6b9e903ef77c31ab12e4fbefcd9ade1c7e960827ced2f2d24ee6db5b751057d6f0a335213c6990862c64f0947381dc6b90176519e917e829f75c23c147147771f7b0c45ce3efbfac4000c24b09cf65d5f7196b9b55bfc6e9500bcff470f21f38dec14537613948d98627840f71e2a1c319af512da1b07bae8fe40e88892af956", 0xaa}, {&(0x7f0000000f40)="76534f83da8eb7b17ee276e8ceeaf5dcde1000a94dde6db2392dde401e9a07117e2d8f1770d4a4cf971102a5511e1c02", 0x30}, {&(0x7f0000000f80)="341660188c898bcb76f065e90dcbb69f73abb4b57ea6d3e6cd21a5d0cf461ff2f0e0efa2c9aeb2a9a780e908832c0002e928dba346e174c33a7b01cc275fe55e43f1f83d45687acf27dbcd613dd0d9ef98c819d63a45f0374c2f1e7f443f7999629c5865a4a919e9b8f734a6018dc8c0a4ff319cffaca07707541f302b6135f329210a39755d30548a04494ef23ec6c96ec02bcef8d2ceb09831e771dc8274336f1d9c26d8bc9c2d29aebe884cbea42de203a96004e4541d4569b0198da182b5f9e19ec3298c99c27a2a02b89bae1a59331e72bfaad4ca6afd207f096f3b7cb6bd01288815aec25ba1a1aada37ed340f1fb6a28919", 0xf5}, {&(0x7f0000001080)="e8f1c8031207450101644098c6089a8ea1207c2950698dce43952347", 0x1c}], 0x6, &(0x7f00000010c0)}, 0x40810) recvmsg(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001180)=""/4096, 0xfdef}], 0x1}, 0x10021) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_tracing={0x1a, 0x21, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x14}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0xa, 0x3, 0xfffffffffffffffe, 0x10}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xb2b, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0x6, 0xfffffff7, 0x7}, 0x10, 0x137a7, r8, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r9 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r9, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='{', 0x1}], 0x1}, 0x4000040) 2m53.165943424s ago: executing program 3 (id=1980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000fc0), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001040)=r0, 0x4) sendmsg(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x20008840) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000900"/20, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000b9714fa82f36e70bd26841c9f1137559e48536bdfcee17cdbfad14e4e2a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x50) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000fc0), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001040)=r0, 0x4) (async) sendmsg(r2, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x20008840) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000900"/20, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000b9714fa82f36e70bd26841c9f1137559e48536bdfcee17cdbfad14e4e2a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x50) (async) socket$kcm(0x23, 0x5, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) close(r3) (async) 2m53.163493114s ago: executing program 3 (id=1983): r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xe, 0x8, 0x7f, 0xb4, 0x0, 0x4, 0x8, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x14}, 0x800, 0x7, 0xfffffffe, 0xe, 0x8, 0x1, 0xff80, 0x0, 0x2, 0x0, 0x7}, r0, 0xe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002000000050040"], 0x20}, 0x4011) 2m53.134900857s ago: executing program 3 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20f42, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10006, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780), 0xffffffff, r2}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fc, &(0x7f00000000c0)={'batadv_slave_0\x00', @random="0000330c1120"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2m37.644259954s ago: executing program 33 (id=1987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20f42, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10006, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780), 0xffffffff, r2}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89fc, &(0x7f00000000c0)={'batadv_slave_0\x00', @random="0000330c1120"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 9.665671533s ago: executing program 5 (id=2669): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105e000000000004003220000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x35, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000380)=r2) 9.664834793s ago: executing program 4 (id=2670): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0xf}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x87e1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) socketpair(0x1, 0x20000000000001, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x6, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/29, 0x1d}], 0x1}, 0x10262) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0xf}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x87e1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x15, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x114, 0x6, 0x0, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/29, 0x1d}], 0x1}, 0x10262) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x28, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) 8.995383471s ago: executing program 5 (id=2682): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x6c, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="010000"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f0000000180)}, 0x7f) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f00000001c0)="26b2d3e2d3b928055d66c872b9c06f79cb5385966eec6c46b79f10214094b21a61eb72f88eb92d12e417e8b4d43a727d03668eaf93cbe22c949cd24d64333ad3561c94244232b88269c3b095c4a212"}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 8.682212182s ago: executing program 4 (id=2673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000280), 0x4}, 0x1540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000800)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000840)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000c40)={r5, r0}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r7, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="1b0000001d008104e00f80ecdb4cb9f207c804a00d000000880802", 0x1b}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7d26}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4001}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000001280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map=r0, 0x32, 0x1, 0x80, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r3, r1, 0xc, 0x2010, r3, @value=r11, @void, @void, @void, r10}, 0x20) 8.681058013s ago: executing program 5 (id=2674): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x1a, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0xc, &(0x7f0000000440)=""/12, 0x41000, 0x22, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0xf, 0x400}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0x5}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x4, 0xa, 0x2}, {0x2, 0x4, 0x3, 0xa}, {0x1, 0x5, 0x3}], 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x14, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0x10, 0x10, &(0x7f00000008c0)="0000ffffffffa000", &(0x7f0000000900)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000980)=r3, 0x161) sendmsg$inet(r4, &(0x7f00000009c0)={&(0x7f0000000a00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000240), 0x4) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=""/28, 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x1e64e001, 0x8, 0x0, 0x4000004, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x3, &(0x7f0000002840)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000002f80)='GPL\x00', 0x5, 0x252, &(0x7f0000002fc0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000030c0)) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003100)={&(0x7f0000003140)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405", @ANYBLOB="f3"], 0x48}, 0x0) perf_event_open(&(0x7f00000031c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003240)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003280), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000032c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000003300), 0x12) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003380)={0x6, 0x10, &(0x7f0000003440)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000140000ecbfd50000000000008500000083000000bf09000000000000550901000007000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000034c0)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000003500)=""/212}, 0x25) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.850021008s ago: executing program 4 (id=2678): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x9) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={r2, r1}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={r2, r1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f0000000500)="b800000500000000", &(0x7f0000000540)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0xa, 0x80000, 0x44, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x0, 0x4, 0xd}, {0x10000002, 0x4, 0x100000f, 0x4}], 0x10, 0x4000001}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x0, 0x4, 0xd}, {0x10000002, 0x4, 0x100000f, 0x4}], 0x10, 0x4000001}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x83, &(0x7f0000000200)=r8, 0x8) sendmsg$inet(r0, &(0x7f00000017c0)={&(0x7f0000001800)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001880)='.', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000002600)={&(0x7f0000002640)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000002600)={&(0x7f0000002640)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) 6.63028352s ago: executing program 5 (id=2679): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x2}) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000440)={0x4, 0x80, 0x2, 0xff, 0x2, 0x4, 0x0, 0x7c38, 0x10080, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x10000, 0x10001}, 0x100018, 0x2, 0x8, 0x1, 0x5, 0x8000, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, r0, 0x9, r0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x8000000000000003, 0x0, 0x5, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r2, 0xd, r3, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = openat$cgroup_ro(r0, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r3, r0}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xf1000000, 0x71, 0x10, 0xb4}}, &(0x7f0000000340)='syzkaller\x00'}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000900)='devices.deny\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000e00010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x1000}, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x5450, r8) 5.955284758s ago: executing program 6 (id=2681): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000680)={0x2, &(0x7f0000000b80)=[{0x20, 0x1, 0x0, 0xffdff03a}, {0x6, 0x0, 0x0, 0xffffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x7, 0x4, 0x8, 0x80000000, 0x18, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffc}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000c40)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c80), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000cc0), 0x9) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x4, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xf}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000700)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x24, 0x0, 0xfff2, &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000a80)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) 5.534361411s ago: executing program 4 (id=2684): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f00000001c0)=""/204, 0xcc}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0xc3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 5.422391582s ago: executing program 6 (id=2686): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000200)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xfffffff2, 0x0, 0xffffffffffffffff, 0x61c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r1, 0x11, 0x0, 0x200, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000680)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x40000004) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xb}, 0x4021, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0xf, 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000440)=[{0x30, 0x3, 0xfd, 0xfffff03d}]}) 5.24226159s ago: executing program 4 (id=2687): socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b3000000000085000000d00000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x2000000000000216, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x7, 0xc, &(0x7f0000001e00)=ANY=[], &(0x7f0000001e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000002ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002f40)=ANY=[@ANYBLOB="0100000001250000400000004000ec4000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000), &(0x7f0000003040), 0x1003, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.768396818s ago: executing program 5 (id=2688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x80, 0x0}, 0x60) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1c, 0x0, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x10c002, 0x8ac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000010c0), 0x3a, 0x10, &(0x7f0000001100), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000011c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x5ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000003e0000003e000000040000000e000000030000ff03000003000000070000000101000003000000fe46ffffff01000000dee510800000000000097e00"/92], 0x0, 0x5c, 0x0, 0x4, 0x7}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r4], 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.767477698s ago: executing program 2 (id=2689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe424, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000001100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001140), 0x0, 0x0, 0x56, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="030000000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xa11, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r2 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x100200, 0x7, 0xfffffffa, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0xffffffffffff8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x24, &(0x7f0000000300), 0xff7b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0x400}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = gettid() perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x2}, 0x100e64, 0xc78}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="d800000010008104687da3aa7143a0b8c81d080b2500006ee8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000b40)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c04ee8a5eddc93983d7", 0x2e}, {&(0x7f0000000500)="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", 0x407}], 0x2}, 0x4000014) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x18, 0x110, 0x1, "a2"}, {0x18, 0x110, 0xe, "64f57532"}], 0x30}, 0xfc40) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={0x1, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000050000000b00000004000004ff0f00000b000000020000000300000000000000000a0000008000009c21ba8e434baf68280000000900000002000000090000000061305f003c619ab0d73841ff5abb"], &(0x7f0000000d00)=""/79, 0x59, 0x4f, 0x0, 0x7}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000e40)='].\xd8!$]\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1a, 0x6, 0xaf, 0x3, 0x80488, 0x1, 0x7, '\x00', r10, r11, 0x1, 0x4, 0x2}, 0x50) 4.725363412s ago: executing program 6 (id=2690): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) ioctl$TUNGETVNETLE(r1, 0x8953, &(0x7f0000000200)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f00000004c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@arena={0x21, 0x0, 0x0, 0x19, 0x40000, r1, 0x1, '\x00', r2, r0, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, r3, 0x1, '\x00', r4, r5, 0x1, 0x5, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7d26}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4001}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000001280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.622324613s ago: executing program 1 (id=2691): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0x8, 0x10, &(0x7f0000001640), 0x10}, 0x94) perf_event_open(&(0x7f0000001680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001740)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001740)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f00000017c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x17, 0x5, &(0x7f00000018c0)=ANY=[], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001940), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000001980), 0x9) sendmsg$inet(r4, &(0x7f00000019c0)={&(0x7f0000001a00)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socket$kcm(0x29, 0x2, 0x0) (async) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001a40)={r6, r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001a40)={r6, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001a80)={r4, r3}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001a80)={r4, r3}) r7 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000001ac0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001ac0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {0x0}], 0x2}, 0x10043) close(r6) sendmsg$inet(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004a80)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, 0x0, 0x22) (async) recvmsg$kcm(r0, 0x0, 0x22) r8 = socket$kcm(0x10, 0x100000000000, 0x4) sendmsg$kcm(r8, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='+blkio +blkio +net_pri\\ '], 0x18) (async) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='+blkio +blkio +net_pri\\ '], 0x18) recvmsg$kcm(r8, &(0x7f0000001300)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/166, 0xa6}], 0x2, &(0x7f0000000300)=""/4096, 0x1000}, 0x40) (async) recvmsg$kcm(r8, &(0x7f0000001300)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/166, 0xa6}], 0x2, &(0x7f0000000300)=""/4096, 0x1000}, 0x40) 4.336320532s ago: executing program 6 (id=2692): socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x73) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x1000}, 0x38) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000600)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f0000000a00)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdir(&(0x7f0000000c40)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001c40)={&(0x7f0000001c80)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001d40)="80", 0x1}], 0x1, &(0x7f0000001d80)=[{0x10, 0x84, 0x8}], 0x10}, 0x880) r2 = socket$kcm(0xa, 0x3, 0x3a) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) (async, rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffe7) ioctl$TUNGETVNETLE(r3, 0x4008744b, &(0x7f0000000280)) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4.236071292s ago: executing program 2 (id=2693): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c020, 0xac5d, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r2, 