last executing test programs: 3m19.594028224s ago: executing program 0 (id=94): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8) 3m17.136786367s ago: executing program 0 (id=96): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000040), 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1c, 0x3, 0x8, 0x2, 0x2, r5, 0x8, '\x00', r6, r2, 0x3, 0x2, 0x2}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x36}, 0x28) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba800000", 0x2c}], 0x1}, 0x0) 3m15.498818388s ago: executing program 0 (id=99): perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x40021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = socket$kcm(0x25, 0x5, 0x0) recvmsg(r0, 0x0, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x46, 0x0, 0x4}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e37040001", 0x27}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502"], 0xfe33) 3m15.498282788s ago: executing program 2 (id=101): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'tunl0\x00', 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00800000000000000500000005cd000000600000", @ANYRES32=r4, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000005000000000000000900"/28], 0x50) 3m15.211494742s ago: executing program 0 (id=104): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3fffe, 0x2890ec548fa81f18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x90000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x4239, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 3m14.962745084s ago: executing program 2 (id=106): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c803, 0x47c3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000400)={0x5, 0x80, 0x1, 0x3, 0xd, 0x3, 0x0, 0x7, 0x4100, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x2}, 0x1000, 0xff, 0x2, 0x0, 0x9a, 0x10, 0x1000, 0x0, 0x1000, 0x0, 0x7}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x801, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec112", 0x4}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002580)=""/4072, 0xfe8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0x5}]}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r5, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 3m14.822636771s ago: executing program 0 (id=107): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m14.061793339s ago: executing program 1 (id=108): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'ip6gre0\x00'}) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="4fbfb5", 0x3}], 0x1}, 0x8080) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x604) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000280)="96c345e15f6d7af569f5f8af582ec4b7c450a7a535e3039464f7ceeabfe08ec6c8fcb1fe00118d1330b8fef23779f3bd2a2cdae3f4aa283eb5b50b5e772e2dc171d68775d64a5c"}, 0x20) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000019, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$cgroup_ro(r2, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x4) 3m13.723044385s ago: executing program 0 (id=109): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007000000020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000004e64ed6eba82ec1556e3ea6beb26cbe0acd5f92b98be73ead2588c5a2a9dd6e59043ede218fc9f6d795580a4b134422e9084d7ca11f75d8", @ANYBLOB="3aece2a119772c02ed40dbee9f43b110537ca4a78e7d13e40d98ce9dff55d9236346db4bdda16a05412ec210e27734d31a8243", @ANYRES32, @ANYBLOB="feffffda12f17f82a86ad9101d8a1f4767000000000000000000006d5a0b81bdf43c9d3b1a1d75d8a4f0603831ff6cbebc7daf0ca8b1950155223d739a385ff41e0cf4c7eedb6cdc5a99fe759a7e79ae25be3efec1d471881a101217ef92fcc98c6f49e01ac26f7f4951edd9dc5a9999dad8ad469098dbf930d248b0f5460757d766e9d6bbd6a4275ab489f433f5ce0029b877e9507e268aa7fabfb2f607a1b92782222665be10195a7172effaf61e9b7509a74828119b32d555b68aee7658961ccfa10940e85b548c4c222700bf278e8b4d7c7f3340ed20856ca9b3175be019cc5677a3c2ed696edf91b81159"], 0x50) r2 = syz_clone(0x45004400, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x20000000000002ee, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r4}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x7, 0x3}, 0x404, 0x10000, 0x9e4, 0x1, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x80, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x193c7, 0x10, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m13.722862756s ago: executing program 3 (id=110): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m13.302065557s ago: executing program 2 (id=111): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)}, 0x80d1) 3m12.873876837s ago: executing program 1 (id=112): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000040), 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1c, 0x3, 0x8, 0x2, 0x2, r5, 0x8, '\x00', r6, r2, 0x3, 0x2, 0x2}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x36}, 0x28) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba800000", 0x2c}], 0x1}, 0x0) 3m12.873653818s ago: executing program 2 (id=113): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x200, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000100000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 3m12.316306495s ago: executing program 3 (id=114): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'tunl0\x00', 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00800000000000000500000005cd000000600000", @ANYRES32=r4, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000005000000000000000900"/28], 0x50) 3m11.286797186s ago: executing program 3 (id=115): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x35, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3fffe, 0x2890ec548fa81f18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x90000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x4239, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 3m11.034735919s ago: executing program 2 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000580)="48000000150081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x8400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) r2 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x10080100, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000340)="565781578e60b6d1549877830c894224a44fda18d0bb519d050fb501bf5ab0f04db2a59032209eab8ee862b2998224e8b8dac9bfd0f72048ef150aeb9e93b8e90b0e4027ae2dcdc094ecd9a565407d6e321aa627356ec6c667b6044ea743e11b67fd8815d5d95fbcc9d3f5baa24bdf6fc6e44232d19154") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r4, 0x5452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 3m10.937058114s ago: executing program 1 (id=117): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m10.587824562s ago: executing program 3 (id=118): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) 3m10.509042025s ago: executing program 1 (id=119): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3da9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c803, 0x47c3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000400)={0x5, 0x80, 0x1, 0x3, 0xd, 0x3, 0x0, 0x7, 0x4100, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x2}, 0x1000, 0xff, 0x2, 0x0, 0x9a, 0x10, 0x1000, 0x0, 0x1000, 0x0, 0x7}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x801, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec112", 0x4}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002580)=""/4072, 0xfe8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0x5}]}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r5, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b0000", 0x17}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 3m7.38077475s ago: executing program 3 (id=120): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)}, 0x80d1) 3m7.276682296s ago: executing program 2 (id=121): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'ip6gre0\x00'}) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="4fbfb5", 0x3}], 0x1}, 0x8080) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x604) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000280)="96c345e15f6d7af569f5f8af582ec4b7c450a7a535e3039464f7ceeabfe08ec6c8fcb1fe00118d1330b8fef23779f3bd2a2cdae3f4aa283eb5b50b5e772e2dc171d68775d64a5c"}, 0x20) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000019, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$cgroup_ro(r2, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x4) 3m7.250206296s ago: executing program 1 (id=122): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m6.941515852s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'tunl0\x00', 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00800000000000000500000005cd000000600000", @ANYRES32=r4, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000005000000000000000900"/28], 0x50) 3m6.251076686s ago: executing program 1 (id=124): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90424fc60100c034002bc0100feff110037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x54) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4104) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x9827cea734ef29a4, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="55951b", 0x3}, {&(0x7f0000000280)}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x20000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x10}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="2f0000001800"], 0x20) 2m54.353210566s ago: executing program 32 (id=109): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007000000020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000004e64ed6eba82ec1556e3ea6beb26cbe0acd5f92b98be73ead2588c5a2a9dd6e59043ede218fc9f6d795580a4b134422e9084d7ca11f75d8", @ANYBLOB="3aece2a119772c02ed40dbee9f43b110537ca4a78e7d13e40d98ce9dff55d9236346db4bdda16a05412ec210e27734d31a8243", @ANYRES32, @ANYBLOB="feffffda12f17f82a86ad9101d8a1f4767000000000000000000006d5a0b81bdf43c9d3b1a1d75d8a4f0603831ff6cbebc7daf0ca8b1950155223d739a385ff41e0cf4c7eedb6cdc5a99fe759a7e79ae25be3efec1d471881a101217ef92fcc98c6f49e01ac26f7f4951edd9dc5a9999dad8ad469098dbf930d248b0f5460757d766e9d6bbd6a4275ab489f433f5ce0029b877e9507e268aa7fabfb2f607a1b92782222665be10195a7172effaf61e9b7509a74828119b32d555b68aee7658961ccfa10940e85b548c4c222700bf278e8b4d7c7f3340ed20856ca9b3175be019cc5677a3c2ed696edf91b81159"], 0x50) r2 = syz_clone(0x45004400, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x20000000000002ee, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r4}, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x7, 0x3}, 0x404, 0x10000, 0x9e4, 0x1, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x80, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x193c7, 0x10, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m51.125284976s ago: executing program 33 (id=121): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'ip6gre0\x00'}) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="4fbfb5", 0x3}], 0x1}, 0x8080) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x604) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000280)="96c345e15f6d7af569f5f8af582ec4b7c450a7a535e3039464f7ceeabfe08ec6c8fcb1fe00118d1330b8fef23779f3bd2a2cdae3f4aa283eb5b50b5e772e2dc171d68775d64a5c"}, 0x20) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000019, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = openat$cgroup_ro(r2, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x4) 2m39.955691s ago: executing program 34 (id=123): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'tunl0\x00', 0x10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000000c0), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610438000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00800000000000000500000005cd000000600000", @ANYRES32=r4, @ANYBLOB='@\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000005000000000000000900"/28], 0x50) 2m33.143219207s ago: executing program 35 (id=124): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90424fc60100c034002bc0100feff110037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r1, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x54) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4104) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x9827cea734ef29a4, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="55951b", 0x3}, {&(0x7f0000000280)}, {&(0x7f0000000340)}, {0x0}], 0x4}, 0x20000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x6, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x10}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="2f0000001800"], 0x20) 9.565749866s ago: executing program 6 (id=445): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x20, 0x12, 0x0, 0x20000000002, 0x521a9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xf}, 0x8008, 0xca, 0x0, 0x1, 0x0, 0x40000010, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000780fc0b09000300", 0x33fe0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) close(r5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) recvmsg$kcm(r6, &(0x7f0000000700)={&(0x7f0000000300)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x2, &(0x7f0000000600)=""/223, 0xdf}, 0x1) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300f9e707002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20044080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r10], 0x12) 9.526729448s ago: executing program 4 (id=453): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65961ff57b00000000000000000000000000ac1414aa883df4af1f4bab9447a368650d883cb3bf0e7364fbfb2a8040ebf3f82652a26fe23fd2ba42029efbe31531d7cd4d9dfca23f2e1d5e5a09ece4486d94e9fa91c327d061"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 7.791152824s ago: executing program 5 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000000400000022"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000600)="c5082a1a92d71f21d058f7dd762be0f2b9917fe273bdab976bcaa823c8341b49ef825e68181f4c984ea293431ac2a6c9867e251486b324bc7e264ddecae416744ab8fd0e76ed1a5b4207cb5b9db15630bdc6b4dcb66d284ac237893b920cd7e6a03d5bc98626e864a1f3d06f3bd81b23354844ce31da8ad045967043408f6dacb5203fe711df7b30f25e28cf1bb5252e97ca77ec4b68f3d07cf1848bdc6cf2ebecce092b644acea818243ab5ba5bc3c034b6b4c85fa8afa308968a82c6b099eade", 0xc1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) sendmsg$kcm(r1, 0x0, 0x11895) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="17", 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="5c00000012006bab9a3fe3876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc00000000000000e0eb29eee0e0e68cc878d4bf661d4579b307b1c2fad1d5bafb01b241af816cee5244c2a8410601cfb32fb13225f4623d1c57e18771b2b4164583bd5cb180648c8423b4a2056a0b5433b01bbcb150629ab429c9094647bd2174e54d07bbccb5f93735e9aa3e", 0xc1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, 0x0, 0x40012100) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f0000000380), 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.bfq.weight\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)='\x99k\xfb\xb7OJe\x99\xdd\x13v\xc5\'\n\xdf\x98\xe5\x8c\xff\xc47}\x8a\x89\xfa\xb9\xc2=\xd7[\xc5!\xe64\x00\xa3V\x05\xf2\xdbk\xbc\xa7&l\xe3\r\xc5\xadO\xa6\xcci\xc7\x8cM\xef\x8f\xef\xf4Ut\xfb\xccJ4\x05\xe1U\xf7\x90\xdf\xf7\xd7\xd8\xb4X\xdb\x19\x94\xf3\xdd\xf0T\xad\xa0\xf2\xab\x80;\"\x18\x1c\x8e\xb5\xe4\x87\xa8\xab\x89\xa1\xb4\x91\x17\x06\x13\xb7o^\x97\x96\xe7\xe5\x99\xd8\xc7\xe8\xd0\xd4w\xd0\xdfG\x81\x7f\x1f\x8fUQ\x1d-h!\x18:\\~{8\xb2\xa8\xd2\xcf\x05\\\x93\xb2\x13\xd0\x16[{\x80\x83x\xbe\xab\xcb\xd7V\xb9\x8c|\xc5Q\xb9\xd6\x9cmR@Xf\xa0R\xf2Efk\x84\xcc\x86\xfa\x19\xe1\xfa\xe5\xeb\x88\x02\x7f\xe8\f\xf9\xb0w\xaf)\xc8\x16O\xe2P\xbbdk\xf2\xa6\xe6(*/\xd0!\xe50v\xbcR;\aE\x02\xa9\xac\x9cum\xfa\xf6\xd2\x94\xa2 gA\xb5\xca\xc6\x1bHK\x9d`\xf4(\x957u\n&\xba\x9b\x83\xb9\xd2\xbc\xb1\x9fl\x01\xf9\n\x87\xdb\x1b\x8e\x15CU\"\x8a?\xfb\xa6\a\x83\"\xa4CkH:\'s\xbd$\x84\x8d\xba\x9fS\x02\x7f\x80\xe0\x1a\xae\x8cF\xa2s\x13\xb7\xa0\x1a\xdf\x99\xb1\xf0l\xa5\x87HO\xe3:\x18p\xa3\xbe\x02s\rQL,#\xf3/Q\xef\xfc\x16\xa3\x06\x91i\x81\xe0\xadb\xef\f\xde\x00{\x81\x93.