last executing test programs: 6m7.845607746s ago: executing program 0 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x1, 0x0, 0x6, 0xffffffff}, {0xffff, 0x3, 0x5, 0xb6}, {0xfffa, 0xf7, 0x4, 0x9}, {0x9, 0x6, 0x8, 0x118d}, {0x4, 0xb, 0x81, 0x7da}, {0x10, 0x35, 0x2, 0x89aa}, {0xfffd, 0x8, 0x0, 0x7}, {0x4, 0xfa, 0x8, 0x1}, {0x4c74, 0x4, 0x9, 0x401}]}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0x9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x3, [@multicast, @multicast, @random="4e662e8959f8"]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)="ad24f9bc646a7bdd47a693c49e73d221605221314777edb221c78680a8f72d8a835771cba94eca7aa09f97f2c142444b94b021e44917d3e08dc95ba04fb64a8f926a78197bda86c0fb7dc864452f98a3c04c7ebe34d865d4250e5143f1762c26bba345fb0507d50c8aa076e423f2b67479659de0e5779d6f961b27a068746db8cee627bbfe1a781b157d6edd9b690d1c14967888769193ec3b08ea58baa47ae12e9b6559a44452", 0xa7}, {&(0x7f0000000300)="afb1c1cb3107854fab52e6699f8aa27e6c5809198c1cf685d9b127d5464eb095897042240706e883b2aecfae012ea42d35e65c1d311a4553ed2048948dbe12e3df330923a5a34bcd9c8bdab1d138ba6362486be0f7d14a9dc1ec93e90eafe80e760bb6bd3b2695375c4dea7cd0d24b85df2cab291081f01b7c504154f113ed7760b655e259cdcf3bd977a2e7b1db2bc226d1b55f090bf97073b879b54ca63b98e95dc5c2565c093f0a25aff16cf33f0496e2c7fc8711b3462dd938", 0xbb}, {&(0x7f00000003c0)="b9185c5a32f49a5821fedcb3c9b2ed3775c07227e3cc2d9573abb1e992b8449b369668f83892aecc1269a7087e0d40b675e7e467d55359e7070fe9632dfdbc4fe8ed91db6483d71574e740122b6a21799406574ff4c371bd7c5aaca4065cb59c0d00125392359fe5334e28b5dc53593f0358fdaeae7d9da7e0f1ce3c356391627cd00ded60f9265128da187d7a32fe8db68f9ebbc95a5e786298b30fa4ba7bdd3bf7bac3b82fdd3ef86960709a71cf5b8bc17425e2cf2785be4ab0e71b6abc4bd1651ccca5e7bea9a775fb62db92a2584176d1590486be79202de4d08a7659cda773344edd618c763ab66b6aafb230d69ee08ebe73fc6a", 0xf7}], 0x3, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x68, 0x850}, 0x80) r3 = perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x5, 0xd7, 0x6, 0x8, 0x0, 0xea4, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf652, 0x3}, 0x10000, 0xe39e, 0x8, 0x4, 0x2, 0x0, 0xb0c9, 0x0, 0x80, 0x0, 0x502}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000680)='/dev/net/tun\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000780)=r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000007c0)='$\x00') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x72, 0x72, 0x6, [@datasec={0xf, 0x7, 0x0, 0xf, 0x2, [{0x1, 0x7fff, 0x7}, {0x1, 0x6, 0x81dd}, {0x3, 0x0, 0x7}, {0x1, 0x8, 0x836}, {0x4, 0xa70, 0x4}, {0x5, 0x7, 0x101}, {0x1, 0xfff, 0x8000}], "91df"}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000008c0)=""/92, 0x92, 0x5c, 0x1, 0x2d}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x1, '\x00', r5, r6, 0x4, 0x4, 0x2}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000a40), 0x4) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a80)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000ac0)={'b', ' *:* ', 'm\x00'}, 0x8) r10 = socket$kcm(0x29, 0x0, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xe, &(0x7f0000000b00)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query, @alu={0x2, 0x0, 0x2, 0x0, 0x7, 0x44, 0x10}], &(0x7f0000000b80)='GPL\x00', 0x3, 0x7f, &(0x7f0000000bc0)=""/127, 0x41100, 0x8, '\x00', r5, 0x25, r2, 0x8, &(0x7f0000000c40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000d40)=r11, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00', 0x0, 0x1466bf4fc2b55196}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xc, 0x3, 0x6, 0x61, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8d5b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x6, 0x4, 0x1, 0x200, 0x7fffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='syzkaller\x00', 0x9, 0x87, &(0x7f0000000ec0)=""/135, 0x41100, 0x30, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000f80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x2, 0xa, 0x594, 0x8}, 0x10, 0x4588, r11, 0x0, &(0x7f0000001100)=[r12, r7, r7, r7, r13, r7, r7], &(0x7f0000001140), 0x10, 0xe11b}, 0x94) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={r12}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001280)={r4, 0x1000, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x13, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r14}, @jmp={0x5, 0x0, 0x0, 0x4, 0x1, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001380)='GPL\x00', 0x1000, 0x62, &(0x7f00000013c0)=""/98, 0xc3100, 0x1, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000001440)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9d}, 0x94) 6m7.70200767s ago: executing program 0 (id=244): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="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"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@ax25={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f00000004c0)="a09c2b77a40e5d4308fc11ef27c9ebe3239722944057f7102247b77d159055bab34ee6f4f4b823aaf95517b6e753067ec47b9041cb8192b2f5438cc98ba92af00ce5ca4556da214c428be8923b398fe3fcf30a9ee00da540dd1143b6f79105a369d8b373c8e9ccc371537a7eef833cf941a9d2381d71202d9aa1", 0x7a}], 0x2, &(0x7f0000000780)=[{0x10, 0x102, 0x2}], 0x10}, 0x810) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140)="c0e4c2e521125b0b8fc531ed3da32ed48bba599f434a4e462f2899d20827615f7dc0127033a432cf6a593af76fb23c0cb8e084af7f7542e7a4aa6ad80d438338f520c1fc957b04d97f2b3fb8529fd942f99c487a9fa65edf80dfbc", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) openat$cgroup_ro(r2, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 6m6.833838741s ago: executing program 0 (id=258): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x3f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 6m6.513630579s ago: executing program 0 (id=260): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0x6c, &(0x7f0000000c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000cc0), &(0x7f0000000d80), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x3, 0x10, &(0x7f0000002480)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000515f3bfab7a58b1acaa9adac521b3d08f1f1fe7f9105260fa4bfc2bd5e0da3885979ceed7efc0a26949d9a922d89d7ee363fb1fc2dd33d6045c2d2d8168dda574be743457dba67580f7808e18bb570f2488661a61844"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x8, 0xffff, 0x6, 0x2, r2, 0x5, '\x00', r6, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m5.509791764s ago: executing program 0 (id=270): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78830, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000180000000000000071106f000000001343e81e9f420ea9a2"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010218000000000000000c0000000b000000020000000000"], 0x0, 0x26, 0x0, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000040009504020000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x2}, 0x10}, 0x80) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400400038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdc, 0x1, 0x4, 0x0, 0x0, 0x0, 0x22400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x17, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xfe, 0xff, 0x0, 0x40, 0x0, 0x1, 0x41f0c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x129e0bafdf804ad5, @perf_bp={0x0, 0x4}, 0x665, 0xff, 0x0, 0x3, 0xfffffffffffffffd, 0xffffffff, 0x2, 0x0, 0x4, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r7, 0x8953, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x80, 0x0, 0x0, 0x23, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x660, 0x9}, 0x1720a, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) 6m4.977519147s ago: executing program 0 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xbe0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xfe88b9829c4cd4cd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xbe0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xfe88b9829c4cd4cd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 5m48.972717116s ago: executing program 32 (id=274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xbe0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xfe88b9829c4cd4cd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xbe0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xfe88b9829c4cd4cd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 2m37.105250344s ago: executing program 2 (id=2270): socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000004000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xd}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2e00000012008188040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=r1, @ANYRES32=0x1, @ANYBLOB="00000000ffff000085000000090000001811000093c61104e2d879d863c90245def97ddd8e15af346d9f90b525e009c206498e5de365901df1c5376113c4fc39d8e258db8ee5997a953246081898bb2abe835b6dbe217bef7d8f964a52abf05b84b29ad6a75d9be68ce9a11682be54478e098d10f0e73124f5566c29d3170a82c6001e7df45987842d", @ANYRES32=0x1, @ANYBLOB="000000000000000018470000f9ffffff0000000000000000185500000c0000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x9, 0x96, &(0x7f0000000500)=""/150, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xc, 0x4, 0x5}, 0x10, 0x0, r5, 0x4, &(0x7f00000006c0)=[r0, r1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x10, 0x6}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x4, 0xdd1db86b84635116}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x6}, 0x94) 2m36.875995829s ago: executing program 2 (id=2273): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000050000000000000c0300000000612e5f61615f008c57c038063573fd4165445be46df5b96170759361e4863f5a2d99c734acd15bbb066e32fc0ec3049975855ef152fea71e782662f1a1309b031471c5f9bc3dc0b5a91e568b93fad33f88175b0011ff00"/136], 0x0, 0x2c}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r2, &(0x7f0000000b00)={&(0x7f00000001c0)={0x2, 0xce21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000600)="0e3c79", 0x3}], 0x1}, 0x24010cd4) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f0000000000)=r4, 0xc) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="b7e3f5ec5f7131d639c1c67a3a5361fb4fc9e3690b01d94932107046125eb15804c7fcef1e1d56e9b3fe651bb8950de1cd979cd155b6aabc74013bed1f4e750c7acf1c7ada9b38adee8a1dff250123d5402ed71c2280e1b2b1a443d3a0192b8afc39021553e3b68730b3a9892d7df7c7950b25d6838b75eade164c745695bbd5110ac49489fab95fadac690fcc3a0d14a14263b16efb3e71dc9eac135c35a1b4c853617c04f41f30428898f76fcab773adeca13bdd1915cb8c8f8036c09dfe67291ed9877b242e10101ba30a36e039a7267f62671568f6cde03031952ec294fc4b89a714ef6140cbbf941422415e81c73f5add4a", 0xf4}, {&(0x7f0000000240)="3be13f7a437b92e2fabadaadf7629791f6c4bdc3b04195ad8c509ae4eb572156a1c1d5b20203429aeea259163f18a4d7475a50ad172951c103a6ef9997f1065cb3124b8669699d1f575c75dae15262e204bc0aa510a91b8ea279d16b0f3903c3ac1f05b6d1ea2f25", 0x68}, {&(0x7f00000002c0)="f6589370c3bb2ac0050b3aea8dde3b425f9c6205bac2fc028165d44d44ab0c6db8c9a8e86aabca3f92b463e0940b3c5429d20b0808f20f4ba3c65d689b2bc9395bc4c05ba824c56ff0a231ff1e45032f2bfa40d51f8cf4c2a91923f87e025f6680fc9acdff78f545f229953f2b69867e32e637faa65f24cf025893b06c6af3c3", 0x80}], 0x3}, 0x8800) 2m36.714839323s ago: executing program 2 (id=2275): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) close(0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async) recvmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/199, 0xc7}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f0000000280)=""/198, 0xc6}], 0x7}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f00000005c0)=""/240, 0x2f, 0xf0, 0x1}, 0x28) (rerun: 32) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0x57) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2m36.117735808s ago: executing program 2 (id=2280): r0 = socket$kcm(0x23, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x5, 0x0, 0xff, 0x0, 0x5a1c, 0x2020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) (async) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:*(rw\x00'], 0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x1000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r4 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x80000000, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000880)='(\x00u(Sl\xe8\xff\fQ\xf8\x92\xc5K\xcf\x9b8\xb9\xc4\x00:\x8f`\xe6\xdc\xfc6i\"\xa1\x91\xb9\x8a9\xea\xed\xf8-\xd3L\x9b\xcdT\xd3\x00\x00\x00\x00\xac\xf1\x15\xc3\xfaf\xcb\xbc\xf3N\x1d\x8c1\x88\xa2n@\x96K}a\xd6t\x06<\xc8;T\x02\x85\x11\'\xf8\xe3]\xf2\x93\xacw\xaa\xc9s|5\xb4B\x9b|2\xd9\xbbN\xfc\xfc=\xa9q9Z\x99\xdd\x18\xcc8\bE\x97\xf8\x9e\xbb\t\x1dAUrFY\xd9:\xae\x8a\xd1\x01\xc5\xedE\xfd\bS\x95\xfc\x13\xafEI\xba\t\xdb\xb3\xa97\xcf\xc5\xe2\'L\xed\x89:\xf8\xd8\xd4\x97\x86\xc0\xcdNz\xdd\x86\xd4\x83\xaf{x\xba\x91\xc6x\x90\aW\'\x9cS\xcf\x11\x16g4\x7f\x1e\x88g\xa5\x97\xd1\xeab2J\xcb\x80\xdf0\x9bSHN\x86\xde\xec\xa90\"\xb6@\xba\xe9\a\x02\v\xe1\xee\x9cJ\xdd\x01\xc21jG\xe4') socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.040691879s ago: executing program 2 (id=2299): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80044944, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x2c, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 2m33.508131492s ago: executing program 2 (id=2306): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x106) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r3, 0x4, r4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r3, 0x4, r4}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x20, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x7c, 0xaa, &(0x7f0000000180)="eb5076c963d7369e707024868c833e74c2cbc84e0ff9ff6077072a1293dca77d774a875ffde47f4ffd59cdee90d262d9cdf1c5b90a521d54b6c25982ed4e2bc90ad0000e231d484460a57312a6286af36aafb0d77f97a21fa6359a951c0d996ad32b0c72a8a08e0ee37499706ff77f367f388b739f617c699e43b91e", &(0x7f0000000500)=""/170, 0x8, 0x0, 0xb9, 0xe5, &(0x7f0000000600)="bcb193cadbcb162d3c243903acfb9c3a3c464e2c97f22e2bd8a70e15c783a4481c1addd920831147887dcecc1085441bbf610f8b74e556fbcbd94e4ed90b1142ffbbc78fce5ea7a0d18325f2ba1d7486219bbd6480cf144f9e61c942a07d9b09877cf82ff58b1e2d86b49abb8997e0bf8a93bfcdf9f8947d95da367357a4666290e71950a038775f0699469f761733d0144879c2ac7cb2c05efc7006c1e4ab28ba4dc35f3e4d0d747c3a299ff5d148a2de631185d36366d7ba", &(0x7f00000006c0)="c01cd02b44dc34cb32f05821a55c53c57f0ae3168af4323466b793395a3d3f24a96a82c444136e0bb015b60913b72679a8ac4eb20e1e2a9224254fac2292d50e94da5f5c0256c4c22b9a0edff2929703362b3b344beb41bed55378a63824cc94b4286a876c986b8aa0b0f06b43fd261272412d3279acb141a8119ec50a7b36c856f64c50a92e4a5ace2dcfa29b3f4e1e27c7b02739d8b6fd2f7a69d2620f7b710141e3e116dd047520d8e4a4d138db18b1d31b79825a86e639a7067e8dbc63163825f790f85a361bb32e80f830adb5e9e198643b647e2492d6313afc35949d975f934992b7", 0x4, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x7c, 0xaa, &(0x7f0000000180)="eb5076c963d7369e707024868c833e74c2cbc84e0ff9ff6077072a1293dca77d774a875ffde47f4ffd59cdee90d262d9cdf1c5b90a521d54b6c25982ed4e2bc90ad0000e231d484460a57312a6286af36aafb0d77f97a21fa6359a951c0d996ad32b0c72a8a08e0ee37499706ff77f367f388b739f617c699e43b91e", &(0x7f0000000500)=""/170, 0x8, 0x0, 0xb9, 0xe5, &(0x7f0000000600)="bcb193cadbcb162d3c243903acfb9c3a3c464e2c97f22e2bd8a70e15c783a4481c1addd920831147887dcecc1085441bbf610f8b74e556fbcbd94e4ed90b1142ffbbc78fce5ea7a0d18325f2ba1d7486219bbd6480cf144f9e61c942a07d9b09877cf82ff58b1e2d86b49abb8997e0bf8a93bfcdf9f8947d95da367357a4666290e71950a038775f0699469f761733d0144879c2ac7cb2c05efc7006c1e4ab28ba4dc35f3e4d0d747c3a299ff5d148a2de631185d36366d7ba", &(0x7f00000006c0)="c01cd02b44dc34cb32f05821a55c53c57f0ae3168af4323466b793395a3d3f24a96a82c444136e0bb015b60913b72679a8ac4eb20e1e2a9224254fac2292d50e94da5f5c0256c4c22b9a0edff2929703362b3b344beb41bed55378a63824cc94b4286a876c986b8aa0b0f06b43fd261272412d3279acb141a8119ec50a7b36c856f64c50a92e4a5ace2dcfa29b3f4e1e27c7b02739d8b6fd2f7a69d2620f7b710141e3e116dd047520d8e4a4d138db18b1d31b79825a86e639a7067e8dbc63163825f790f85a361bb32e80f830adb5e9e198643b647e2492d6313afc35949d975f934992b7", 0x4, 0x0, 0x2}, 0x50) 2m18.398745115s ago: executing program 33 (id=2306): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x106) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r3, 0x4, r4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r3, 0x4, r4}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x20, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x7c, 0xaa, &(0x7f0000000180)="eb5076c963d7369e707024868c833e74c2cbc84e0ff9ff6077072a1293dca77d774a875ffde47f4ffd59cdee90d262d9cdf1c5b90a521d54b6c25982ed4e2bc90ad0000e231d484460a57312a6286af36aafb0d77f97a21fa6359a951c0d996ad32b0c72a8a08e0ee37499706ff77f367f388b739f617c699e43b91e", &(0x7f0000000500)=""/170, 0x8, 0x0, 0xb9, 0xe5, &(0x7f0000000600)="bcb193cadbcb162d3c243903acfb9c3a3c464e2c97f22e2bd8a70e15c783a4481c1addd920831147887dcecc1085441bbf610f8b74e556fbcbd94e4ed90b1142ffbbc78fce5ea7a0d18325f2ba1d7486219bbd6480cf144f9e61c942a07d9b09877cf82ff58b1e2d86b49abb8997e0bf8a93bfcdf9f8947d95da367357a4666290e71950a038775f0699469f761733d0144879c2ac7cb2c05efc7006c1e4ab28ba4dc35f3e4d0d747c3a299ff5d148a2de631185d36366d7ba", &(0x7f00000006c0)="c01cd02b44dc34cb32f05821a55c53c57f0ae3168af4323466b793395a3d3f24a96a82c444136e0bb015b60913b72679a8ac4eb20e1e2a9224254fac2292d50e94da5f5c0256c4c22b9a0edff2929703362b3b344beb41bed55378a63824cc94b4286a876c986b8aa0b0f06b43fd261272412d3279acb141a8119ec50a7b36c856f64c50a92e4a5ace2dcfa29b3f4e1e27c7b02739d8b6fd2f7a69d2620f7b710141e3e116dd047520d8e4a4d138db18b1d31b79825a86e639a7067e8dbc63163825f790f85a361bb32e80f830adb5e9e198643b647e2492d6313afc35949d975f934992b7", 0x4, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x7c, 0xaa, &(0x7f0000000180)="eb5076c963d7369e707024868c833e74c2cbc84e0ff9ff6077072a1293dca77d774a875ffde47f4ffd59cdee90d262d9cdf1c5b90a521d54b6c25982ed4e2bc90ad0000e231d484460a57312a6286af36aafb0d77f97a21fa6359a951c0d996ad32b0c72a8a08e0ee37499706ff77f367f388b739f617c699e43b91e", &(0x7f0000000500)=""/170, 0x8, 0x0, 0xb9, 