0x894c, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3726}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) 4.037801802s ago: executing program 4 (id=2694): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8c, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x16, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001540), 0xffffffffffffffd2}, 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000740), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000780)='FROZEN\x00', 0x7) openat$cgroup_procs(r3, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.036325002s ago: executing program 1 (id=2695): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000af"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000140)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f0000000b00)={&(0x7f0000000800)=@l2, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/25, 0x19}], 0x3, &(0x7f0000000a00)=""/199, 0xc7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x7f, 0x8}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000b40)=""/188, 0x34, 0xbc, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000af"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000140)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmsg(r2, &(0x7f0000000b00)={&(0x7f0000000800)=@l2, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/25, 0x19}], 0x3, &(0x7f0000000a00)=""/199, 0xc7}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x7f, 0x8}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000b40)=""/188, 0x34, 0xbc, 0x1}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) (async) 3.708166655s ago: executing program 5 (id=2696): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x401, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x7, 0xc, &(0x7f0000001600)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x7, 0xc, &(0x7f0000001600)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f00000016c0), 0x2a979d) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000c40)={&(0x7f0000000c80)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x9c000000, @empty, 0x4}}, 0x43, 0x0, 0x0, &(0x7f0000000d00)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x40) sendmsg$kcm(r4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000030000001000000000000000dc0000000000286b"], 0x18}, 0xfc00) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x4, &(0x7f0000001040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x4, &(0x7f0000001040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000001140)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000f40)=0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000f40)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1}, 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e000000", 0xd1}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e000000", 0xd1}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) (async) recvmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r9 = socket$kcm(0x2c, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18cee3e18acf0000000700000d000000008b00000085100000faffffff95211d"], &(0x7f0000000900)='syzkaller\x00', 0x2000000, 0x94, &(0x7f0000000940)=""/148, 0x41100, 0x44, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x0, 0x3, 0x3ff, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r8], &(0x7f0000000a80)=[{0x2, 0x1, 0x0, 0x9}, {0x5, 0x4, 0xc, 0x5}], 0x10, 0xa}, 0x94) setsockopt$sock_attach_bpf(r9, 0x11b, 0x2, &(0x7f0000000b80)=r10, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2d6e650400000000000000696473202d667265657a6572202d626c6b696f20"], 0x1f) 3.176963699s ago: executing program 2 (id=2697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r3 = perf_event_open(&(0x7f0000000a00)={0x5, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10182, 0x0, 0x0, 0x0, 0x9, 0x0, 0x65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000280)="d03ce2ee41"}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x95, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1001e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r2, @ANYBLOB="002400000000000000000000000000000000000013d2dab1bbe9048a90a8990500aa62e0f42e8ce12f2936196011478da1f70c49c4", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000000500000001000000000000000000000000400000000021b3"], 0x50) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002280)={0x12, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002380)='memory.events\x00', 0x26e1, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f00000023c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000002440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000002500)={'wlan1\x00', @random="8dffffff0600"}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x15, 0xc, &(0x7f0000002640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x6, 0xc, &(0x7f0000002780)=ANY=[], &(0x7f00000027c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000002880)="630b008646dc3f0adf33c9f7b986", 0x0, 0x7de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x3, 0x16, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], &(0x7f0000003200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000003240), 0xffffffffffffffd2}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003280)={0x5, 0x3, &(0x7f0000003340)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000003380)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x4, 0xe, &(0x7f0000003480)=ANY=[@ANYBLOB="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"], &(0x7f0000003980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000039c0)={0x2}, 0x8, 0x10, &(0x7f0000003a00), 0x10}, 0x57) perf_event_open(&(0x7f0000003a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.040383523s ago: executing program 6 (id=2698): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x66, 0x0, 0x0, 0x0, 0xfffffffd}, @initr0, @ldst={0x2, 0x3, 0x4, 0xb, 0x8, 0x2, 0x1}, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x66, 0x0, 0x0, 0x0, 0xfffffffd}, @initr0, @ldst={0x2, 0x3, 0x4, 0xb, 0x8, 0x2, 0x1}, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffe}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 2.86997903s ago: executing program 1 (id=2699): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pim6reg0\x00', 0x1}) ioctl$TUNGETVNETBE(r1, 0x8927, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600), 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000680)='tasks\x00', 0x2, 0x0) openat$cgroup_int(r2, &(0x7f00000006c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0xffffff2d, &(0x7f0000000740)=[{&(0x7f0000000780)="c00e020022003505d25a806f8c6394f94924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x5ed0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000380)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x4, 0xe, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000002040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x2}, 0x8, 0x10, &(0x7f00000020c0), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r5, 0x702, 0x36, 0x0, &(0x7f0000002180)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.492296878s ago: executing program 6 (id=2700): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/pid_for_children\x00') r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x100, 0x1100, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r2, 0xc00}, 0x38) sendmsg$kcm(r1, &(0x7f0000002440)={0x0, 0xffffff0a, &(0x7f0000002480)=[{&(0x7f00000024c0)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.491431488s ago: executing program 2 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x7ff, 0x8, 0x7, 0x9010, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0xc, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3, 0x5}, {0x3, 0x4}, {0xd, 0x1}, {0x0, 0x2}]}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x4}}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0xc, 0x4}, {0xa, 0x4}]}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x30, 0x30, 0x61, 0x0, 0x2e, 0x30]}}, &(0x7f0000000500)=""/162, 0xe4, 0xa2, 0x0, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x9, '\x00', r1, r2, 0x4, 0x5, 0x2}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x1}]}}, &(0x7f00000000c0)=""/65, 0x26, 0x41, 0x1, 0x3}, 0x28) 1.956534492s ago: executing program 2 (id=2702): socket$kcm(0x2, 0x3, 0x84) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20242, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1800000020008107090f9becdb4cb96b02000000fd000001", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) (async, rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x34}, 0x28) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x107412, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1a, &(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f0000000a40)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000a80)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x0, 0x0}, 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x11da}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xfb77, 0x1c, &(0x7f0000000c80)=""/28, 0x40f00, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x0, 0x0, 0xfffffbce, 0x7}, 0x10, 0x51a3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@alu={0x7, 0x0, 0x6, 0x4, 0x4, 0xfffffffffffffffc, 0x10}, @generic={0x8, 0x3, 0x1, 0x8000, 0xb}, @jmp={0x5, 0x0, 0x4, 0x2, 0x6, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit]}, &(0x7f0000000e40)='syzkaller\x00', 0x200f7, 0x75, &(0x7f0000000e80)=""/117, 0x41100, 0x88, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x48}, 0x0) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xd, 0x6, 0x4, 0x4, 0x0, 0x1, 0xaa1c, '\x00', 0x0, r6, 0x2, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000001080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) 1.835596965s ago: executing program 1 (id=2703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r0, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0xa, &(0x7f0000000a00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x1, 0x3, 0x3, 0x1, 0x5, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xebb3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}], &(0x7f0000000a80)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000ac0)=""/51, 0x41000, 0x3, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x5, 0x7}, 0x10, 0xc96f, 0xffffffffffffffff, 0x0, &(0x7f0000000d00)=[r3, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000d05a850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xd, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000540), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0x5}, 0x8018, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x6, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000001140), 0x129) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000780)=r5, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001402000", 0x3a}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10e0c2, 0x0, 0x40000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000016c0)='<', 0x1}], 0x1}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x3, &(0x7f00000017c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000001800)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xf, &(0x7f0000001900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001940)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r9, 0x5, 0xb68, 0x739, &(0x7f0000001a00)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$cgroup_subtree(r8, &(0x7f0000000ec0)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) syz_clone(0x91225600, &(0x7f00000013c0)="d8c11f4ace9d5ed66abf7c2ccc29bda089b82b10ff0b96fe731772922a3362dabf691584f4d6c8f987ddb245ee3902980d17f185f3bf3e2e254f38b2d395b7b4d070a2604a71ec57561b440a4e099b08420b2df9b1a9cf1319200706fcb5b33b5fa5cf7d5588000fe8f291a87db3219cb30073e66fbcafa415f083b9573dd0eed1b30e5f06f0e5e32272a0d9311e8e29c423bd804a81a7fd88cdcd630eb45b46f31571fd735fe4f863ceb2eef1d4fd161d3f51cb4748a4248e", 0xb9, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="9eed6383dbea387be2d2851c6f449676fb") r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x13, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0xca19995f67881a6b, 0x2, 0x0, r0}, @jmp={0x5, 0x0, 0x2, 0x2, 0xb, 0x18, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x12, &(0x7f00000002c0)=""/18, 0x41100, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r5, r10, 0x1, 0x1, r11], &(0x7f0000000900)=[{0x5, 0x4, 0x1, 0x2}, {0x5, 0x2, 0x8, 0x2}], 0x10, 0xfffffffc}, 0x94) 503.504989ms ago: executing program 2 (id=2704): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xcabb, 0x40}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x4}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000008c0)=""/4096, 0x29, 0x1000, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x10, 0x6, &(0x7f0000001a80)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000580)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000700)={&(0x7f0000000740)=@in6={0xa, 0x4e22, 0x4, @mcast1, 0x5}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 502.536269ms ago: executing program 1 (id=2714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x958, 0x0, 0x0, 0x0, 0x287}, [@generic={0x40, 0x2, 0x2, 0x1, 0xdbd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x84}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b99}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='GPL\x00', 0xfffffff8, 0x42, &(0x7f00000002c0)=""/66, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xf, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r0], 0x0, 0x10, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000400), &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0xd62, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="d80000001d0081044e81f777db44b904021d08020100000004faffa1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f0000000680)="54f6d4d87edd4afc057a218ff3b3f140", 0x10}, {&(0x7f00000006c0)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795a", 0x47}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000001280)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 0s ago: executing program 1 (id=2705): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000a34e872c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002040)={r5, 0x58, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r7, @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000021c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0xa, 0x9, 0x0, 0x80, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000fc0)=""/4096, 0x41100, 0x40, '\x00', r6, 0x1a, r9, 0x8, &(0x7f00000020c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002100)={0x5, 0x9, 0x6, 0x101}, 0x10, 0xa88a, 0xffffffffffffffff, 0x1, &(0x7f0000002140)=[r5, r5, r5, r2, r5], &(0x7f0000002180)=[{0x8000000, 0x4, 0x6, 0x3}], 0x10, 0x8}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000012007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'macsec0\x00'}) (async) r11 = openat$cgroup_devices(r10, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0xd, 0x5, &(0x7f0000000740)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000900)='GPL\x00'}, 0x80) (async) write$cgroup_devices(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00'], 0x8) (async) recvmsg(r0, &(0x7f0000003440)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/211, 0xd3}, {&(0x7f0000003380)=""/77, 0x4d}], 0x3}, 0x40002022) (async) write$cgroup_devices(r11, &(0x7f0000000840)=ANY=[@ANYBLOB="61202a3a2a207200e911adbaccd49f0c642f11817b53cefd3e2782f9ac24eebe3efa06c9b244657c51212d0a616baa6d14b6899ff15a00ac7d302f57fab68d6cfd3f8da2f41f8be93e9109aa816aed17ac1c88576db46a8105bbe57cbe0f819bf081796b39215337eebe20503cb47007c20d1976c61e9c4487833f128e77a5e40d2662a9ce01c978cb6d"], 0x8) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]}) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80), 0xc) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 0x12 [ 322.446839][ T8750] ? load_image+0x410/0x410 [ 322.451497][ T8750] sysfs_warn_dup+0x8a/0xa0 [ 322.456045][ T8750] sysfs_do_create_link_sd+0xc0/0x110 [ 322.461647][ T8750] device_add+0x83b/0x1050 [ 322.466117][ T8750] wiphy_register+0x1f16/0x2c50 [ 322.471041][ T8750] ? cfg80211_event_work+0x40/0x40 [ 322.476222][ T8750] ? ieee80211_register_hw+0x2cc1/0x3b00 [ 322.481915][ T8750] ? ieee80211_register_hw+0x2b97/0x3b00 [ 322.487640][ T8750] ? kasan_check_range+0x1b4/0x290 [ 322.492814][ T8750] ieee80211_register_hw+0x2e33/0x3b00 [ 322.498350][ T8750] ? ieee80211_register_hw+0xec1/0x3b00 [ 322.504056][ T8750] ? ieee80211_register_hw+0xec1/0x3b00 [ 322.509760][ T8750] ? ieee80211_tasklet_handler+0x20/0x20 [ 322.515537][ T8750] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 322.521571][ T8750] ? __debug_object_init+0xed/0x440 [ 322.526841][ T8750] ? memset+0x1e/0x40 [ 322.530880][ T8750] ? __hrtimer_init+0x189/0x270 [ 322.535799][ T8750] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 322.541603][ T8750] hwsim_new_radio_nl+0xab7/0xc90 [ 322.546784][ T8750] genl_family_rcv_msg_doit+0x22f/0x350 [ 322.552481][ T8750] ? end_current_label_crit_section+0x170/0x170 [ 322.558785][ T8750] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 322.564832][ T8750] ? bpf_lsm_capable+0x5/0x10 [ 322.569557][ T8750] ? security_capable+0x85/0xb0 [ 322.574552][ T8750] genl_rcv_msg+0x601/0x790 [ 322.579132][ T8750] ? genl_bind+0x360/0x360 [ 322.583622][ T8750] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 322.590029][ T8750] netlink_rcv_skb+0x1ef/0x440 [ 322.594854][ T8750] ? genl_bind+0x360/0x360 [ 322.599328][ T8750] ? netlink_ack+0x1160/0x1160 [ 322.604153][ T8750] ? down_read+0x1a8/0x2d0 [ 322.608593][ T8750] genl_rcv+0x24/0x40 [ 322.612774][ T8750] netlink_unicast+0x7ad/0x920 [ 322.617571][ T8750] netlink_sendmsg+0x8ad/0xbd0 [ 322.622451][ T8750] ? lockdep_hardirqs_on+0x94/0x140 [ 322.627670][ T8750] ? netlink_getsockopt+0x550/0x550 [ 322.632895][ T8750] ? netlink_getsockopt+0x550/0x550 [ 322.638109][ T8750] ____sys_sendmsg+0x5ed/0x9a0 [ 322.642898][ T8750] ? __import_iovec+0x389/0x510 [ 322.647763][ T8750] ? __sys_sendmsg_sock+0x30/0x30 [ 322.652807][ T8750] ? import_iovec+0x6f/0xa0 [ 322.657322][ T8750] ___sys_sendmsg+0x2a2/0x360 [ 322.662017][ T8750] ? __sys_sendmsg+0x2a0/0x2a0 [ 322.666840][ T8750] __se_sys_sendmsg+0x1c3/0x2b0 [ 322.671706][ T8750] ? __x64_sys_sendmsg+0x80/0x80 [ 322.676674][ T8750] do_syscall_64+0x4c/0xa0 [ 322.681222][ T8750] ? clear_bhb_loop+0x60/0xb0 [ 322.685915][ T8750] ? clear_bhb_loop+0x60/0xb0 [ 322.690619][ T8750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.696538][ T8750] RIP: 0033:0x7fd397b9fb19 [ 322.700973][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.720859][ T8750] RSP: 002b:00007fd39898d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.729287][ T8750] RAX: ffffffffffffffda RBX: 00007fd397e25fa0 RCX: 00007fd397b9fb19 [ 322.737272][ T8750] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 322.745337][ T8750] RBP: 00007fd397c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 322.753338][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.761325][ T8750] R13: 00007fd397e26038 R14: 