\" \x94\x0e\xb1\\\xa9\xfaU>A\xe64\\J\xca&\x0e>\xad\x17\xb4$@H\x108*') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a00130000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200002603000000000000000000008500000087000000850000007d00e6ff95"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 7.640442541s ago: executing program 4 (id=447): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) 6.45737051s ago: executing program 7 (id=450): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0x14}, {&(0x7f00000002c0)="593037e5817a5d3b92629c4ebcb8988291ce11b39aac3b39a9009d534cbaaf064949102a23ed74608e253efdfc27", 0x2e}, {&(0x7f0000000300)="b7da5f7aa8dd4993024169d5ba74d1b69d07aa6c330622ba49876191ac53dc492f660e7df2615179819192f6d7ded850cefa596fe7e8899cc899a7340e35c9e9bf4951bdcc11bbf5ac525df2ba065798744d11b7e54691d4c8c2d1955b750aa6f9aeb7bcd27942d94bb414", 0x6b}], 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8910, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES16=r2, @ANYBLOB="1800"/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000900)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB="a506dac8fea8c20d402723590928559d1271ab6d190d72f2b770788845bbd6f672799099d27d20f82fad894292b3c7b407c67fd3611ea713b707f37c517c00606a2a5c3057f7eb33ef02aa432b5f6b7ab40f63bb8abf9987bfde4c96deac6886f2504cd1f99046dc4dce660eef95c75c4e317270e90e4e04975abb2cdc72c07542d5e146839ab69de9ae10c17da7524437e2ba830d295a06000000000000001937f3c775aefdf4e9d2c312673575fd5e62054f99ceb632ae049c"], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="42004000f0ffffff2fb52005000000000000000005000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r5}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="eb090000000000000000000000000000f2ff00006982a4d22d40f88473db31194789e31ab03927a70a138bb0785d0e8fcf1686dcbe0fe42548343e7181a5511716e9537f8098e92924cab802526afd9f7d15809db11600720a41eb984853e92f88074d13686f386b7934794f94610ca8dd3b6238515accfb7650a50ee929cae28e4e4e8bc6c7efe56a907492e4aba7b8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="000000001000000000000080000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000040000000500"/28], 0x50) syz_clone(0x44148000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0xb, 0x7}]}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r10, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) close(r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.420003642s ago: executing program 4 (id=451): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000580)="48000000150081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x8400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) r2 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x10080100, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000340)="565781578e60b6d1549877830c894224a44fda18d0bb519d050fb501bf5ab0f04db2a59032209eab8ee862b2998224e8b8dac9bfd0f72048ef150aeb9e93b8e90b0e4027ae2dcdc094ecd9a565407d6e321aa627356ec6c667b6044ea743e11b67fd8815d5d95fbcc9d3f5baa24bdf6fc6e44232d19154") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f00000013c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f9", 0x1a}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 6.355860165s ago: executing program 5 (id=452): r0 = perf_event_open(&(0x7f0000000bc0)={0x5, 0x80, 0x3, 0x6a, 0x3, 0x92, 0x0, 0x4eb4, 0x10, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x87eb, 0xffff}, 0x0, 0xb5, 0x6, 0x8, 0x7, 0x2, 0x1, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1d, 0x1, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x2, 0x266}, 0x104080, 0x80, 0x1, 0x3, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffdffffffff, r0, 0x9) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b80)=@generic={&(0x7f0000000ac0)='./file0\x00', r1}, 0x18) socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x17, 0xf, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xc, 0x5, 0x1, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_idx, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sysctl=0x12, r3, 0x8, &(0x7f0000000d80)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x1, 0x0, &(0x7f0000000dc0)=[{0x0, 0x4, 0x0, 0x5}], 0x10, 0x9}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x50) 6.24956847s ago: executing program 6 (id=454): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) 5.65428799s ago: executing program 5 (id=455): socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3ff, 0x1, 0x0, 0x4, 0x1, 0x70, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000440)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='io.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.532776396s ago: executing program 6 (id=456): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65961ff57b00000000000000000000000000ac1414aa883df4af1f4bab9447a368650d883cb3bf0e7364fbfb2a8040ebf3f82652a26fe23fd2ba42029efbe31531d7cd4d9dfca23f2e1d5e5a09ece4486d94e9fa91c327d061"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 5.236018981s ago: executing program 7 (id=457): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117600000000008510000002000000c50000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xf29}, 0x8d40, 0x1, 0x7, 0x3, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 4.808882261s ago: executing program 7 (id=458): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="593037e5817a5d3b92629c4ebcb8988291ce11b39aac3b39a9009d", 0x1b}], 0x1}, 0x0) 2.494328916s ago: executing program 4 (id=459): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x40, 0x79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r5 = socket$kcm(0x2, 0x6, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r3], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000400000008000000670f000040800200", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000b00000000000000fb2b2f5418942db3012048a552bc2430f89cda73fdf26fc29c439195000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r10, 0x8) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000100)=r8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1829, 0x0, 0x0, 0x0, 0xe, 0x1, 0x9, 0x0, 0xad8f, 0x0, 0x40}, 0x0, 0x10, r8, 0x0) 2.494064906s ago: executing program 7 (id=460): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) 2.367867273s ago: executing program 6 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000000400000022"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000600)="c5082a1a92d71f21d058f7dd762be0f2b9917fe273bdab976bcaa823c8341b49ef825e68181f4c984ea293431ac2a6c9867e251486b324bc7e264ddecae416744ab8fd0e76ed1a5b4207cb5b9db15630bdc6b4dcb66d284ac237893b920cd7e6a03d5bc98626e864a1f3d06f3bd81b23354844ce31da8ad045967043408f6dacb5203fe711df7b30f25e28cf1bb5252e97ca77ec4b68f3d07cf1848bdc6cf2ebecce092b644acea818243ab5ba5bc3c034b6b4c85fa8afa308968a82c6b099eade", 0xc1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) sendmsg$kcm(r1, 0x0, 0x11895) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="17", 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="5c00000012006bab9a3fe3876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc00000000000000e0eb29eee0e0e68cc878d4bf661d4579b307b1c2fad1d5bafb01b241af816cee5244c2a8410601cfb32fb13225f4623d1c57e18771b2b4164583bd5cb180648c8423b4a2056a0b5433b01bbcb150629ab429c9094647bd2174e54d07bbccb5f93735e9aa3e", 0xc1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, 0x0, 0x40012100) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f0000000380), 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.bfq.weight\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)='\x99k\xfb\xb7OJe\x99\xdd\x13v\xc5\'\n\xdf\x98\xe5\x8c\xff\xc47}\x8a\x89\xfa\xb9\xc2=\xd7[\xc5!\xe64\x00\xa3V\x05\xf2\xdbk\xbc\xa7&l\xe3\r\xc5\xadO\xa6\xcci\xc7\x8cM\xef\x8f\xef\xf4Ut\xfb\xccJ4\x05\xe1U\xf7\x90\xdf\xf7\xd7\xd8\xb4X\xdb\x19\x94\xf3\xdd\xf0T\xad\xa0\xf2\xab\x80;\"\x18\x1c\x8e\xb5\xe4\x87\xa8\xab\x89\xa1\xb4\x91\x17\x06\x13\xb7o^\x97\x96\xe7\xe5\x99\xd8\xc7\xe8\xd0\xd4w\xd0\xdfG\x81\x7f\x1f\x8fUQ\x1d-h!\x18:\\~{8\xb2\xa8\xd2\xcf\x05\\\x93\xb2\x13\xd0\x16[{\x80\x83x\xbe\xab\xcb\xd7V\xb9\x8c|\xc5Q\xb9\xd6\x9cmR@Xf\xa0R\xf2Efk\x84\xcc\x86\xfa\x19\xe1\xfa\xe5\xeb\x88\x02\x7f\xe8\f\xf9\xb0w\xaf)\xc8\x16O\xe2P\xbbdk\xf2\xa6\xe6(*/\xd0!\xe50v\xbcR;\aE\x02\xa9\xac\x9cum\xfa\xf6\xd2\x94\xa2 gA\xb5\xca\xc6\x1bHK\x9d`\xf4(\x957u\n&\xba\x9b\x83\xb9\xd2\xbc\xb1\x9fl\x01\xf9\n\x87\xdb\x1b\x8e\x15CU\"\x8a?\xfb\xa6\a\x83\"\xa4CkH:\'s\xbd$\x84\x8d\xba\x9fS\x02\x7f\x80\xe0\x1a\xae\x8cF\xa2s\x13\xb7\xa0\x1a\xdf\x99\xb1\xf0l\xa5\x87HO\xe3:\x18p\xa3\xbe\x02s\rQL,#\xf3/Q\xef\xfc\x16\xa3\x06\x91i\x81\xe0\xadb\xef\f\xde\x00{\x81\x93.\" \x94\x0e\xb1\\\xa9\xfaU>A\xe64\\J\xca&\x0e>\xad\x17\xb4$@H\x108*') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a00130000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200002603000000000000000000008500000087000000850000007d00e6ff95"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.210176131s ago: executing program 5 (id=462): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) 671.198087ms ago: executing program 7 (id=463): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x20, 0x12, 0x0, 0x20000000002, 0x521a9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xf}, 0x8008, 0xca, 0x0, 0x1, 0x0, 0x40000010, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000780fc0b09000300", 0x33fe0}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) close(r5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1bd4000c"], 0xffdd) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) recvmsg$kcm(r6, &(0x7f0000000700)={&(0x7f0000000300)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/155, 0x9b}], 0x2, &(0x7f0000000600)=""/223, 0xdf}, 0x1) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc004000202080003000300f9e707002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20044080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r9], 0x12) 608.52682ms ago: executing program 5 (id=464): r0 = perf_event_open(&(0x7f0000000bc0)={0x5, 0x80, 0x3, 0x6a, 0x3, 0x92, 0x0, 0x4eb4, 0x10, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x87eb, 0xffff}, 0x0, 0xb5, 0x6, 0x8, 0x7, 0x2, 0x1, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1d, 0x1, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x2, 0x266}, 0x104080, 0x80, 0x1, 0x3, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffdffffffff, r0, 0x9) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b80)=@generic={&(0x7f0000000ac0)='./file0\x00', r1}, 0x18) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x50) 505.261145ms ago: executing program 6 (id=465): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x104001, 0xffffffffffffff7f, 0x100009e4, 0x5, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x80, 0x0, 0x400, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x2000, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x8054) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03000000000000000300000000000008040000000000000000000002"], 0x0, 0x52}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) 493.961786ms ago: executing program 4 (id=466): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="0e77", 0x2}], 0x1}, 0x4050003) 353.562833ms ago: executing program 5 (id=467): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000580)="48000000150081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x8400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) r2 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x10080100, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000340)="565781578e60b6d1549877830c894224a44fda18d0bb519d050fb501bf5ab0f04db2a59032209eab8ee862b2998224e8b8dac9bfd0f72048ef150aeb9e93b8e90b0e4027ae2dcdc094ecd9a565407d6e321aa627356ec6c667b6044ea743e11b67fd8815d5d95fbcc9d3f5baa24bdf6fc6e44232d19154") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f00000013c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f9", 0x1a}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 250.776298ms ago: executing program 4 (id=468): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x10) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4e26, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) 163.738932ms ago: executing program 6 (id=469): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65961ff57b00000000000000000000000000ac1414aa883df4af1f4bab9447a368650d883cb3bf0e7364fbfb2a8040ebf3f82652a26fe23fd2ba42029efbe31531d7cd4d9dfca23f2e1d5e5a09ece4486d94e9fa91c327d061"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 0s ago: executing program 7 (id=470): socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3ff, 0x1, 0x0, 0x4, 0x1, 0x70, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000440)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 56.420534][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.457103][ T5436] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. syzkaller login: [ 80.097405][ T5759] cgroup: Unknown subsys name 'net' [ 80.232249][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.972486][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.487043][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.495549][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.504675][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.513128][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.521719][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.530107][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.537653][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.547794][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.566047][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.569092][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.582203][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.590500][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.598332][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.608653][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.616862][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.624914][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.625583][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.640364][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.642217][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.648431][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.656077][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.670058][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.670754][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.695390][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.113933][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.197291][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 84.208495][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.295496][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 84.328626][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.336035][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.343359][ T5773] bridge_slave_0: entered allmulticast mode [ 84.350687][ T5773] bridge_slave_0: entered promiscuous mode [ 84.397717][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.406289][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.413423][ T5773] bridge_slave_1: entered allmulticast mode [ 84.421850][ T5773] bridge_slave_1: entered promiscuous mode [ 84.520933][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.533288][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.540720][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.548415][ T5770] bridge_slave_0: entered allmulticast mode [ 84.555467][ T5770] bridge_slave_0: entered promiscuous mode [ 84.564086][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.571282][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.578994][ T5770] bridge_slave_1: entered allmulticast mode [ 84.586846][ T5770] bridge_slave_1: entered promiscuous mode [ 84.598633][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.605896][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.613348][ T5771] bridge_slave_0: entered allmulticast mode [ 84.621043][ T5771] bridge_slave_0: entered promiscuous mode [ 84.630609][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.682664][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.689859][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.697386][ T5771] bridge_slave_1: entered allmulticast mode [ 84.704360][ T5771] bridge_slave_1: entered promiscuous mode [ 84.740378][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.767117][ T5773] team0: Port device team_slave_0 added [ 84.773304][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.780671][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.788562][ T5772] bridge_slave_0: entered allmulticast mode [ 84.796176][ T5772] bridge_slave_0: entered promiscuous mode [ 84.809208][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.820723][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.833332][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.843861][ T5773] team0: Port device team_slave_1 added [ 84.862407][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.870688][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.879994][ T5772] bridge_slave_1: entered allmulticast mode [ 84.887666][ T5772] bridge_slave_1: entered promiscuous mode [ 84.956475][ T5770] team0: Port device team_slave_0 added [ 84.963580][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.971167][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.998592][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.021227][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.028319][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.055260][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.069727][ T5771] team0: Port device team_slave_0 added [ 85.080216][ T5770] team0: Port device team_slave_1 added [ 85.091602][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.124649][ T5771] team0: Port device team_slave_1 added [ 85.143262][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.204819][ T5773] hsr_slave_0: entered promiscuous mode [ 85.211793][ T5773] hsr_slave_1: entered promiscuous mode [ 85.221889][ T5772] team0: Port device team_slave_0 added [ 85.242154][ T5772] team0: Port device team_slave_1 added [ 85.251015][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.258476][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.287413][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.301829][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.309188][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.335492][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.359789][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.367497][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.394051][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.440908][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.448359][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.474843][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.495759][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.502765][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.530075][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.565713][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.573161][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.600554][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.612608][ T5783] Bluetooth: hci1: command tx timeout [ 85.658955][ T5771] hsr_slave_0: entered promiscuous mode [ 85.665921][ T5771] hsr_slave_1: entered promiscuous mode [ 85.672093][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.680556][ T5771] Cannot create hsr debugfs directory [ 85.747046][ T5770] hsr_slave_0: entered promiscuous mode [ 85.753404][ T5770] hsr_slave_1: entered promiscuous mode [ 85.759830][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.767924][ T5770] Cannot create hsr debugfs directory [ 85.774415][ T5084] Bluetooth: hci3: command tx timeout [ 85.780076][ T5084] Bluetooth: hci2: command tx timeout [ 85.786277][ T5783] Bluetooth: hci0: command tx timeout [ 85.853569][ T5772] hsr_slave_0: entered promiscuous mode [ 85.860014][ T5772] hsr_slave_1: entered promiscuous mode [ 85.867213][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.875011][ T5772] Cannot create hsr debugfs directory [ 86.183068][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.195172][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.206744][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.221435][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.339517][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.350822][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.387217][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.419145][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.443102][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.458427][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.470775][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.481458][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.572572][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.597396][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.608265][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.633544][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.673093][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.730798][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.792717][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.800111][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.820952][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.828217][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.845037][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.908308][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.932488][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.962712][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.980966][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.988370][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.012106][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.028153][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.035551][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.064717][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.072105][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.113996][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.121445][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.158123][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.199761][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.207128][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.236951][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.244183][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.359815][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.497129][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.695925][ T5084] Bluetooth: hci1: command tx timeout [ 87.821152][ T5773] veth0_vlan: entered promiscuous mode [ 87.844334][ T5084] Bluetooth: hci2: command tx timeout [ 87.849950][ T5084] Bluetooth: hci0: command tx timeout [ 87.856300][ T5084] Bluetooth: hci3: command tx timeout [ 87.859239][ T5773] veth1_vlan: entered promiscuous mode [ 88.030425][ T5773] veth0_macvtap: entered promiscuous mode [ 88.078004][ T5773] veth1_macvtap: entered promiscuous mode [ 88.119122][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.149929][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.217994][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.281523][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.297895][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312720][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.321560][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.337288][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.351576][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.440327][ T5771] veth0_vlan: entered promiscuous mode [ 88.499248][ T5771] veth1_vlan: entered promiscuous mode [ 88.529532][ T5772] veth0_vlan: entered promiscuous mode [ 88.561045][ T5770] veth0_vlan: entered promiscuous mode [ 88.578474][ T5772] veth1_vlan: entered promiscuous mode [ 88.600525][ T5770] veth1_vlan: entered promiscuous mode [ 88.631794][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.656165][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.663512][ T5772] veth0_macvtap: entered promiscuous mode [ 88.711883][ T5770] veth0_macvtap: entered promiscuous mode [ 88.724413][ T5772] veth1_macvtap: entered promiscuous mode [ 88.742513][ T569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.747109][ T5770] veth1_macvtap: entered promiscuous mode [ 88.750639][ T569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.772355][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.784100][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.796173][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.814689][ T5771] veth0_macvtap: entered promiscuous mode [ 88.842043][ T5771] veth1_macvtap: entered promiscuous mode [ 88.863771][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.882480][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.896793][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.909248][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.918829][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.929596][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.938595][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.009669][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.044229][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.064344][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.081471][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.097224][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.123729][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.137583][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.147734][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.158358][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.185944][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.265281][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.281035][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.294868][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.305424][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.316432][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.328507][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.346238][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.375536][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.386798][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.397242][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.408437][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.418584][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.429561][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.440986][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.452788][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.462319][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.471295][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.480235][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.502799][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.507044][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.515168][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.540490][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.549921][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.559983][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.680028][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.691149][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.737669][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.747126][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.765724][ T5783] Bluetooth: hci1: command tx timeout [ 89.909309][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.924765][ T5783] Bluetooth: hci3: command tx timeout [ 89.927962][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.930847][ T5783] Bluetooth: hci0: command tx timeout [ 89.943620][ T5084] Bluetooth: hci2: command tx timeout [ 89.959943][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.087153][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.123995][ C0] hrtimer: interrupt took 54307 ns [ 90.164503][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.172408][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.237805][ T5845] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.461125][ T5845] Zero length message leads to an empty skb [ 91.844597][ T5084] Bluetooth: hci1: command tx timeout [ 92.004387][ T5084] Bluetooth: hci2: command tx timeout [ 92.010137][ T5084] Bluetooth: hci0: command tx timeout [ 92.016000][ T5783] Bluetooth: hci3: command tx timeout [ 92.568318][ T788] cfg80211: failed to load regulatory.db [ 93.311264][ T5842] syz.2.10 (5842) used greatest stack depth: 20360 bytes left [ 94.327419][ T5876] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 94.457400][ T5884] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 94.701140][ T5876] team0 (unregistering): Port device team_slave_0 removed [ 94.746114][ T5876] team0 (unregistering): Port device team_slave_1 removed [ 94.848032][ T5884] netlink: 'syz.3.15': attribute type 29 has an invalid length. [ 94.862613][ T5889] netlink: 'syz.3.15': attribute type 6 has an invalid length. [ 94.900699][ T5889] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15'. [ 94.957190][ T5893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19'. [ 95.077028][ T5893] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.19'. [ 95.131615][ T5897] netlink: 'syz.0.19': attribute type 12 has an invalid length. [ 95.147215][ T5897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.034004][ T5934] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 98.042041][ T5934] netlink: 2 bytes leftover after parsing attributes in process `syz.0.28'. [ 98.051258][ T5934] batadv_slave_1: entered promiscuous mode [ 98.060170][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.068008][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.126262][ T5934] bridge0: port 3(batadv_slave_1) entered blocking state [ 98.133753][ T5934] bridge0: port 3(batadv_slave_1) entered disabled state [ 98.151303][ T5934] batadv_slave_1: entered allmulticast mode [ 98.190907][ T5934] bridge0: port 3(batadv_slave_1) entered blocking state [ 98.198579][ T5934] bridge0: port 3(batadv_slave_1) entered forwarding state [ 98.455504][ T5940] netlink: 'syz.2.31': attribute type 29 has an invalid length. [ 98.474745][ T5940] netlink: 'syz.2.31': attribute type 29 has an invalid length. [ 98.559761][ T5937] netlink: 'syz.2.31': attribute type 6 has an invalid length. [ 98.599534][ T5937] netlink: 164 bytes leftover after parsing attributes in process `syz.2.31'. [ 100.127956][ T5947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35'. [ 100.201942][ T5947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.35'. [ 100.236891][ T5947] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 100.301100][ T5948] netlink: 'syz.3.35': attribute type 12 has an invalid length. [ 100.345953][ T5948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35'. [ 102.388565][ T5967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.48'. [ 102.463876][ T5967] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.48'. [ 102.497296][ T5967] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 102.518087][ T5968] netlink: 'syz.1.48': attribute type 12 has an invalid length. [ 102.536938][ T5968] netlink: 132 bytes leftover after parsing attributes in process `syz.1.48'. [ 103.213656][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 103.405287][ T5972] syzkaller0: entered promiscuous mode [ 103.412556][ T5972] syzkaller0: entered allmulticast mode [ 103.662979][ T5983] netlink: 'syz.1.45': attribute type 29 has an invalid length. [ 104.104369][ T5983] netlink: 'syz.1.45': attribute type 29 has an invalid length. [ 106.814540][ T6001] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.51'. [ 110.859008][ T5985] netlink: 'syz.1.45': attribute type 6 has an invalid length. [ 110.868488][ T5985] netlink: 164 bytes leftover after parsing attributes in process `syz.1.45'. [ 110.896476][ T5999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51'. [ 110.931625][ T6003] netlink: 'syz.2.51': attribute type 12 has an invalid length. [ 110.974331][ T6003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51'. [ 110.994271][ T6008] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 111.004606][ T6008] netlink: 2 bytes leftover after parsing attributes in process `syz.3.52'. [ 111.025654][ T6008] batadv_slave_1: entered promiscuous mode [ 111.031727][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.055126][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.070570][ T6008] bridge0: port 3(batadv_slave_1) entered blocking state [ 111.090006][ T6008] bridge0: port 3(batadv_slave_1) entered disabled state [ 111.110107][ T6008] batadv_slave_1: entered allmulticast mode [ 111.119341][ T6008] bridge0: port 3(batadv_slave_1) entered blocking state [ 111.126686][ T6008] bridge0: port 3(batadv_slave_1) entered forwarding state [ 111.143840][ T6001] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 114.681599][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 114.867198][ T6045] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.65'. [ 115.035628][ T6049] netlink: 'syz.2.63': attribute type 29 has an invalid length. [ 115.049107][ T6049] netlink: 'syz.2.63': attribute type 29 has an invalid length. [ 115.113648][ T6043] netlink: 'syz.2.63': attribute type 6 has an invalid length. [ 115.135827][ T6043] netlink: 164 bytes leftover after parsing attributes in process `syz.2.63'. [ 115.234760][ T6054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 115.301850][ T6054] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.68'. [ 115.327459][ T6054] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 115.340885][ T6054] CPU: 0 PID: 6054 Comm: syz.0.68 Not tainted syzkaller #0 [ 115.348126][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.358188][ T6054] Call Trace: [ 115.361466][ T6054] [ 115.364404][ T6054] dump_stack_lvl+0x18c/0x250 [ 115.369133][ T6054] ? show_regs_print_info+0x20/0x20 [ 115.374339][ T6054] ? load_image+0x400/0x400 [ 115.378887][ T6054] sysfs_warn_dup+0x8e/0xa0 [ 115.383563][ T6054] sysfs_do_create_link_sd+0xc0/0x110 [ 115.388935][ T6054] device_add_class_symlinks+0x1cf/0x240 [ 115.394595][ T6054] device_add+0x507/0xc20 [ 115.398946][ T6054] wiphy_register+0x1dad/0x2ae0 [ 115.403804][ T6054] ? cfg80211_event_work+0x40/0x40 [ 115.408906][ T6054] ? minstrel_ht_alloc+0x88a/0x990 [ 115.414029][ T6054] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 115.420093][ T6054] ieee80211_register_hw+0x3464/0x4250 [ 115.425568][ T6054] ? ieee80211_tasklet_handler+0x20/0x20 [ 