0xe5, &(0x7f0000000600)="bcb193cadbcb162d3c243903acfb9c3a3c464e2c97f22e2bd8a70e15c783a4481c1addd920831147887dcecc1085441bbf610f8b74e556fbcbd94e4ed90b1142ffbbc78fce5ea7a0d18325f2ba1d7486219bbd6480cf144f9e61c942a07d9b09877cf82ff58b1e2d86b49abb8997e0bf8a93bfcdf9f8947d95da367357a4666290e71950a038775f0699469f761733d0144879c2ac7cb2c05efc7006c1e4ab28ba4dc35f3e4d0d747c3a299ff5d148a2de631185d36366d7ba", &(0x7f00000006c0)="c01cd02b44dc34cb32f05821a55c53c57f0ae3168af4323466b793395a3d3f24a96a82c444136e0bb015b60913b72679a8ac4eb20e1e2a9224254fac2292d50e94da5f5c0256c4c22b9a0edff2929703362b3b344beb41bed55378a63824cc94b4286a876c986b8aa0b0f06b43fd261272412d3279acb141a8119ec50a7b36c856f64c50a92e4a5ace2dcfa29b3f4e1e27c7b02739d8b6fd2f7a69d2620f7b710141e3e116dd047520d8e4a4d138db18b1d31b79825a86e639a7067e8dbc63163825f790f85a361bb32e80f830adb5e9e198643b647e2492d6313afc35949d975f934992b7", 0x4, 0x0, 0x2}, 0x50) 3.134001563s ago: executing program 6 (id=3692): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)="de66b381a9e121c2", 0x0, 0x4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f0000000600)="2af9a08000f3d18f4e96116af6c1c30285054ad49df90cd67350c995ad6f97833055ff9fa3eb365e30cf68728f7321aaa24b68f707c105ed8a16042648cdbb31e808b67897f5f55d49da6445f18e2dd66e868083550c8b1881a60ceee61344eb228c20228a5140b928160c74ac894407c755a4b9ae5e4cb83ef1942dbc34509a9ae83194b572ccd64f8496a5dbf356d242763f4313dc8a6fe839c326e35b3fdc841a318cf4bf990f49157511aca65401cb3da7c2279f6cca331d7a02e1cd81304d9177fe7df04b5dc8e7fbba937e1f86c6802b8ddd3e8949c978d527eb4aeb", 0x0, 0x0, 0x0, 0x42e7, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000)=r3, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @sched_cls=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000600feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 2.723919433s ago: executing program 4 (id=3697): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 2.504493619s ago: executing program 1 (id=3701): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x2000, 0x0, 0x0, 0x0, 0x46fa, 0x20000, 0xffff, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff11142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x5d34, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x808c, 0x1000000000, 0x310e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000fc0)="d800000010008104687da3aa7143a0b8c81d080911000000000000a118001500060014000040a84e16002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2", 0xd8}], 0x1}, 0x24004814) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x141) socket$kcm(0x10, 0x2, 0x0) 2.372945602s ago: executing program 5 (id=3704): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x4000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000cc0)=@in6={0xa, 0x4e20, 0x0, @empty, 0x944}, 0x80, 0x0}, 0x240000c0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0xfe, 0x1, 0x4, 0x4, 0x0, 0x1, 0x40c8, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x100, 0xffffffffffffffff, 0xffffffff, 0x8, 0xfffffffffffffff8, 0xfffffff8, 0x48, 0x0, 0xb84, 0x0, 0x3}, r2, 0xc, r0, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000400)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xffb8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @generic={0x5, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) socket$kcm(0x11, 0x2, 0x300) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x47}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)="513b5a9c0c0000fb4c4241fc055d4341c3", 0x11}], 0x1}, 0x40080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xd046}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x4000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000cc0)=@in6={0xa, 0x4e20, 0x0, @empty, 0x944}, 0x80, 0x0}, 0x240000c0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040)=0x20000) (async) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0xfe, 0x1, 0x4, 0x4, 0x0, 0x1, 0x40c8, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x100, 0xffffffffffffffff, 0xffffffff, 0x8, 0xfffffffffffffff8, 0xfffffff8, 0x48, 0x0, 0xb84, 0x0, 0x3}, r2, 0xc, r0, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xe, &(0x7f0000000400)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xffb8, 0xfffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @generic={0x5, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async) socket$kcm(0x11, 0x2, 0x300) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x47}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)="513b5a9c0c0000fb4c4241fc055d4341c3", 0x11}], 0x1}, 0x40080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xd046}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.226568295s ago: executing program 6 (id=3705): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feef000100225435450016c1c138812e4300000000000000000000000000008fdaea26874bb642eba1d8903b2dfd905e7c10cefb44c899246f4fceb63535d46d110430535188d401670f0b4b99c7684d78a1911e546d2823aebcc496e2cf47ddd442e22e96b4a7a4083f6a50cdc10689769d9af75335600e9b3d21592ed419dd184ef2d26ff9b5e298ab81cbf45d3578194119a1d0fceea2ec7279cf5ae03d131a5983c480a70a0846b20a6ef9439f798c3ed7bb6d294ecc2f31b058554d1aeb936d29b38c29c845f5ab5790"], 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x38000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000a00)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000300)="75c37370ad24f987a7599dc42307546a16fe28a74423c303512fd4780c3c717a026e664f38ae5a69ed2da063588338d477da1e6efd783665", 0x38}, {&(0x7f00000007c0)="633c4283ef03d3ffbc514e770d1c2e5367c4c042ff201abefcf93d05cc0b47a06ec35b564362f1c4715541887be2cadb2f91514aa1a3c1ca3918a176a02e577fca59c4506e18bdac5747caddbe48f0619e341c065d0639216dc6d961", 0x5c}, {&(0x7f0000000500)="34610793fafa61e363b119faa8f9e00e385e96ae2d2520103f62eb61eed4c1134d137438cf6b9e1ea4cd4f215aaa5e8a87611b4dde3badf53e3ab3e72d25b763c3bad85613940df7d1b1f32df17befe0920a44c8844e504327da135ca065f0804786f9d3fab7ee3adb5bd79f2ca4120dd6b098aed9481c9c0acdaca54cbc7f15a7c116f32cb90d0b669285fce5b95fee213ac96e3065a5cbe3170f5ce204bf3b787fbc23cfed6641ef81c19177bd29d134b5e4db6e1b655390a6532d3ec01cc9", 0xc0}, {&(0x7f00000008c0)="4695a1d0cf080f8c34b446f3a80fa6a20595aa3765391a17971108b825d242038f63b1416bf644de3336ba4b9d5c7044bb07da9a71840cc517630074a2a69350b1095c7559ec46ca437d3ceea4e61a70d439f8d74beb1075c5c029391a44264ba19869deb36fe25978d16dc8a20b21a481e1d4e5939b66f6473860c67c643249b2b73638951e864be897bd91d0e4745baa2024b5dbef8cee502d9732300b02d22fc1fb68904cd063456cc9d2c1af06dc009b2f70287258a21722577880f3465e1330ada9f9e3f67edc03c406052a4455549f9e4dc29a", 0xd6}], 0x4, 0x0, 0x0, 0x4000}, 0x24004004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x5, 0x0, 0xa3, 0x0, 0x7, 0x84000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x7, @perf_bp={0x0, 0x8}, 0x14009, 0x7fff, 0x2, 0x8, 0x1000, 0x3, 0x101, 0x0, 0x8000, 0x0, 0x1}, r3, 0xd, r0, 0x9) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x101608, 0x2, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x101608, 0x2, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000e5ffffff0f10000000000000c30a0000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x22) r4 = socket$kcm(0x11, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg(r4, 0x0, 0x20008011) (async) sendmsg(r4, 0x0, 0x20008011) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 2.053370839s ago: executing program 5 (id=3706): socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000004000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x82004, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x2000000000007}, 0x688, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0xfffc, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r4, &(0x7f0000000340)={&(0x7f0000000940)=@isdn={0x22, 0x6, 0x9, 0x9, 0x8}, 0x80, 0x0}, 0x2004c055) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2e00000012008188040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000", @ANYRES32=0x1, @ANYBLOB="00000000ffff000085000000090000001811000093c61104e2d879d863c90245def97ddd8e15af346d9f90b525e009c206498e5de365901df1c5376113c4fc39d8e258db8ee5997a953246081898bb2abe835b6dbe217bef7d8f964a52abf05b84b29ad6a75d9be68ce9a11682be54478e098d10f0e73124f5566c29d3170a82c6001e7df45987842d", @ANYRES32=0x1, @ANYBLOB="000000000000000018470000f9ffffff0000000000000000185500000c0000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x9, 0x96, &(0x7f0000000500)=""/150, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xc, 0x4, 0x5}, 0x10, 0x0, r5, 0x4, &(0x7f00000006c0)=[r0, r1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x10, 0x6}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x4, 0xdd1db86b84635116}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x6}, 0x94) 1.814897465s ago: executing program 4 (id=3707): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x0, 0xb, 0x0, 0x8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2b3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r0, r1, r0, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000980)=[{0x0, 0x5, 0xe, 0x1}, {0x1, 0x3, 0xd, 0xa}, {0x3, 0x4, 0x2, 0x5}, {0x4, 0x2, 0xd, 0x6}]}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.647274589s ago: executing program 5 (id=3708): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x8}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x4) gettid() perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80, 0x0, 0x0, 0x8, 0x0, 0x35}, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 1.61893467s ago: executing program 4 (id=3709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x400, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000001}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000200), &(0x7f0000000300)='%pK \x00'}, 0x20) (fail_nth: 3) socket$kcm(0x1e, 0x5, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8048019) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) 1.554063052s ago: executing program 1 (id=3710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100fffe02010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 1.553743202s ago: executing program 3 (id=3711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1402000037000b0fd25a806c8c6f94", 0xf}, {&(0x7f0000000a00)="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", 0x200}], 0x2, 0x0, 0x0, 0x20000000}, 0x200000c0) recvmsg(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000580)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000f00)=""/229, 0xe5}, 0x40000000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) 1.450771564s ago: executing program 5 (id=3712): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xe3}, 0x100002, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x90ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.296525358s ago: executing program 3 (id=3713): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, 0x0, 0xc801) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x116, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000016000000080000000900000089000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ccfdfea07c43f7e6c9e4350f8fb0ac797c58e51f98e6bca0d339d1905029ad4437e4a1655195e49a78312c3c88db69d6f22cd8ba00a2f4b774eebd42479a26bd42ad1f3ec55c2e99bcc72f32bb49a86dd4d00c2545ace6d95b6f161a5ea7c92235cce1f422d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0x7, 0x9, 0x41, 0x3, 0x0, 0xdd, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x18000, 0x9, 0x401, 0x1, 0x1000, 0x8, 0x2, 0x0, 0x10001, 0x0, 0xb5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x50102, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xffffffff, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x40, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, r5, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.250023199s ago: executing program 1 (id=3714): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x3f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 1.24947205s ago: executing program 6 (id=3715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x3) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x420043, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x75}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) (async) openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) close(r3) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03a00fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, &(0x7f0000000000)=""/31}, 0x20) (async) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0xffffffffffffffac) 1.209260871s ago: executing program 1 (id=3716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="110000000400000004000000feffffff00000000", @ANYRES32, @ANYBLOB="00008e0cde8c9cdf9e19f9982edfda2ca9fc91844d316317e800000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, 0x0}, 0x480c0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) r11 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000180)={'a', ' *:* ', 'rw\x00'}, 0x9) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x3, 0xf, 0x3, 0x20, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x8001, 0x1c, &(0x7f00000007c0)=""/28, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x3b42, r2, 0x7, &(0x7f0000000a00)=[r8, r10, 0xffffffffffffffff, r0, r12, r13], &(0x7f0000000a40)=[{0x5, 0x5, 0x2, 0x4}, {0x3, 0x4, 0x5, 0x1}, {0x2, 0x1, 0x2, 0x1}, {0x5, 0x2, 0xa, 0xc}, {0x1, 0x5, 0x39b, 0xa}, {0x1, 0x2, 0x5, 0x8}, {0x4, 0x4, 0x2, 0x9}], 0x10, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40002000) close(0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 1.131711053s ago: executing program 3 (id=3717): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="40a2ba11", 0x4}], 0x4}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02", 0x17}], 0x1}, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r6 = socket$kcm(0x2, 0x200000000000003, 0x106) (rerun: 32) setsockopt$sock_attach_bpf(r6, 0x0, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) (async, rerun: 32) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRESDEC=r9, @ANYRES16=r2, @ANYRES8=r8, @ANYRESOCT=0x0, @ANYRES16=r4, @ANYBLOB="2574cd13b203974a8605ca06026725af523f2bd6df6358f41920f5d6ce0f353ffc5247285128a23703a64bf86e80ed7fb56aeba2750c99b5061875c0ad9f6bef564fddee0093aa73511cb45045c32eea747ef58d60bf495b7efe404c66e8812d7c29040de7d030f8d305535f917ecd978dd88d7c64e6ea890c41b5ad67815c44e1327b"], 0xfe33) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r10}) 1.069497304s ago: executing program 5 (id=3718): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 928.329367ms ago: executing program 6 (id=3719): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x50) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x0, 0xb, 0x0, 0x8, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2b3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r0, r1, r0, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0], &(0x7f0000000980)=[{0x0, 0x5, 0xe, 0x1}, {0x1, 0x3, 0xd, 0xa}, {0x3, 0x4, 0x2, 0x5}, {0x4, 0x2, 0xd, 0x6}]}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 880.686089ms ago: executing program 3 (id=3720): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141607089f034d2f87e5860c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 861.086929ms ago: executing program 4 (id=3721): socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000004000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xea, 0x8}, 0x300, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000000000000000400000000000000c3a0f5ffa00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x0) close(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r3, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2e00000012008188040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018180000", @ANYRES32=0x1, @ANYBLOB="00000000ffff000085000000090000001811000093c61104e2d879d863c90245def97ddd8e15af346d9f90b525e009c206498e5de365901df1c5376113c4fc39d8e258db8ee5997a953246081898bb2abe835b6dbe217bef7d8f964a52abf05b84b29ad6a75d9be68ce9a11682be54478e098d10f0e73124f5566c29d3170a82c6001e7df45987842d", @ANYRES32=0x1, @ANYBLOB="000000000000000018470000f9ffffff0000000000000000185500000c0000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x9, 0x96, &(0x7f0000000500)=""/150, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xc, 0x4, 0x5}, 0x10, 0x0, r4, 0x4, &(0x7f00000006c0)=[r0, r1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x1, 0x10, 0x6}, {0x1, 0x3, 0x8, 0x9}, {0x3, 0x3, 0x4, 0xdd1db86b84635116}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x6}, 0x94) 742.193792ms ago: executing program 6 (id=3722): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x8}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x4) gettid() perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80, 0x0, 0x0, 0x8, 0x0, 0x35}, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 461.667089ms ago: executing program 3 (id=3723): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={r0, 0x20, &(0x7f00000010c0)={&(0x7f0000000f00)=""/227, 0xe3, 0x0, &(0x7f0000001000)=""/147, 0x93}}, 0x10) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0xc, 0x0, 0x45) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000080000000000000000008000730000004100000095000029fd000000", @ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x54, 0x0, &(0x7f0000000800)="259a534f6577119472ae12061f3873cbbf2fc33071b3556fca1c594ccf0bce06a5d3db92d74a9effd008a18033a5ae7113e0306e994faa079406000000000000007c42bf453c685293015a69a49c136c6e1c7833", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbacfe1416e000030a83079f03b18000440c2011e0845013f2325f000709050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x29) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000940)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e0000000800000003000000ff7f000086020000", @ANYRES32, @ANYBLOB="af0e93d641a2763607d4bf550e83a97b10000000", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0000000005000000040000000e00"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = socket$kcm(0xa, 0x3, 0x73) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x6}, 0x8) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8672, 0x0, 0x7120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x800) 415.09086ms ago: executing program 1 (id=3724): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x2ac9}, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0xa) recvmsg(0xffffffffffffffff, 0x0, 0x104) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x5e3a3, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x8, 