00007fd397e25fa0 R15: 00007ffe414b18d8 [ 322.769446][ T8750] [ 322.926650][ T8775] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.557567][ T8794] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.987'. [ 324.104802][ T8809] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.989'. [ 324.736085][ T8829] netlink: 'syz.4.994': attribute type 3 has an invalid length. [ 324.755653][ T8829] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.994'. [ 324.827429][ T8836] netlink: 'syz.4.994': attribute type 10 has an invalid length. [ 324.909546][ T8836] team0: Device hsr_slave_0 failed to register rx_handler [ 324.992381][ T8842] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.997'. [ 325.032838][ T8842] netlink: zone id is out of range [ 325.038204][ T8842] netlink: zone id is out of range [ 325.073009][ T8842] netlink: zone id is out of range [ 325.078396][ T8842] netlink: zone id is out of range [ 325.140096][ T8850] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 325.166349][ T8842] netlink: zone id is out of range [ 325.171576][ T8842] netlink: zone id is out of range [ 325.264939][ T8842] netlink: zone id is out of range [ 325.270223][ T8842] netlink: zone id is out of range [ 325.311692][ T8842] netlink: zone id is out of range [ 325.335189][ T8842] netlink: zone id is out of range [ 325.969625][ T8856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.998'. [ 326.002989][ T8875] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.1002'. [ 326.798923][ T8891] netlink: 'syz.1.1005': attribute type 39 has an invalid length. [ 326.843323][ T8904] delete_channel: no stack [ 327.642531][ T8911] netlink: 'syz.5.1009': attribute type 39 has an invalid length. [ 327.744819][ T8919] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1009'. [ 327.860878][ T8915] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1009'. [ 328.103256][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1012'. [ 328.186830][ T8928] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1014'. [ 328.197599][ T8928] bridge_slave_1: default FDB implementation only supports local addresses [ 328.572070][ T8938] netlink: 'syz.5.1015': attribute type 3 has an invalid length. [ 328.607713][ T8938] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1015'. [ 328.787009][ T8930] device syzkaller0 entered promiscuous mode [ 328.791414][ T8940] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1016'. [ 329.206428][ T8957] netlink: 'syz.2.1021': attribute type 29 has an invalid length. [ 331.590443][ T8957] netlink: 'syz.2.1021': attribute type 29 has an invalid length. [ 332.175542][ T8995] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1028'. [ 333.054443][ T9018] netlink: 'syz.4.1034': attribute type 2 has an invalid length. [ 333.079970][ T9018] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1034'. [ 333.296469][ T9030] device syzkaller0 entered promiscuous mode [ 333.498210][ T9038] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1041'. [ 335.700183][ T9056] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.1045'. [ 335.718172][ T9056] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.1045'. [ 335.752638][ T9056] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.1045'. [ 336.201711][ T9075] device syzkaller0 entered promiscuous mode [ 336.238349][ T9077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1049'. [ 336.436093][ T9092] ªªªªªª: renamed from vlan0 [ 340.386382][ T9115] netlink: 'syz.4.1056': attribute type 21 has an invalid length. [ 340.398910][ T9127] netlink: 'syz.4.1056': attribute type 21 has an invalid length. [ 340.422011][ T9119] netlink: 'syz.2.1057': attribute type 2 has an invalid length. [ 340.430243][ T9119] netlink: 'syz.2.1057': attribute type 8 has an invalid length. [ 340.445841][ T9119] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1057'. [ 340.462183][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1058'. [ 344.106769][ T9220] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1067'. [ 345.159441][ T9236] rxe_eth0 speed is unknown, defaulting to 1000 [ 346.972145][ T9295] netlink: 'syz.2.1082': attribute type 16 has an invalid length. [ 346.993236][ T9295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1082'. [ 347.394123][ T9296] netlink: 'syz.4.1083': attribute type 10 has an invalid length. [ 347.447662][ T9303] netlink: 'syz.2.1082': attribute type 10 has an invalid length. [ 347.514654][ T9303] team0: Port device macvlan0 added [ 349.101295][ T9364] netlink: 'syz.3.1096': attribute type 10 has an invalid length. [ 349.144235][ T9364] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1096'. [ 354.314192][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1111'. [ 354.507967][ T9430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1111'. [ 355.184048][ T9445] netlink: 'syz.1.1114': attribute type 10 has an invalid length. [ 356.162977][ T9445] team0: Device gre0 is of different type [ 356.307418][ T9450] rxe_eth0 speed is unknown, defaulting to 1000 [ 356.594984][ T9481] netlink: 'syz.4.1119': attribute type 3 has an invalid length. [ 356.633383][ T9481] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1119'. [ 356.707018][ T9486] device vcan0 entered promiscuous mode [ 356.801914][ T9486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.254794][ T9502] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.1121'. [ 357.282827][ T9502] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1121'. [ 357.909889][ T9505] netlink: 'syz.5.1122': attribute type 11 has an invalid length. [ 357.958564][ T9505] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1122'. [ 358.473310][ T9527] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1125'. [ 358.647868][ T9531] netlink: 'syz.1.1126': attribute type 12 has an invalid length. [ 358.669818][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1126'. [ 358.715248][ T9538] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1126'. [ 358.824727][ T9534] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1127'. [ 358.964990][ T9531] can: request_module (can-proto-0) failed. [ 361.033841][ T9622] netlink: 'syz.3.1145': attribute type 21 has an invalid length. [ 361.196653][ T9622] __nla_validate_parse: 1 callbacks suppressed [ 361.196692][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1145'. [ 361.703727][ T9637] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 361.791638][ T9637] netlink: 'syz.2.1147': attribute type 2 has an invalid length. [ 361.933261][ T9637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1147'. [ 362.144180][ T9642] netlink: 'syz.4.1150': attribute type 29 has an invalid length. [ 362.610677][ T9642] netlink: 'syz.4.1150': attribute type 29 has an invalid length. [ 362.645398][ T9643] netlink: 'syz.4.1150': attribute type 29 has an invalid length. [ 362.712950][ T9644] netlink: 'syz.4.1150': attribute type 29 has an invalid length. [ 362.881396][ T9656] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 363.088438][ T9659] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1154'. [ 363.612908][ T9688] netlink: 'syz.2.1159': attribute type 10 has an invalid length. [ 364.481602][ T9708] netlink: 'syz.3.1164': attribute type 3 has an invalid length. [ 364.510254][ T9708] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1164'. [ 364.812065][ T9718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1165'. [ 364.872404][ T9718] device team0 entered promiscuous mode [ 364.898753][ T9718] device team_slave_0 entered promiscuous mode [ 364.949889][ T9718] device team_slave_1 entered promiscuous mode [ 364.989285][ T9718] device wlan1 entered promiscuous mode [ 365.009077][ T9718] bridge0: port 4(team0) entered blocking state [ 365.023087][ T9718] bridge0: port 4(team0) entered disabled state [ 365.032439][ T9718] bridge0: port 4(team0) entered blocking state [ 365.038923][ T9718] bridge0: port 4(team0) entered forwarding state [ 365.059625][ T9719] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1168'. [ 365.087861][ T9719] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1168'. [ 365.117922][ T9722] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1168'. [ 365.178137][ T9722] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1168'. [ 365.377238][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1171'. [ 365.404196][ T9731] device hsr_slave_0 left promiscuous mode [ 365.543871][ T9731] device hsr_slave_1 left promiscuous mode [ 366.631013][ T9758] validate_nla: 9 callbacks suppressed [ 366.631035][ T9758] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 366.797891][ T9758] team0: Port device wlan1 added [ 367.323306][ T9785] __nla_validate_parse: 1 callbacks suppressed [ 367.323327][ T9785] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1183'. [ 367.877563][ T9793] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1186'. [ 368.130379][ T9793] device hsr_slave_0 left promiscuous mode [ 368.189201][ T9793] device hsr_slave_1 left promiscuous mode [ 368.736301][ T9806] netlink: 'syz.4.1189': attribute type 3 has an invalid length. [ 368.754849][ T9806] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.1189'. [ 369.144437][ T9820] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1193'. [ 369.331924][ T9826] netlink: 'syz.3.1196': attribute type 21 has an invalid length. [ 370.635726][ T9857] : port 1(ip6gretap0) entered blocking state [ 370.653362][ T9857] : port 1(ip6gretap0) entered disabled state [ 370.664395][ T9857] device ip6gretap0 entered promiscuous mode [ 370.687754][ T9860] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1202'. [ 370.719474][ T9850] device ip6gretap0 left promiscuous mode [ 370.751541][ T9850] : port 1(ip6gretap0) entered disabled state [ 371.283147][ T9868] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1202'. [ 371.510406][ T9885] device syzkaller0 entered promiscuous mode [ 371.542201][ T9885] device syzkaller0 left promiscuous mode [ 372.347360][ T9902] netlink: 'syz.1.1211': attribute type 11 has an invalid length. [ 372.362804][ T9902] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1211'. [ 373.286475][ T9934] netlink: 'syz.5.1217': attribute type 2 has an invalid length. [ 373.312798][ T9934] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1217'. [ 376.238312][ T9944] netlink: 'syz.2.1218': attribute type 21 has an invalid length. [ 376.261853][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 376.987646][ T9973] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1220'. [ 377.385068][ T9953] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.406112][ T9973] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 377.446175][ T9956] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1222'. [ 377.468662][ T9974] device syzkaller0 entered promiscuous mode [ 378.696089][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.702592][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.441337][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.773100][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 381.046365][T10007] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.253448][T10028] netlink: 'syz.5.1239': attribute type 2 has an invalid length. [ 382.295762][T10028] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1239'. [ 382.494919][T10051] netlink: 64771 bytes leftover after parsing attributes in process `syz.4.1242'. [ 384.242408][T10091] netlink: 'syz.1.1251': attribute type 21 has an invalid length. [ 384.873414][T10103] netlink: 'syz.3.1255': attribute type 17 has an invalid length. [ 384.895549][T10103] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1255'. [ 384.970709][T10105] device team_slave_0 entered promiscuous mode [ 385.015847][ T6110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.605200][T10128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1262'. [ 385.684146][T10126] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1262'. [ 385.698360][T10130] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.1259'. [ 385.719551][T10126] net_ratelimit: 9 callbacks suppressed [ 385.719593][T10126] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 385.746365][T10131] netlink: 'syz.2.1264': attribute type 17 has an invalid length. [ 385.758193][T10131] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1264'. [ 385.768295][T10128] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1262'. [ 385.786741][T10128] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 385.824534][T10128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.855173][T10168] netlink: 663 bytes leftover after parsing attributes in process `syz.2.1274'. [ 387.251167][T10173] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1273'. [ 389.492222][T10221] netlink: 'syz.2.1285': attribute type 28 has an invalid length. [ 389.524527][T10221] netlink: 'syz.2.1285': attribute type 3 has an invalid length. [ 389.566561][T10221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1285'. [ 390.590550][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1290'. [ 391.365695][T10246] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 391.779840][T10246] device geneve1 entered promiscuous mode [ 391.827332][T10246] team0: Port device geneve1 added [ 391.969089][ T4282] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 392.750478][T10289] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1302'. [ 393.896081][T10321] netlink: 'syz.5.1308': attribute type 21 has an invalid length. [ 394.913038][T10344] -: renamed from syzkaller0 [ 394.952742][T10349] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1313'. [ 395.064029][T10361] netlink: 'syz.4.1317': attribute type 29 has an invalid length. [ 395.112715][T10361] netlink: 'syz.4.1317': attribute type 29 has an invalid length. [ 395.134986][T10361] netlink: 'syz.4.1317': attribute type 29 has an invalid length. [ 395.312428][T10366] netlink: 'syz.3.1318': attribute type 10 has an invalid length. [ 395.638994][T10388] netlink: 'syz.5.1320': attribute type 33 has an invalid length. [ 395.728882][T10388] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1320'. [ 395.759192][T10387] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1320'. [ 396.472061][T10415] device syzkaller0 entered promiscuous mode [ 396.502348][T10415] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 65487 [ 396.556115][T10417] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 396.562170][T10417] syzkaller1: linktype set to 825 [ 396.595391][T10417] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1331'. [ 396.633521][T10417] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 396.682933][T10417] CPU: 1 PID: 10417 Comm: syz.3.1331 Not tainted syzkaller #0 [ 396.690465][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 396.700532][T10417] Call Trace: [ 396.703823][T10417] [ 396.706769][T10417] dump_stack_lvl+0x188/0x24e [ 396.711576][T10417] ? show_regs_print_info+0x12/0x12 [ 396.716793][T10417] ? load_image+0x410/0x410 [ 396.721346][T10417] sysfs_warn_dup+0x8a/0xa0 [ 396.725912][T10417] sysfs_do_create_link_sd+0xc0/0x110 [ 396.731333][T10417] device_add+0x83b/0x1050 [ 396.735816][T10417] wiphy_register+0x1f16/0x2c50 [ 396.740736][T10417] ? cfg80211_event_work+0x40/0x40 [ 396.745891][T10417] ? minstrel_ht_alloc+0x894/0xa20 [ 396.751176][T10417] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 396.757336][T10417] ieee80211_register_hw+0x2e33/0x3b00 [ 396.762881][T10417] ? ieee80211_register_hw+0xec1/0x3b00 [ 396.768443][T10417] ? ieee80211_register_hw+0xec1/0x3b00 [ 396.774029][T10417] ? ieee80211_tasklet_handler+0x20/0x20 [ 396.779678][T10417] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.785637][T10417] ? __debug_object_init+0xed/0x440 [ 396.790887][T10417] ? memset+0x1e/0x40 [ 396.794907][T10417] ? __hrtimer_init+0x189/0x270 [ 396.799801][T10417] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 396.805574][T10417] ? memcpy+0x3c/0x60 [ 396.809623][T10417] hwsim_new_radio_nl+0xab7/0xc90 [ 396.814795][T10417] genl_family_rcv_msg_doit+0x22f/0x350 [ 396.820469][T10417] ? end_current_label_crit_section+0x170/0x170 [ 396.826806][T10417] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 396.832728][T10417] ? bpf_lsm_capable+0x5/0x10 [ 396.837479][T10417] ? security_capable+0x85/0xb0 [ 396.842478][T10417] genl_rcv_msg+0x601/0x790 [ 396.847021][T10417] ? lock_chain_count+0x20/0x20 [ 396.852098][T10417] ? genl_bind+0x360/0x360 [ 396.856572][T10417] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 396.862933][T10417] netlink_rcv_skb+0x1ef/0x440 [ 396.867721][T10417] ? genl_bind+0x360/0x360 [ 396.872161][T10417] ? netlink_ack+0x1160/0x1160 [ 396.876954][T10417] ? down_read+0x1a8/0x2d0 [ 396.881386][T10417] genl_rcv+0x24/0x40 [ 396.885383][T10417] netlink_unicast+0x7ad/0x920 [ 396.890193][T10417] netlink_sendmsg+0x8ad/0xbd0 [ 396.895016][T10417] ? netlink_getsockopt+0x550/0x550 [ 396.900240][T10417] ? apparmor_socket_sendmsg+0x8a/0x330 [ 396.905906][T10417] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 396.911281][T10417] ? security_socket_sendmsg+0x7c/0xa0 [ 396.916793][T10417] ? netlink_getsockopt+0x550/0x550 [ 396.922015][T10417] ____sys_sendmsg+0x5ed/0x9a0 [ 396.926840][T10417] ? __sys_sendmsg_sock+0x30/0x30 [ 396.931963][T10417] ? __import_iovec+0x306/0x510 [ 396.936923][T10417] ? import_iovec+0x6f/0xa0 [ 396.941440][T10417] ___sys_sendmsg+0x2a2/0x360 [ 396.946156][T10417] ? __sys_sendmsg+0x2a0/0x2a0 [ 396.950980][T10417] __se_sys_sendmsg+0x1c3/0x2b0 [ 396.955875][T10417] ? __x64_sys_sendmsg+0x80/0x80 [ 396.960843][T10417] ? lockdep_hardirqs_on+0x94/0x140 [ 396.966063][T10417] do_syscall_64+0x4c/0xa0 [ 396.970499][T10417] ? clear_bhb_loop+0x60/0xb0 [ 396.975263][T10417] ? clear_bhb_loop+0x60/0xb0 [ 396.980155][T10417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.986060][T10417] RIP: 0033:0x7fd397b9fb19 [ 396.990505][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.010327][T10417] RSP: 002b:00007fd39898d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.018764][T10417] RAX: ffffffffffffffda RBX: 00007fd397e25fa0 RCX: 00007fd397b9fb19 [ 397.026750][T10417] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 397.034735][T10417] RBP: 00007fd397c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 397.042743][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.050723][T10417] R13: 00007fd397e26038 R14: 00007fd397e25fa0 R15: 00007ffe414b18d8 [ 397.058735][T10417] [ 397.307979][T10426] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 400.836689][T10461] netlink: 'syz.2.1339': attribute type 16 has an invalid length. [ 400.854202][T10461] netlink: 'syz.2.1339': attribute type 25 has an invalid length. [ 400.875085][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 400.892031][T10461] netlink: 'syz.2.1339': attribute type 16 has an invalid length. [ 400.900956][T10461] netlink: 'syz.2.1339': attribute type 25 has an invalid length. [ 400.909507][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 400.920560][T10461] netlink: 'syz.2.1339': attribute type 16 has an invalid length. [ 400.949320][T10461] netlink: 