115.431216][ T6054] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 115.437112][ T6054] ? __debug_object_init+0xec/0x450 [ 115.442315][ T6054] ? __asan_memset+0x22/0x40 [ 115.446928][ T6054] ? __hrtimer_init+0x186/0x270 [ 115.451804][ T6054] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 115.457566][ T6054] ? mac80211_hwsim_free+0x220/0x220 [ 115.463009][ T6054] ? rcu_is_watching+0x15/0xb0 [ 115.467792][ T6054] ? kstrndup+0xbd/0x140 [ 115.472146][ T6054] hwsim_new_radio_nl+0xdc9/0x1a90 [ 115.477292][ T6054] ? __nla_validate+0x50/0x50 [ 115.482005][ T6054] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 115.488453][ T6054] ? __nla_parse+0x40/0x50 [ 115.492882][ T6054] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 115.499230][ T6054] genl_family_rcv_msg_doit+0x211/0x310 [ 115.504798][ T6054] ? end_current_label_crit_section+0x170/0x170 [ 115.511056][ T6054] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 115.516987][ T6054] ? bpf_lsm_capable+0x9/0x10 [ 115.521708][ T6054] ? security_capable+0x89/0xb0 [ 115.526613][ T6054] genl_rcv_msg+0x619/0x7a0 [ 115.531141][ T6054] ? genl_bind+0x360/0x360 [ 115.535577][ T6054] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 115.541956][ T6054] ? ref_tracker_free+0x690/0x840 [ 115.547009][ T6054] netlink_rcv_skb+0x241/0x4d0 [ 115.551794][ T6054] ? genl_bind+0x360/0x360 [ 115.556245][ T6054] ? netlink_ack+0x1180/0x1180 [ 115.561124][ T6054] ? __lock_acquire+0x7d40/0x7d40 [ 115.566170][ T6054] ? down_read+0x1ac/0x2e0 [ 115.570623][ T6054] genl_rcv+0x28/0x40 [ 115.574617][ T6054] netlink_unicast+0x751/0x8d0 [ 115.579406][ T6054] netlink_sendmsg+0x8d0/0xbf0 [ 115.584283][ T6054] ? netlink_getsockopt+0x590/0x590 [ 115.589568][ T6054] ? aa_sock_msg_perm+0x94/0x150 [ 115.594542][ T6054] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.599843][ T6054] ? security_socket_sendmsg+0x80/0xa0 [ 115.605313][ T6054] ? netlink_getsockopt+0x590/0x590 [ 115.610530][ T6054] ____sys_sendmsg+0x5ba/0x960 [ 115.615329][ T6054] ? __asan_memset+0x22/0x40 [ 115.619936][ T6054] ? __sys_sendmsg_sock+0x30/0x30 [ 115.624966][ T6054] ? __import_iovec+0x5f2/0x850 [ 115.629853][ T6054] ? import_iovec+0x73/0xa0 [ 115.634459][ T6054] ___sys_sendmsg+0x2a6/0x360 [ 115.639151][ T6054] ? __sys_sendmsg+0x2a0/0x2a0 [ 115.643987][ T6054] __se_sys_sendmsg+0x1c2/0x2b0 [ 115.648884][ T6054] ? __x64_sys_sendmsg+0x80/0x80 [ 115.653853][ T6054] ? lockdep_hardirqs_on+0x98/0x150 [ 115.659067][ T6054] do_syscall_64+0x55/0xa0 [ 115.663500][ T6054] ? clear_bhb_loop+0x40/0x90 [ 115.668187][ T6054] ? clear_bhb_loop+0x40/0x90 [ 115.672962][ T6054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.678873][ T6054] RIP: 0033:0x7ff8c7f9c799 [ 115.683306][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.703036][ T6054] RSP: 002b:00007ff8c8f2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.711590][ T6054] RAX: ffffffffffffffda RBX: 00007ff8c8215fa0 RCX: 00007ff8c7f9c799 [ 115.719574][ T6054] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 115.727735][ T6054] RBP: 00007ff8c8032c99 R08: 0000000000000000 R09: 0000000000000000 [ 115.735902][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.743885][ T6054] R13: 00007ff8c8216038 R14: 00007ff8c8215fa0 R15: 00007ffe51779f18 [ 115.751973][ T6054] [ 115.801295][ T6055] netlink: 'syz.0.68': attribute type 12 has an invalid length. [ 115.837159][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 116.190426][ T6064] netlink: 'syz.1.69': attribute type 10 has an invalid length. [ 116.365922][ T6064] netlink: 2 bytes leftover after parsing attributes in process `syz.1.69'. [ 119.092724][ T6064] batadv_slave_1: entered promiscuous mode [ 119.129534][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.151871][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.313537][ T6064] bridge0: port 3(batadv_slave_1) entered blocking state [ 119.356991][ T6064] bridge0: port 3(batadv_slave_1) entered disabled state [ 119.439178][ T6064] batadv_slave_1: entered allmulticast mode [ 119.462307][ T6064] bridge0: port 3(batadv_slave_1) entered blocking state [ 119.470118][ T6064] bridge0: port 3(batadv_slave_1) entered forwarding state [ 119.608602][ T6072] syzkaller0: entered promiscuous mode [ 119.618946][ T6072] syzkaller0: entered allmulticast mode [ 122.712716][ T6092] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 122.744135][ T6092] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.78'. [ 124.250052][ T6103] netlink: 'syz.1.80': attribute type 29 has an invalid length. [ 125.742195][ T6114] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.84'. [ 126.504356][ T6086] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 126.512787][ T6086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.76'. [ 126.790798][ T6086] .`: renamed from bond0 (while UP) [ 126.994390][ T6103] netlink: 'syz.1.80': attribute type 29 has an invalid length. [ 127.004021][ T6104] netlink: 'syz.1.80': attribute type 6 has an invalid length. [ 127.024983][ T6104] netlink: 164 bytes leftover after parsing attributes in process `syz.1.80'. [ 127.029664][ T6086] syz.2.76 (6086) used greatest stack depth: 19944 bytes left [ 127.063813][ T6113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.84'. [ 127.095563][ T6115] netlink: 'syz.3.84': attribute type 12 has an invalid length. [ 127.121729][ T6115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.84'. [ 127.143805][ T6114] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 127.166007][ T6114] CPU: 1 PID: 6114 Comm: syz.3.84 Not tainted syzkaller #0 [ 127.173287][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.183395][ T6114] Call Trace: [ 127.186711][ T6114] [ 127.189680][ T6114] dump_stack_lvl+0x18c/0x250 [ 127.194413][ T6114] ? show_regs_print_info+0x20/0x20 [ 127.199651][ T6114] ? load_image+0x400/0x400 [ 127.204285][ T6114] sysfs_warn_dup+0x8e/0xa0 [ 127.208804][ T6114] sysfs_do_create_link_sd+0xc0/0x110 [ 127.214204][ T6114] device_add_class_symlinks+0x1cf/0x240 [ 127.219858][ T6114] device_add+0x507/0xc20 [ 127.224206][ T6114] wiphy_register+0x1dad/0x2ae0 [ 127.229091][ T6114] ? cfg80211_event_work+0x40/0x40 [ 127.234214][ T6114] ? minstrel_ht_alloc+0x88a/0x990 [ 127.239386][ T6114] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 127.245469][ T6114] ieee80211_register_hw+0x3464/0x4250 [ 127.250966][ T6114] ? ieee80211_tasklet_handler+0x20/0x20 [ 127.257049][ T6114] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 127.262994][ T6114] ? __debug_object_init+0xec/0x450 [ 127.268370][ T6114] ? __asan_memset+0x22/0x40 [ 127.272974][ T6114] ? __hrtimer_init+0x186/0x270 [ 127.277987][ T6114] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 127.283943][ T6114] ? mac80211_hwsim_free+0x220/0x220 [ 127.289257][ T6114] ? rcu_is_watching+0x15/0xb0 [ 127.294131][ T6114] ? kstrndup+0xbd/0x140 [ 127.298404][ T6114] hwsim_new_radio_nl+0xdc9/0x1a90 [ 127.303777][ T6114] ? __nla_validate+0x50/0x50 [ 127.308498][ T6114] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 127.314874][ T6114] ? __nla_parse+0x40/0x50 [ 127.319303][ T6114] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 127.325651][ T6114] genl_family_rcv_msg_doit+0x211/0x310 [ 127.331295][ T6114] ? end_current_label_crit_section+0x170/0x170 [ 127.337650][ T6114] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 127.343652][ T6114] ? bpf_lsm_capable+0x9/0x10 [ 127.348356][ T6114] ? security_capable+0x89/0xb0 [ 127.353250][ T6114] genl_rcv_msg+0x619/0x7a0 [ 127.357772][ T6114] ? genl_bind+0x360/0x360 [ 127.362284][ T6114] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 127.368730][ T6114] netlink_rcv_skb+0x241/0x4d0 [ 127.373513][ T6114] ? genl_bind+0x360/0x360 [ 127.378046][ T6114] ? netlink_ack+0x1180/0x1180 [ 127.382951][ T6114] ? __lock_acquire+0x7d40/0x7d40 [ 127.388004][ T6114] ? down_read+0x1ac/0x2e0 [ 127.392533][ T6114] genl_rcv+0x28/0x40 [ 127.396618][ T6114] netlink_unicast+0x751/0x8d0 [ 127.401701][ T6114] netlink_sendmsg+0x8d0/0xbf0 [ 127.406947][ T6114] ? netlink_getsockopt+0x590/0x590 [ 127.412788][ T6114] ? aa_sock_msg_perm+0x94/0x150 [ 127.417747][ T6114] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.423240][ T6114] ? security_socket_sendmsg+0x80/0xa0 [ 127.428722][ T6114] ? netlink_getsockopt+0x590/0x590 [ 127.433964][ T6114] ____sys_sendmsg+0x5ba/0x960 [ 127.438760][ T6114] ? __asan_memset+0x22/0x40 [ 127.443465][ T6114] ? __sys_sendmsg_sock+0x30/0x30 [ 127.448582][ T6114] ? __import_iovec+0x5f2/0x850 [ 127.453465][ T6114] ? import_iovec+0x73/0xa0 [ 127.457983][ T6114] ___sys_sendmsg+0x2a6/0x360 [ 127.462672][ T6114] ? __sys_sendmsg+0x2a0/0x2a0 [ 127.467589][ T6114] ? debug_mutex_init+0x38/0x70 [ 127.472519][ T6114] __se_sys_sendmsg+0x1c2/0x2b0 [ 127.477392][ T6114] ? __x64_sys_sendmsg+0x80/0x80 [ 127.482692][ T6114] ? lockdep_hardirqs_on+0x98/0x150 [ 127.487996][ T6114] do_syscall_64+0x55/0xa0 [ 127.492435][ T6114] ? clear_bhb_loop+0x40/0x90 [ 127.497129][ T6114] ? clear_bhb_loop+0x40/0x90 [ 127.501824][ T6114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.507730][ T6114] RIP: 0033:0x7efd28f9c799 [ 127.512161][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.531780][ T6114] RSP: 002b:00007efd271f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.540208][ T6114] RAX: ffffffffffffffda RBX: 00007efd29216090 RCX: 00007efd28f9c799 [ 127.548283][ T6114] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 127.556263][ T6114] RBP: 00007efd29032c99 R08: 0000000000000000 R09: 0000000000000000 [ 127.564354][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.572431][ T6114] R13: 00007efd29216128 R14: 00007efd29216090 R15: 00007ffd7e92eb28 [ 127.581480][ T6114] [ 127.761300][ T6123] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.87'. [ 127.930459][ T6128] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 127.981325][ T6128] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.88'. [ 128.084164][ T6132] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 128.161162][ T6132] netlink: 'syz.2.95': attribute type 29 has an invalid length. [ 128.239087][ T6126] netlink: 'syz.2.95': attribute type 6 has an invalid length. [ 128.251475][ T6126] netlink: 164 bytes leftover after parsing attributes in process `syz.2.95'. [ 132.066900][ T6161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.98'. [ 132.133129][ T6156] netlink: 'syz.0.96': attribute type 4 has an invalid length. [ 132.136706][ T6161] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.98'. [ 132.141280][ T6156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.96'. [ 132.203093][ T6156] .`: renamed from bond0 (while UP) [ 132.239456][ T6161] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 132.260537][ T6161] CPU: 0 PID: 6161 Comm: syz.1.98 Not tainted syzkaller #0 [ 132.267823][ T6161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 132.278528][ T6161] Call Trace: [ 132.281858][ T6161] [ 132.284828][ T6161] dump_stack_lvl+0x18c/0x250 [ 132.289652][ T6161] ? show_regs_print_info+0x20/0x20 [ 132.294975][ T6161] ? load_image+0x400/0x400 [ 132.299525][ T6161] sysfs_warn_dup+0x8e/0xa0 [ 132.304055][ T6161] sysfs_do_create_link_sd+0xc0/0x110 [ 132.309465][ T6161] device_add_class_symlinks+0x1cf/0x240 [ 132.315132][ T6161] device_add+0x507/0xc20 [ 132.319502][ T6161] wiphy_register+0x1dad/0x2ae0 [ 132.324411][ T6161] ? cfg80211_event_work+0x40/0x40 [ 132.329623][ T6161] ? minstrel_ht_alloc+0x88a/0x990 [ 132.334769][ T6161] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 132.340856][ T6161] ieee80211_register_hw+0x3464/0x4250 [ 132.346377][ T6161] ? ieee80211_tasklet_handler+0x20/0x20 [ 132.352032][ T6161] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 132.358231][ T6161] ? __debug_object_init+0xec/0x450 [ 132.363469][ T6161] ? __asan_memset+0x22/0x40 [ 132.368087][ T6161] ? __hrtimer_init+0x186/0x270 [ 132.372965][ T6161] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 132.378770][ T6161] ? mac80211_hwsim_free+0x220/0x220 [ 132.384508][ T6161] ? rcu_is_watching+0x15/0xb0 [ 132.389371][ T6161] ? kstrndup+0xbd/0x140 [ 132.393772][ T6161] hwsim_new_radio_nl+0xdc9/0x1a90 [ 132.399037][ T6161] ? __nla_validate+0x50/0x50 [ 132.403768][ T6161] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 132.410145][ T6161] ? __nla_parse+0x40/0x50 [ 132.414599][ T6161] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 132.420991][ T6161] genl_family_rcv_msg_doit+0x211/0x310 [ 132.426653][ T6161] ? end_current_label_crit_section+0x170/0x170 [ 132.433207][ T6161] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 132.439128][ T6161] ? bpf_lsm_capable+0x9/0x10 [ 132.443825][ T6161] ? security_capable+0x89/0xb0 [ 132.448709][ T6161] genl_rcv_msg+0x619/0x7a0 [ 132.453252][ T6161] ? genl_bind+0x360/0x360 [ 132.457773][ T6161] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 132.464391][ T6161] ? perf_trace_lock+0xfc/0x3b0 [ 132.469277][ T6161] netlink_rcv_skb+0x241/0x4d0 [ 132.474221][ T6161] ? genl_bind+0x360/0x360 [ 132.478672][ T6161] ? netlink_ack+0x1180/0x1180 [ 132.483477][ T6161] ? __lock_acquire+0x7d40/0x7d40 [ 132.488535][ T6161] ? down_read+0x1ac/0x2e0 [ 132.493149][ T6161] genl_rcv+0x28/0x40 [ 132.497150][ T6161] netlink_unicast+0x751/0x8d0 [ 132.502140][ T6161] netlink_sendmsg+0x8d0/0xbf0 [ 132.507206][ T6161] ? netlink_getsockopt+0x590/0x590 [ 132.512437][ T6161] ? aa_sock_msg_perm+0x94/0x150 [ 132.517487][ T6161] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.522880][ T6161] ? security_socket_sendmsg+0x80/0xa0 [ 132.528799][ T6161] ? netlink_getsockopt+0x590/0x590 [ 132.534020][ T6161] ____sys_sendmsg+0x5ba/0x960 [ 132.538812][ T6161] ? __asan_memset+0x22/0x40 [ 132.543510][ T6161] ? __sys_sendmsg_sock+0x30/0x30 [ 132.548550][ T6161] ? __import_iovec+0x5f2/0x850 [ 132.553449][ T6161] ? import_iovec+0x73/0xa0 [ 132.558301][ T6161] ___sys_sendmsg+0x2a6/0x360 [ 132.563207][ T6161] ? __sys_sendmsg+0x2a0/0x2a0 [ 132.568057][ T6161] ? debug_mutex_init+0x38/0x70 [ 132.572986][ T6161] __se_sys_sendmsg+0x1c2/0x2b0 [ 132.577869][ T6161] ? __x64_sys_sendmsg+0x80/0x80 [ 132.582939][ T6161] ? lockdep_hardirqs_on+0x98/0x150 [ 132.588190][ T6161] do_syscall_64+0x55/0xa0 [ 132.592739][ T6161] ? clear_bhb_loop+0x40/0x90 [ 132.597452][ T6161] ? clear_bhb_loop+0x40/0x90 [ 132.602328][ T6161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.608363][ T6161] RIP: 0033:0x7fe38f39c799 [ 132.612802][ T6161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.632457][ T6161] RSP: 002b:00007fe3901c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.640894][ T6161] RAX: ffffffffffffffda RBX: 00007fe38f615fa0 RCX: 00007fe38f39c799 [ 132.648880][ T6161] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 132.656888][ T6161] RBP: 00007fe38f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 132.665088][ T6161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.673176][ T6161] R13: 00007fe38f616038 R14: 00007fe38f615fa0 R15: 00007ffec1560ff8 [ 132.681299][ T6161] [ 132.699062][ T6162] netlink: 'syz.1.98': attribute type 12 has an invalid length. [ 132.708182][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.98'. [ 132.767641][ T6156] syz.0.96 (6156) used greatest stack depth: 19656 bytes left [ 132.881420][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 132.973669][ T6170] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.102'. [ 133.398800][ T6179] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 133.421080][ T6179] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 133.465977][ T6179] netlink: 'syz.1.103': attribute type 6 has an invalid length. [ 133.473777][ T6179] netlink: 164 bytes leftover after parsing attributes in process `syz.1.103'. [ 133.528867][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.535768][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.309889][ T6190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.108'. [ 134.388279][ T6190] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.108'. [ 134.408719][ T6190] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 134.425850][ T6190] CPU: 0 PID: 6190 Comm: syz.1.108 Not tainted syzkaller #0 [ 134.433211][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.443374][ T6190] Call Trace: [ 134.446685][ T6190] [ 134.449642][ T6190] dump_stack_lvl+0x18c/0x250 [ 134.454372][ T6190] ? show_regs_print_info+0x20/0x20 [ 134.459609][ T6190] ? load_image+0x400/0x400 [ 134.464165][ T6190] sysfs_warn_dup+0x8e/0xa0 [ 134.468699][ T6190] sysfs_do_create_link_sd+0xc0/0x110 [ 134.474228][ T6190] device_add_class_symlinks+0x1cf/0x240 [ 134.479930][ T6190] device_add+0x507/0xc20 [ 134.484321][ T6190] wiphy_register+0x1dad/0x2ae0 [ 134.489252][ T6190] ? cfg80211_event_work+0x40/0x40 [ 134.494488][ T6190] ? minstrel_ht_alloc+0x88a/0x990 [ 134.499655][ T6190] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 134.505770][ T6190] ieee80211_register_hw+0x3464/0x4250 [ 134.511336][ T6190] ? ieee80211_tasklet_handler+0x20/0x20 [ 134.517194][ T6190] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 134.523121][ T6190] ? __debug_object_init+0xec/0x450 [ 134.528359][ T6190] ? __asan_memset+0x22/0x40 [ 134.532986][ T6190] ? __hrtimer_init+0x186/0x270 [ 134.538053][ T6190] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 134.543859][ T6190] ? mac80211_hwsim_free+0x220/0x220 [ 134.549205][ T6190] ? rcu_is_watching+0x15/0xb0 [ 134.554116][ T6190] ? kstrndup+0xbd/0x140 [ 134.558423][ T6190] hwsim_new_radio_nl+0xdc9/0x1a90 [ 134.563609][ T6190] ? __nla_validate+0x50/0x50 [ 134.568363][ T6190] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 134.574854][ T6190] ? __nla_parse+0x40/0x50 [ 134.579327][ T6190] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 134.585935][ T6190] genl_family_rcv_msg_doit+0x211/0x310 [ 134.591548][ T6190] ? end_current_label_crit_section+0x170/0x170 [ 134.597884][ T6190] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 134.603918][ T6190] ? bpf_lsm_capable+0x9/0x10 [ 134.608633][ T6190] ? security_capable+0x89/0xb0 [ 134.613726][ T6190] genl_rcv_msg+0x619/0x7a0 [ 134.618284][ T6190] ? genl_bind+0x360/0x360 [ 134.622735][ T6190] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 134.629112][ T6190] ? ref_tracker_free+0x690/0x840 [ 134.634184][ T6190] netlink_rcv_skb+0x241/0x4d0 [ 134.638999][ T6190] ? genl_bind+0x360/0x360 [ 134.643447][ T6190] ? netlink_ack+0x1180/0x1180 [ 134.648531][ T6190] ? __lock_acquire+0x7d40/0x7d40 [ 134.653606][ T6190] ? down_read+0x1ac/0x2e0 [ 134.658197][ T6190] genl_rcv+0x28/0x40 [ 134.662214][ T6190] netlink_unicast+0x751/0x8d0 [ 134.667028][ T6190] netlink_sendmsg+0x8d0/0xbf0 [ 134.671948][ T6190] ? netlink_getsockopt+0x590/0x590 [ 134.677210][ T6190] ? aa_sock_msg_perm+0x94/0x150 [ 134.682198][ T6190] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 134.687700][ T6190] ? security_socket_sendmsg+0x80/0xa0 [ 134.693218][ T6190] ? netlink_getsockopt+0x590/0x590 [ 134.698656][ T6190] ____sys_sendmsg+0x5ba/0x960 [ 134.703649][ T6190] ? __asan_memset+0x22/0x40 [ 134.708372][ T6190] ? __sys_sendmsg_sock+0x30/0x30 [ 134.713443][ T6190] ? __import_iovec+0x5f2/0x850 [ 134.718376][ T6190] ? import_iovec+0x73/0xa0 [ 134.723120][ T6190] ___sys_sendmsg+0x2a6/0x360 [ 134.727859][ T6190] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.732806][ T6190] __se_sys_sendmsg+0x1c2/0x2b0 [ 134.737880][ T6190] ? __x64_sys_sendmsg+0x80/0x80 [ 134.742892][ T6190] ? lockdep_hardirqs_on+0x98/0x150 [ 134.748161][ T6190] do_syscall_64+0x55/0xa0 [ 134.752631][ T6190] ? clear_bhb_loop+0x40/0x90 [ 134.757377][ T6190] ? clear_bhb_loop+0x40/0x90 [ 134.762184][ T6190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.768115][ T6190] RIP: 0033:0x7fe38f39c799 [ 134.772727][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.792640][ T6190] RSP: 002b:00007fe3901c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.801191][ T6190] RAX: ffffffffffffffda RBX: 00007fe38f615fa0 RCX: 00007fe38f39c799 [ 134.809295][ T6190] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 134.817355][ T6190] RBP: 00007fe38f432c99 R08: 0000000000000000 R09: 0000000000000000 [ 134.825453][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.833459][ T6190] R13: 00007fe38f616038 R14: 00007fe38f615fa0 R15: 00007ffec1560ff8 [ 134.841577][ T6190] [ 134.844270][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.109'. [ 134.977669][ T6197] netlink: 'syz.1.108': attribute type 12 has an invalid length. [ 134.993124][ T6197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.108'. [ 135.458107][ T6203] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.113'. [ 136.549727][ T6205] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 136.571904][ T6205] netlink: 152 bytes leftover after parsing attributes in process `syz.1.112'. [ 136.657655][ T6205] .`: renamed from bond0 (while UP) [ 137.120153][ T6205] syz.1.112 (6205) used greatest stack depth: 19528 bytes left [ 137.676140][ T6217] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 137.758719][ T6217] netlink: 'syz.2.116': attribute type 29 has an invalid length. [ 137.862281][ T6227] netlink: 'syz.2.116': attribute type 6 has an invalid length. [ 137.918659][ T6227] netlink: 164 bytes leftover after parsing attributes in process `syz.2.116'. [ 141.352348][ T6237] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.121'. [ 142.148687][ T6244] netlink: 'syz.1.124': attribute type 1 has an invalid length. [ 142.160612][ T6244] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.124'. [ 175.190829][ T6233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.121'. [ 175.274122][ T6238] netlink: 'syz.2.121': attribute type 12 has an invalid length. [ 175.281909][ T6238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.121'. [ 179.795803][ T6237] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 182.504137][ T6237] CPU: 0 PID: 6237 Comm: syz.2.121 Not tainted syzkaller #0 [ 182.511490][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.521660][ T6237] Call Trace: [ 182.524971][ T6237] [ 182.527963][ T6237] dump_stack_lvl+0x18c/0x250 [ 182.532685][ T6237] ? show_regs_print_info+0x20/0x20 [ 182.537989][ T6237] ? load_image+0x400/0x400 [ 182.542552][ T6237] sysfs_warn_dup+0x8e/0xa0 [ 182.547091][ T6237] sysfs_do_create_link_sd+0xc0/0x110 [ 182.552607][ T6237] device_add_class_symlinks+0x1cf/0x240 [ 182.558302][ T6237] device_add+0x507/0xc20 [ 182.562684][ T6237] wiphy_register+0x1dad/0x2ae0 [ 182.567591][ T6237] ? cfg80211_event_work+0x40/0x40 [ 182.572725][ T6237] ? minstrel_ht_alloc+0x88a/0x990 [ 182.577886][ T6237] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 182.583996][ T6237] ieee80211_register_hw+0x3464/0x4250 [ 182.589554][ T6237] ? ieee80211_tasklet_handler+0x20/0x20 [ 182.595314][ T6237] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 182.601239][ T6237] ? __debug_object_init+0xec/0x450 [ 182.606480][ T6237] ? __asan_memset+0x22/0x40 [ 182.611211][ T6237] ? __hrtimer_init+0x186/0x270 [ 182.616188][ T6237] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 182.621973][ T6237] ? mac80211_hwsim_free+0x220/0x220 [ 182.627383][ T6237] ? rcu_is_watching+0x15/0xb0 [ 182.632194][ T6237] ? kstrndup+0xbd/0x140 [ 182.636483][ T6237] hwsim_new_radio_nl+0xdc9/0x1a90 [ 182.641725][ T6237] ? __nla_validate+0x50/0x50 [ 182.646544][ T6237] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 182.652939][ T6237] ? __nla_parse+0x40/0x50 [ 182.657386][ T6237] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 182.664019][ T6237] genl_family_rcv_msg_doit+0x211/0x310 [ 182.669619][ T6237] ? end_current_label_crit_section+0x170/0x170 [ 182.675935][ T6237] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 182.681878][ T6237] ? bpf_lsm_capable+0x9/0x10 [ 182.686592][ T6237] ? security_capable+0x89/0xb0 [ 182.691489][ T6237] genl_rcv_msg+0x619/0x7a0 [ 182.696043][ T6237] ? genl_bind+0x360/0x360 [ 182.700511][ T6237] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 182.706970][ T6237] ? ref_tracker_free+0x690/0x840 [ 182.712047][ T6237] netlink_rcv_skb+0x241/0x4d0 [ 182.716869][ T6237] ? genl_bind+0x360/0x360 [ 182.721343][ T6237] ? netlink_ack+0x1180/0x1180 [ 182.726297][ T6237] ? __lock_acquire+0x7d40/0x7d40 [ 182.731375][ T6237] ? down_read+0x1ac/0x2e0 [ 182.735829][ T6237] genl_rcv+0x28/0x40 [ 182.739928][ T6237] netlink_unicast+0x751/0x8d0 [ 182.744912][ T6237] netlink_sendmsg+0x8d0/0xbf0 [ 182.749725][ T6237] ? netlink_getsockopt+0x590/0x590 [ 182.754996][ T6237] ? aa_sock_msg_perm+0x94/0x150 [ 182.760539][ T6237] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 182.765962][ T6237] ? security_socket_sendmsg+0x80/0xa0 [ 182.771450][ T6237] ? netlink_getsockopt+0x590/0x590 [ 182.776777][ T6237] ____sys_sendmsg+0x5ba/0x960 [ 182.781703][ T6237] ? __asan_memset+0x22/0x40 [ 182.786351][ T6237] ? __sys_sendmsg_sock+0x30/0x30 [ 182.791430][ T6237] ? __import_iovec+0x5f2/0x850 [ 182.796370][ T6237] ? import_iovec+0x73/0xa0 [ 182.800919][ T6237] ___sys_sendmsg+0x2a6/0x360 [ 182.805722][ T6237] ? __sys_sendmsg+0x2a0/0x2a0 [ 182.810753][ T6237] __se_sys_sendmsg+0x1c2/0x2b0 [ 182.815730][ T6237] ? __x64_sys_sendmsg+0x80/0x80 [ 182.820829][ T6237] ? lockdep_hardirqs_on+0x98/0x150 [ 182.826084][ T6237] do_syscall_64+0x55/0xa0 [ 182.830549][ T6237] ? clear_bhb_loop+0x40/0x90 [ 182.835259][ T6237] ? clear_bhb_loop+0x40/0x90 [ 182.840053][ T6237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.846059][ T6237] RIP: 0033:0x7fb343d9c799 [ 182.850502][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.870137][ T6237] RSP: 002b:00007fb344cdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.878760][ T6237] RAX: ffffffffffffffda RBX: 00007fb344016090 RCX: 00007fb343d9c799 [ 182.886845][ T6237] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 182.894840][ T6237] RBP: 00007fb343e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 182.902838][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.910844][ T6237] R13: 00007fb344016128 R14: 00007fb344016090 R15: 00007ffca07a7118 [ 182.918862][ T6237] [ 196.237237][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.244663][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.870342][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.879479][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.887978][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.897207][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.920435][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.931939][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.126469][ T5084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.135775][ T5084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.143618][ T5084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.153152][ T5084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.161342][ T5084] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.168851][ T5084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.235118][ T5084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.249635][ T5084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.331809][ T5084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.378917][ T5084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.388606][ T5084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 203.397390][ T5084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 203.505947][ T5084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 203.544466][ T5084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 203.552994][ T5084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 203.573013][ T5084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 203.584014][ T5084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 203.591795][ T5084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 204.964424][ T5084] Bluetooth: hci4: command tx timeout [ 205.208628][ T5084] Bluetooth: hci5: command tx timeout [ 205.460549][ T5084] Bluetooth: hci6: command tx timeout [ 205.562540][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 205.689215][ T5084] Bluetooth: hci7: command tx timeout [ 205.706690][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 205.763847][ T2990] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.833134][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.840917][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.848272][ T6264] bridge_slave_0: entered allmulticast mode [ 205.856189][ T6264] bridge_slave_0: entered promiscuous mode [ 205.869260][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 205.894363][ T2990] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.920164][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.928392][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.935741][ T6264] bridge_slave_1: entered allmulticast mode [ 205.942671][ T6264] bridge_slave_1: entered promiscuous mode [ 205.959443][ T6268] chnl_net:caif_netlink_parms(): no params data found [ 206.008312][ T2990] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.040031][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.078579][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.101084][ T2990] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.215760][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.223147][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.231291][ T6260] bridge_slave_0: entered allmulticast mode [ 206.238912][ T6260] bridge_slave_0: entered promiscuous mode [ 206.252192][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.260232][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.267715][ T6260] bridge_slave_1: entered allmulticast mode [ 206.275378][ T6260] bridge_slave_1: entered promiscuous mode [ 206.285368][ T6264] team0: Port device team_slave_0 added [ 206.344778][ T6264] team0: Port device team_slave_1 added [ 206.353287][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.423265][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.454630][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.461989][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.469591][ T6266] bridge_slave_0: entered allmulticast mode [ 206.476632][ T6266] bridge_slave_0: entered promiscuous mode [ 206.485792][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.492968][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.500953][ T6266] bridge_slave_1: entered allmulticast mode [ 206.508033][ T6266] bridge_slave_1: entered promiscuous mode [ 206.528660][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.541959][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.573100][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.587238][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.594679][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.620905][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.651895][ T6260] team0: Port device team_slave_0 added [ 206.658811][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.666514][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.673762][ T6268] bridge_slave_0: entered allmulticast mode [ 206.680692][ T6268] bridge_slave_0: entered promiscuous mode [ 206.689381][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.696938][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.704449][ T6268] bridge_slave_1: entered allmulticast mode [ 206.711230][ T6268] bridge_slave_1: entered promiscuous mode [ 206.781583][ T6260] team0: Port device team_slave_1 added [ 206.805383][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.827196][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.849429][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.884434][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.946465][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.953555][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.981139][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.004748][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.011764][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.038409][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.049402][ T5084] Bluetooth: hci4: command tx timeout [ 207.079317][ T6268] team0: Port device team_slave_0 added [ 207.089165][ T6268] team0: Port device team_slave_1 added [ 207.115380][ T2990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.149109][ T6266] team0: Port device team_slave_0 added [ 207.159087][ T6266] team0: Port device team_slave_1 added [ 207.197762][ T6264] hsr_slave_0: entered promiscuous mode [ 207.212341][ T6264] hsr_slave_1: entered promiscuous mode [ 207.219264][ T6264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.228628][ T6264] Cannot create hsr debugfs directory [ 207.279905][ T2990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.294965][ T5084] Bluetooth: hci5: command tx timeout [ 207.394055][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.401070][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.439260][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.477345][ T2990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.519242][ T6260] hsr_slave_0: entered promiscuous mode [ 207.524162][ T5084] Bluetooth: hci6: command tx timeout [ 207.532376][ T6260] hsr_slave_1: entered promiscuous mode [ 207.544907][ T6260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.552509][ T6260] Cannot create hsr debugfs directory [ 207.572394][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.580697][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.607591][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.621858][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.629134][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.668966][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.681375][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.689067][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.715797][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.748561][ T2990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.771034][ T5084] Bluetooth: hci7: command tx timeout [ 208.006843][ T6266] hsr_slave_0: entered promiscuous mode [ 