0x2}, 0xea4e, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x161f, 0x80000000}, 0x200, 0x7, 0x40000, 0x9, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a9dc059f317a9dab00000001000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x20441, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000001040)={'sit0\x00', 0x100}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES8, @ANYBLOB="0000fdffffffffffffeffffffffd5f", @ANYRES8=r4], 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0xc, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400400142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="540000002d000b63717a3c4a7ad8985b0808aa782223fbe40f80e0932eab389d2db26277c4abda16ad715fb33005cbd9ec3dd4f1cd7d38005797c978516b8909cc0bc70f6a034cbb95c40c4c46699d726a6172e6", 0x54}], 0x1}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(0x0, r7, 0x0, r1, 0x1) socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 308.632763ms ago: executing program 4 (id=3725): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000), 0x2, 0x0) close(r1) close(r0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) 277.718143ms ago: executing program 6 (id=3726): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="5c00000014006b03000000d86e6c1d0002842afcffff564500004e23e3f58e76110165f4080000000000000000028d459e37000febffffffffbe9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}, {&(0x7f0000000380)="209494622027ebbf1571d542844575f89d428281c402d5172d7e6a2ac7f94f1b2a47288a55aa096f2e60f06e8d82a3536196c1746c04edc1b7dfad99448c70f0d675d77aacdaa24d0907361f31a4f129c481e6b926b76e79cc1d5c310092fbc65b74cd58a23cac98d529c1a0581b419c87a23ba24a5c6c6672464f6cae160b2d5468d5ede2b15401e309e61184f34bd03f0f0c17333513941fb94e1ddb0f07c04a6b3543793bc589", 0xa8}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4048048) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 128.759317ms ago: executing program 5 (id=3727): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, 0x0, 0xc801) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xf, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x116, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000016000000080000000900000089000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ccfdfea07c43f7e6c9e4350f8fb0ac797c58e51f98e6bca0d339d1905029ad4437e4a1655195e49a78312c3c88db69d6f22cd8ba00a2f4b774eebd42479a26bd42ad1f3ec55c2e99bcc72f32bb49a86dd4d00c2545ace6d95b6f161a5ea7c92235cce1f422d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0x7, 0x9, 0x41, 0x3, 0x0, 0xdd, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x18000, 0x9, 0x401, 0x1, 0x1000, 0x8, 0x2, 0x0, 0x10001, 0x0, 0xb5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x50102, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xffffffff, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x40, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, r5, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 30.544299ms ago: executing program 4 (id=3728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2480", 0x2}], 0x1}, 0x20004081) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) 29.514899ms ago: executing program 1 (id=3729): r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x1e, 0x5, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a00, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0x2000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x2a2e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x2, 0x0, 0x8, 0x8, 0x7fff, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x4, 0xd6038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x7, 0x8, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair(0x1a, 0x2, 0xffffffff, &(0x7f0000000340)={0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x11, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}]}, 0x24000040) (async) recvmsg(0xffffffffffffffff, 0x0, 0x20a0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x10040) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24088054) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r5, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) 0s ago: executing program 3 (id=3730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x400, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000001}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000200)=0x20, &(0x7f0000000300)='%pK \x00'}, 0x20) socket$kcm(0x1e, 0x5, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8048019) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): ][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.807608][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.842145][T12338] device veth0_vlan entered promiscuous mode [ 364.866844][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.882579][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.924179][T12338] device veth1_vlan entered promiscuous mode [ 364.973233][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.984677][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 365.002079][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.030248][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.058528][T12338] device veth0_macvtap entered promiscuous mode [ 365.097167][T12338] device veth1_macvtap entered promiscuous mode [ 365.136709][T12338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.195450][T12338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.228961][T12338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.268931][T12338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.317730][T12338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.338631][T12338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.377100][T12338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.406233][T12338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.427379][T12338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.448304][T12338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.469228][T12338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.489077][T12338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.518925][T12338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.539139][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 365.546572][T12338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.560116][T12640] netlink: 'syz.4.2214': attribute type 41 has an invalid length. [ 365.574745][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.589782][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 365.608194][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 365.628475][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.652281][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.682491][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.706184][T12645] netlink: 'syz.3.2216': attribute type 21 has an invalid length. [ 365.719778][T12646] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2216'. [ 365.745993][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 365.776670][T12646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.813542][T12338] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.835899][T12338] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.860271][T12338] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.886114][T12338] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.888491][T12656] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2220'. [ 366.048566][ T7371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.078496][ T7371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.129415][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 366.151882][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.187836][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.238421][T12666] device syzkaller0 entered promiscuous mode [ 366.289106][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 366.308120][T12671] netlink: 'syz.3.2224': attribute type 21 has an invalid length. [ 366.331950][T12666] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2224'. [ 366.359200][T12671] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2224'. [ 366.389191][T12673] netlink: 'syz.4.2227': attribute type 41 has an invalid length. [ 366.863693][T12700] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2232'. [ 366.878334][T12700] openvswitch: netlink: Message has 20476 unknown bytes. [ 367.010377][T12710] netlink: 'syz.5.2233': attribute type 2 has an invalid length. [ 367.031871][T12710] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2233'. [ 367.186600][T12722] netlink: 'syz.2.2240': attribute type 41 has an invalid length. [ 368.054271][T12737] netlink: 'syz.2.2244': attribute type 21 has an invalid length. [ 368.064753][T12737] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2244'. [ 368.088172][T12741] netlink: 'syz.4.2246': attribute type 2 has an invalid length. [ 368.106036][T12743] netlink: 'syz.4.2246': attribute type 2 has an invalid length. [ 368.138985][T12739] netlink: 'syz.5.2245': attribute type 21 has an invalid length. [ 368.166841][T12739] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2245'. [ 369.694189][T12825] __nla_validate_parse: 6 callbacks suppressed [ 369.694208][T12825] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2265'. [ 369.960408][T12844] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2273'. [ 369.986326][T12821] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2267'. [ 370.006573][T12843] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2272'. [ 370.052941][T12843] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2272'. [ 370.115193][T12848] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2275'. [ 371.146657][T12859] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2277'. [ 371.253049][T12875] device syzkaller0 entered promiscuous mode [ 371.338852][T12888] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2282'. [ 371.349065][T12882] validate_nla: 12 callbacks suppressed [ 371.349080][T12882] netlink: 'syz.5.2281': attribute type 21 has an invalid length. [ 371.373717][T12882] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2281'. [ 371.413872][T12889] netlink: 'syz.3.2283': attribute type 41 has an invalid length. [ 371.748055][T12884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2282'. [ 371.804332][T12899] device team0 left promiscuous mode [ 371.809858][T12899] device team_slave_0 left promiscuous mode [ 371.844043][T12899] device team_slave_1 left promiscuous mode [ 371.865099][T12899] device geneve1 left promiscuous mode [ 371.871106][T12899] bridge0: port 3(team0) entered disabled state [ 371.889858][T12899] device bridge_slave_0 left promiscuous mode [ 371.896187][T12899] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.971380][T12902] netlink: 'syz.4.2286': attribute type 2 has an invalid length. [ 372.008625][T12903] netlink: 'syz.4.2286': attribute type 2 has an invalid length. [ 372.221518][T12917] netlink: 'syz.5.2290': attribute type 1 has an invalid length. [ 372.258252][T12917] netlink: 'syz.5.2290': attribute type 4 has an invalid length. [ 372.312575][T12930] netlink: 'syz.1.2291': attribute type 10 has an invalid length. [ 372.375119][T12917] netlink: 'syz.5.2290': attribute type 16 has an invalid length. [ 372.389994][T12933] device hsr_slave_0 left promiscuous mode [ 372.397168][T12933] device hsr_slave_1 left promiscuous mode [ 372.616394][T12943] netlink: 'syz.3.2295': attribute type 41 has an invalid length. [ 373.072718][T12960] device syzkaller0 entered promiscuous mode [ 373.316996][T12970] netlink: 'syz.3.2303': attribute type 275 has an invalid length. [ 374.718813][T13020] device syzkaller0 entered promiscuous mode [ 375.366149][T13042] __nla_validate_parse: 5 callbacks suppressed [ 375.366165][T13042] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2325'. [ 375.435753][T13041] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2325'. [ 375.569311][T13041] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2325'. [ 375.592630][T13044] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2325'. [ 375.631345][T13045] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2325'. [ 375.692605][T13047] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2325'. [ 375.930258][T13061] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 377.021314][T13101] validate_nla: 7 callbacks suppressed [ 377.021333][T13101] netlink: 'syz.5.2338': attribute type 41 has an invalid length. [ 377.487711][T13105] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.2339'. [ 378.422465][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.428941][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.298612][T13128] netlink: 'syz.3.2346': attribute type 10 has an invalid length. [ 379.351747][T13128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2346'. [ 379.410462][T13128] device dummy0 entered promiscuous mode [ 379.487672][T13128] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 380.070076][T13139] netlink: 'syz.5.2349': attribute type 41 has an invalid length. [ 380.203748][T13141] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 383.049383][T13141] device veth0_vlan left promiscuous mode [ 383.088294][T13141] device veth0_vlan entered promiscuous mode [ 383.111227][T13141] team0: Device veth0_vlan failed to register rx_handler [ 383.273461][T13143] netlink: 'syz.3.2350': attribute type 10 has an invalid length. [ 383.311357][T13143] device veth0_vlan left promiscuous mode [ 383.360690][T13143] device veth0_vlan entered promiscuous mode [ 383.421774][T13143] team0: Device veth0_vlan failed to register rx_handler [ 383.799269][T13154] netlink: 'syz.5.2354': attribute type 28 has an invalid length. [ 383.857045][T13154] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2354'. [ 384.895300][T13172] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.2361'. [ 388.213082][T13191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2366'. [ 389.188966][T13203] netlink: 'syz.5.2370': attribute type 41 has an invalid length. [ 389.620393][T13211] netlink: 'syz.3.2372': attribute type 3 has an invalid length. [ 389.709179][T13211] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2372'. [ 389.966713][T13194] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2367'. [ 390.181867][T13194] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 391.066108][T13234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 391.229498][T13234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.623492][T13239] netlink: 'syz.1.2378': attribute type 41 has an invalid length. [ 391.699700][T11399] Bluetooth: hci5: command 0x0409 tx timeout [ 392.857754][T13209] chnl_net:caif_netlink_parms(): no params data found [ 393.517354][T13209] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.559012][T13209] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.607445][T13209] device bridge_slave_0 entered promiscuous mode [ 393.651922][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.690360][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.731324][T13209] device bridge_slave_1 entered promiscuous mode [ 393.780460][ T6243] Bluetooth: hci5: command 0x041b tx timeout [ 393.870119][T13209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.915849][T13209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.051303][T13209] team0: Port device team_slave_0 added [ 394.083113][T13209] team0: Port device team_slave_1 added [ 394.266970][T13209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.308020][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.398810][T13209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.457404][T13209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.466003][T13209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.580275][T13209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.697301][T13279] netlink: 'syz.3.2385': attribute type 4 has an invalid length. [ 394.752450][T13279] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2385'. [ 394.864381][T13291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.928099][T13209] device hsr_slave_0 entered promiscuous mode [ 394.974228][T13209] device hsr_slave_1 entered promiscuous mode [ 394.986579][T13209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.009699][T13209] Cannot create hsr debugfs directory [ 395.041239][T13278] netlink: 'syz.4.2382': attribute type 41 has an invalid length. [ 395.114454][T13296] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 395.317597][T13314] netlink: 'syz.1.2391': attribute type 2 has an invalid length. [ 395.366898][T13314] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2391'. [ 395.414735][T13314] bridge0: port 2(dummy0) entered disabled state [ 395.447349][T13314] bridge0: port 2(dummy0) entered disabled state [ 395.870645][ T4252] Bluetooth: hci5: command 0x040f tx timeout [ 396.208365][T13323] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 396.494227][T13323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.938990][ T4252] Bluetooth: hci5: command 0x0419 tx timeout [ 398.779760][T13209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 398.794398][T13209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 398.828395][T13209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.921264][T13209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 399.116262][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.138229][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 399.152808][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.176346][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.203834][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 399.213810][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.222803][ T3056] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.229971][ T3056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.251582][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.262733][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.272243][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.282918][ T3056] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.290079][ T3056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.302425][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.312873][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.335047][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.345568][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.354824][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.374905][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.393455][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 399.408062][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.424577][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.435427][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.453930][T13209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.462902][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.617054][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 399.625907][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.641569][T13209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.717789][T13378] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.2412'. [ 400.065194][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 400.086063][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.170441][T13403] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 400.214014][T13406] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 400.239874][T13406] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2411'. [ 400.253861][T13403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.323151][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 400.347449][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.373836][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.406488][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.430896][T13209] device veth0_vlan entered promiscuous mode [ 400.486147][T13209] device veth1_vlan entered promiscuous mode [ 400.623289][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 400.650193][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.690117][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.720338][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.783636][T13209] device veth0_macvtap entered promiscuous mode [ 400.819765][T13209] device veth1_macvtap entered promiscuous mode [ 400.912409][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.950455][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.977056][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.998026][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.031597][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.068421][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.099538][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.122964][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.184010][T13209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.227448][T13425] netlink: 'syz.1.2419': attribute type 27 has an invalid length. [ 401.253855][T13425] netlink: 'syz.1.2419': attribute type 4 has an invalid length. [ 401.283679][T13425] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2419'. [ 401.286949][T13431] netlink: 209860 bytes leftover after parsing attributes in process `syz.5.2420'. [ 401.326165][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.343318][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.381480][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.426764][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.476211][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.478295][T13431] openvswitch: netlink: Message has 4 unknown bytes. [ 401.524544][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.563412][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.593645][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.614001][T13209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.641545][T13209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.669850][T13209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.694309][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 401.713807][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.747704][T13209] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.768135][T13209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.803761][T13209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.831483][T13209] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.885538][T13449] delete_channel: no stack [ 401.903372][T13449] delete_channel: no stack [ 402.620519][ T3056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.644615][ T3056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.676001][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.706374][ T7377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.730781][ T7377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.747565][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.869661][T13474] netlink: 'syz.3.2435': attribute type 33 has an invalid length. [ 402.913620][T13474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2435'. [ 403.261375][T13505] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2440'. [ 403.359430][T13505] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2440'. [ 404.466917][T13527] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 404.496434][T13527] device syzkaller0 entered promiscuous mode [ 404.589060][T13548] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2450'. [ 404.732464][T13550] netlink: 'syz.3.2451': attribute type 41 has an invalid length. [ 405.202845][T13569] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.2458'. [ 405.313805][T13572] netlink: 'syz.3.2458': attribute type 2 has an invalid length. [ 405.337132][T13572] netlink: 'syz.3.2458': attribute type 4 has an invalid length. [ 405.376297][T13572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2458'. [ 405.795282][T13583] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2461'. [ 406.142948][T13591] netlink: 'syz.1.2463': attribute type 21 has an invalid length. [ 406.171261][T13591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2463'. [ 408.234997][T13615] netlink: 'syz.1.2471': attribute type 13 has an invalid length. [ 408.279319][T13615] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2471'. [ 408.337587][T13615] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 409.616276][T13662] netlink: 'syz.5.2485': attribute type 21 has an invalid length. [ 409.629207][T13662] netlink: 'syz.5.2485': attribute type 1 has an invalid length. [ 409.660693][T13662] netlink: 'syz.5.2485': attribute type 2 has an invalid length. [ 409.688216][T13662] netlink: 9062 bytes leftover after parsing attributes in process `syz.5.2485'. [ 409.904304][T13671] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2488'. [ 410.067227][T13678] netlink: 'syz.1.2491': attribute type 21 has an invalid length. [ 411.135367][T13693] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 411.153738][T13693] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2498'. [ 411.208476][T13697] netlink: 'syz.6.2499': attribute type 21 has an invalid length. [ 411.339436][T13705] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2501'. [ 411.477671][T13717] netlink: 'syz.6.2504': attribute type 5 has an invalid length. [ 411.570089][T13717] netlink: 'syz.6.2504': attribute type 5 has an invalid length. [ 411.830961][T13739] netlink: 'syz.1.2508': attribute type 3 has an invalid length. [ 411.840180][T13739] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2508'. [ 411.863117][ T3056] device hsr_slave_0 left promiscuous mode [ 411.884004][ T3056] device hsr_slave_1 left promiscuous mode [ 411.908501][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.918210][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.927900][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.936267][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.952965][ T3056] device bridge_slave_1 left promiscuous mode [ 411.961104][ T3056] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.979426][ T3056] device bridge_slave_0 left promiscuous mode [ 411.986954][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.027662][ T3056] device veth1_macvtap left promiscuous mode [ 412.040717][ T3056] device veth0_macvtap left promiscuous mode [ 412.046934][ T3056] device veth1_vlan left promiscuous mode [ 412.302332][ T3056] team0 (unregistering): Port device geneve1 removed [ 412.595980][ T3056] team0 (unregistering): Port device team_slave_1 removed [ 412.615220][ T3056] team0 (unregistering): Port device team_slave_0 removed [ 412.643480][ T3056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.682475][ T3056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.784621][ T3056] bond0 (unregistering): Released all slaves [ 412.935504][T13773] netlink: 'syz.5.2517': attribute type 2 has an invalid length. [ 412.945467][T13773] netlink: 'syz.5.2517': attribute type 1 has an invalid length. [ 412.959640][T13773] netlink: 'syz.5.2517': attribute type 8 has an invalid length. [ 412.974952][T13773] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2517'. [ 412.990228][T13773] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2517'. [ 413.019915][T13776] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2517'. [ 413.037581][T13784] netlink: 'syz.5.2517': attribute type 2 has an invalid length. [ 413.062544][T13784] netlink: 'syz.5.2517': attribute type 1 has an invalid length. [ 413.088454][T13784] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2517'. [ 413.616492][T13809] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2528'. [ 413.832217][T13819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 413.929745][T13827] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2533'. [ 414.126877][T13845] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2540'. [ 416.530571][T13942] validate_nla: 2 callbacks suppressed [ 416.530588][T13942] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 416.568022][T13942] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2561'. [ 416.734394][T13945] netlink: 'syz.5.2562': attribute type 21 has an invalid length. [ 417.477737][T13965] netlink: 'syz.1.2567': attribute type 21 has an invalid length. [ 417.517658][T13965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2567'. [ 417.553279][T13965] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 417.713511][T13973] netlink: 'syz.1.2570': attribute type 21 has an invalid length. [ 418.083163][T13992] netlink: 'syz.5.2581': attribute type 21 has an invalid length. [ 418.160410][T13997] netlink: 'syz.6.2580': attribute type 10 has an invalid length. [ 418.227118][T13997] device veth0_vlan left promiscuous mode [ 418.325486][T13997] device veth0_vlan entered promiscuous mode [ 418.389556][T13997] team0: Device veth0_vlan failed to register rx_handler [ 418.548555][T13993] netlink: 'syz.5.2581': attribute type 10 has an invalid length. [ 418.594825][T13993] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2581'. [ 418.617933][T13993] device hsr0 entered promiscuous mode [ 418.634920][T13993] bridge0: port 3(hsr0) entered blocking state [ 418.656645][T14012] netlink: 'syz.6.2580': attribute type 3 has an invalid length. [ 418.660703][T13993] bridge0: port 3(hsr0) entered disabled state [ 418.702716][T13993] bridge0: port 3(hsr0) entered blocking state [ 418.708934][T14012] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2580'. [ 418.709083][T13993] bridge0: port 3(hsr0) entered forwarding state [ 418.810189][T14013] device vlan1 entered promiscuous mode [ 419.037484][T14024] netlink: 'syz.3.2587': attribute type 21 has an invalid length. [ 419.243953][T14043] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2593'. [ 419.356128][T14051] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.2593'. [ 419.561760][T14062] device sit0 entered promiscuous mode [ 419.756110][T14064] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2604'. [ 420.342159][T14093] IPv6: pim6reg1: Disabled Multicast RS [ 420.475149][T14098] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2602'. [ 420.855764][T14109] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2605'. [ 420.865995][T14109] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.2605'. [ 420.876038][T14109] tc_dump_action: action bad kind [ 421.959777][T14154] validate_nla: 6 callbacks suppressed [ 421.959813][T14154] netlink: 'syz.6.2620': attribute type 3 has an invalid length. [ 421.961502][T14152] netlink: 'syz.1.2621': attribute type 41 has an invalid length. [ 421.965428][T14154] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2620'. [ 422.257804][T14176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.270877][T14176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.314544][T14176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.387494][T14176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.656886][T14197] netlink: 'syz.5.2638': attribute type 41 has an invalid length. [ 422.951914][T14221] netlink: 'syz.1.2647': attribute type 39 has an invalid length. [ 422.994731][T14220] netlink: 'syz.1.2647': attribute type 3 has an invalid length. [ 423.024402][T14220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2647'. [ 423.510038][T14243] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2652'. [ 423.617043][T14246] netlink: 'syz.1.2655': attribute type 41 has an invalid length. [ 423.722390][T14254] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.2660'. [ 424.059654][T14263] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2663'. [ 424.110575][T14250] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2656'. [ 424.194538][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2656'. [ 424.256504][T14267] device syzkaller0 entered promiscuous mode [ 424.628807][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 424.641833][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 424.705713][T14283] netlink: 'syz.3.2669': attribute type 46 has an invalid length. [ 424.750202][T14283] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2669'. [ 424.861364][T14293] netlink: 'syz.1.2671': attribute type 41 has an invalid length. [ 425.663137][T14317] chnl_net:caif_netlink_parms(): no params data found [ 425.733889][T14329] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 425.818614][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.847204][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.889806][T14317] device bridge_slave_0 entered promiscuous mode [ 425.929837][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.962710][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.998789][T14317] device bridge_slave_1 entered promiscuous mode [ 426.097427][T14337] netlink: 'syz.4.2684': attribute type 41 has an invalid length. [ 426.123591][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.146776][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.234249][T14317] team0: Port device team_slave_0 added [ 426.261763][T14317] team0: Port device team_slave_1 added [ 426.330179][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.356431][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.389379][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.409340][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.416884][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.443993][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.500354][ T3056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.538151][T14317] device hsr_slave_0 entered promiscuous mode [ 426.546066][T14317] device hsr_slave_1 entered promiscuous mode [ 426.553888][T14317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.579167][T11899] Bluetooth: hci3: command 0x0406 tx timeout [ 426.586913][T14317] Cannot create hsr debugfs directory [ 426.608689][ T3056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.679313][ T3056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.765872][ T3056] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.097944][T14373] netlink: 'syz.3.2695': attribute type 29 has an invalid length. [ 427.146865][T14373] netlink: 'syz.3.2695': attribute type 29 has an invalid length. [ 427.168691][T14373] netlink: 'syz.3.2695': attribute type 29 has an invalid length. [ 427.194185][T14373] netlink: 'syz.3.2695': attribute type 29 has an invalid length. [ 427.360001][T14384] netlink: 'syz.4.2697': attribute type 29 has an invalid length. [ 427.379928][T14385] netlink: 'syz.4.2697': attribute type 29 has an invalid length. [ 427.409393][T14380] netlink: 'syz.3.2696': attribute type 41 has an invalid length. [ 427.425574][T14384] netlink: 'syz.4.2697': attribute type 29 has an invalid length. [ 427.437957][T14391] netlink: 'syz.4.2697': attribute type 29 has an invalid length. [ 427.461136][ T4251] Bluetooth: hci0: command 0x0409 tx timeout [ 428.047907][T14427] __nla_validate_parse: 2 callbacks suppressed [ 428.047925][T14427] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2709'. [ 428.071925][T14428] netlink: 'syz.3.2708': attribute type 2 has an invalid length. [ 428.103918][T14421] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2708'. [ 428.614037][T14317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.624678][T14317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.666326][T14317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.688621][T14317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.830365][ T3056] device bridge_slave_0 left promiscuous mode [ 428.836601][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.857384][ T3056] device veth0_macvtap left promiscuous mode [ 428.865207][ T3056] device veth1_vlan left promiscuous mode [ 428.888622][T14463] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2720'. [ 429.034253][ T3056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.049902][ T3056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.068772][ T3056] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 429.102031][ T3056] bond0 (unregistering): Released all slaves [ 