'syz.2.1339': attribute type 25 has an invalid length. [ 400.969676][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 400.990350][T10461] netlink: 'syz.2.1339': attribute type 16 has an invalid length. [ 401.003810][T10442] netlink: 'syz.5.1336': attribute type 10 has an invalid length. [ 401.033531][T10461] netlink: 'syz.2.1339': attribute type 25 has an invalid length. [ 401.052940][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.083250][T10461] netlink: 'syz.2.1339': attribute type 16 has an invalid length. [ 401.091142][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.175281][T10442] team0 (unregistering): Port device team_slave_0 removed [ 401.221771][T10442] team0 (unregistering): Port device team_slave_1 removed [ 401.248304][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.308721][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.319326][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.329804][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.369873][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 401.902999][T10485] delete_channel: no stack [ 405.560413][T10629] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 405.682405][T10631] device dummy0 entered promiscuous mode [ 405.708848][T10631] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 406.958261][T10673] __nla_validate_parse: 30 callbacks suppressed [ 406.958282][T10673] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1388'. [ 407.085535][T10669] validate_nla: 64 callbacks suppressed [ 407.085557][T10669] netlink: 'syz.5.1388': attribute type 10 has an invalid length. [ 408.256557][T10696] netlink: 'syz.4.1393': attribute type 2 has an invalid length. [ 408.278379][T10696] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1393'. [ 409.140290][T10712] netlink: 'syz.4.1398': attribute type 13 has an invalid length. [ 409.219511][T10712] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1398'. [ 409.331395][T10721] netlink: 'syz.4.1398': attribute type 13 has an invalid length. [ 409.364389][T10721] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1398'. [ 409.823618][T10733] netlink: 'syz.5.1400': attribute type 21 has an invalid length. [ 409.831701][T10733] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1400'. [ 409.852802][T10733] netlink: 'syz.5.1400': attribute type 4 has an invalid length. [ 409.860593][T10733] netlink: 'syz.5.1400': attribute type 5 has an invalid length. [ 409.932587][T10733] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1400'. [ 410.168422][T10745] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1403'. [ 410.729024][T10752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1405'. [ 410.793242][T10752] : renamed from caif0 [ 411.284051][T10752] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 411.459819][T10762] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1406'. [ 411.708445][T10764] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1408'. [ 412.015998][T10764] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 412.104449][T10770] netlink: 'syz.4.1409': attribute type 5 has an invalid length. [ 412.486557][T10775] netlink: 'syz.1.1410': attribute type 10 has an invalid length. [ 412.824561][T10788] netlink: 'syz.3.1413': attribute type 9 has an invalid length. [ 412.925213][T10791] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1413'. [ 413.031222][T10788] netlink: 69224 bytes leftover after parsing attributes in process `syz.3.1413'. [ 413.248600][T10811] netlink: 'syz.2.1416': attribute type 21 has an invalid length. [ 413.285005][T10811] netlink: 'syz.2.1416': attribute type 6 has an invalid length. [ 413.324827][T10811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1416'. [ 413.841640][T10834] netlink: 'syz.4.1419': attribute type 9 has an invalid length. [ 413.866536][T10834] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.1419'. [ 414.095743][T10841] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 414.187324][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 414.248411][T10841] batman_adv: batadv0: Adding interface: vlan1 [ 414.267250][T10841] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.378844][T10841] batman_adv: batadv0: Interface activated: vlan1 [ 414.419011][T10841] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 414.457764][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 414.502314][T10841] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 414.541112][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 414.614180][T10841] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 414.667801][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 414.755413][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 414.782010][T10841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1422'. [ 418.136911][T10929] validate_nla: 35 callbacks suppressed [ 418.136936][T10929] netlink: 'syz.2.1446': attribute type 21 has an invalid length. [ 418.213960][T10929] netlink: 'syz.2.1446': attribute type 11 has an invalid length. [ 418.787627][T10940] netlink: 'syz.3.1447': attribute type 10 has an invalid length. [ 418.852922][T10940] __nla_validate_parse: 28 callbacks suppressed [ 418.852942][T10940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1447'. [ 418.965308][T10940] batman_adv: batadv0: Adding interface: virt_wifi0 [ 419.031058][T10940] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.142721][T10940] batman_adv: batadv0: Interface activated: virt_wifi0 [ 419.152463][T10944] netlink: 'syz.5.1451': attribute type 22 has an invalid length. [ 419.173657][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1451'. [ 419.526291][T10958] netlink: 'syz.4.1454': attribute type 7 has an invalid length. [ 419.562749][T10958] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1454'. [ 420.692061][T10989] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 420.694481][T10990] netlink: 'syz.2.1459': attribute type 3 has an invalid length. [ 420.757310][T10990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1459'. [ 420.789528][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1459'. [ 423.622111][T11006] netlink: 'syz.2.1463': attribute type 29 has an invalid length. [ 423.657945][T11006] netlink: 'syz.2.1463': attribute type 29 has an invalid length. [ 423.672083][T11006] netlink: 'syz.2.1463': attribute type 29 has an invalid length. [ 423.703509][T11007] delete_channel: no stack [ 424.072232][T11025] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1469'. [ 424.319870][T11040] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1471'. [ 425.013028][T11054] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1475'. [ 425.037162][T11054] netlink: zone id is out of range [ 425.057733][T11054] netlink: zone id is out of range [ 425.073233][T11054] netlink: zone id is out of range [ 425.078563][T11054] netlink: zone id is out of range [ 425.094664][T11054] netlink: zone id is out of range [ 425.100019][T11054] netlink: zone id is out of range [ 425.118366][T11054] netlink: zone id is out of range [ 425.133745][T11054] netlink: zone id is out of range [ 425.139360][T11054] netlink: zone id is out of range [ 425.154371][T11054] netlink: zone id is out of range [ 427.330438][T11036] netlink: 'syz.4.1470': attribute type 10 has an invalid length. [ 427.338899][T11036] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1470'. [ 427.348066][T11036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.358587][T11036] device hsr0 entered promiscuous mode [ 427.364908][T11036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.373453][T11062] netlink: 'syz.5.1477': attribute type 10 has an invalid length. [ 427.381398][T11062] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1477'. [ 427.390766][T11062] device hsr0 entered promiscuous mode [ 427.396771][T11062] bridge0: port 3(hsr0) entered blocking state [ 427.405750][T11062] bridge0: port 3(hsr0) entered disabled state [ 427.415055][T11062] bridge0: port 3(hsr0) entered blocking state [ 427.421370][T11062] bridge0: port 3(hsr0) entered forwarding state [ 427.872258][T11073] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 428.118888][T11099] netlink: 'syz.1.1487': attribute type 39 has an invalid length. [ 428.173570][T11094] netlink: 'syz.4.1486': attribute type 21 has an invalid length. [ 428.197038][T11094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1486'. [ 428.378683][T11105] device syzkaller0 entered promiscuous mode [ 428.554775][T11118] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 428.595733][T11118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1492'. [ 431.597772][T11130] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1497'. [ 431.853758][T11133] netlink: 'syz.5.1498': attribute type 10 has an invalid length. [ 431.882108][T11133] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1498'. [ 431.910384][T11133] device dummy0 entered promiscuous mode [ 431.936138][T11133] bridge0: port 4(dummy0) entered blocking state [ 431.958822][T11133] bridge0: port 4(dummy0) entered disabled state [ 431.984655][T11133] bridge0: port 4(dummy0) entered blocking state [ 431.991215][T11133] bridge0: port 4(dummy0) entered forwarding state [ 432.043240][T11140] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 432.164103][T11140] team0: Device wg1 is of different type [ 432.471319][T11157] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1503'. [ 432.535778][T11159] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.1495'. [ 432.552417][T11159] net_ratelimit: 3660 callbacks suppressed [ 432.552435][T11159] netlink: zone id is out of range [ 434.331055][T11224] netlink: 'syz.5.1519': attribute type 4 has an invalid length. [ 434.368978][T11224] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1519'. [ 435.426877][T11245] netlink: 'syz.1.1523': attribute type 10 has an invalid length. [ 435.463150][T11245] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1523'. [ 435.799614][T11269] netlink: 'syz.2.1530': attribute type 11 has an invalid length. [ 435.874297][T11269] netlink: 'syz.2.1530': attribute type 3 has an invalid length. [ 435.882128][T11269] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1530'. [ 436.018802][T11275] netlink: 'syz.5.1532': attribute type 41 has an invalid length. [ 436.711794][T11275] cgroup: fork rejected by pids controller in /syz5 [ 437.579743][ T6119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.779874][T11316] netlink: 'syz.2.1542': attribute type 2 has an invalid length. [ 437.822774][T11316] netlink: 'syz.2.1542': attribute type 8 has an invalid length. [ 437.851360][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1542'. [ 437.994370][ T6119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.149053][T11317] can: request_module (can-proto-0) failed. [ 438.228121][ T6119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.457059][ T6119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.531879][T11327] Dead loop on virtual device ip6_vti0, fix it urgently! [ 439.819947][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.834349][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.844282][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.852264][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.860159][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.869038][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.052213][T11356] rxe_eth0 speed is unknown, defaulting to 1000 [ 440.135479][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141910][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.465298][T11388] netlink: 'syz.4.1555': attribute type 2 has an invalid length. [ 440.496307][T11388] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 440.521864][T11388] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1555'. [ 441.893142][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 443.366528][T11399] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 443.416384][T11399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1557'. [ 443.449931][T11398] delete_channel: no stack [ 443.613924][T11403] netlink: 'syz.4.1558': attribute type 16 has an invalid length. [ 443.662633][T11403] netlink: 'syz.4.1558': attribute type 3 has an invalid length. [ 443.709526][T11403] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1558'. [ 443.973216][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 443.978839][T11426] netlink: 'syz.2.1562': attribute type 10 has an invalid length. [ 444.870213][T11426] team0: Device gre0 is of different type [ 445.150602][T11429] rxe_eth0 speed is unknown, defaulting to 1000 [ 445.573236][T11356] chnl_net:caif_netlink_parms(): no params data found [ 445.869657][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.905925][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.929456][T11356] device bridge_slave_0 entered promiscuous mode [ 445.958874][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.017217][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.045771][T11356] device bridge_slave_1 entered promiscuous mode [ 446.053119][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 446.274884][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.307992][ T6119] device hsr_slave_0 left promiscuous mode [ 446.316644][ T6119] device hsr_slave_1 left promiscuous mode [ 446.388899][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.401208][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.417971][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.426947][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.437556][ T6119] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 446.460101][ T6119] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 446.473468][ T6119] bridge0: port 4(dummy0) entered disabled state [ 446.494209][ T6119] bridge0: port 3(hsr0) entered disabled state [ 446.505531][ T6119] device bridge_slave_1 left promiscuous mode [ 446.520866][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.557831][ T6119] device bridge_slave_0 left promiscuous mode [ 446.566080][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.587210][ T6119] device veth1_macvtap left promiscuous mode [ 446.596157][ T6119] device veth0_macvtap left promiscuous mode [ 446.602211][ T6119] device veth1_vlan left promiscuous mode [ 446.898274][T11477] netlink: 'syz.4.1572': attribute type 3 has an invalid length. [ 446.914121][T11477] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1572'. [ 447.338325][ T6119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.386490][ T6119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.702314][ T6119] bond0 (unregistering): Released all slaves [ 447.762136][T11467] netlink: 'syz.1.1569': attribute type 10 has an invalid length. [ 447.785993][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.816689][T11477] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1572'. [ 447.924556][T11356] team0: Port device team_slave_0 added [ 447.979528][T11356] team0: Port device team_slave_1 added [ 448.082409][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.106609][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.151138][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 448.250029][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.265447][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.272872][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.330026][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.455470][T11494] netlink: 'syz.1.1576': attribute type 21 has an invalid length. [ 448.465819][T11494] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1576'. [ 448.554360][T11356] device hsr_slave_0 entered promiscuous mode [ 448.582791][T11356] device hsr_slave_1 entered promiscuous mode [ 448.738516][T11508] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1578'. [ 448.763326][T11508] bridge_slave_1: default FDB implementation only supports local addresses [ 449.297525][T11525] netlink: 'syz.3.1583': attribute type 10 has an invalid length. [ 449.555400][T11525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.625554][T11525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.671555][T11525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.723118][T11525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.464206][T11566] netlink: 'syz.3.1588': attribute type 2 has an invalid length. [ 450.563850][T11566] netlink: 'syz.3.1588': attribute type 3 has an invalid length. [ 450.633921][T11566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1588'. [ 450.799653][T11356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 450.873263][T11356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 450.966586][T11356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 451.092119][T11356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 451.797994][T11574] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1589'. [ 451.916752][T11574] netlink: zone id is out of range [ 451.998779][T11574] netlink: zone id is out of range [ 452.027683][T11574] netlink: zone id is out of range [ 452.056306][T11574] netlink: zone id is out of range [ 452.083161][T11574] netlink: zone id is out of range [ 452.133634][T11574] netlink: zone id is out of range [ 452.140669][T11574] netlink: zone id is out of range [ 452.260318][T11574] netlink: zone id is out of range [ 452.317230][T11574] netlink: zone id is out of range [ 452.350453][T11574] netlink: zone id is out of range [ 453.766292][T11607] sctp: [Deprecated]: syz.2.1595 (pid 11607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.766292][T11607] Use struct sctp_sack_info instead [ 455.613917][T11597] netlink: 'syz.3.1591': attribute type 27 has an invalid length. [ 455.818934][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.903226][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.920719][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.955007][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.987188][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.013471][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.032970][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.040199][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.084148][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.120624][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.188871][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.221612][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.228885][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.252957][T11634] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1601'. [ 456.293003][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.349047][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.399695][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.459174][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.519389][ T6114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.576180][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.610525][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.661772][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.731859][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.782040][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 