208.024744][ T6266] hsr_slave_1: entered promiscuous mode [ 208.033862][ T6266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.042841][ T6266] Cannot create hsr debugfs directory [ 208.142420][ T6268] hsr_slave_0: entered promiscuous mode [ 208.157682][ T6268] hsr_slave_1: entered promiscuous mode [ 208.164299][ T6268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.172526][ T6268] Cannot create hsr debugfs directory [ 208.448712][ T2990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.562737][ T2990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.651357][ T2990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.766706][ T2990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.782826][ T6260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.797858][ T6260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.846320][ T6260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.879137][ T6260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.961733][ T6264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.050290][ T6264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.104817][ T6264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.125601][ T5084] Bluetooth: hci4: command tx timeout [ 209.176532][ T6264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.374562][ T5084] Bluetooth: hci5: command tx timeout [ 209.521490][ T6266] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.539218][ T6266] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.604453][ T5084] Bluetooth: hci6: command tx timeout [ 209.712934][ T6266] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.738535][ T6266] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.844307][ T5084] Bluetooth: hci7: command tx timeout [ 209.926980][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.961998][ T6268] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.055255][ T6268] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.068133][ T6268] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.081582][ T6268] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.169448][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.263032][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.270203][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.311023][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.318421][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.477551][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.779774][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.879769][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.887063][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.025114][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.051714][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.058961][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.109232][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.183519][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.207900][ T5084] Bluetooth: hci4: command tx timeout [ 211.309736][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.336275][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.343446][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.419680][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.426887][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.444770][ T5084] Bluetooth: hci5: command tx timeout [ 211.475554][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.482868][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.507802][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.515103][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.600636][ T6264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.678033][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.694212][ T5084] Bluetooth: hci6: command tx timeout [ 211.924788][ T5084] Bluetooth: hci7: command tx timeout [ 212.220573][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.554129][ T2990] hsr_slave_0: left promiscuous mode [ 212.561629][ T2990] hsr_slave_1: left promiscuous mode [ 212.569900][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.590800][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.602358][ T2990] batadv_slave_1: left allmulticast mode [ 212.631561][ T2990] bridge0: port 3(batadv_slave_1) entered disabled state [ 212.658119][ T2990] bridge_slave_1: left allmulticast mode [ 212.664193][ T2990] bridge_slave_1: left promiscuous mode [ 212.674731][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.697954][ T2990] bridge_slave_0: left allmulticast mode [ 212.703672][ T2990] bridge_slave_0: left promiscuous mode [ 212.715828][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.745538][ T2990] hsr_slave_0: left promiscuous mode [ 212.753733][ T2990] hsr_slave_1: left promiscuous mode [ 212.761003][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.774201][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.792805][ T2990] batadv_slave_1: left allmulticast mode [ 212.802737][ T2990] bridge0: port 3(batadv_slave_1) entered disabled state [ 212.837329][ T2990] bridge_slave_1: left allmulticast mode [ 212.843067][ T2990] bridge_slave_1: left promiscuous mode [ 212.861524][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.885449][ T2990] bridge_slave_0: left allmulticast mode [ 212.891179][ T2990] bridge_slave_0: left promiscuous mode [ 212.899631][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.918794][ T2990] hsr_slave_0: left promiscuous mode [ 212.925768][ T2990] hsr_slave_1: left promiscuous mode [ 212.932380][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.942323][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.952840][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.961642][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.972049][ T2990] bridge_slave_1: left allmulticast mode [ 212.978310][ T2990] bridge_slave_1: left promiscuous mode [ 212.985323][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.997330][ T2990] bridge_slave_0: left allmulticast mode [ 213.003039][ T2990] bridge_slave_0: left promiscuous mode [ 213.010427][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.096387][ T2990] veth1_macvtap: left promiscuous mode [ 213.102698][ T2990] veth0_macvtap: left promiscuous mode [ 213.109033][ T2990] veth1_vlan: left promiscuous mode [ 213.114713][ T2990] veth0_vlan: left promiscuous mode [ 213.125140][ T2990] veth1_macvtap: left promiscuous mode [ 213.130738][ T2990] veth0_macvtap: left promiscuous mode [ 213.136531][ T2990] veth1_vlan: left promiscuous mode [ 213.141910][ T2990] veth0_vlan: left promiscuous mode [ 213.152187][ T2990] veth1_macvtap: left promiscuous mode [ 213.157916][ T2990] veth0_macvtap: left promiscuous mode [ 213.164639][ T2990] veth1_vlan: left promiscuous mode [ 213.170560][ T2990] veth0_vlan: left promiscuous mode [ 213.982769][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 214.031295][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 214.072576][ T2990] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.117200][ T2990] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.452827][ T2990] .` (unregistering): Released all slaves [ 215.040569][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 215.088645][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 215.132802][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.180690][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.663087][ T2990] bond0 (unregistering): Released all slaves [ 215.800323][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.829182][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.843063][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.870817][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.881351][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.891657][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.436819][ T2990] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.486947][ T2990] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.801038][ T2990] .` (unregistering): Released all slaves [ 217.058403][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.133043][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.879386][ T6264] veth0_vlan: entered promiscuous mode [ 217.928073][ T5084] Bluetooth: hci0: command tx timeout [ 217.980824][ T6264] veth1_vlan: entered promiscuous mode [ 218.275498][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 218.459619][ T6266] veth0_vlan: entered promiscuous mode [ 218.630375][ T6266] veth1_vlan: entered promiscuous mode [ 218.698738][ T6268] veth0_vlan: entered promiscuous mode [ 218.740861][ T6268] veth1_vlan: entered promiscuous mode [ 218.795825][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.803014][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.824389][ T6376] bridge_slave_0: entered allmulticast mode [ 218.862607][ T6376] bridge_slave_0: entered promiscuous mode [ 218.898174][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.924747][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.932056][ T6376] bridge_slave_1: entered allmulticast mode [ 218.969336][ T6376] bridge_slave_1: entered promiscuous mode [ 219.081352][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.127832][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.137106][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.147434][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.173596][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.189671][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.197343][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.232380][ T6266] veth0_macvtap: entered promiscuous mode [ 219.250175][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.321080][ T6268] veth0_macvtap: entered promiscuous mode [ 219.336138][ T6266] veth1_macvtap: entered promiscuous mode [ 219.366621][ T6268] veth1_macvtap: entered promiscuous mode [ 219.381425][ T6266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.400826][ T6266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.412600][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.425819][ T6376] team0: Port device team_slave_0 added [ 219.463138][ T6376] team0: Port device team_slave_1 added [ 219.543390][ T6266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.560243][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.568624][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.595826][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.610950][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.618583][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.645855][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.677344][ T6266] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.686602][ T6266] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.695476][ T6266] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.704617][ T6266] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.788833][ T6376] hsr_slave_0: entered promiscuous mode [ 219.797626][ T6376] hsr_slave_1: entered promiscuous mode [ 219.831103][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.844125][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.855271][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.865980][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.877738][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.966970][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.985408][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.005120][ T5780] Bluetooth: hci0: command tx timeout [ 220.007123][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.208374][ T6268] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.236075][ T6268] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.251739][ T6268] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.271552][ T6268] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.533089][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 220.668411][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.677217][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.891520][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.899501][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.912060][ T6421] bridge_slave_0: entered allmulticast mode [ 220.919694][ T6421] bridge_slave_0: entered promiscuous mode [ 220.940202][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.957444][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.018915][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.027425][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.034714][ T6421] bridge_slave_1: entered allmulticast mode [ 221.041705][ T6421] bridge_slave_1: entered promiscuous mode [ 221.172005][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.186613][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.254916][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.262804][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.305054][ T5780] Bluetooth: hci1: command tx timeout [ 221.347095][ T6421] team0: Port device team_slave_0 added [ 221.377785][ T6421] team0: Port device team_slave_1 added [ 221.721366][ T6376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.799590][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.807190][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.838017][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.847681][ T6449] netlink: 'syz.6.129': attribute type 29 has an invalid length. [ 221.851699][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.863614][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.891875][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.916039][ T6376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.930444][ T6376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.941190][ T6376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.987400][ T6449] netlink: 'syz.6.129': attribute type 29 has an invalid length. [ 222.023811][ T6450] netlink: 'syz.6.129': attribute type 6 has an invalid length. [ 222.032116][ T6450] netlink: 164 bytes leftover after parsing attributes in process `syz.6.129'. [ 222.061593][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.085387][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.089525][ T5780] Bluetooth: hci0: command tx timeout [ 222.121197][ T6421] hsr_slave_0: entered promiscuous mode [ 222.128343][ T6421] hsr_slave_1: entered promiscuous mode [ 222.135472][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.143170][ T6421] Cannot create hsr debugfs directory [ 223.364133][ T5780] Bluetooth: hci1: command tx timeout [ 224.164333][ T5780] Bluetooth: hci0: command tx timeout [ 225.444076][ T5780] Bluetooth: hci1: command tx timeout [ 226.453172][ T1143] hsr_slave_0: left promiscuous mode [ 226.491793][ T1143] hsr_slave_1: left promiscuous mode [ 226.500394][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.511790][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.528901][ T1143] bridge_slave_1: left allmulticast mode [ 226.540229][ T1143] bridge_slave_1: left promiscuous mode [ 226.550592][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.580593][ T1143] bridge_slave_0: left allmulticast mode [ 226.589930][ T1143] bridge_slave_0: left promiscuous mode [ 226.601146][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.641272][ T1143] hsr_slave_0: left promiscuous mode [ 226.940747][ T1143] hsr_slave_1: left promiscuous mode [ 226.965222][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.982354][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.992495][ T1143] bridge_slave_1: left allmulticast mode [ 227.007610][ T1143] bridge_slave_1: left promiscuous mode [ 227.022625][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.043006][ T1143] bridge_slave_0: left allmulticast mode [ 227.050294][ T1143] bridge_slave_0: left promiscuous mode [ 227.061459][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.121201][ T1143] veth1_vlan: left promiscuous mode [ 227.134367][ T1143] veth0_vlan: left promiscuous mode [ 227.524183][ T5780] Bluetooth: hci1: command tx timeout [ 230.751758][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 230.868952][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 230.950297][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.007564][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.313764][ T1143] bond0 (unregistering): Released all slaves [ 231.888186][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 231.938422][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 231.981408][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.032444][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.360252][ T1143] bond0 (unregistering): Released all slaves [ 232.460553][ T6498] netlink: 'syz.7.136': attribute type 6 has an invalid length. [ 232.468592][ T6498] netlink: 164 bytes leftover after parsing attributes in process `syz.7.136'. [ 