429.234192][T14317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.262540][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.280376][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.312294][T14317] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.353387][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.372568][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.399363][ T7372] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.406570][ T7372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.418494][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.458084][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.473894][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.502501][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.509648][ T7371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.522003][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.540374][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.544810][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 429.609311][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.635654][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 429.666418][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 429.719844][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 429.737418][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.769735][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.803064][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.629096][ T4251] Bluetooth: hci0: command 0x040f tx timeout [ 431.768020][T14517] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2735'. [ 432.647798][T14503] validate_nla: 6 callbacks suppressed [ 432.647813][T14503] netlink: 'syz.4.2733': attribute type 10 has an invalid length. [ 432.665723][T14503] device veth1_macvtap left promiscuous mode [ 432.697024][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.719813][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.733855][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.753559][T14509] netlink: 'syz.4.2733': attribute type 10 has an invalid length. [ 433.091608][T14538] netlink: 'syz.5.2739': attribute type 39 has an invalid length. [ 433.153775][T14535] netlink: 'syz.5.2739': attribute type 3 has an invalid length. [ 433.169045][T14535] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2739'. [ 433.276423][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.294416][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.326126][T14317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.410668][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.423533][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.506282][T14560] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2745'. [ 433.551961][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.574661][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.612605][T14317] device veth0_vlan entered promiscuous mode [ 433.624910][T14559] netlink: 'syz.4.2746': attribute type 41 has an invalid length. [ 433.642338][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.659844][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.684196][T14317] device veth1_vlan entered promiscuous mode [ 433.708159][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 433.709806][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 433.810886][T14317] device veth0_macvtap entered promiscuous mode [ 433.832669][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.848043][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.893027][T14317] device veth1_macvtap entered promiscuous mode [ 433.909301][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.936075][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.009533][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.031355][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.048064][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.064625][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.075070][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.093978][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.127374][T14317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.127523][T14584] netlink: 'syz.6.2756': attribute type 1 has an invalid length. [ 434.142760][T14584] netlink: 154788 bytes leftover after parsing attributes in process `syz.6.2756'. [ 434.167884][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.185742][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.217379][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.248127][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.265949][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.276742][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.292974][T14317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.305798][T14317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.315665][T14603] netlink: 'syz.4.2759': attribute type 10 has an invalid length. [ 434.331175][T14317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.359994][T14603] netlink: 'syz.4.2759': attribute type 10 has an invalid length. [ 434.376486][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.390626][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.445195][T14604] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2759'. [ 434.468916][T14604] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2759'. [ 434.503510][T14602] device sit0 entered promiscuous mode [ 434.586666][T14317] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.596460][T14317] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.606172][T14317] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.614946][T14317] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.632850][T14606] netlink: 'syz.6.2760': attribute type 41 has an invalid length. [ 434.786100][T14620] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2761'. [ 434.813188][ T7375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.831873][ T7375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.860056][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.905738][ T7371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.927829][ T7371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.954239][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.001755][T14627] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2766'. [ 435.153780][T14627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.283375][T14627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.346908][T14627] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 435.398735][T14627] bond0 (unregistering): Released all slaves [ 435.466078][T14630] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2766'. [ 435.594467][T14630] team0: Port device team_slave_0 removed [ 435.749346][T14651] device syzkaller0 entered promiscuous mode [ 435.899041][T14659] netlink: 'syz.6.2774': attribute type 41 has an invalid length. [ 436.062647][T14662] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2775'. [ 436.989192][T14689] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2784'. [ 437.318713][T14685] chnl_net:caif_netlink_parms(): no params data found [ 437.533470][T14685] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.567742][T14685] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.617128][T14685] device bridge_slave_0 entered promiscuous mode [ 437.655072][T14725] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.686508][T14685] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.701620][T14685] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.711805][T14733] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 437.728311][T14685] device bridge_slave_1 entered promiscuous mode [ 437.782445][T14685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.817489][T14685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.893909][T14685] team0: Port device team_slave_0 added [ 437.923408][T14685] team0: Port device team_slave_1 added [ 437.965321][T14738] validate_nla: 1 callbacks suppressed [ 437.965348][T14738] netlink: 'syz.1.2797': attribute type 41 has an invalid length. [ 438.006280][T14685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.022514][T14685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.056312][T14685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.085097][T14685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.092394][T14685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.145004][T14685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.245005][T14685] device hsr_slave_0 entered promiscuous mode [ 438.266673][T14685] device hsr_slave_1 entered promiscuous mode [ 438.274466][T14685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.298405][T14685] Cannot create hsr debugfs directory [ 438.509189][ T4252] Bluetooth: hci1: command 0x0409 tx timeout [ 438.656671][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.664110][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.696897][T14776] __nla_validate_parse: 3 callbacks suppressed [ 438.696916][T14776] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2809'. [ 438.713284][T14779] netlink: 'syz.4.2812': attribute type 41 has an invalid length. [ 438.781305][T14685] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.801597][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.812874][T14777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.828968][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.835829][T14791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 438.848929][T14777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.926875][T14777] device bridge0 entered promiscuous mode [ 439.031713][T14685] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.148247][T14685] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.295625][T14685] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.586941][T14685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 439.616220][T14685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 439.669198][T14812] netlink: 'syz.4.2823': attribute type 41 has an invalid length. [ 439.692743][T14685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.725400][T14685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.814548][T14816] netlink: 'syz.1.2825': attribute type 41 has an invalid length. [ 439.860716][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.867173][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.902714][T14824] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.2826'. [ 439.964392][T14685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.039802][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.057280][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.101652][T14685] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.138302][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.164560][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.194530][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.201676][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.246443][T14840] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2833'. [ 440.331862][T14840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.375643][T14840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.452768][T14840] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 440.476732][T14840] bond0 (unregistering): Released all slaves [ 440.515525][T14844] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2835'. [ 440.533730][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.555815][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.566558][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.583273][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.590533][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.595619][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 440.606251][T14845] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2833'. [ 440.680529][T14845] team0: Port device team_slave_0 removed [ 440.719046][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.727971][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.764451][T14849] netlink: 'syz.5.2836': attribute type 41 has an invalid length. [ 440.819132][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.845755][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.865924][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.885100][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.898361][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.924336][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.944487][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.965704][T14851] netlink: 'syz.6.2837': attribute type 41 has an invalid length. [ 441.025072][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.050048][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.101451][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.130004][T14857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2838'. [ 441.216505][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 442.058331][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.078238][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.125099][T14685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.197623][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.237643][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.278827][T14901] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2847'. [ 442.312943][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.332708][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.399572][T14685] device veth0_vlan entered promiscuous mode [ 442.452061][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.479748][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.515957][T14685] device veth1_vlan entered promiscuous mode [ 442.550221][T14904] netlink: 'syz.1.2849': attribute type 41 has an invalid length. [ 442.573002][T14907] netlink: 'syz.4.2850': attribute type 8 has an invalid length. [ 442.581338][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.617307][T14909] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.625373][T14909] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.635044][T14907] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2850'. [ 442.668814][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.683034][ T6243] Bluetooth: hci1: command 0x040f tx timeout [ 442.689654][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.714935][T14685] device veth0_macvtap entered promiscuous mode [ 442.732776][T14685] device veth1_macvtap entered promiscuous mode [ 442.791454][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.831634][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.866383][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.893104][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.923508][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.952347][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.987877][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.017073][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.040007][T14685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.064084][T14912] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.072016][T14912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.081206][T14912] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.089163][T14912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.140675][T14912] device bridge0 entered promiscuous mode [ 443.175249][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.189714][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.198552][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.208709][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.222309][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.235226][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.246008][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.257269][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.267576][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.279377][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.289893][T14685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.301651][T14685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.314297][T14685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.337899][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.354187][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.429439][T14685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.440253][T14685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.472319][T14685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.489457][T14685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.690532][ T7371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.736193][ T7371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.815332][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 443.837691][ T7369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.856358][T14927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2856'. [ 443.858243][ T7369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.896169][T14927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'. [ 443.929956][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 444.219300][T14945] netlink: 'syz.1.2862': attribute type 41 has an invalid length. [ 444.231941][T14947] netlink: 'syz.3.2776': attribute type 10 has an invalid length. [ 444.295744][T14947] team0: Device wg1 is of different type [ 444.439450][T14946] delete_channel: no stack [ 444.477153][T14960] netlink: 'syz.1.2867': attribute type 21 has an invalid length. [ 444.485242][T14960] netlink: 9758 bytes leftover after parsing attributes in process `syz.1.2867'. [ 444.519013][T14962] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2868'. [ 444.704216][T14980] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2873'. [ 444.762356][T14980] netlink: 'syz.3.2873': attribute type 2 has an invalid length. [ 444.819915][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 444.893933][T14987] netlink: 'syz.4.2877': attribute type 41 has an invalid length. [ 444.930180][T14992] netlink: 