456.799825][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.830495][T11356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.207183][T11670] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1607'. [ 457.396179][T11674] netlink: 'syz.3.1608': attribute type 10 has an invalid length. [ 457.559294][T11674] device vlan0 entered promiscuous mode [ 457.637170][T11673] netlink: 'syz.3.1608': attribute type 10 has an invalid length. [ 457.684918][T11675] netlink: 'syz.3.1608': attribute type 13 has an invalid length. [ 457.787579][T11675] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1608'. [ 457.898055][T11688] tc_dump_action: action bad kind [ 458.066640][T11698] netlink: 'syz.1.1611': attribute type 2 has an invalid length. [ 458.115377][T11698] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 458.215364][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.233014][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.252887][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.735403][T11710] netlink: 'syz.2.1613': attribute type 2 has an invalid length. [ 458.916991][T11710] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1613'. [ 459.886165][T11730] netlink: 'syz.2.1619': attribute type 3 has an invalid length. [ 459.940008][T11730] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1619'. [ 460.434576][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.463969][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.589634][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.611629][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.642023][T11356] device veth0_vlan entered promiscuous mode [ 460.665054][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.686872][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.719233][T11356] device veth1_vlan entered promiscuous mode [ 460.735685][T11748] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.1622'. [ 460.808164][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.855322][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.887184][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.921839][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.954488][T11356] device veth0_macvtap entered promiscuous mode [ 461.006961][T11356] device veth1_macvtap entered promiscuous mode [ 461.074588][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.112903][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.152236][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.193189][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.211149][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.240300][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.263558][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.275261][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.286107][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.307268][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.338622][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.362693][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.407183][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.457480][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.506666][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.538411][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.565440][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.598757][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.618141][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.631656][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.444313][T11356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.482743][T11356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.491539][T11356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.539141][T11356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.502902][T11795] netlink: 'syz.4.1629': attribute type 33 has an invalid length. [ 464.512724][T11795] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1629'. [ 464.540351][T11783] delete_channel: no stack [ 464.746085][ T6181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.762712][ T6181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.801009][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.852453][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.883602][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.917397][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.846654][T11847] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 465.897410][T11847] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1636'. [ 467.591908][T11871] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1642'. [ 467.722158][T11879] netlink: 'syz.2.1644': attribute type 4 has an invalid length. [ 467.802602][T11879] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1644'. [ 468.705065][T11894] netlink: 'syz.3.1648': attribute type 4 has an invalid length. [ 468.820850][T11894] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 468.888957][T11894] netlink: 'syz.3.1648': attribute type 26 has an invalid length. [ 468.949142][T11894] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.1648'. [ 469.040396][T11896] netlink: 'syz.3.1648': attribute type 4 has an invalid length. [ 469.067884][T11896] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 469.136886][T11896] netlink: 'syz.3.1648': attribute type 26 has an invalid length. [ 469.195452][T11896] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.1648'. [ 469.267512][T11891] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1647'. [ 469.360495][T11900] netlink: 'syz.5.1649': attribute type 10 has an invalid length. [ 469.424134][T11900] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1649'. [ 469.516997][T11900] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.541085][T11900] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.834428][T11900] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.841669][T11900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.849187][T11900] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.856400][T11900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.936662][T11900] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 469.985326][T11914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1652'. [ 470.286689][T11930] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.348029][T11923] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1653'. [ 470.419421][T11926] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1653'. [ 470.679156][T11942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.732663][T11942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.748386][T11942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.767538][T11942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.800688][T11983] net_ratelimit: 5 callbacks suppressed [ 474.800705][T11983] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 475.697195][T12014] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.1671'. [ 475.877720][T12014] can: request_module (can-proto-0) failed. [ 475.905244][T11995] rxe_eth0 speed is unknown, defaulting to 1000 [ 475.931502][T12012] netlink: 'syz.5.1671': attribute type 12 has an invalid length. [ 475.964373][T12012] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1671'. [ 476.795388][T12038] netlink: 'syz.5.1678': attribute type 41 has an invalid length. [ 476.894989][T12038] netlink: 'syz.5.1678': attribute type 41 has an invalid length. [ 476.916721][T12040] device wlan1 entered promiscuous mode [ 477.205328][T12054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1684'. [ 477.348922][T12063] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1683'. [ 482.108317][T12102] netlink: 'syz.2.1693': attribute type 3 has an invalid length. [ 482.292645][T12102] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1693'. [ 482.448399][T12118] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1694'. [ 482.533196][T12118] netlink: zone id is out of range [ 482.594682][T12118] netlink: del zone limit has 4 unknown bytes [ 483.676353][T12143] netlink: 'syz.5.1700': attribute type 10 has an invalid length. [ 484.153564][T12156] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.1703'. [ 484.281246][T12156] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1703'. [ 489.962959][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.970851][T12174] netlink: 'syz.4.1708': attribute type 2 has an invalid length. [ 489.985127][T12174] netlink: 'syz.4.1708': attribute type 8 has an invalid length. [ 490.012660][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1708'. [ 490.050728][T12189] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1710'. [ 490.072680][T12189] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 490.101813][T12189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.241418][T12193] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1711'. [ 490.273710][T12201] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1712'. [ 490.451850][T12208] netlink: 'syz.2.1715': attribute type 2 has an invalid length. [ 490.600662][T12208] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 490.781471][T12208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.855684][T12208] team0: Port device bond0 added [ 491.431427][T12214] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1717'. [ 491.824714][T12235] netlink: 'syz.4.1722': attribute type 21 has an invalid length. [ 492.576849][T12259] tap0: tun_chr_ioctl cmd 1074025677 [ 492.606591][T12259] tap0: linktype set to 768 [ 493.617327][T12289] netlink: 'syz.4.1733': attribute type 2 has an invalid length. [ 493.672203][T12289] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1733'. [ 494.363788][T12309] netlink: 'syz.2.1737': attribute type 21 has an invalid length. [ 494.409160][T12309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1737'. [ 495.016652][T12335] netlink: 'syz.1.1742': attribute type 2 has an invalid length. [ 495.062833][T12335] netlink: 170320 bytes leftover after parsing attributes in process `syz.1.1742'. [ 495.275890][T12343] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1746'. [ 496.638095][T12378] netlink: 'syz.1.1754': attribute type 21 has an invalid length. [ 497.039197][T12390] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1755'. [ 497.573926][T12388] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 497.683012][T12388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 497.728541][T12388] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 499.045815][T12420] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1763'. [ 499.587457][T12428] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1765'. [ 501.820519][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.826938][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.399134][T12448] netlink: 'syz.5.1770': attribute type 29 has an invalid length. [ 503.649049][T12448] netlink: 'syz.5.1770': attribute type 29 has an invalid length. [ 503.715353][T12450] netlink: 'syz.5.1770': attribute type 29 has an invalid length. [ 503.864445][T12462] netlink: 'syz.4.1771': attribute type 21 has an invalid length. [ 505.288809][ T50] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 507.290854][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1782'. [ 507.332800][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 507.606049][T12503] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1782'. [ 513.889681][T12542] netlink: 'syz.5.1789': attribute type 10 has an invalid length. [ 514.207956][T12542] device macvlan0 entered promiscuous mode [ 514.347052][T12542] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 514.468549][T12552] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1788'. [ 514.561250][T12552] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 514.741322][T12557] netlink: 'syz.2.1794': attribute type 21 has an invalid length. [ 514.777253][T12555] -1O2~�: renamed from syzkaller0 [ 514.882055][T12563] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1795'. [ 514.911967][T12564] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1795'. [ 514.954023][T12563] openvswitch: netlink: Message has 6 unknown bytes. [ 514.992755][T12564] openvswitch: netlink: Message has 6 unknown bytes. [ 515.239913][T12569] device lo entered promiscuous mode [ 515.299147][T12569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.410517][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.464248][T12572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.541477][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.622600][T12572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.642048][T12572] batman_adv: batadv0: Interface deactivated: vlan1 [ 515.697036][T12572] batman_adv: batadv0: Removing interface: vlan1 [ 515.982857][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 516.023707][T12571] netlink: 'syz.3.1796': attribute type 10 has an invalid length. [ 516.033873][T12569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.284641][T12611] netlink: 'syz.1.1803': attribute type 19 has an invalid length. [ 516.376234][T12611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1803'. [ 517.816090][T12648] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 518.501509][T12660] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1817'. [ 518.679067][T12660] netlink: 'syz.5.1817': attribute type 21 has an invalid length. [ 518.704019][T12660] netlink: 9618 bytes leftover after parsing attributes in process `syz.5.1817'. [ 519.997508][T12687] device syzkaller0 entered promiscuous mode [ 520.182782][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.212787][T12699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.609714][T12699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.643603][T12699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.130984][T12718] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 525.141299][T12718] device lo left promiscuous mode [ 525.148360][T12718] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 525.169177][T12726] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 525.178970][T12726] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 525.189927][T12732] netlink: 'syz.1.1832': attribute type 21 has an invalid length. [ 525.212761][T12732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1832'. [ 525.689290][T12750] netlink: 'syz.1.1837': attribute type 10 has an invalid length. [ 525.894416][T12759] netlink: 'syz.2.1840': attribute type 29 has an invalid length. [ 526.493027][T12750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 526.624725][T12759] netlink: 'syz.2.1840': attribute type 29 has an invalid length. [ 528.203346][T12798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1847'. [ 528.229218][T12799] netlink: 'syz.4.1848': attribute type 20 has an invalid length. [ 528.266762][T12798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1847'. [ 528.553177][T12805] tipc: Started in network mode [ 528.683778][T12805] tipc: Node identity 9215a268, cluster identity 4711 [ 528.750065][T12807] delete_channel: no stack [ 528.758611][T12805] tipc: Node number set to 2450891368 [ 529.058327][T12819] netlink: 'syz.2.1855': attribute type 10 has an invalid length. [ 529.083198][T12819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1855'. [ 529.121653][T12819] device batadv_slave_0 entered promiscuous mode [ 529.162512][T12819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.181645][T12819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.248538][T12819] bridge0: port 3(batadv_slave_0) entered blocking state [ 529.284278][T12819] bridge0: port 3(batadv_slave_0) entered disabled state [ 529.596370][T12819] bridge0: port 3(batadv_slave_0) entered blocking state [ 529.605964][T12819] bridge0: port 3(batadv_slave_0) entered forwarding state [ 529.648948][T12823] netlink: 'syz.3.1853': attribute type 10 has an invalid length. [ 529.662038][T12823] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1853'. [ 529.676542][T12823] device hsr0 entered promiscuous mode [ 529.701383][T12822] rxe_eth0 speed is unknown, defaulting to 1000 [ 529.716390][T12832] device syzkaller0 entered promiscuous mode [ 529.952193][T12838] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1860'. [ 530.130995][T12838] openvswitch: netlink: Flow key attr not present in new flow. [ 530.185846][T12844] netlink: 'syz.3.1859': attribute type 7 has an invalid length. [ 530.423425][T12847] netlink: 'syz.1.1860': attribute type 21 has an invalid length. [ 530.431465][T12847] netlink: 'syz.1.1860': attribute type 6 has an invalid length. [ 530.516734][T12847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1860'. [ 530.700923][T12847] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1860'. [ 531.226037][T12851] netlink: 'syz.5.1862': attribute type 21 has an invalid length. [ 531.262177][T12851] netlink: 'syz.5.1862': attribute type 2 has an invalid length. [ 531.301003][T12853] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1862'. [ 531.346017][T12853] bridge_slave_1: default FDB implementation only supports local addresses [ 531.916835][T12876] netlink: 'syz.5.1868': attribute type 3 has an invalid length. [ 531.924952][T12876] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1868'. [ 532.645137][T12897] delete_channel: no stack [ 533.795276][T12932] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 533.872745][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.788982][T12932] device bridge_slave_1 left promiscuous mode [ 536.806347][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.849896][T12940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 536.864852][T12940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.889746][T12934] netlink: 'syz.5.1884': attribute type 21 has an invalid length. [ 536.899625][T12939] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1886'. [ 536.938836][T12946] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1888'. [ 536.948364][T12946] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 536.964808][T12947] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1888'. [ 536.974413][T12947] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 537.048524][T12949] ÿÿÿÿÿÿ: renamed from syzkaller0 [ 537.119302][T12954] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 537.145970][T12954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1891'. [ 537.170686][T12954] batman_adv: batadv0: Adding interface: vlan1 [ 537.193297][T12954] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.239143][T12954] batman_adv: batadv0: Interface activated: vlan1 [ 537.570529][T12976] netlink: 'syz.4.1897': attribute type 3 has an invalid length. [ 537.666483][T12976] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1897'. [ 537.713411][T12982] netlink: 'syz.1.1898': attribute type 41 has an invalid length. [ 540.207277][T13019] netlink: 'syz.5.1907': attribute