232.796834][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.901921][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.969112][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.976455][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.047412][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.054651][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.331571][ T6421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.473071][ T6421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.594087][ T6421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.693750][ T6421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.846554][ T6551] netlink: 'syz.6.148': attribute type 10 has an invalid length. [ 234.151463][ T6551] team0: Port device macvlan0 added [ 234.516664][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.526661][ T6551] syz.6.148 (6551) used greatest stack depth: 18600 bytes left [ 234.623644][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.742612][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.750020][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.886238][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.893573][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.146222][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.182587][ T6421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.218504][ T6572] netlink: 'syz.6.150': attribute type 29 has an invalid length. [ 235.259982][ T6572] netlink: 'syz.6.150': attribute type 29 has an invalid length. [ 235.622885][ T6585] netlink: 'syz.6.150': attribute type 6 has an invalid length. [ 235.666729][ T6585] netlink: 164 bytes leftover after parsing attributes in process `syz.6.150'. [ 236.087143][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.271853][ T6602] sit0: entered allmulticast mode [ 236.837868][ T6606] sit0: entered promiscuous mode [ 237.842258][ T6376] veth0_vlan: entered promiscuous mode [ 237.925021][ T6376] veth1_vlan: entered promiscuous mode [ 238.168083][ T6376] veth0_macvtap: entered promiscuous mode [ 238.263960][ T6376] veth1_macvtap: entered promiscuous mode [ 238.500406][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.545135][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.557025][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.568402][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.581630][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.593391][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.636505][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.693655][ T6636] netlink: 'syz.6.160': attribute type 29 has an invalid length. [ 238.704657][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.728430][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.743656][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.763961][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.785977][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.808796][ T6421] veth0_vlan: entered promiscuous mode [ 238.821610][ T6636] netlink: 'syz.6.160': attribute type 29 has an invalid length. [ 238.849903][ T6376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.866567][ T6376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.879978][ T6376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.914443][ T6376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.947636][ T6642] netlink: 'syz.6.160': attribute type 6 has an invalid length. [ 238.956370][ T6642] netlink: 164 bytes leftover after parsing attributes in process `syz.6.160'. [ 239.010034][ T6421] veth1_vlan: entered promiscuous mode [ 239.384427][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.408661][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.590162][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.612413][ T6421] veth0_macvtap: entered promiscuous mode [ 239.621467][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.645786][ T6421] veth1_macvtap: entered promiscuous mode [ 239.724784][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.752554][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.776352][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.803473][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.822331][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.841419][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.853000][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.877393][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.917430][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.967729][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.988776][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.023047][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.056486][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.084251][ T6421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.109252][ T6421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.132203][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.158299][ T6421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.178217][ T6421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.194034][ T6421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.202880][ T6421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.831567][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.884648][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.169683][ T6684] netlink: 208064 bytes leftover after parsing attributes in process `syz.7.168'. [ 241.201843][ T6684] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.240402][ T6684] openvswitch: netlink: Message has 4 unknown bytes. [ 241.283135][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.313344][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.335201][ T6684] syzkaller0: entered promiscuous mode [ 241.372796][ T6684] syzkaller0: entered allmulticast mode [ 241.393314][ T6686] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 241.437068][ T6684] netlink: 'syz.7.168': attribute type 33 has an invalid length. [ 241.468517][ T6684] netlink: 36 bytes leftover after parsing attributes in process `syz.7.168'. [ 241.539006][ T6684] netlink: 14548 bytes leftover after parsing attributes in process `syz.7.168'. [ 241.694333][ T5780] Bluetooth: hci7: unexpected event 0x10 length: 15 > 1 [ 241.695425][ T5780] Bluetooth: hci7: hardware error 0x00 [ 243.342094][ T6715] netlink: 'syz.7.171': attribute type 3 has an invalid length. [ 243.384341][ T6715] netlink: 132 bytes leftover after parsing attributes in process `syz.7.171'. [ 245.077753][ T5780] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 246.255701][ T6772] netlink: 'syz.6.182': attribute type 3 has an invalid length. [ 246.288823][ T6772] netlink: 132 bytes leftover after parsing attributes in process `syz.6.182'. [ 249.986478][ T6843] netlink: 'syz.6.198': attribute type 3 has an invalid length. [ 250.033678][ T6843] netlink: 132 bytes leftover after parsing attributes in process `syz.6.198'. [ 251.920585][ T6886] netlink: 'syz.4.208': attribute type 3 has an invalid length. [ 251.991979][ T6886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.208'. [ 256.054174][ T6939] netlink: 132 bytes leftover after parsing attributes in process `syz.7.216'. [ 256.240332][ T6939] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.216'. [ 256.269530][ T6939] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 256.343242][ T6946] netlink: 'syz.7.216': attribute type 12 has an invalid length. [ 256.384314][ T6946] netlink: 132 bytes leftover after parsing attributes in process `syz.7.216'. [ 256.546267][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.552636][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.969834][ T6964] netlink: 'syz.7.220': attribute type 3 has an invalid length. [ 256.998940][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.7.220'. [ 257.331608][ T6975] netlink: 132 bytes leftover after parsing attributes in process `syz.6.222'. [ 257.460887][ T6975] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.222'. [ 257.501724][ T6975] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 257.575938][ T6981] netlink: 'syz.6.222': attribute type 12 has an invalid length. [ 257.592708][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.6.222'. [ 258.787839][ T6997] netlink: 'syz.6.228': attribute type 10 has an invalid length. [ 259.138591][ T6997] geneve0: entered promiscuous mode [ 259.508342][ T6997] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 260.304824][ T7025] netlink: 132 bytes leftover after parsing attributes in process `syz.4.236'. [ 260.632417][ T7025] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.236'. [ 260.687472][ T7025] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 260.771160][ T7027] netlink: 'syz.4.236': attribute type 12 has an invalid length. [ 260.819274][ T7027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.236'. [ 263.884940][ T7107] netlink: 132 bytes leftover after parsing attributes in process `syz.5.252'. [ 264.086114][ T7107] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.252'. [ 264.180125][ T7117] netlink: 'syz.5.252': attribute type 12 has an invalid length. [ 264.217993][ T7117] netlink: 132 bytes leftover after parsing attributes in process `syz.5.252'. [ 264.241146][ T7107] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 265.418567][ T7148] netlink: 'syz.6.264': attribute type 3 has an invalid length. [ 265.436982][ T7148] netlink: 132 bytes leftover after parsing attributes in process `syz.6.264'. [ 266.897772][ T7179] netlink: 'syz.7.269': attribute type 6 has an invalid length. [ 266.912265][ T7179] netlink: 164 bytes leftover after parsing attributes in process `syz.7.269'. [ 267.867240][ T7197] netlink: 'syz.7.275': attribute type 10 has an invalid length. [ 268.135181][ T7207] netlink: 'syz.4.276': attribute type 3 has an invalid length. [ 268.159700][ T7207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.276'. [ 268.182672][ T7197] team0 (unregistering): Port device team_slave_0 removed [ 268.236351][ T5780] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 268.478437][ T7197] team0 (unregistering): Port device team_slave_1 removed [ 270.324066][ T5780] Bluetooth: hci1: command tx timeout [ 270.955586][ T7254] netlink: 'syz.6.284': attribute type 6 has an invalid length. [ 271.030888][ T7254] netlink: 164 bytes leftover after parsing attributes in process `syz.6.284'. [ 275.043324][ T7303] netlink: 'syz.4.290': attribute type 3 has an invalid length. [ 275.071874][ T7303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.290'. [ 275.398456][ T7309] netlink: 'syz.7.298': attribute type 6 has an invalid length. [ 275.425463][ T7309] netlink: 164 bytes leftover after parsing attributes in process `syz.7.298'. [ 277.757105][ T7363] netlink: 'syz.7.304': attribute type 3 has an invalid length. [ 277.785942][ T7363] netlink: 132 bytes leftover after parsing attributes in process `syz.7.304'. [ 278.277135][ T7373] netlink: 'syz.6.305': attribute type 6 has an invalid length. [ 278.304542][ T7373] netlink: 164 bytes leftover after parsing attributes in process `syz.6.305'. [ 280.224714][ T5780] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 280.232731][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 280.242810][ T5780] CPU: 0 PID: 5780 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 280.250494][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.260673][ T5780] Workqueue: hci1 hci_rx_work [ 280.265389][ T5780] Call Trace: [ 280.268772][ T5780] [ 280.271742][ T5780] dump_stack_lvl+0x18c/0x250 [ 280.276461][ T5780] ? show_regs_print_info+0x20/0x20 [ 280.281683][ T5780] ? load_image+0x400/0x400 [ 280.286211][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 280.291357][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 280.296220][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 280.301436][ T5780] kobject_add_internal+0x61c/0xcc0 [ 280.306660][ T5780] kobject_add+0x164/0x240 [ 280.311174][ T5780] ? __rwlock_init+0x150/0x150 [ 280.315975][ T5780] ? kobject_init+0x1e0/0x1e0 [ 280.320675][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 280.325542][ T5780] ? get_device_parent+0x366/0x390 [ 280.330676][ T5780] device_add+0x408/0xc20 [ 280.335040][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 280.339993][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 280.345316][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 280.351581][ T5780] ? bt_info+0x180/0x180 [ 280.355929][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 280.362286][ T5780] ? skb_pull_data+0xfb/0x200 [ 280.366990][ T5780] hci_le_enh_conn_complete_evt+0x189/0x460 [ 280.372909][ T5780] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 280.379352][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 280.385431][ T5780] hci_event_packet+0x7ba/0x1270 [ 280.390387][ T5780] ? bis_list+0x290/0x290 [ 280.394805][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 280.400193][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 280.405403][ T5780] hci_rx_work+0x43a/0xd60 [ 280.409847][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 280.415578][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 280.421163][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 280.426778][ T5780] ? assign_work+0x3d2/0x5d0 [ 280.431384][ T5780] worker_thread+0xa55/0xfc0 [ 280.436013][ T5780] kthread+0x2fa/0x390 [ 280.440188][ T5780] ? pr_cont_work+0x560/0x560 [ 280.444974][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 280.449582][ T5780] ret_from_fork+0x48/0x80 [ 280.454031][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 280.458773][ T5780] ret_from_fork_asm+0x11/0x20 [ 280.463563][ T5780] [ 280.470254][ T5780] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 280.484283][ T5780] Bluetooth: hci1: failed to register connection device [ 282.529287][ T7442] netlink: 'syz.7.316': attribute type 6 has an invalid length. [ 282.539739][ T7442] netlink: 164 bytes leftover after parsing attributes in process `syz.7.316'. [ 282.564229][ T5084] Bluetooth: hci1: command tx timeout [ 286.231796][ T7516] netlink: 'syz.7.330': attribute type 6 has an invalid length. [ 286.248375][ T7516] netlink: 164 bytes leftover after parsing attributes in process `syz.7.330'. [ 288.885959][ T7565] netlink: 'syz.4.339': attribute type 10 has an invalid length. [ 289.026161][ T7565] team0: Port device macvlan0 added [ 290.716027][ T5084] Bluetooth: hci6: unexpected subevent 0x0a length: 150 > 30 [ 291.148895][ T7592] netlink: 'syz.4.342': attribute type 6 has an invalid length. [ 291.164117][ T7592] netlink: 164 bytes leftover after parsing attributes in process `syz.4.342'. [ 292.169033][ T7623] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.351'. [ 292.193952][ T7623] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 292.202292][ T7623] openvswitch: netlink: Message has 4 unknown bytes. [ 292.224504][ T7625] syzkaller0: entered promiscuous mode [ 292.261530][ T7625] syzkaller0: entered allmulticast mode [ 292.308611][ T7623] netlink: 'syz.4.351': attribute type 33 has an invalid length. [ 292.336825][ T7623] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 292.376516][ T7623] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.351'. [ 292.645040][ T7628] netlink: 'syz.5.352': attribute type 10 has an invalid length. [ 292.815431][ T5780] Bluetooth: hci6: command tx timeout [ 292.859220][ T7628] team0: Port device macvlan0 added [ 295.691517][ T7691] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.362'. [ 295.710035][ T7691] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 295.800491][ T7693] syzkaller0: entered promiscuous mode [ 295.803152][ T7691] openvswitch: netlink: Message has 4 unknown bytes. [ 295.806484][ T7693] syzkaller0: entered allmulticast mode [ 295.811052][ T7693] netlink: 'syz.4.362': attribute type 33 has an invalid length. [ 295.829732][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.362'. [ 295.845393][ T7693] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.362'. [ 295.915159][ T7697] netlink: 'syz.6.359': attribute type 6 has an invalid length. [ 295.917783][ T7694] netlink: 208064 bytes leftover after parsing attributes in process `syz.7.363'. [ 295.922943][ T7697] netlink: 164 bytes leftover after parsing attributes in process `syz.6.359'. [ 295.958885][ T7694] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 295.967888][ T7694] openvswitch: netlink: Message has 4 unknown bytes. [ 295.980593][ T7698] syzkaller0: entered promiscuous mode [ 295.999501][ T7698] syzkaller0: entered allmulticast mode [ 296.059586][ T7694] netlink: 'syz.7.363': attribute type 33 has an invalid length. [ 296.072575][ T7694] netlink: 36 bytes leftover after parsing attributes in process `syz.7.363'. [ 296.098098][ T7694] netlink: 14548 bytes leftover after parsing attributes in process `syz.7.363'. [ 296.306585][ T7706] netlink: 'syz.6.364': attribute type 3 has an invalid length. [ 296.967442][ T7726] netlink: 'syz.7.369': attribute type 10 