type 11 has an invalid length. [ 540.234100][T13019] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1907'. [ 540.249052][T13018] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1908'. [ 540.376174][T13030] netlink: 'syz.5.1907': attribute type 11 has an invalid length. [ 540.426879][T13030] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1907'. [ 540.651263][T13011] netlink: 'syz.3.1905': attribute type 21 has an invalid length. [ 540.661008][T13023] netlink: 'syz.3.1905': attribute type 21 has an invalid length. [ 540.669875][T13033] netlink: 'syz.4.1909': attribute type 21 has an invalid length. [ 540.670736][T13016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.686495][T13033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1909'. [ 540.996938][T13043] netlink: 'syz.5.1911': attribute type 3 has an invalid length. [ 541.064379][T13051] netlink: 'syz.1.1912': attribute type 3 has an invalid length. [ 541.103873][T13051] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1912'. [ 541.967227][T13082] rxe_eth0 speed is unknown, defaulting to 1000 [ 545.570113][T13100] rxe_eth0 speed is unknown, defaulting to 1000 [ 545.718517][T13128] delete_channel: no stack [ 546.268123][T13135] rxe_eth0 speed is unknown, defaulting to 1000 [ 547.022973][T13160] netlink: 'syz.4.1937': attribute type 22 has an invalid length. [ 547.067811][T13160] __nla_validate_parse: 1 callbacks suppressed [ 547.067831][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 547.798891][T13181] netlink: 'syz.4.1940': attribute type 10 has an invalid length. [ 548.115405][T13184] netlink: 'syz.5.1941': attribute type 10 has an invalid length. [ 548.872155][T13184] team0: Device gre0 is of different type [ 549.055042][T13187] rxe_eth0 speed is unknown, defaulting to 1000 [ 549.283974][T13205] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1945'. [ 550.868141][T13222] rxe_eth0 speed is unknown, defaulting to 1000 [ 551.152852][T13238] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 551.293596][T13244] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1954'. [ 551.323551][T13246] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1953'. [ 551.652067][T13258] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1957'. [ 552.129676][T13273] device syzkaller0 entered promiscuous mode [ 554.099537][T13320] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 554.109326][T13320] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 554.117338][T13320] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1968'. [ 556.085737][T13330] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1970'. [ 556.785927][T13345] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1976'. [ 557.097892][T13369] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1982'. [ 557.466562][T13375] device veth0_vlan left promiscuous mode [ 557.493984][T13375] device veth0_vlan entered promiscuous mode [ 557.709211][T13389] netlink: 'syz.5.1989': attribute type 2 has an invalid length. [ 558.364931][T13412] netlink: 'syz.1.1995': attribute type 29 has an invalid length. [ 558.410446][T13412] netlink: 'syz.1.1995': attribute type 29 has an invalid length. [ 558.426458][T13416] netlink: 'syz.5.1994': attribute type 21 has an invalid length. [ 558.449141][T13416] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1994'. [ 558.499575][T13416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1994'. [ 558.599768][T13419] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1997'. [ 558.684688][T13426] netlink: 'syz.5.1994': attribute type 21 has an invalid length. [ 558.703191][T13426] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1994'. [ 558.714488][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1994'. [ 558.809804][T13419] netlink: 'syz.4.1997': attribute type 4 has an invalid length. [ 558.928590][T13420] netlink: 'syz.4.1997': attribute type 4 has an invalid length. [ 561.809220][T13481] netlink: 'syz.1.2009': attribute type 12 has an invalid length. [ 561.831271][T13481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2009'. [ 561.900683][T13481] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2009'. [ 562.010578][T13483] netlink: 'syz.2.2010': attribute type 10 has an invalid length. [ 562.374312][T13486] can: request_module (can-proto-0) failed. [ 562.587756][T13483] team0: Port device geneve1 added [ 562.593803][T13497] netlink: 'syz.5.2012': attribute type 39 has an invalid length. [ 562.772788][T13501] tipc: Started in network mode [ 562.778231][T13501] tipc: Node identity 9215a268, cluster identity 4711 [ 562.807688][T13501] tipc: Node number set to 2450891368 [ 563.016067][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.022438][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.105078][T13509] netlink: 'syz.2.2015': attribute type 10 has an invalid length. [ 563.163521][T13509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2015'. [ 563.288816][T13509] device  entered promiscuous mode [ 563.374120][T13509] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 563.425948][T13514] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2017'. [ 563.426451][T13517] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2018'. [ 563.442811][T13514] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 564.035302][T13536] bridge0: port 2(syz_tun) entered blocking state [ 564.080818][T13536] bridge0: port 2(syz_tun) entered disabled state [ 564.114125][T13536] device syz_tun entered promiscuous mode [ 564.121028][T13536] bridge0: port 2(syz_tun) entered blocking state [ 564.127711][T13536] bridge0: port 2(syz_tun) entered forwarding state [ 564.186338][T13534] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2024'. [ 564.510823][T13547] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 565.171118][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 565.200692][T13563] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2031'. [ 565.239817][T13563] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 567.218288][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2040'. [ 567.512802][T13604] netlink: 'syz.1.2043': attribute type 28 has an invalid length. [ 567.541214][T13604] netlink: 'syz.1.2043': attribute type 29 has an invalid length. [ 567.580000][T13604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2043'. [ 568.153105][T13609] netlink: 'syz.5.2045': attribute type 10 has an invalid length. [ 568.257400][T13613] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2046'. [ 568.292409][T13613] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 568.700084][T13609] team0: Port device geneve1 added [ 568.833986][T13626] device vcan0 left promiscuous mode [ 569.120007][T13635] device veth1_macvtap left promiscuous mode [ 569.184215][T13636] device veth1_macvtap entered promiscuous mode [ 569.219620][T13636] device macsec0 entered promiscuous mode [ 569.229905][T13636] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 569.269839][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 570.586324][T13659] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.2056'. [ 570.630371][T13659] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 570.812645][T13664] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2057'. [ 573.067305][T13683] netlink: 'syz.1.2061': attribute type 10 has an invalid length. [ 574.151150][T13694] bridge0: port 5(ip6gretap0) entered blocking state [ 574.185669][T13694] bridge0: port 5(ip6gretap0) entered disabled state [ 574.220411][T13694] device ip6gretap0 entered promiscuous mode [ 574.239216][T13694] bridge0: port 5(ip6gretap0) entered blocking state [ 574.246351][T13694] bridge0: port 5(ip6gretap0) entered forwarding state [ 574.306226][ T4282] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 574.316012][ T4282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 574.324796][ T4282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 574.333659][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 574.343117][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 574.350658][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 574.533900][T13695] rxe_eth0 speed is unknown, defaulting to 1000 [ 575.470277][T13695] chnl_net:caif_netlink_parms(): no params data found [ 576.007410][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.022677][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.066889][T13695] device bridge_slave_0 entered promiscuous mode [ 576.100421][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.113195][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.140142][T13695] device bridge_slave_1 entered promiscuous mode [ 576.271412][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.314070][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.375400][ T50] Bluetooth: hci5: command 0x0409 tx timeout [ 576.379704][T13716] netlink: 'syz.1.2068': attribute type 39 has an invalid length. [ 578.452721][ T50] Bluetooth: hci5: command 0x041b tx timeout [ 579.662614][T13726] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 579.698672][T13726] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 579.743592][T13695] team0: Port device team_slave_0 added [ 579.878842][T13695] team0: Port device team_slave_1 added [ 579.989122][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.023241][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.091226][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.149451][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.182577][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.289840][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.432022][T13695] device hsr_slave_0 entered promiscuous mode [ 580.490992][T13695] device hsr_slave_1 entered promiscuous mode [ 580.521350][T13695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.541789][T13695] Cannot create hsr debugfs directory [ 580.547454][ T50] Bluetooth: hci5: command 0x040f tx timeout [ 580.563062][T13744] device lo entered promiscuous mode [ 580.569140][T13744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 581.087141][T13758] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 581.126520][T13758] syzkaller1: group set to 778 [ 581.575507][T13775] device pim6reg1 entered promiscuous mode [ 581.607822][T13775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2084'. [ 581.622697][T13695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 581.641034][T13775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2084'. [ 581.667683][T13695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 581.693079][T13779] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2084'. [ 581.713406][T13695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 581.776253][T13782] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 581.841059][T13695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 582.118439][T13786] netlink: 'syz.2.2088': attribute type 4 has an invalid length. [ 582.239530][T13786] netlink: 'syz.2.2088': attribute type 4 has an invalid length. [ 582.382391][T13695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.456147][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 582.478074][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 582.524598][T13798] netlink: 'syz.5.2089': attribute type 10 has an invalid length. [ 582.551790][T13798] device veth1_macvtap left promiscuous mode [ 582.612877][ T50] Bluetooth: hci5: command 0x0419 tx timeout [ 582.626571][T13798] device macsec0 left promiscuous mode [ 582.753375][T13798] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 582.778157][T13695] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.839603][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.883514][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.929760][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.936998][ T6180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.009043][T13803] netlink: 'syz.5.2089': attribute type 10 has an invalid length. [ 583.055358][T13803] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 583.095121][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.119630][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.152361][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.170803][T13819] netlink: 'syz.4.2093': attribute type 3 has an invalid length. [ 583.189694][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.196896][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.211223][T13819] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2093'. [ 583.238844][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.252186][T13819] netlink: 'syz.4.2093': attribute type 2 has an invalid length. [ 583.291024][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 583.425654][T13819] device 1 entered promiscuous mode [ 583.480192][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 583.506946][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 583.518045][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.529572][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.580784][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 583.598419][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.615232][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.635625][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 583.646727][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.662097][T13695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.047888][T13849] netlink: 'syz.5.2101': attribute type 4 has an invalid length. [ 584.079645][T13849] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2101'. [ 585.208499][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.217034][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.490259][T13849] rxe_eth0 speed is unknown, defaulting to 1000 [ 585.551701][T13879] netlink: 'syz.1.2106': attribute type 10 has an invalid length. [ 585.573718][T13879] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.655559][T13879] device bridge_slave_1 left promiscuous mode [ 585.678687][T13879] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.848739][T13695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.445547][T13907] netlink: 'syz.5.2110': attribute type 3 has an invalid length. [ 586.487030][T13907] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2110'. [ 587.645591][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 587.669593][ T6073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 587.715575][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 587.733089][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.744117][T13695] device veth0_vlan entered promiscuous mode [ 587.751795][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 587.762952][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 587.780035][T13695] device veth1_vlan entered promiscuous mode [ 587.902200][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 587.913941][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 587.924657][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 587.934219][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.946440][T13695] device veth0_macvtap entered promiscuous mode [ 587.969323][T13695] device veth1_macvtap entered promiscuous mode [ 588.048822][T13695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.076526][T13937] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 588.082694][T13695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.122194][T13695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.137830][T13937] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 588.158668][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 588.177638][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 588.211139][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 588.242113][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 588.258781][T13940] bridge0: port 2(batadv0) entered blocking state [ 588.271702][T13940] bridge0: port 2(batadv0) entered disabled state [ 588.294309][T13940] device batadv0 entered promiscuous mode [ 588.309816][T13940] bridge0: port 2(batadv0) entered blocking state [ 588.316438][T13940] bridge0: port 2(batadv0) entered forwarding state [ 588.335233][T13695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.403014][T13695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.429409][T13695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.453114][T13695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.482589][T13695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.510588][T13695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.538412][ T6073] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 588.548212][ T6073] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 588.626933][T13695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.645468][T13941] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 588.695219][T13937] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 588.752594][T13950] netlink: 'syz.5.2120': attribute type 19 has an invalid length. [ 588.760574][T13950] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2120'. [ 588.833740][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 588.864002][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.128155][T13695] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.143359][T13695] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.152327][T13695] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.166928][T13695] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.180667][T13946] netlink: 'syz.4.2116': attribute type 29 has an invalid length. [ 591.690419][ T6090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.724930][ T6090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.773790][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 591.843841][T13968] device syzkaller0 entered promiscuous mode [ 592.166016][ T6090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.195552][ T6090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.253326][ T6090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 592.483896][T13979] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2128'. [ 593.956681][T14011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2135'. [ 593.992751][T14011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2135'. [ 594.003287][T14012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2135'. [ 594.231353][T14019] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 594.296947][T14019] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2137'. [ 595.234413][T14039] netlink: 'syz.6.2140': attribute type 9 has an invalid length. [ 595.246643][T14047] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 595.284952][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2141'. [ 595.326028][T14039] netlink: 134780 bytes leftover after parsing attributes in process `syz.6.2140'. [ 595.343386][T14047] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 595.371759][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2141'. [ 595.427201][T14048] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 595.498149][T14048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2141'. [ 595.678402][T14051] netlink: 'syz.5.2142': attribute type 2 has an invalid length. [ 595.799472][T14051] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2142'. [ 598.715449][T14086] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.2148'. [ 599.488977][T14086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 599.687956][T14086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.390656][T14108] netlink: 'syz.5.2153': attribute type 29 has an invalid length. [ 600.621073][T14108] netlink: 'syz.5.2153': attribute type 29 has an invalid length. [ 600.677009][T14115] netlink: 'syz.5.2153': attribute type 29 has an invalid length. [ 600.799006][T14112] netlink: 'syz.5.2153': attribute type 29 has an invalid length. [ 608.470149][T14170] netlink: 'syz.2.2164': attribute type 11 has an invalid length. [ 608.492551][T14170] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2164'. [ 608.579556][T14170] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2164'. [ 608.996831][T14180] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2166'. [ 610.548210][T14180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 610.818647][T14180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 611.757960][T14189] device syzkaller0 entered promiscuous mode [ 618.555428][T14213] netlink: 'syz.5.2175': attribute type 10 has an invalid length. [ 618.571622][T14213] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2175'. [ 618.606304][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.613822][T14213] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.795333][T14224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2177'. [ 618.862834][T14224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2177'. [ 618.883107][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2177'. [ 619.289923][T14256] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2182'. [ 619.486189][T14256] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 621.325370][T14288] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.2190'. [ 621.374904][T14288] openvswitch: netlink: Flow actions attr not present in new flow. [ 621.437317][T14288] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.2190'. [ 621.502679][T14288] openvswitch: netlink: Flow actions attr not present in new flow. [ 621.686760][T14288] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.2190'. [ 621.772874][T14288] openvswitch: netlink: Flow actions attr not present in new flow. [ 621.794058][T14288] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.2190'. [ 621.903091][T14288] openvswitch: netlink: Flow actions attr not present in new flow. [ 622.678701][T14311] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.2196'. [ 622.769880][T14309] netlink: 'syz.6.2197': attribute type 2 has an invalid length. [ 623.447770][T14311] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 623.640975][T14311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.729861][T14338] netlink: 'syz.2.2202': attribute type 10 has an invalid length. [ 623.783701][T14338] __nla_validate_parse: 1 callbacks suppressed [ 623.783725][T14338] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2202'. [ 623.866727][T14339] netlink: 'syz.2.2202': attribute type 10 has an invalid length. [ 623.902998][T14339] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2202'. [ 623.941169][T14337] netlink: 'syz.2.2202': attribute type 10 has an invalid length. [ 624.411647][T14348] netlink: 'syz.6.2205': attribute type 10 has an invalid length. [ 624.457910][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.464384][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.504745][T14348] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2205'. [ 627.028502][T14348] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.047769][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.147833][T14348] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.155143][T14348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.162711][T14348] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.170004][T14348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.191179][T14348] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 627.200407][T14363] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 627.218988][T14362] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 627.506630][T14387] delete_channel: no stack [ 628.312986][T14384] delete_channel: no stack [ 629.521042][T14449] device syzkaller0 entered promiscuous mode [ 629.653905][T14449] device syzkaller0 left promiscuous mode [ 631.302585][T14489] netlink: 'syz.2.2235': attribute type 29 has an invalid length. [ 631.334877][T14489] netlink: 'syz.2.2235': attribute type 29 has an invalid length. [ 631.444876][T14489] netlink: 'syz.2.2235': attribute type 29 has an invalid length. [ 631.624583][T14507] device syzkaller0 entered promiscuous mode [ 631.835582][T14507] device syzkaller0 left promiscuous mode [ 635.772661][T14533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2245'. [ 635.787834][T14553] netlink: 'syz.1.2249': attribute type 13 has an invalid length. [ 636.354074][T14571] device syzkaller0 entered promiscuous mode [ 636.412949][T14571] device syzkaller0 left promiscuous mode [ 636.754726][T14573] delete_channel: no stack [ 636.892041][T14587] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 636.930038][T14588] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2259'. [ 636.950268][T14587] device wlan1 left promiscuous mode [ 636.975821][T14588] openvswitch: netlink: Message has 6 unknown bytes. [ 637.199801][T14592] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2261'. [ 637.215889][T14592] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 637.325661][T14595] netlink: 'syz.5.2263': attribute type 2 has an invalid length. [ 637.334909][T14595] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.2263'. [ 637.836801][T14609] delete_channel: no stack [ 637.841534][T14609] delete_channel: no stack [ 638.424832][T14630] netlink: 'syz.4.2273': attribute type 2 has an invalid length. [ 638.472752][T14631] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2274'. [ 638.511467][T14630] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2273'. [ 639.551501][T14661] netlink: 131088 bytes leftover after parsing attributes in process `syz.5.2280'. [ 639.593012][T14661] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 639.656100][T14667] netlink: 763 bytes leftover after parsing attributes in process `syz.6.2281'. [ 639.717053][T14667] netlink: 'syz.6.2281': attribute type 21 has an invalid length. [ 639.736420][T14667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2281'. [ 640.421183][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2286'. [ 642.029599][T14710] netlink: 'syz.5.2293': attribute type 10 has an invalid length. [ 642.769975][T14721] netlink: 'syz.4.2298': attribute type 29 has an invalid length. [ 642.935238][T14721] netlink: 'syz.4.2298': attribute type 29 has an invalid length. [ 643.032614][T14727] netlink: 'syz.4.2298': attribute type 29 has an invalid length. [ 643.705406][T14745] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 643.766686][T14742] netlink: 'syz.2.2301': attribute type 10 has an invalid length. [ 644.170310][T14742] team0: Device wg1 is of different type [ 644.746828][T14759] netlink: 'syz.6.2305': attribute type 25 has an invalid length. [ 644.853390][T14759] netlink: 'syz.6.2305': attribute type 10 has an invalid length. [ 645.954033][T14778] __nla_validate_parse: 1 callbacks suppressed [ 645.954053][T14778] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2308'. [ 646.201970][T14790] netlink: 'syz.5.2312': attribute type 29 has an invalid length. [ 646.223645][T14790] netlink: 'syz.5.2312': attribute type 29 has an invalid length. [ 646.649566][T14806] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.2316'. [ 650.469998][T14846] validate_nla: 5 callbacks suppressed [ 650.470019][T14846] netlink: 'syz.1.2327': attribute type 13 has an invalid length. [ 650.491261][T14846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2327'. [ 650.637622][T14854] netlink: 'syz.1.2331': attribute type 2 has an invalid length. [ 650.693778][T14854] device .*! entered promiscuous mode [ 651.010711][T14862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2333'. [ 651.073953][T14862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2333'. [ 651.143203][T14865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2333'. [ 651.261193][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2336'. [ 654.270930][T14906] netlink: 'syz.1.2346': attribute type 10 has an invalid length. [ 655.587203][T14922] netlink: 180900 bytes leftover after parsing attributes in process `syz.5.2350'. [ 655.667456][T14922] openvswitch: netlink: Flow actions attr not present in new flow. [ 656.819340][T14953] netlink: 'syz.6.2360': attribute type 21 has an invalid length. [ 656.842687][T14953] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2360'. [ 656.890257][ T4284] Bluetooth: hci5: Dropping invalid advertising data [ 656.901293][ T4284] Bluetooth: hci5: unknown advertising packet type: 0xdc [ 656.901327][ T4284] Bluetooth: hci5: Malformed LE Event: 0x02 [ 657.235449][T14961] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2363'. [ 657.262803][T14961] netlink: zone id is out of range [ 657.540818][T14961] netlink: del zone limit has 4 unknown bytes [ 659.142162][T14971] bond0: (slave macvlan0): Releasing backup interface [ 659.882384][T15024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2380'. [ 659.904030][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2380'. [ 660.629817][T15046] netlink: 'syz.5.2385': attribute type 2 has an invalid length. [ 660.654113][T15046] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2385'. [ 664.403946][T15063] netlink: 'syz.5.2388': attribute type 21 has an invalid length. [ 664.412471][T15063] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2388'. [ 664.459239][T15063] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2388'. [ 664.575101][T15066] netlink: 'syz.1.2389': attribute type 7 has an invalid length. [ 664.597422][T15066] netlink: 'syz.1.2389': attribute type 6 has an invalid length. [ 664.702302][T15078] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.2393'. [ 664.915026][T15078] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.2393'. [ 664.942881][T15070] netlink: 'syz.4.2391': attribute type 2 has an invalid length. [ 664.955418][T15070] netlink: 'syz.4.2391': attribute type 4 has an invalid length. [ 664.963499][T15070] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2391'. [ 666.763360][T15124] netlink: 'syz.2.2406': attribute type 12 has an invalid length. [ 666.808471][T15120] netlink: 'syz.1.2404': attribute type 29 has an invalid length. [ 666.828988][T15127] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2406'. [ 666.904326][T15124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2406'. [ 666.975839][T15132] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2407'. [ 667.008621][T15120] netlink: 'syz.1.2404': attribute type 29 has an invalid length. [ 667.140919][T15121] netlink: 'syz.1.2404': attribute type 29 has an invalid length. [ 667.338535][T15129] can: request_module (can-proto-0) failed. [ 668.427737][T15153] netlink: 'syz.1.2413': attribute type 28 has an invalid length. [ 669.631760][T15198] device syzkaller0 entered promiscuous mode [ 671.325443][T15230] netlink: 'syz.2.2433': attribute type 11 has an invalid length. [ 671.337965][T15230] netlink: 151048 bytes leftover after parsing attributes in process `syz.2.2433'. [ 674.403456][T15221] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 674.428775][T15221] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 674.456152][T15221] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 674.585517][T15251] FAULT_INJECTION: forcing a failure. [ 674.585517][T15251] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 674.611150][T15251] CPU: 0 PID: 15251 Comm: syz.5.2448 Not tainted syzkaller #0 [ 674.618773][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 674.628943][T15251] Call Trace: [ 674.632238][T15251] [ 674.635184][T15251] dump_stack_lvl+0x188/0x24e [ 674.639900][T15251] ? show_regs_print_info+0x12/0x12 [ 674.645119][T15251] ? load_image+0x410/0x410 [ 674.649642][T15251] ? __lock_acquire+0x7ea0/0x7ea0 [ 674.654714][T15251] should_fail_ex+0x390/0x4c0 [ 674.659480][T15251] _copy_from_user+0x2c/0x170 [ 674.664173][T15251] __sys_bpf+0x2ea/0x780 [ 674.668576][T15251] ? bpf_link_show_fdinfo+0x550/0x550 [ 674.674058][T15251] ? lock_chain_count+0x20/0x20 [ 674.678928][T15251] __x64_sys_bpf+0x78/0x90 [ 674.683359][T15251] do_syscall_64+0x4c/0xa0 [ 674.687791][T15251] ? clear_bhb_loop+0x60/0xb0 [ 674.692657][T15251] ? clear_bhb_loop+0x60/0xb0 [ 674.697347][T15251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 674.703253][T15251] RIP: 0033:0x7ff02d79fb19 [ 674.707677][T15251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.727475][T15251] RSP: 002b:00007ff02e622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.735923][T15251] RAX: ffffffffffffffda RBX: 00007ff02da25fa0 RCX: 00007ff02d79fb19 [ 674.743914][T15251] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 674.751890][T15251] RBP: 00007ff02e622090 R08: 0000000000000000 R09: 0000000000000000 [ 674.759887][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.767892][T15251] R13: 00007ff02da26038 R14: 00007ff02da25fa0 R15: 00007ffd3e29b6a8 [ 674.775994][T15251] [ 675.143214][T15275] netlink: 'syz.4.2444': attribute type 39 has an invalid length. [ 675.859602][T15297] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2450'. [ 676.097499][T15312] FAULT_INJECTION: forcing a failure. [ 676.097499][T15312] name failslab, interval 1, probability 0, space 0, times 1 [ 676.121032][T15312] CPU: 0 PID: 15312 Comm: syz.4.2455 Not tainted syzkaller #0 [ 676.128555][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 676.138655][T15312] Call Trace: [ 676.141971][T15312] [ 676.144948][T15312] dump_stack_lvl+0x188/0x24e [ 676.149677][T15312] ? show_regs_print_info+0x12/0x12 [ 676.154937][T15312] ? load_image+0x410/0x410 [ 676.159493][T15312] ? __lock_acquire+0x7ea0/0x7ea0 [ 676.164576][T15312] should_fail_ex+0x390/0x4c0 [ 676.169304][T15312] should_failslab+0x5/0x20 [ 676.173844][T15312] slab_pre_alloc_hook+0x59/0x300 [ 676.178992][T15312] ? verify_lock_unused+0x140/0x140 [ 676.184229][T15312] ? bpf_test_init+0x9f/0x140 [ 676.189004][T15312] __kmem_cache_alloc_node+0x4f/0x270 [ 676.194420][T15312] ? bpf_test_init+0x9f/0x140 [ 676.199134][T15312] __kmalloc+0xa3/0x240 [ 676.203348][T15312] bpf_test_init+0x9f/0x140 [ 676.207882][T15312] bpf_prog_test_run_xdp+0x488/0xf80 [ 676.213186][T15312] ? __lock_acquire+0x7ea0/0x7ea0 [ 676.218245][T15312] ? dev_put+0x80/0x80 [ 676.222333][T15312] ? dev_put+0x80/0x80 [ 676.226412][T15312] bpf_prog_test_run+0x31c/0x390 [ 676.231381][T15312] __sys_bpf+0x62b/0x780 [ 676.235643][T15312] ? bpf_link_show_fdinfo+0x550/0x550 [ 676.241052][T15312] ? lock_chain_count+0x20/0x20 [ 676.245935][T15312] __x64_sys_bpf+0x78/0x90 [ 676.250370][T15312] do_syscall_64+0x4c/0xa0 [ 676.254892][T15312] ? clear_bhb_loop+0x60/0xb0 [ 676.259588][T15312] ? clear_bhb_loop+0x60/0xb0 [ 676.264389][T15312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.270412][T15312] RIP: 0033:0x7fde5099fb19 [ 676.274931][T15312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.294840][T15312] RSP: 002b:00007fde51872028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.303269][T15312] RAX: ffffffffffffffda RBX: 00007fde50c25fa0 RCX: 00007fde5099fb19 [ 676.311260][T15312] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 676.319266][T15312] RBP: 00007fde51872090 R08: 0000000000000000 R09: 0000000000000000 [ 676.327254][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.335235][T15312] R13: 00007fde50c26038 R14: 00007fde50c25fa0 R15: 00007ffc156c61f8 [ 676.343234][T15312] [ 676.820810][T15332] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2461'. [ 677.153628][T15336] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 677.233850][T15336] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 677.252009][T15338] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 677.348974][T15336] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 677.860650][T15347] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2461'. [ 677.990012][T15356] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2465'. [ 678.395256][T15365] FAULT_INJECTION: forcing a failure. [ 678.395256][T15365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.450342][T15365] CPU: 1 PID: 15365 Comm: syz.4.2467 Not tainted syzkaller #0 [ 678.457895][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 678.468135][T15365] Call Trace: [ 678.471541][T15365] [ 678.474505][T15365] dump_stack_lvl+0x188/0x24e [ 678.479317][T15365] ? show_regs_print_info+0x12/0x12 [ 678.484646][T15365] ? load_image+0x410/0x410 [ 678.489373][T15365] ? __lock_acquire+0x7ea0/0x7ea0 [ 678.494489][T15365] should_fail_ex+0x390/0x4c0 [ 678.499239][T15365] _copy_from_user+0x2c/0x170 [ 678.504173][T15365] bpf_test_init+0xde/0x140 [ 678.508893][T15365] bpf_prog_test_run_xdp+0x488/0xf80 [ 678.514226][T15365] ? __lock_acquire+0x7ea0/0x7ea0 [ 678.519312][T15365] ? dev_put+0x80/0x80 [ 678.523519][T15365] ? dev_put+0x80/0x80 [ 678.527625][T15365] bpf_prog_test_run+0x31c/0x390 [ 678.532613][T15365] __sys_bpf+0x62b/0x780 [ 678.536899][T15365] ? bpf_link_show_fdinfo+0x550/0x550 [ 678.542336][T15365] ? lock_chain_count+0x20/0x20 [ 678.547235][T15365] __x64_sys_bpf+0x78/0x90 [ 678.551758][T15365] do_syscall_64+0x4c/0xa0 [ 678.556284][T15365] ? clear_bhb_loop+0x60/0xb0 [ 678.560976][T15365] ? clear_bhb_loop+0x60/0xb0 [ 678.565671][T15365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.571578][T15365] RIP: 0033:0x7fde5099fb19 [ 678.576103][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.595910][T15365] RSP: 002b:00007fde51872028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.604473][T15365] RAX: ffffffffffffffda RBX: 00007fde50c25fa0 RCX: 00007fde5099fb19 [ 678.612480][T15365] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 678.620558][T15365] RBP: 00007fde51872090 R08: 0000000000000000 R09: 0000000000000000 [ 678.628626][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.636690][T15365] R13: 00007fde50c26038 R14: 00007fde50c25fa0 R15: 00007ffc156c61f8 [ 678.644695][T15365] [ 680.090276][T15363] rxe_eth0 speed is unknown, defaulting to 1000 [ 680.623307][T15426] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2481'. [ 680.722928][T15425] FAULT_INJECTION: forcing a failure. [ 680.722928][T15425] name failslab, interval 1, probability 0, space 0, times 0 [ 680.763323][T15425] CPU: 0 PID: 15425 Comm: syz.1.2483 Not tainted syzkaller #0 [ 680.770863][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 680.780967][T15425] Call Trace: [ 680.784288][T15425] [ 680.787250][T15425] dump_stack_lvl+0x188/0x24e [ 680.791978][T15425] ? show_regs_print_info+0x12/0x12 [ 680.797217][T15425] ? load_image+0x410/0x410 [ 680.801764][T15425] ? __might_sleep+0xd0/0xd0 [ 680.806450][T15425] ? __lock_acquire+0x7ea0/0x7ea0 [ 680.811521][T15425] should_fail_ex+0x390/0x4c0 [ 680.816242][T15425] should_failslab+0x5/0x20 [ 680.820782][T15425] slab_pre_alloc_hook+0x59/0x300 [ 680.825862][T15425] ? __lock_acquire+0x7ea0/0x7ea0 [ 680.830966][T15425] ? kvmalloc_node+0x6c/0x180 [ 680.835890][T15425] __kmem_cache_alloc_node+0x4f/0x270 [ 680.841337][T15425] ? schedule_delayed_monitor_work+0x160/0x160 [ 680.847640][T15425] ? kvmalloc_node+0x6c/0x180 [ 680.852367][T15425] __kmalloc_node+0xa2/0x240 [ 680.857009][T15425] kvmalloc_node+0x6c/0x180 [ 680.861551][T15425] bpf_test_run_xdp_live+0x1da/0x1a90 [ 680.866965][T15425] ? 