has an invalid length. [ 297.826216][ T7730] netlink: 'syz.6.372': attribute type 6 has an invalid length. [ 297.886283][ T7730] __nla_validate_parse: 1 callbacks suppressed [ 297.886328][ T7730] netlink: 164 bytes leftover after parsing attributes in process `syz.6.372'. [ 298.396358][ T7749] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.374'. [ 298.413723][ T7748] netlink: 208064 bytes leftover after parsing attributes in process `syz.5.375'. [ 298.423788][ T7749] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 298.432739][ T7749] openvswitch: netlink: Message has 4 unknown bytes. [ 298.439903][ T7748] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 298.457033][ T7748] openvswitch: netlink: Message has 4 unknown bytes. [ 298.466027][ T7749] syzkaller0: entered promiscuous mode [ 298.472039][ T7749] syzkaller0: entered allmulticast mode [ 298.504949][ T7749] netlink: 'syz.4.374': attribute type 33 has an invalid length. [ 298.521409][ T7749] netlink: 36 bytes leftover after parsing attributes in process `syz.4.374'. [ 298.531567][ T7748] syzkaller0: entered promiscuous mode [ 298.546024][ T7748] syzkaller0: entered allmulticast mode [ 298.556279][ T7749] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.374'. [ 298.573318][ T7748] netlink: 'syz.5.375': attribute type 33 has an invalid length. [ 298.583693][ T7748] netlink: 36 bytes leftover after parsing attributes in process `syz.5.375'. [ 298.607171][ T5780] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 298.611662][ T7748] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.375'. [ 298.969380][ T7763] netlink: 'syz.4.377': attribute type 3 has an invalid length. [ 298.988471][ T7763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.377'. [ 299.380334][ T7773] netlink: 'syz.5.381': attribute type 3 has an invalid length. [ 299.414136][ T7773] netlink: 132 bytes leftover after parsing attributes in process `syz.5.381'. [ 301.369047][ T7793] netlink: 208064 bytes leftover after parsing attributes in process `syz.5.385'. [ 301.405666][ T7793] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 301.431771][ T7793] openvswitch: netlink: Message has 4 unknown bytes. [ 301.487296][ T7797] syzkaller0: entered promiscuous mode [ 301.512121][ T7797] syzkaller0: entered allmulticast mode [ 301.547976][ T7793] netlink: 'syz.5.385': attribute type 33 has an invalid length. [ 301.607925][ T5780] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 301.835245][ T7802] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 301.879050][ T7802] openvswitch: netlink: Message has 4 unknown bytes. [ 301.902135][ T7808] syzkaller0: entered promiscuous mode [ 301.913971][ T7808] syzkaller0: entered allmulticast mode [ 301.935089][ T7802] netlink: 'syz.7.386': attribute type 33 has an invalid length. [ 302.116799][ T5780] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 302.433798][ T7823] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 302.479586][ T7823] openvswitch: netlink: Message has 4 unknown bytes. [ 302.553599][ T7830] syzkaller0: entered promiscuous mode [ 302.589727][ T7830] syzkaller0: entered allmulticast mode [ 302.645164][ T5780] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 302.654663][ T5780] Bluetooth: hci0: Injecting HCI hardware error event [ 302.663330][ T5084] Bluetooth: hci0: hardware error 0x00 [ 302.716472][ T7823] netlink: 'syz.7.392': attribute type 33 has an invalid length. [ 302.976241][ T7837] netlink: 'syz.6.395': attribute type 3 has an invalid length. [ 303.015670][ T7837] __nla_validate_parse: 8 callbacks suppressed [ 303.015688][ T7837] netlink: 132 bytes leftover after parsing attributes in process `syz.6.395'. [ 303.071880][ T7842] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.396'. [ 303.195721][ T7840] syzkaller0: entered promiscuous mode [ 303.218544][ T7840] syzkaller0: entered allmulticast mode [ 303.237158][ T7840] netlink: 'syz.4.396': attribute type 33 has an invalid length. [ 303.267793][ T7840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.396'. [ 303.362763][ T7840] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.396'. [ 303.432669][ T5780] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 303.432711][ T5780] Bluetooth: hci0: unexpected event for opcode 0x0020 [ 303.769208][ T7848] netlink: 'syz.7.398': attribute type 6 has an invalid length. [ 303.796155][ T7848] netlink: 164 bytes leftover after parsing attributes in process `syz.7.398'. [ 304.320187][ T7862] netlink: 208064 bytes leftover after parsing attributes in process `syz.5.401'. [ 304.379422][ T7864] syzkaller0: entered promiscuous mode [ 304.398504][ T7862] net_ratelimit: 2 callbacks suppressed [ 304.398519][ T7862] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 304.441877][ T7864] syzkaller0: entered allmulticast mode [ 304.457797][ T7864] netlink: 'syz.5.401': attribute type 33 has an invalid length. [ 304.502640][ T7862] openvswitch: netlink: Message has 4 unknown bytes. [ 304.523836][ T7864] netlink: 36 bytes leftover after parsing attributes in process `syz.5.401'. [ 304.569260][ T7868] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.401'. [ 304.649042][ T5780] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 304.964576][ T5084] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 305.687673][ T5084] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 305.697239][ T5084] Bluetooth: hci1: Injecting HCI hardware error event [ 305.709371][ T5084] Bluetooth: hci1: hardware error 0x00 [ 307.099888][ T7894] bridge_slave_1: left allmulticast mode [ 307.126232][ T7894] bridge_slave_1: left promiscuous mode [ 307.143320][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.192307][ T7894] bridge_slave_0: left allmulticast mode [ 307.204937][ T7894] bridge_slave_0: left promiscuous mode [ 307.210880][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.796011][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.406'. [ 307.808648][ T7899] netlink: 'syz.4.407': attribute type 10 has an invalid length. [ 308.523684][ T7926] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.414'. [ 308.644090][ T5084] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 308.650690][ T7926] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 308.673554][ T7924] netlink: 'syz.5.411': attribute type 6 has an invalid length. [ 308.684157][ T7926] openvswitch: netlink: Message has 4 unknown bytes. [ 308.698929][ T7924] netlink: 164 bytes leftover after parsing attributes in process `syz.5.411'. [ 308.773164][ T7926] syzkaller0: entered promiscuous mode [ 308.787834][ T7926] syzkaller0: entered allmulticast mode [ 308.813422][ T7926] netlink: 'syz.4.414': attribute type 33 has an invalid length. [ 308.842757][ T7926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.414'. [ 308.893942][ T7937] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.414'. [ 313.086614][ T8007] bridge_slave_1: left allmulticast mode [ 313.118232][ T8007] bridge_slave_1: left promiscuous mode [ 313.142515][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.270876][ T8007] bridge_slave_0: left allmulticast mode [ 313.312014][ T8007] bridge_slave_0: left promiscuous mode [ 313.354596][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.570362][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.420'. [ 314.325330][ T8037] netlink: 'syz.7.426': attribute type 6 has an invalid length. [ 314.333053][ T8037] netlink: 164 bytes leftover after parsing attributes in process `syz.7.426'. [ 317.434678][ T8112] netlink: 'syz.6.438': attribute type 6 has an invalid length. [ 317.503673][ T8112] netlink: 164 bytes leftover after parsing attributes in process `syz.6.438'. [ 317.855602][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.862502][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.615910][ T8123] bridge_slave_1: left allmulticast mode [ 318.623088][ T8123] bridge_slave_1: left promiscuous mode [ 318.631122][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.667416][ T8123] bridge_slave_0: left allmulticast mode [ 318.691729][ T8123] bridge_slave_0: left promiscuous mode [ 318.714257][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.787599][ T8143] netlink: 208064 bytes leftover after parsing attributes in process `syz.6.445'. [ 319.814125][ T8143] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 319.827487][ T8143] openvswitch: netlink: Message has 4 unknown bytes. [ 320.173171][ T5084] Bluetooth: hci6: unexpected event 0x0f length: 15 > 4 [ 320.580520][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.7.441'. [ 320.628656][ T8145] syzkaller0: entered promiscuous mode [ 320.643722][ T8145] syzkaller0: entered allmulticast mode [ 320.675239][ T8147] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.445'. [ 322.392873][ T8189] netlink: 'syz.4.451': attribute type 6 has an invalid length. [ 322.405288][ T8189] netlink: 164 bytes leftover after parsing attributes in process `syz.4.451'. [ 324.246380][ T5084] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 324.255176][ T5084] Bluetooth: hci6: Injecting HCI hardware error event [ 324.266132][ T5780] Bluetooth: hci6: hardware error 0x00 [ 325.910608][ T8212] bridge_slave_1: left allmulticast mode [ 326.163622][ T8212] bridge_slave_1: left promiscuous mode [ 326.336084][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.716092][ T8212] bridge_slave_0: left allmulticast mode [ 326.722160][ T8212] bridge_slave_0: left promiscuous mode [ 326.751357][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.770403][ T8228] netlink: 208064 bytes leftover after parsing attributes in process `syz.7.463'. [ 327.795173][ T8228] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 327.832826][ T8228] openvswitch: netlink: Message has 4 unknown bytes. [ 327.852719][ T8231] syzkaller0: entered promiscuous mode [ 327.860622][ T8231] syzkaller0: entered allmulticast mode [ 327.924229][ T5780] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 327.968650][ T8235] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.465'. [ 328.395618][ T8243] netlink: 'syz.5.467': attribute type 6 has an invalid length. [ 328.403440][ T8243] netlink: 164 bytes leftover after parsing attributes in process `syz.5.467'. [ 331.231119][ T8240] ------------[ cut here ]------------ [ 331.237012][ T8240] WARNING: CPU: 1 PID: 8240 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 331.246736][ T8240] Modules linked in: [ 331.250663][ T8240] CPU: 1 PID: 8240 Comm: syz.4.468 Not tainted syzkaller #0 [ 331.259182][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.269518][ T8240] RIP: 0010:perf_pending_task+0x35c/0x470 [ 331.275644][ T8240] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 331.295486][ T8240] RSP: 0018:ffffc90012b179c0 EFLAGS: 00010293 [ 331.301595][ T8240] RAX: ffffffff81b13c0c RBX: ffff88807c678a80 RCX: ffff888025f13c00 [ 331.309798][ T8240] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 331.317854][ T8240] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 331.326079][ T8240] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888025f13c00 [ 331.334143][ T8240] R13: ffff88805bb28d30 R14: ffff88807c678840 R15: 1ffff1100f8cf108 [ 331.342248][ T8240] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 331.351266][ T8240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.359398][ T8240] CR2: 0000000100000001 CR3: 0000000026a31000 CR4: 00000000003506e0 [ 331.367964][ T8240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.376088][ T8240] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 331.384186][ T8240] Call Trace: [ 331.387496][ T8240] [ 331.390470][ T8240] task_work_run+0x1d4/0x260 [ 331.395137][ T8240] ? task_work_cancel+0x220/0x220 [ 331.400298][ T8240] do_exit+0x95a/0x2460 [ 331.404601][ T8240] ? get_signal+0x1068/0x13f0 [ 331.409347][ T8240] ? put_task_struct+0xc0/0xc0 [ 331.414259][ T8240] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 331.420273][ T8240] ? get_signal+0x1068/0x13f0 [ 331.425019][ T8240] ? lock_chain_count+0x20/0x20 [ 331.429897][ T8240] ? _raw_spin_lock_irq+0xbb/0xf0 [ 331.435008][ T8240] do_group_exit+0x21b/0x2d0 [ 331.439635][ T8240] ? lockdep_hardirqs_on+0x98/0x150 [ 331.445165][ T8240] get_signal+0x12fc/0x13f0 [ 331.449732][ T8240] arch_do_signal_or_restart+0xc2/0x800 [ 331.455440][ T8240] ? get_sigframe_size+0x20/0x20 [ 331.461583][ T8240] ? exit_to_user_mode_loop+0x3b/0x110 [ 331.467269][ T8240] exit_to_user_mode_loop+0x70/0x110 [ 331.472591][ T8240] exit_to_user_mode_prepare+0xee/0x180 [ 331.478222][ T8240] syscall_exit_to_user_mode+0x1a/0x50 [ 331.483723][ T8240] do_syscall_64+0x61/0xa0 [ 331.488313][ T8240] ? clear_bhb_loop+0x40/0x90 [ 331.493019][ T8240] ? clear_bhb_loop+0x40/0x90 [ 331.497773][ T8240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.503709][ T8240] RIP: 0033:0x7f32dfd9c799 [ 331.508190][ T8240] Code: Unable to access opcode bytes at 0x7f32dfd9c76f. [ 331.515277][ T8240] RSP: 002b:00007f32e0c1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.524134][ T8240] RAX: 0000000000000001 RBX: 00007f32e0015fa0 RCX: 00007f32dfd9c799 [ 331.532422][ T8240] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 331.540611][ T8240] RBP: 00007f32dfe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 331.548814][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.557033][ T8240] R13: 00007f32e0016038 R14: 00007f32e0015fa0 R15: 00007ffdd98dcdf8 [ 331.566255][ T8240] [ 331.569305][ T8240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 331.576607][ T8240] CPU: 1 PID: 8240 Comm: syz.4.468 Not tainted syzkaller #0 [ 331.584004][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.594176][ T8240] Call Trace: [ 331.597853][ T8240] [ 331.600892][ T8240] dump_stack_lvl+0x18c/0x250 [ 331.605616][ T8240] ? show_regs_print_info+0x20/0x20 [ 331.610941][ T8240] ? load_image+0x400/0x400 [ 331.615494][ T8240] panic+0x2dc/0x730 [ 331.619429][ T8240] ? bpf_jit_dump+0xd0/0xd0 [ 331.623976][ T8240] __warn+0x2e0/0x470 [ 331.627964][ T8240] ? perf_pending_task+0x35c/0x470 [ 331.633089][ T8240] ? perf_pending_task+0x35c/0x470 [ 331.638341][ T8240] report_bug+0x2be/0x4f0 [ 331.643024][ T8240] ? perf_pending_task+0x35c/0x470 [ 331.648149][ T8240] ? perf_pending_task+0x35c/0x470 [ 331.653451][ T8240] ? perf_pending_task+0x35e/0x470 [ 331.658575][ T8240] handle_bug+0xcf/0x120 [ 331.662833][ T8240] exc_invalid_op+0x1a/0x50 [ 331.667350][ T8240] asm_exc_invalid_op+0x1a/0x20 [ 331.672208][ T8240] RIP: 0010:perf_pending_task+0x35c/0x470 [ 331.678374][ T8240] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 331.697987][ T8240] RSP: 0018:ffffc90012b179c0 EFLAGS: 00010293 [ 331.704101][ T8240] RAX: ffffffff81b13c0c RBX: ffff88807c678a80 RCX: ffff888025f13c00 [ 331.712082][ T8240] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 331.720230][ T8240] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 331.728209][ T8240] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888025f13c00 [ 331.736447][ T8240] R13: ffff88805bb28d30 R14: ffff88807c678840 R15: 1ffff1100f8cf108 [ 331.744438][ T8240] ? perf_pending_task+0x35c/0x470 [ 331.749688][ T8240] task_work_run+0x1d4/0x260 [ 331.754295][ T8240] ? task_work_cancel+0x220/0x220 [ 331.759688][ T8240] do_exit+0x95a/0x2460 [ 331.763873][ T8240] ? get_signal+0x1068/0x13f0 [ 331.768570][ T8240] ? put_task_struct+0xc0/0xc0 [ 331.773462][ T8240] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 331.779592][ T8240] ? get_signal+0x1068/0x13f0 [ 331.784291][ T8240] ? lock_chain_count+0x20/0x20 [ 331.789163][ T8240] ? _raw_spin_lock_irq+0xbb/0xf0 [ 331.794343][ T8240] do_group_exit+0x21b/0x2d0 [ 331.799386][ T8240] ? lockdep_hardirqs_on+0x98/0x150 [ 331.804610][ T8240] get_signal+0x12fc/0x13f0 [ 331.809142][ T8240] arch_do_signal_or_restart+0xc2/0x800 [ 331.814708][ T8240] ? get_sigframe_size+0x20/0x20 [ 331.819676][ T8240] ? exit_to_user_mode_loop+0x3b/0x110 [ 331.825148][ T8240] exit_to_user_mode_loop+0x70/0x110 [ 331.830644][ T8240] exit_to_user_mode_prepare+0xee/0x180 [ 331.836228][ T8240] syscall_exit_to_user_mode+0x1a/0x50 [ 331.841827][ T8240] do_syscall_64+0x61/0xa0 [ 331.846282][ T8240] ? clear_bhb_loop+0x40/0x90 [ 331.850987][ T8240] ? clear_bhb_loop+0x40/0x90 [ 331.855688][ T8240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.861598][ T8240] RIP: 0033:0x7f32dfd9c799 [ 331.866205][ T8240] Code: Unable to access opcode bytes at 0x7f32dfd9c76f. [ 331.873226][ T8240] RSP: 002b:00007f32e0c1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.881653][ T8240] RAX: 0000000000000001 RBX: 00007f32e0015fa0 RCX: 00007f32dfd9c799 [ 331.889811][ T8240] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 331.897788][ T8240] RBP: 00007f32dfe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 331.905773][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.913758][ T8240] R13: 00007f32e0016038 R14: 00007f32e0015fa0 R15: 00007ffdd98dcdf8 [ 331.921758][ T8240] [ 331.925196][ T8240] Kernel Offset: disabled [ 331.929521][ T8240] Rebooting in 86400 seconds..