0xffffffffa00049c0 [ 680.871153][T15425] ? text_poke_copy+0x7b/0x90 [ 680.875873][T15425] ? 0xffffffffa00049c0 [ 680.880064][T15425] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 680.886194][T15425] ? xdp_convert_md_to_buff+0x330/0x330 [ 680.891830][T15425] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 680.898396][T15425] ? bpf_test_init+0x119/0x140 [ 680.903203][T15425] ? xdp_convert_md_to_buff+0x5b/0x330 [ 680.908800][T15425] bpf_prog_test_run_xdp+0x757/0xf80 [ 680.914105][T15425] ? __lock_acquire+0x7ea0/0x7ea0 [ 680.919153][T15425] ? dev_put+0x80/0x80 [ 680.923240][T15425] ? dev_put+0x80/0x80 [ 680.927323][T15425] bpf_prog_test_run+0x31c/0x390 [ 680.932289][T15425] __sys_bpf+0x62b/0x780 [ 680.936548][T15425] ? bpf_link_show_fdinfo+0x550/0x550 [ 680.941947][T15425] ? lock_chain_count+0x20/0x20 [ 680.946822][T15425] __x64_sys_bpf+0x78/0x90 [ 680.951271][T15425] do_syscall_64+0x4c/0xa0 [ 680.955706][T15425] ? clear_bhb_loop+0x60/0xb0 [ 680.960402][T15425] ? clear_bhb_loop+0x60/0xb0 [ 680.965116][T15425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.971141][T15425] RIP: 0033:0x7f6e2139fb19 [ 680.975579][T15425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.995291][T15425] RSP: 002b:00007f6e2231d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 681.003743][T15425] RAX: ffffffffffffffda RBX: 00007f6e21625fa0 RCX: 00007f6e2139fb19 [ 681.011815][T15425] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 000000000000000a [ 681.019795][T15425] RBP: 00007f6e2231d090 R08: 0000000000000000 R09: 0000000000000000 [ 681.028318][T15425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.036316][T15425] R13: 00007f6e21626038 R14: 00007f6e21625fa0 R15: 00007ffd3d7f73e8 [ 681.044318][T15425] [ 683.096227][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.505421][T15468] device geneve0 entered promiscuous mode [ 683.519944][T15468] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 683.572921][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.629331][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.724135][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.746900][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.770293][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.786581][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.796824][T15468] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 683.933895][T15488] netlink: 'syz.2.2496': attribute type 4 has an invalid length. [ 683.970056][T15488] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2496'. [ 684.061564][T15488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 684.588817][T15507] netlink: 'syz.5.2503': attribute type 10 has an invalid length. [ 685.997206][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.004468][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.021739][T15527] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.2508'. [ 686.251923][T15543] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2512'. [ 686.731419][T15556] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2514'. [ 687.329820][T15556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.450310][T15556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.498807][T15556] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 687.536450][T15556] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 687.565504][T15556] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 687.576969][T15556] bond0 (unregistering): Released all slaves [ 687.592611][T15561] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2514'. [ 687.897685][T15561] team0: Port device team_slave_0 removed [ 688.187392][T15571] netlink: 279 bytes leftover after parsing attributes in process `syz.6.2519'. [ 688.527443][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2525'. [ 688.590289][T15591] validate_nla: 3 callbacks suppressed [ 688.590310][T15591] netlink: 'syz.6.2525': attribute type 10 has an invalid length. [ 690.821586][T15602] netlink: 'syz.2.2527': attribute type 17 has an invalid length. [ 690.851549][T15602] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2527'. [ 691.413996][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.435364][T15624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.777319][T15624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.803386][T15624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.261286][T15638] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2533'. [ 692.901496][T15638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.936132][T15638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.044869][T15638] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 693.138642][T15638] bond0 (unregistering): Released all slaves [ 693.197117][T15640] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2533'. [ 693.478446][T15640] team0: Port device team_slave_0 removed [ 694.887253][T15684] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.2545'. [ 698.222860][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 698.767782][T15714] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2554'. [ 699.101828][T15714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.311255][T15714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.416975][T15714] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 699.466224][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.476796][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.579775][T15714] bond0 (unregistering): Released all slaves [ 699.630230][T15719] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2554'. [ 699.789987][T15719] team0: Port device team_slave_0 removed [ 699.860971][T15734] netlink: 'syz.2.2558': attribute type 2 has an invalid length. [ 699.910673][T15734] netlink: 'syz.2.2558': attribute type 8 has an invalid length. [ 699.945108][T15734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2558'. [ 701.299098][T15780] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 701.391057][T15780] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 701.984829][T15793] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2572'. [ 702.057955][T15787] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2572'. [ 702.394517][T15787] team0: Port device bond0 removed [ 702.516069][T15787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.651193][T15787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.684238][T15787] bond0 (unregistering): Released all slaves [ 702.778523][T15816] netlink: 'syz.4.2583': attribute type 11 has an invalid length. [ 702.842610][T15816] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2583'. [ 702.929001][T15821] netlink: 'syz.5.2584': attribute type 16 has an invalid length. [ 702.946193][T15821] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2584'. [ 703.022627][T15819] netlink: 'syz.5.2584': attribute type 10 has an invalid length. [ 703.060348][T15821] netlink: 'syz.5.2584': attribute type 16 has an invalid length. [ 703.110423][T15821] netlink: 'syz.5.2584': attribute type 3 has an invalid length. [ 703.144157][T15821] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2584'. [ 703.363206][T15818] delete_channel: no stack [ 703.814536][T15846] device syzkaller0 entered promiscuous mode [ 703.976238][T15845] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2591'. [ 705.649508][T15897] sctp: [Deprecated]: syz.1.2603 (pid 15897) Use of int in max_burst socket option deprecated. [ 705.649508][T15897] Use struct sctp_assoc_value instead [ 705.700104][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 706.525077][T15912] netlink: 'syz.6.2605': attribute type 1 has an invalid length. [ 706.703443][T15912] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2605'. [ 708.216694][T15934] netlink: 'syz.2.2611': attribute type 21 has an invalid length. [ 708.353288][T15934] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2611'. [ 710.542128][T15970] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2623'. [ 710.888827][T15984] netlink: 'syz.6.2626': attribute type 10 has an invalid length. [ 710.945731][T15984] team0: Device wlan1 is up. Set it down before adding it as a team port [ 712.049368][T16004] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2633'. [ 712.250047][T15999] delete_channel: no stack [ 712.575030][T16013] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2635'. [ 712.663521][T16013] netlink: 'syz.6.2635': attribute type 21 has an invalid length. [ 712.741822][T16013] netlink: 'syz.6.2635': attribute type 1 has an invalid length. [ 712.791482][T15825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.819485][T16013] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2635'. [ 714.476148][T16039] netlink: 206904 bytes leftover after parsing attributes in process `syz.5.2631'. [ 714.819678][T16064] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2647'. [ 715.089295][T16057] netlink: 'syz.1.2647': attribute type 21 has an invalid length. [ 715.120547][T16057] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2647'. [ 715.165029][T16055] nr0: port 1(hsr0) entered blocking state [ 715.171029][T16055] nr0: port 1(hsr0) entered disabled state [ 715.235936][T16055] device hsr0 entered promiscuous mode [ 715.257281][T16055] nr0: port 1(hsr0) entered blocking state [ 715.263437][T16055] nr0: port 1(hsr0) entered forwarding state [ 719.802313][T16114] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.2660'. [ 720.562816][T16134] tap0: tun_chr_ioctl cmd 1074025676 [ 720.609483][T16134] tap0: owner set to 768 [ 721.157049][T16155] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.2670'. [ 723.464573][T16187] netlink: 'syz.6.2676': attribute type 10 has an invalid length. [ 723.862263][T16193] netlink: 'syz.6.2676': attribute type 10 has an invalid length. [ 724.828027][T16209] netlink: 'syz.2.2680': attribute type 29 has an invalid length. [ 724.882210][T16209] netlink: 'syz.2.2680': attribute type 29 has an invalid length. [ 725.331789][T16220] netlink: 'syz.2.2685': attribute type 49 has an invalid length. [ 725.899609][T16231] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2689'. [ 725.953634][T16236] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2689'. [ 726.676627][T16258] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2695'. [ 726.771110][T16254] netlink: 'syz.2.2693': attribute type 21 has an invalid length. [ 726.784611][T16258] netlink: 'syz.1.2695': attribute type 2 has an invalid length. [ 726.832703][T16258] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2695'. [ 726.853590][T16254] netlink: 'syz.2.2693': attribute type 3 has an invalid length. [ 726.886209][T16254] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2693'. [ 726.966282][T16260] netlink: 'syz.1.2695': attribute type 2 has an invalid length. [ 727.000323][T16263] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2695'. [ 727.033703][T16260] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2695'. [ 728.150814][T16279] netlink: 'syz.1.2699': attribute type 3 has an invalid length. [ 728.268693][T16279] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2699'. [ 728.501182][T16287] netlink: 'syz.6.2700': attribute type 2 has an invalid length. [ 728.612751][T16287] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2700'. [ 729.416101][T16303] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2703'. [ 730.717993][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 730.768085][ T28] Not tainted syzkaller #0 [ 730.821640][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.915909][ T28] task:rcu_tasks_kthre state:D stack:27664 pid:12 ppid:2 flags:0x00004000 [ 730.987592][ T28] Call Trace: [ 730.990972][ T28] [ 731.044524][ T28] __schedule+0x1089/0x4140 [ 731.049216][ T28] ? release_firmware_map_entry+0x187/0x187 [ 731.162346][ T28] schedule+0xb9/0x180 [ 731.170338][ T28] schedule_timeout+0xbd/0x2d0 [ 731.252787][ T28] ? console_conditional_schedule+0x40/0x40 [ 731.258801][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 731.332780][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 731.337936][ T28] ? lock_chain_count+0x20/0x20 [ 731.413145][T16312] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2705'. [ 731.423182][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 731.428271][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 731.502447][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 731.510928][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 731.523434][T16312] ieee80211 .! 5‚Á7>7H€: Selected rate control algorithm 'minstrel_ht' [ 731.561501][ T28] ? wait_for_completion+0x26f/0x590 [ 731.602371][ T28] wait_for_completion+0x2c2/0x590 [ 731.609036][ T28] ? io_schedule+0xd0/0xd0 [ 731.633500][T16312] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 731.653007][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 731.681005][ T28] ? debug_object_active_state+0x6b/0x380 [ 731.707301][ T28] __synchronize_srcu+0x2b3/0x350 [ 731.735920][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 731.766444][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 731.776675][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 731.783605][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 731.789682][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 731.795858][ T28] rcu_tasks_wait_gp+0x49d/0xb00 [ 731.801208][ T28] ? rcu_tasks_wait_gp+0x21a/0xb00 [ 731.819096][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 731.832151][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 731.843304][ T28] ? rcu_tasks_invoke_cbs+0x790/0x790 [ 731.848896][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 731.855063][ T28] ? _raw_spin_unlock+0x40/0x40 [ 731.859964][ T28] rcu_tasks_one_gp+0xb1c/0xce0 [ 731.865737][ T28] ? rcu_tasks_one_gp+0xe5/0xce0 [ 731.870854][ T28] rcu_tasks_kthread+0x6e/0x90 [ 731.875917][ T28] kthread+0x29d/0x330 [ 731.880364][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 731.885877][ T28] ? kthread_blkcg+0xd0/0xd0 [ 731.890529][ T28] ret_from_fork+0x1f/0x30 [ 731.896306][ T28] [ 731.899603][ T28] [ 731.899603][ T28] Showing all locks held in the system: [ 731.908189][ T28] 1 lock held by rcu_tasks_kthre/12: [ 731.942444][ T28] #0: ffffffff8db2e3f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 731.961732][ T28] 1 lock held by rcu_tasks_trace/13: [ 731.967166][ T28] #0: ffffffff8db2ec30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 731.978408][ T28] 1 lock held by khungtaskd/28: [ 731.984587][ T28] #0: ffffffff8db2daa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 731.994648][ T28] 2 locks held by getty/4031: [ 731.999326][ T28] #0: ffff888031f95098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 732.009210][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x430/0x1400 [ 732.020340][ T28] 2 locks held by kworker/0:3/4275: [ 732.025735][ T28] #0: ffff888018472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 732.036814][ T28] #1: ffffc90004277d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 732.049836][ T28] 3 locks held by kworker/u4:36/6180: [ 732.055486][ T28] #0: ffff888018479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 732.068519][ T28] #1: ffffc90003457d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 732.079794][ T28] #2: ffffffff8db337b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 732.094273][ T28] 2 locks held by syz.5.2696/16265: [ 732.099491][ T28] #0: ffffffff8db82da8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 732.109602][ T28] #1: ffffffff8db337b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 732.123183][ T28] [ 732.125590][ T28] ============================================= [ 732.125590][ T28] [ 732.140390][ T28] NMI backtrace for cpu 1 [ 732.144799][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 732.152224][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 732.162324][ T28] Call Trace: [ 732.165665][ T28] [ 732.168600][ T28] dump_stack_lvl+0x188/0x24e [ 732.173288][ T28] ? irq_work_queue+0xb8/0x140 [ 732.178099][ T28] ? show_regs_print_info+0x12/0x12 [ 732.183674][ T28] ? load_image+0x410/0x410 [ 732.188196][ T28] ? vprintk_emit+0x59f/0x6a0 [ 732.192885][ T28] ? printk_sprint+0x460/0x460 [ 732.197710][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 732.202698][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 732.208949][ T28] ? _printk+0xda/0x130 [ 732.213142][ T28] ? load_image+0x410/0x410 [ 732.217661][ T28] ? load_image+0x410/0x410 [ 732.222187][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 732.228526][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 732.234653][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 732.240650][ T28] watchdog+0xf0e/0xf50 [ 732.244863][ T28] ? watchdog+0x1ed/0xf50 [ 732.249209][ T28] kthread+0x29d/0x330 [ 732.253291][ T28] ? hungtask_pm_notify+0x40/0x40 [ 732.258337][ T28] ? kthread_blkcg+0xd0/0xd0 [ 732.263041][ T28] ret_from_fork+0x1f/0x30 [ 732.267482][ T28] [ 732.271121][ T28] Sending NMI from CPU 1 to CPUs 0: [ 732.276398][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 732.286553][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 732.286568][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 732.286586][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 732.286596][ T28] Call Trace: [ 732.286602][ T28] [ 732.286609][ T28] dump_stack_lvl+0x188/0x24e [ 732.286639][ T28] ? memcpy+0x3c/0x60 [ 732.286659][ T28] ? show_regs_print_info+0x12/0x12 [ 732.286682][ T28] ? load_image+0x410/0x410 [ 732.286712][ T28] panic+0x2d3/0x710 [ 732.286729][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 732.286757][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 732.286774][ T28] ? load_image+0x410/0x410 [ 732.286796][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 732.286823][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 732.286848][ T28] watchdog+0xf4d/0xf50 [ 732.286872][ T28] ? watchdog+0x1ed/0xf50 [ 732.286897][ T28] kthread+0x29d/0x330 [ 732.286910][ T28] ? hungtask_pm_notify+0x40/0x40 [ 732.286929][ T28] ? kthread_blkcg+0xd0/0xd0 [ 732.286946][ T28] ret_from_fork+0x1f/0x30 [ 732.286979][ T28] [ 732.290647][ T28] Kernel Offset: disabled [ 732.404746][ T28] Rebooting in 86400 seconds..