'syz.3.2879': attribute type 21 has an invalid length. [ 444.972254][T14992] nr0: tun_chr_ioctl cmd 1074025677 [ 444.977667][T14992] nr0: linktype set to 780 [ 444.988439][T14992] nr0: tun_chr_ioctl cmd 2147767511 [ 445.031059][T14998] netlink: 'syz.3.2879': attribute type 21 has an invalid length. [ 445.063308][T14999] nr0: tun_chr_ioctl cmd 2147767511 [ 445.079296][T14997] nr0: tun_chr_ioctl cmd 1074025677 [ 445.096689][T14997] nr0: linktype set to 780 [ 445.105140][T15008] nr0: tun_chr_ioctl cmd 1074025673 [ 445.177241][T15012] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2883'. [ 445.538756][T15035] netlink: 'syz.6.2893': attribute type 41 has an invalid length. [ 445.638288][T15027] device syzkaller0 entered promiscuous mode [ 446.701065][T15074] netlink: 'syz.3.2907': attribute type 41 has an invalid length. [ 446.858312][T15098] netlink: 'syz.5.2912': attribute type 1 has an invalid length. [ 447.182077][T15102] team0: Device nlmon0 is of different type [ 447.350035][T15109] team0: Device nlmon0 is of different type [ 447.481648][T15117] device syzkaller0 entered promiscuous mode [ 447.766382][T15131] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2918'. [ 447.979121][T15134] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.269634][T15153] delete_channel: no stack [ 448.593298][T15172] netlink: 5427 bytes leftover after parsing attributes in process `syz.5.2930'. [ 448.625294][T15172] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.2930'. [ 448.693696][T15172] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.2930'. [ 449.002200][T15188] __nla_validate_parse: 1 callbacks suppressed [ 449.002218][T15188] netlink: 65185 bytes leftover after parsing attributes in process `syz.5.2937'. [ 449.632512][T15228] validate_nla: 6 callbacks suppressed [ 449.632529][T15228] netlink: 'syz.1.2951': attribute type 10 has an invalid length. [ 449.711150][T15228] team0: Device wg1 is of different type [ 449.765606][T15234] netlink: 'syz.4.2953': attribute type 41 has an invalid length. [ 449.952293][T15248] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2957'. [ 450.000125][T15257] netlink: 'syz.5.2957': attribute type 2 has an invalid length. [ 450.008144][T15257] netlink: 'syz.5.2957': attribute type 1 has an invalid length. [ 450.023637][T15256] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2960'. [ 450.035243][T15257] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2957'. [ 450.048619][T15256] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.059230][T15256] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.068572][T15256] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.078201][T15256] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.225846][T15265] cgroup: fork rejected by pids controller in /syz1 [ 450.439256][T15272] netlink: 'syz.5.2965': attribute type 10 has an invalid length. [ 450.605338][T15272] team0: Device nlmon0 is of different type [ 450.740399][ T7372] wlan1: Trigger new scan to find an IBSS to join [ 451.157970][T15280] netlink: 'syz.6.2968': attribute type 3 has an invalid length. [ 451.170160][T15280] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2968'. [ 451.190231][T15282] netlink: 'syz.4.2970': attribute type 41 has an invalid length. [ 451.507729][T15296] netlink: 'syz.6.2972': attribute type 39 has an invalid length. [ 452.292166][T15307] netlink: 'syz.5.2975': attribute type 10 has an invalid length. [ 452.450382][T15307] device veth0_vlan left promiscuous mode [ 452.485938][T15307] device veth0_vlan entered promiscuous mode [ 452.502936][T15307] team0: Device veth0_vlan failed to register rx_handler [ 453.923838][T15336] netlink: 'syz.6.2986': attribute type 41 has an invalid length. [ 453.994994][T15338] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2988'. [ 454.100608][ T3056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.188479][ T3056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.422926][ T3056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.537973][ T3056] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.739228][ T7371] wlan1: Trigger new scan to find an IBSS to join [ 454.764748][T15376] netlink: 'syz.5.3000': attribute type 41 has an invalid length. [ 454.788483][T15352] chnl_net:caif_netlink_parms(): no params data found [ 454.974269][T15352] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.986635][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.024788][T15352] device bridge_slave_0 entered promiscuous mode [ 455.086684][T15352] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.107802][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.156593][T15352] device bridge_slave_1 entered promiscuous mode [ 455.247059][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.343396][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.436885][T15406] device veth1_macvtap left promiscuous mode [ 455.449806][T15406] device macsec0 entered promiscuous mode [ 455.517592][T15352] team0: Port device team_slave_0 added [ 455.574056][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.579074][T15352] team0: Port device team_slave_1 added [ 455.619391][T15434] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.658325][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.689474][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.690551][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.707433][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.714948][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.721238][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.743666][ T7375] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 455.755589][T15444] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.3011'. [ 455.770389][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.815402][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.815427][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.827032][T15427] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3008'. [ 455.846033][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.875842][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.938301][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.963647][T15442] netlink: 'syz.5.3011': attribute type 11 has an invalid length. [ 456.085195][T15448] netlink: 'syz.3.3012': attribute type 41 has an invalid length. [ 456.135904][T15352] device hsr_slave_0 entered promiscuous mode [ 456.178400][T15352] device hsr_slave_1 entered promiscuous mode [ 456.198668][T15352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.223898][T15352] Cannot create hsr debugfs directory [ 456.339582][T11899] Bluetooth: hci0: command 0x0409 tx timeout [ 456.593373][ T3056] device hsr_slave_0 left promiscuous mode [ 456.602878][ T3056] device hsr_slave_1 left promiscuous mode [ 456.618572][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.644136][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.673262][ T3056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.690546][ T3056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.725696][ T3056] device bridge_slave_1 left promiscuous mode [ 456.740571][ T3056] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.761671][ T3056] device bridge_slave_0 left promiscuous mode [ 456.775318][ T3056] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.893110][ T3056] device veth1_macvtap left promiscuous mode [ 456.902002][ T3056] device veth0_macvtap left promiscuous mode [ 456.924895][ T3056] device veth1_vlan left promiscuous mode [ 456.939462][ T3056] device veth0_vlan left promiscuous mode [ 457.430236][ T3056] team0 (unregistering): Port device team_slave_1 removed [ 457.470279][ T3056] team0 (unregistering): Port device team_slave_0 removed [ 457.496602][ T3056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.525370][ T3056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.704393][ T3056] bond0 (unregistering): Released all slaves [ 457.934876][T15502] netlink: 'syz.5.3025': attribute type 9 has an invalid length. [ 458.021014][T15501] netlink: 'syz.6.3026': attribute type 41 has an invalid length. [ 458.419467][T11899] Bluetooth: hci0: command 0x041b tx timeout [ 458.500562][T15352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.565777][T15352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.595776][T15352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.639122][T15352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.907981][T15550] netlink: 'syz.4.3040': attribute type 27 has an invalid length. [ 458.949000][T15550] netlink: 'syz.4.3040': attribute type 3 has an invalid length. [ 459.019282][T15548] netlink: 'syz.6.3039': attribute type 41 has an invalid length. [ 459.035043][T15531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.138374][T15352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.236300][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.261187][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.303737][T15352] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.345362][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.369858][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.390071][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.397199][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.418755][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.454094][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.471708][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.501001][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.508130][ T7375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.523240][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.555628][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.592012][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.626288][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.666915][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.702425][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.711719][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.720438][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.729391][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.743390][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.753164][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.768593][T15352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.995184][T15588] netlink: 'syz.3.3051': attribute type 27 has an invalid length. [ 460.075313][T15588] netlink: 'syz.3.3051': attribute type 27 has an invalid length. [ 460.119322][T15598] netlink: 'syz.6.3052': attribute type 10 has an invalid length. [ 460.140890][T15598] device hsr0 entered promiscuous mode [ 460.151671][T15589] netlink: 'syz.3.3051': attribute type 4 has an invalid length. [ 460.162592][T15598] bridge0: port 3(hsr0) entered blocking state [ 460.179414][T15598] bridge0: port 3(hsr0) entered disabled state [ 460.188726][T15598] bridge0: port 3(hsr0) entered blocking state [ 460.195151][T15598] bridge0: port 3(hsr0) entered forwarding state [ 460.217560][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.235703][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.305454][T15612] ¥: port 1(team0) entered blocking state [ 460.336853][T15612] ¥: port 1(team0) entered disabled state [ 460.361971][T15612] device team0 entered promiscuous mode [ 460.398099][T15612] device team_slave_1 entered promiscuous mode [ 460.418607][T15612] device geneve1 entered promiscuous mode [ 460.441144][T15612] device wlan1 entered promiscuous mode [ 460.474046][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.507913][T15615] device team0 left promiscuous mode [ 460.509167][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 460.516981][T15615] device team_slave_1 left promiscuous mode [ 460.529172][T15615] device geneve1 left promiscuous mode [ 460.539186][T15615] device wlan1 left promiscuous mode [ 460.556739][T15615] ¥: port 1(team0) entered disabled state [ 460.586632][T15627] __nla_validate_parse: 75 callbacks suppressed [ 460.586650][T15627] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3056'. [ 460.607796][T15624] netlink: 'syz.5.3055': attribute type 41 has an invalid length. [ 460.659574][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.680053][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.752415][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.770820][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.782378][T15352] device veth0_vlan entered promiscuous mode [ 460.800029][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.819475][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.042351][T15352] device veth1_vlan entered promiscuous mode [ 461.140654][T15653] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.3061'. [ 461.232800][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.253325][ T7371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.277649][T15352] device veth0_macvtap entered promiscuous mode [ 461.328192][T15352] device veth1_macvtap entered promiscuous mode [ 461.394298][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.450168][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.508995][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.603112][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.634627][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.700147][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.766210][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.784572][T15657] netlink: 'syz.5.3062': attribute type 3 has an invalid length. [ 461.793572][T15657] netlink: 'syz.5.3062': attribute type 1 has an invalid length. [ 461.805374][T15657] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.3062'. [ 461.859895][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.896272][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.231024][T15667] device syzkaller0 entered promiscuous mode [ 462.238318][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 462.265460][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.286479][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.299910][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.314946][T15684] netlink: 'syz.4.3067': attribute type 21 has an invalid length. [ 462.335728][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.385846][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.412850][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.429113][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.449340][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.465635][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.478614][T15352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.495862][T15352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.507455][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.590666][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 462.637187][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.663500][ T7375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.701631][T15352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.734551][T15352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.762289][T15352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.785808][T15352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.813652][T15700] netlink: 'syz.6.3068': attribute type 41 has an invalid length. [ 463.023991][ T7371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.044525][ T7371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.236422][T15728] device syzkaller0 entered promiscuous mode [ 463.238175][T15737] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.3074'. [ 463.270467][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.421993][ T7372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.440280][ T7372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.491297][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 463.994632][T15771] netlink: 'syz.6.3083': attribute type 10 has an invalid length. [ 464.047598][T15771] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3083'. [ 464.078781][T15771] device ipvlan1 entered promiscuous mode [ 464.115741][T15771] bridge0: port 4(ipvlan1) entered blocking state [ 464.149754][T15771] bridge0: port 4(ipvlan1) entered disabled state [ 464.174360][T15771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 465.088139][T15796] delete_channel: no stack [ 465.152746][T15798] validate_nla: 1 callbacks suppressed [ 465.152764][T15798] netlink: 'syz.1.3093': attribute type 21 has an invalid length. [ 465.162537][T15802] netlink: 'syz.4.3095': attribute type 7 has an invalid length. [ 465.217211][T15802] netlink: 'syz.4.3095': attribute type 1 has an invalid length. [ 465.219763][T15798] netlink: 'syz.1.3093': attribute type 1 has an invalid length. [ 465.246057][T15798] netlink: 'syz.1.3093': attribute type 2 has an invalid length. [ 465.255665][T15802] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3095'. [ 465.273872][T15798] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.3093'. [ 465.336927][T15810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3093'. [ 465.401687][T15806] netlink: 'syz.6.3096': attribute type 4 has an invalid length. [ 465.432285][T15810] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3093'. [ 465.482438][T15816] netlink: 'syz.6.3096': attribute type 4 has an invalid length. [ 465.489019][T15806] netlink: 203252 bytes leftover after parsing attributes in process `syz.6.3096'. [ 465.773482][T15822] netlink: 'syz.4.3098': attribute type 41 has an invalid length. [ 465.875828][T15831] __nla_validate_parse: 1 callbacks suppressed [ 465.875843][T15831] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3100'. [ 466.107240][T15833] netlink: 'syz.3.3101': attribute type 3 has an invalid length. [ 466.139340][T15833] netlink: 'syz.3.3101': attribute type 1 has an invalid length. [ 466.191851][T15833] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3101'. [ 466.245195][T15836] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3103'. [ 466.412643][T15843] device syzkaller0 entered promiscuous mode [ 466.748357][T15859] device veth0_macvtap left promiscuous mode [ 466.954904][T15879] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.027881][T15881] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.080635][T15881] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.142527][T15881] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.219362][T15881] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.261099][T15881] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.309696][T15881] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3115'. [ 467.345525][ T7372] tipc: Subscription rejected, illegal request [ 467.602664][T15898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.343964][T15930] syz_tun: tun_net_xmit 86 [ 469.181229][T15963] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 469.379012][ C0] syz_tun: tun_net_xmit 86 [ 470.419264][ C0] syz_tun: tun_net_xmit 86 [ 470.492972][T15991] device syzkaller0 entered promiscuous mode [ 470.955094][T16026] validate_nla: 8 callbacks suppressed [ 470.955111][T16026] netlink: 'syz.1.3162': attribute type 29 has an invalid length. [ 471.040187][T16026] __nla_validate_parse: 68 callbacks suppressed [ 471.040205][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3162'. [ 471.099283][T16026] netlink: 'syz.1.3162': attribute type 29 has an invalid length. [ 471.111360][T16026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3162'. [ 471.292824][T16034] netlink: 11355 bytes leftover after parsing attributes in process `syz.6.3168'. [ 471.552502][T16050] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 471.578427][T16049] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.3171'. [ 471.579152][T16050] netlink: 169208 bytes leftover after parsing attributes in process `syz.1.3172'. [ 471.598515][T16051] sctp: [Deprecated]: syz.3.3181 (pid 16051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.598515][T16051] Use struct sctp_sack_info instead [ 471.813469][T16054] netlink: 'syz.5.3173': attribute type 41 has an invalid length. [ 471.995873][T16069] device wlan1 entered promiscuous mode [ 472.077392][T16072] netlink: 192436 bytes leftover after parsing attributes in process `syz.6.3179'. [ 472.094962][T16072] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 472.290294][T16081] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3184'. [ 472.318401][T16081] netlink: 'syz.4.3184': attribute type 2 has an invalid length. [ 472.513070][T16088] IPv6: Can't replace route, no match found [ 472.666260][T16092] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.3187'. [ 472.792939][T16102] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3193'. [ 472.794345][T16104] netlink: 'syz.1.3190': attribute type 10 has an invalid length. [ 472.830781][T16099] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3193'. [ 472.858020][T16104] device veth0_macvtap left promiscuous mode [ 473.045317][T16107] bridge0: port 3(hsr0) entered disabled state [ 473.052071][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.059800][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.101237][T16107] device bridge0 left promiscuous mode [ 473.220226][T16127] netlink: 'syz.3.3196': attribute type 21 has an invalid length. [ 473.258506][T16130] netlink: 'syz.4.3198': attribute type 9 has an invalid length. [ 473.450183][T16142] netlink: 'syz.1.3201': attribute type 17 has an invalid length. [ 473.677586][T16158] netlink: 'syz.6.3202': attribute type 10 has an invalid length. [ 473.748444][T16158] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 473.805501][T16176] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 474.926601][T16210] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 474.952268][T16210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.019865][T16212] IPv6: Can't replace route, no match found [ 475.129694][T16215] device veth0_macvtap left promiscuous mode [ 475.148936][T16217] syz_tun: tun_net_xmit 86 [ 475.222332][T16217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.245405][T16217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.348091][T16217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.360511][T16217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.081272][T16220] validate_nla: 4 callbacks suppressed [ 476.081287][T16220] netlink: 'syz.5.3218': attribute type 17 has an invalid length. [ 476.179001][ C1] syz_tun: tun_net_xmit 86 [ 476.265583][T16229] __nla_validate_parse: 12 callbacks suppressed [ 476.265615][T16229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3222'. [ 476.314758][T16229] : renamed from caif0 [ 476.389573][T16229] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 476.430092][T16233] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3222'. [ 476.462763][T16233] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 476.494186][T16238] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3224'. [ 476.528996][T16232] pimreg1: tun_chr_ioctl cmd 2147767507 [ 476.763498][T16253] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3228'. [ 476.813546][T16252] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.822187][T16252] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.903347][T16260] device bridge_slave_1 left promiscuous mode [ 476.937982][T16260] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.004111][T16260] device bridge_slave_0 left promiscuous mode [ 477.020859][T16260] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.198796][T16264] netlink: 'syz.5.3232': attribute type 46 has an invalid length. [ 477.220334][ C1] syz_tun: tun_net_xmit 86 [ 477.561466][T16266] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3233'. [ 477.721537][T16271] netlink: 'syz.5.3234': attribute type 29 has an invalid length. [ 477.739591][T16271] netlink: 'syz.5.3234': attribute type 29 has an invalid length. [ 477.808072][T16271] netlink: 'syz.5.3234': attribute type 29 has an invalid length. [ 477.867020][T16278] netlink: 'syz.1.3236': attribute type 41 has an invalid length. [ 478.487477][T16308] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3249'. [ 478.650154][T16311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3250'. [ 478.681211][T16311] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 479.253456][T16333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.364397][T16333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.390655][T16333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.416766][T16333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.539033][T16339] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3260'. [ 480.036634][T16373] netlink: 'syz.3.3272': attribute type 21 has an invalid length. [ 480.267217][T16388] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3276'. [ 480.759166][T16393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.767949][T16393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.851713][T16393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.866561][T16393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.899028][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 483.556413][T16436] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3290'. [ 483.795511][T16449] device syzkaller0 entered promiscuous mode [ 483.806232][T16453] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.3298'. [ 484.548670][T16465] netlink: 'syz.5.3300': attribute type 41 has an invalid length. [ 484.752083][T16485] netlink: 'syz.3.3309': attribute type 29 has an invalid length. [ 484.798625][T16483] device syzkaller0 entered promiscuous mode [ 484.815426][T16487] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3308'. [ 484.831545][T16485] netlink: 'syz.3.3309': attribute type 29 has an invalid length. [ 484.841309][T16486] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3308'. [ 484.849030][T16487] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.859816][T16486] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.872705][T16491] netlink: 'syz.3.3309': attribute type 29 has an invalid length. [ 485.002143][T16498] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.3312'. [ 485.033836][T16505] device wlan1 entered promiscuous mode [ 485.149669][T16517] netlink: 'syz.3.3315': attribute type 10 has an invalid length. [ 485.330414][T16517] team0 (unregistering): Port device team_slave_0 removed [ 485.395407][T16517] team0 (unregistering): Port device team_slave_1 removed [ 485.471628][T16523] netlink: 'syz.5.3318': attribute type 10 has an invalid length. [ 485.503712][T16523] device wlan1 left promiscuous mode [ 485.667951][T16523] team0: Port device wlan1 added [ 485.760526][T16539] netlink: 'syz.6.3321': attribute type 41 has an invalid length. [ 485.822117][T16542] netlink: 'syz.4.3322': attribute type 41 has an invalid length. [ 485.919633][T16553] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3325'. [ 485.937258][T16556] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3329'. [ 486.018708][T16562] netlink: 'syz.3.3330': attribute type 9 has an invalid length. [ 486.031139][T16562] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3330'. [ 486.086264][T16568] netlink: 'syz.6.3332': attribute type 10 has an invalid length. [ 486.240699][T16568] team0 (unregistering): Port device team_slave_0 removed [ 486.321183][T16568] team0 (unregistering): Port device team_slave_1 removed [ 486.393113][T16574] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3334'. [ 486.547338][T16587] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 486.706213][T16597] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3343'. [ 486.777703][T16608] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 487.040517][T16609] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 487.366657][T16636] netlink: zone id is out of range [ 487.375119][T16637] netlink: zone id is out of range [ 487.388914][T16636] netlink: set zone limit has 8 unknown bytes [ 487.395211][T16637] netlink: set zone limit has 8 unknown bytes [ 488.604392][T16671] __nla_validate_parse: 2 callbacks suppressed [ 488.604409][T16671] netlink: 165388 bytes leftover after parsing attributes in process `syz.4.3362'. [ 488.622943][T16671] netlink: zone id is out of range [ 488.628558][T16671] netlink: zone id is out of range [ 488.636394][T16671] netlink: zone id is out of range [ 488.644049][T16671] netlink: zone id is out of range [ 488.683957][T16634] device syzkaller0 entered promiscuous mode [ 488.755103][T16670] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3362'. [ 488.932907][T16683] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3367'. [ 491.938354][T16692] validate_nla: 7 callbacks suppressed [ 491.938384][T16692] netlink: 'syz.3.3370': attribute type 10 has an invalid length. [ 492.042223][T16707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 492.101660][T16697] netlink: 'syz.4.3373': attribute type 41 has an invalid length. [ 492.197384][T16715] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.3377'. [ 492.376409][T16726] netlink: 'syz.5.3390': attribute type 2 has an invalid length. [ 492.437756][T16726] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3390'. [ 492.466606][T16727] netlink: 16222 bytes leftover after parsing attributes in process `syz.6.3382'. [ 492.504550][T16731] device syzkaller0 entered promiscuous mode [ 492.552001][T16726] netlink: 'syz.5.3390': attribute type 21 has an invalid length. [ 492.575857][T16726] IPv6: NLM_F_CREATE should be specified when creating new route [ 492.590658][T16726] IPv6: Can't replace route, no match found [ 492.622078][T16743] netlink: 'syz.1.3383': attribute type 21 has an invalid length. [ 492.746236][T16751] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.3384'. [ 493.014968][T16755] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3387'. [ 493.266444][T16767] netlink: 'syz.5.3389': attribute type 41 has an invalid length. [ 493.455111][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 493.587629][T16779] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3396'. [ 493.759439][T16808] netlink: 'syz.5.3400': attribute type 21 has an invalid length. [ 493.767339][T16808] netlink: 'syz.5.3400': attribute type 6 has an invalid length. [ 493.793826][T16808] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3400'. [ 493.811292][T16807] netlink: 'syz.5.3400': attribute type 21 has an invalid length. [ 493.822960][T16807] netlink: 'syz.5.3400': attribute type 6 has an invalid length. [ 493.831282][T16807] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3400'. [ 495.554210][T16830] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3408'. [ 495.703182][T16845] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.750596][T16845] IPv6: Can't replace route, no match found [ 496.866710][T16879] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3428'. [ 496.899850][T16883] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3429'. [ 496.947258][T16889] validate_nla: 5 callbacks suppressed [ 496.947275][T16889] netlink: 'syz.1.3430': attribute type 2 has an invalid length. [ 496.968153][T16889] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3430'. [ 497.005619][T16887] device macsec0 left promiscuous mode [ 497.257038][T16889] netlink: 'syz.1.3430': attribute type 21 has an invalid length. [ 497.277756][T16889] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.314329][T16889] IPv6: Can't replace route, no match found [ 497.653340][T16908] net_ratelimit: 198 callbacks suppressed [ 497.653357][T16908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 497.815209][T16912] netlink: 'syz.3.3439': attribute type 41 has an invalid length. [ 497.872646][T16915] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3442'. [ 497.974439][T16925] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3446'. [ 498.005371][T16925] device hsr_slave_0 left promiscuous mode [ 498.027835][T16925] device hsr_slave_1 left promiscuous mode [ 498.534602][T16957] netlink: 'syz.4.3454': attribute type 1 has an invalid length. [ 498.551988][T16957] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3454'. [ 498.757468][T16964] netlink: 'syz.1.3457': attribute type 41 has an invalid length. [ 498.870590][T16975] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3459'. [ 499.242538][T17000] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3468'. [ 500.029310][T17007] netlink: 'syz.3.3471': attribute type 41 has an invalid length. [ 500.219413][T17024] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3476'. [ 500.305190][T17031] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3477'. [ 500.866808][T17050] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3485'. [ 500.928887][T17050] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 501.301533][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.308015][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.320778][T17059] netlink: 'syz.6.3490': attribute type 41 has an invalid length. [ 501.388439][T17060] netlink: 'syz.4.3489': attribute type 41 has an invalid length. [ 501.411346][T17060] FAULT_INJECTION: forcing a failure. [ 501.411346][T17060] name failslab, interval 1, probability 0, space 0, times 0 [ 501.437293][T17060] CPU: 1 PID: 17060 Comm: syz.4.3489 Not tainted syzkaller #0 [ 501.444800][T17060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 501.454956][T17060] Call Trace: [ 501.458242][T17060] [ 501.461185][T17060] dump_stack_lvl+0x188/0x250 [ 501.465880][T17060] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 501.472139][T17060] ? show_regs_print_info+0x20/0x20 [ 501.477368][T17060] ? load_image+0x410/0x410 [ 501.481897][T17060] should_fail+0x383/0x4b0 [ 501.486338][T17060] should_failslab+0x5/0x20 [ 501.490857][T17060] slab_pre_alloc_hook+0x51/0xc0 [ 501.495912][T17060] __kmalloc+0x6b/0x340 [ 501.500084][T17060] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 501.505972][T17060] tomoyo_realpath_from_path+0xed/0x5e0 [ 501.511535][T17060] tomoyo_path_number_perm+0x251/0x6b0 [ 501.516988][T17060] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 501.522442][T17060] ? verify_lock_unused+0x140/0x140 [ 501.527738][T17060] ? hrtimer_interrupt+0x4c1/0x8b0 [ 501.532895][T17060] security_file_ioctl+0x6c/0xa0 [ 501.537846][T17060] __se_sys_ioctl+0x48/0x170 [ 501.542457][T17060] do_syscall_64+0x4c/0xa0 [ 501.546961][T17060] ? clear_bhb_loop+0x30/0x80 [ 501.551716][T17060] ? clear_bhb_loop+0x30/0x80 [ 501.556394][T17060] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.562381][T17060] RIP: 0033:0x7f189c755199 [ 501.566785][T17060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.586899][T17060] RSP: 002b:00007f189a9ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.595303][T17060] RAX: ffffffffffffffda RBX: 00007f189c9dcfa0 RCX: 00007f189c755199 [ 501.603262][T17060] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000b [ 501.611218][T17060] RBP: 00007f189a9ad090 R08: 0000000000000000 R09: 0000000000000000 [ 501.619183][T17060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.627159][T17060] R13: 00007f189c9dd038 R14: 00007f189c9dcfa0 R15: 00007ffdef970058 [ 501.635151][T17060] [ 501.700584][T17060] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.735038][T17074] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3496'. [ 501.915226][T17083] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3498'. [ 502.944833][T17111] netlink: 'syz.5.3507': attribute type 41 has an invalid length. [ 503.027078][T17121] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3509'. [ 503.043684][T17126] netlink: 'syz.6.3511': attribute type 41 has an invalid length. [ 503.052667][T17120] syz_tun: tun_net_xmit 86 [ 503.081578][T17126] FAULT_INJECTION: forcing a failure. [ 503.081578][T17126] name failslab, interval 1, probability 0, space 0, times 0 [ 503.090285][T17121] netlink: 22796 bytes leftover after parsing attributes in process `syz.4.3509'. [ 503.119223][T17126] CPU: 0 PID: 17126 Comm: syz.6.3511 Not tainted syzkaller #0 [ 503.126727][T17126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.136799][T17126] Call Trace: [ 503.140085][T17126] [ 503.143031][T17126] dump_stack_lvl+0x188/0x250 [ 503.147731][T17126] ? show_regs_print_info+0x20/0x20 [ 503.152956][T17126] ? load_image+0x410/0x410 [ 503.157563][T17126] ? __might_sleep+0xf0/0xf0 [ 503.162250][T17126] ? __lock_acquire+0x7d40/0x7d40 [ 503.167339][T17126] should_fail+0x383/0x4b0 [ 503.171775][T17126] should_failslab+0x5/0x20 [ 503.176285][T17126] slab_pre_alloc_hook+0x51/0xc0 [ 503.181234][T17126] __kmalloc+0x6b/0x340 [ 503.185400][T17126] ? tomoyo_encode+0x28a/0x550 [ 503.190199][T17126] tomoyo_encode+0x28a/0x550 [ 503.194810][T17126] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 503.200566][T17126] tomoyo_path_number_perm+0x251/0x6b0 [ 503.206137][T17126] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 503.211623][T17126] ? perf_trace_lock+0xe4/0x390 [ 503.216541][T17126] security_file_ioctl+0x6c/0xa0 [ 503.221509][T17126] __se_sys_ioctl+0x48/0x170 [ 503.226120][T17126] do_syscall_64+0x4c/0xa0 [ 503.230555][T17126] ? clear_bhb_loop+0x30/0x80 [ 503.235245][T17126] ? clear_bhb_loop+0x30/0x80 [ 503.239949][T17126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 503.245858][T17126] RIP: 0033:0x7f91ffa54199 [ 503.250288][T17126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.269910][T17126] RSP: 002b:00007f91fdcac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.278348][T17126] RAX: ffffffffffffffda RBX: 00007f91ffcdbfa0 RCX: 00007f91ffa54199 [ 503.286593][T17126] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000b [ 503.294561][T17126] RBP: 00007f91fdcac090 R08: 0000000000000000 R09: 0000000000000000 [ 503.302523][T17126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.310502][T17126] R13: 00007f91ffcdc038 R14: 00007f91ffcdbfa0 R15: 00007ffd3209d2f8 [ 503.318477][T17126] [ 503.361653][T17126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.386550][T17129] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3512'. [ 503.445038][T17138] netlink: 'syz.1.3514': attribute type 21 has an invalid length. [ 503.489057][T17139] netlink: 'syz.1.3514': attribute type 21 has an invalid length. [ 503.712430][T17142] netlink: 'syz.4.3515': attribute type 41 has an invalid length. [ 503.910349][T17154] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3520'. [ 504.111818][ C1] syz_tun: tun_net_xmit 86 [ 504.685516][T17171] netlink: 'syz.4.3526': attribute type 41 has an invalid length. [ 504.730923][T17172] netlink: 'syz.1.3525': attribute type 41 has an invalid length. [ 504.734428][T17173] FAULT_INJECTION: forcing a failure. [ 504.734428][T17173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.860828][T17173] CPU: 1 PID: 17173 Comm: syz.4.3526 Not tainted syzkaller #0 [ 504.868333][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 504.878400][T17173] Call Trace: [ 504.881678][T17173] [ 504.884606][T17173] dump_stack_lvl+0x188/0x250 [ 504.889289][T17173] ? show_regs_print_info+0x20/0x20 [ 504.894485][T17173] ? load_image+0x410/0x410 [ 504.898977][T17173] ? __lock_acquire+0x7d40/0x7d40 [ 504.904075][T17173] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 504.909704][T17173] should_fail+0x383/0x4b0 [ 504.914115][T17173] _copy_from_user+0x2e/0x170 [ 504.918798][T17173] wext_handle_ioctl+0xc4/0x1d0 [ 504.923757][T17173] ? call_commit_handler+0xf0/0xf0 [ 504.928865][T17173] sock_ioctl+0x143/0x700 [ 504.933200][T17173] ? sock_poll+0x420/0x420 [ 504.937612][T17173] ? bpf_lsm_file_ioctl+0x5/0x10 [ 504.942532][T17173] ? security_file_ioctl+0x7c/0xa0 [ 504.947630][T17173] ? sock_poll+0x420/0x420 [ 504.952031][T17173] __se_sys_ioctl+0xfa/0x170 [ 504.956615][T17173] do_syscall_64+0x4c/0xa0 [ 504.961019][T17173] ? clear_bhb_loop+0x30/0x80 [ 504.965768][T17173] ? clear_bhb_loop+0x30/0x80 [ 504.970450][T17173] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 504.976330][T17173] RIP: 0033:0x7f189c755199 [ 504.980737][T17173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.001237][T17173] RSP: 002b:00007f189a98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.009651][T17173] RAX: ffffffffffffffda RBX: 00007f189c9dd090 RCX: 00007f189c755199 [ 505.017695][T17173] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000b [ 505.025674][T17173] RBP: 00007f189a98c090 R08: 0000000000000000 R09: 0000000000000000 [ 505.033987][T17173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.042030][T17173] R13: 00007f189c9dd128 R14: 00007f189c9dd090 R15: 00007ffdef970058 [ 505.050089][T17173] [ 505.125677][T17183] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3530'. [ 505.140321][ C1] syz_tun: tun_net_xmit 86 [ 505.173765][T17188] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3532'. [ 505.207317][T17189] netlink: 'syz.6.3532': attribute type 7 has an invalid length. [ 505.210964][T17188] netlink: 'syz.6.3532': attribute type 7 has an invalid length. [ 505.233643][T17188] netlink: 'syz.6.3532': attribute type 1 has an invalid length. [ 505.236061][T17189] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3532'. [ 505.253504][T17188] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3532'. [ 505.687918][T17203] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3545'. [ 506.131714][T17209] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3536'. [ 508.685314][T17217] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3538'. [ 508.829253][T17235] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3544'. [ 508.942134][T17239] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3546'. [ 509.034722][T17239] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.071352][T17240] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 511.494953][T17261] netlink: 15358 bytes leftover after parsing attributes in process `syz.1.3549'. [ 511.513446][T17263] validate_nla: 3 callbacks suppressed [ 511.513463][T17263] netlink: 'syz.6.3550': attribute type 41 has an invalid length. [ 511.558450][T17265] FAULT_INJECTION: forcing a failure. [ 511.558450][T17265] name fail_futex, interval 1, probability 0, space 0, times 1 [ 511.576742][T17265] CPU: 0 PID: 17265 Comm: syz.6.3550 Not tainted syzkaller #0 [ 511.584259][T17265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 511.594329][T17265] Call Trace: [ 511.597621][T17265] [ 511.600574][T17265] dump_stack_lvl+0x188/0x250 [ 511.603360][T17269] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3552'. [ 511.605306][T17265] ? show_regs_print_info+0x20/0x20 [ 511.619591][T17265] ? load_image+0x410/0x410 [ 511.624111][T17265] ? __lock_acquire+0x12df/0x7d40 [ 511.629268][T17265] ? mark_lock+0x94/0x320 [ 511.633794][T17265] should_fail+0x383/0x4b0 [ 511.638243][T17265] get_futex_key+0x1a1/0x12d0 [ 511.643071][T17265] ? futex_wait_restart+0x250/0x250 [ 511.648301][T17265] futex_wake+0x101/0x540 [ 511.652727][T17265] ? verify_lock_unused+0x140/0x140 [ 511.657949][T17265] ? verify_lock_unused+0x140/0x140 [ 511.663263][T17265] ? futex_wait+0x680/0x680 [ 511.667796][T17265] do_futex+0xd83/0x12b0 [ 511.672066][T17265] ? __might_sleep+0xf0/0xf0 [ 511.676669][T17265] ? __might_fault+0xb7/0x110 [ 511.681433][T17265] ? futex_exit_release+0x1c0/0x1c0 [ 511.686661][T17265] mm_release+0x278/0x3c0 [ 511.691114][T17265] ? exit_mm_release+0x30/0x30 [ 511.695881][T17265] ? lockdep_hardirqs_on+0x94/0x140 [ 511.701124][T17265] exit_mm+0xaf/0x7b0 [ 511.705119][T17265] ? perf_pmu_migrate_context+0xb70/0xb70 [ 511.710861][T17265] ? do_exit+0x2110/0x2110 [ 511.715297][T17265] ? rcu_is_watching+0x11/0xa0 [ 511.720073][T17265] ? mm_trace_rss_stat+0x81/0x1c0 [ 511.725128][T17265] ? sync_mm_rss+0x211/0x350 [ 511.729732][T17265] do_exit+0x5b8/0x2110 [ 511.733905][T17265] ? rcu_nmi_exit+0x6f/0xf0 [ 511.738594][T17265] ? put_task_struct+0x80/0x80 [ 511.743364][T17265] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 511.749379][T17265] do_group_exit+0x12c/0x2f0 [ 511.753982][T17265] ? lockdep_hardirqs_on+0x94/0x140 [ 511.759191][T17265] get_signal+0x7eb/0x12e0 [ 511.763707][T17265] arch_do_signal_or_restart+0xe6/0x12a0 [ 511.769489][T17265] ? wext_handle_ioctl+0x141/0x1d0 [ 511.774619][T17265] ? call_commit_handler+0xf0/0xf0 [ 511.779742][T17265] ? get_sigframe_size+0x10/0x10 [ 511.784679][T17265] ? rcu_nmi_exit+0x6f/0xf0 [ 511.789384][T17265] ? exit_to_user_mode_loop+0x3b/0x130 [ 511.794848][T17265] exit_to_user_mode_loop+0x9e/0x130 [ 511.800148][T17265] exit_to_user_mode_prepare+0xee/0x180 [ 511.805703][T17265] syscall_exit_to_user_mode+0x16/0x40 [ 511.811344][T17265] do_syscall_64+0x58/0xa0 [ 511.815762][T17265] ? clear_bhb_loop+0x30/0x80 [ 511.820614][T17265] ? clear_bhb_loop+0x30/0x80 [ 511.825287][T17265] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 511.831282][T17265] RIP: 0033:0x7f91ffa54199 [ 511.835701][T17265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.855300][T17265] RSP: 002b:00007f91fdc28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.863711][T17265] RAX: 0000000000000000 RBX: 00007f91ffcdc360 RCX: 00007f91ffa54199 [ 511.871865][T17265] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000b [ 511.879920][T17265] RBP: 00007f91fdc28090 R08: 0000000000000000 R09: 0000000000000000 [ 511.887889][T17265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.895858][T17265] R13: 00007f91ffcdc3f8 R14: 00007f91ffcdc360 R15: 00007ffd3209d2f8 [ 511.903839][T17265] [ 511.980030][T17276] netlink: 'syz.5.3553': attribute type 2 has an invalid length. [ 511.988180][T17276] netlink: 'syz.5.3553': attribute type 4 has an invalid length. [ 511.998344][T17276] netlink: 'syz.5.3553': attribute type 8 has an invalid length. [ 512.008599][T17276] netlink: 'syz.5.3553': attribute type 9 has an invalid length. [ 512.049016][T17276] netlink: 'syz.5.3553': attribute type 10 has an invalid length. [ 512.057124][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3553'. [ 512.419250][T17288] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3559'. [ 512.471661][T17305] netlink: 'syz.5.3562': attribute type 41 has an invalid length. [ 512.776784][T17322] device syzkaller0 entered promiscuous mode [ 512.794823][T17321] netlink: 15358 bytes leftover after parsing attributes in process `syz.5.3567'. [ 512.828713][T17321] netlink: 15358 bytes leftover after parsing attributes in process `syz.5.3567'. [ 512.972288][T17334] netlink: 'syz.5.3569': attribute type 1 has an invalid length. [ 513.022169][T17341] netlink: 'syz.4.3572': attribute type 29 has an invalid length. [ 513.030512][T17341] netlink: 'syz.4.3572': attribute type 29 has an invalid length. [ 513.040519][T17334] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3569'. [ 513.160642][T17347] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3574'. [ 513.351190][T17363] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.3579'. [ 513.624511][T11403] Bluetooth: hci5: command 0x0406 tx timeout [ 513.650115][T17374] team0: Device hsr_slave_0 failed to register rx_handler [ 514.224916][T17395] team0: Port device netdevsim0 added [ 514.307447][T17400] __nla_validate_parse: 2 callbacks suppressed [ 514.307464][T17400] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3588'. [ 514.412116][T17391] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3585'. [ 515.170755][T17435] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3600'. [ 515.198924][T17435] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3600'. [ 515.268920][T17437] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3601'. [ 518.291252][T17480] validate_nla: 6 callbacks suppressed [ 518.291268][T17480] netlink: 'syz.4.3609': attribute type 21 has an invalid length. [ 518.342718][T17480] netlink: 'syz.4.3609': attribute type 1 has an invalid length. [ 518.382069][T17480] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.3609'. [ 518.782243][T17493] netlink: 'syz.5.3615': attribute type 10 has an invalid length. [ 518.903848][T17493] bridge0: port 3(hsr0) entered disabled state [ 518.962316][T17493] device hsr0 left promiscuous mode [ 518.968134][T17493] bridge0: port 3(hsr0) entered disabled state [ 519.004638][T17493] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 519.110053][T17506] netlink: 'syz.1.3620': attribute type 9 has an invalid length. [ 519.151372][T17506] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3620'. [ 519.228558][T17509] netlink: 'syz.1.3620': attribute type 9 has an invalid length. [ 519.299620][T17509] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3620'. [ 519.516109][T17521] netlink: 'syz.6.3625': attribute type 41 has an invalid length. [ 519.755715][T17532] netlink: 151528 bytes leftover after parsing attributes in process `syz.1.3627'. [ 519.795173][T17536] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3618'. [ 520.379886][T17562] netlink: 'syz.3.3638': attribute type 4 has an invalid length. [ 520.388013][T17562] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.3638'. [ 520.468775][T17567] netlink: 'syz.4.3640': attribute type 21 has an invalid length. [ 520.489187][T17567] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3640'. [ 520.500746][T17562] netlink: 'syz.3.3638': attribute type 4 has an invalid length. [ 520.516906][T17567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3640'. [ 520.533736][T17565] netlink: 'syz.1.3639': attribute type 41 has an invalid length. [ 520.543001][T17562] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.3638'. [ 520.575258][T17562] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.3638'. [ 520.629459][T17562] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.3638'. [ 520.687364][T17562] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.3638'. [ 520.791738][T17562] netlink: 203252 bytes leftover after parsing attributes in process `syz.3.3638'. [ 521.657800][T17627] device hsr0 left promiscuous mode [ 521.668180][T17627] bridge0: port 3(hsr0) entered disabled state [ 521.971701][T17639] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 522.070878][T17639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.499197][T17647] delete_channel: no stack [ 522.571953][T17652] pim6reg0: tun_chr_ioctl cmd 1074025688 [ 522.823722][T17663] FAULT_INJECTION: forcing a failure. [ 522.823722][T17663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.861182][T17663] CPU: 1 PID: 17663 Comm: syz.4.3675 Not tainted syzkaller #0 [ 522.868679][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 522.878737][T17663] Call Trace: [ 522.882027][T17663] [ 522.884961][T17663] dump_stack_lvl+0x188/0x250 [ 522.889654][T17663] ? show_regs_print_info+0x20/0x20 [ 522.894859][T17663] ? load_image+0x410/0x410 [ 522.899372][T17663] ? __lock_acquire+0x7d40/0x7d40 [ 522.904410][T17663] should_fail+0x383/0x4b0 [ 522.908833][T17663] _copy_from_user+0x2e/0x170 [ 522.913521][T17663] __sys_bpf+0x26d/0x6f0 [ 522.917935][T17663] ? bpf_link_show_fdinfo+0x380/0x380 [ 522.923350][T17663] __x64_sys_bpf+0x78/0x90 [ 522.927783][T17663] do_syscall_64+0x4c/0xa0 [ 522.932192][T17663] ? clear_bhb_loop+0x30/0x80 [ 522.936854][T17663] ? clear_bhb_loop+0x30/0x80 [ 522.941526][T17663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 522.947405][T17663] RIP: 0033:0x7f189c755199 [ 522.951805][T17663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.971566][T17663] RSP: 002b:00007f189a9ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.979978][T17663] RAX: ffffffffffffffda RBX: 00007f189c9dcfa0 RCX: 00007f189c755199 [ 522.987964][T17663] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 522.995949][T17663] RBP: 00007f189a9ad090 R08: 0000000000000000 R09: 0000000000000000 [ 523.003905][T17663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.011878][T17663] R13: 00007f189c9dd038 R14: 00007f189c9dcfa0 R15: 00007ffdef970058 [ 523.019847][T17663] [ 523.440877][T17692] device syzkaller0 entered promiscuous mode [ 523.472989][T17681] validate_nla: 39 callbacks suppressed [ 523.473006][T17681] netlink: 'syz.1.3680': attribute type 10 has an invalid length. [ 523.633000][T17681] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 523.657246][T17702] netlink: 'syz.3.3686': attribute type 41 has an invalid length. [ 523.748196][T17711] FAULT_INJECTION: forcing a failure. [ 523.748196][T17711] name failslab, interval 1, probability 0, space 0, times 0 [ 523.798718][T17711] CPU: 1 PID: 17711 Comm: syz.5.3693 Not tainted syzkaller #0 [ 523.806220][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 523.816290][T17711] Call Trace: [ 523.819681][T17711] [ 523.822621][T17711] dump_stack_lvl+0x188/0x250 [ 523.827304][T17711] ? show_regs_print_info+0x20/0x20 [ 523.832605][T17711] ? load_image+0x410/0x410 [ 523.837115][T17711] ? __might_sleep+0xf0/0xf0 [ 523.841705][T17711] ? __lock_acquire+0x7d40/0x7d40 [ 523.846734][T17711] ? __lock_acquire+0x7d40/0x7d40 [ 523.851766][T17711] should_fail+0x383/0x4b0 [ 523.856189][T17711] should_failslab+0x5/0x20 [ 523.860697][T17711] slab_pre_alloc_hook+0x51/0xc0 [ 523.865640][T17711] __kmalloc_node+0x6d/0x3a0 [ 523.870229][T17711] ? kvmalloc_node+0x84/0x130 [ 523.875188][T17711] kvmalloc_node+0x84/0x130 [ 523.879692][T17711] map_update_elem+0x308/0x760 [ 523.884464][T17711] __sys_bpf+0x46b/0x6f0 [ 523.888718][T17711] ? bpf_link_show_fdinfo+0x380/0x380 [ 523.894217][T17711] __x64_sys_bpf+0x78/0x90 [ 523.898643][T17711] do_syscall_64+0x4c/0xa0 [ 523.903066][T17711] ? clear_bhb_loop+0x30/0x80 [ 523.907921][T17711] ? clear_bhb_loop+0x30/0x80 [ 523.912601][T17711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 523.918494][T17711] RIP: 0033:0x7fa7a2c34199 [ 523.922912][T17711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.942603][T17711] RSP: 002b:00007fa7a0e8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.951120][T17711] RAX: ffffffffffffffda RBX: 00007fa7a2ebbfa0 RCX: 00007fa7a2c34199 [ 523.959174][T17711] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 523.967144][T17711] RBP: 00007fa7a0e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 523.975112][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.983078][T17711] R13: 00007fa7a2ebc038 R14: 00007fa7a2ebbfa0 R15: 00007fff8c10eb58 [ 523.991063][T17711] [ 524.379984][T17732] netlink: 'syz.1.3701': attribute type 3 has an invalid length. [ 524.808961][T17736] device syzkaller0 entered promiscuous mode [ 524.902420][T17750] __nla_validate_parse: 40 callbacks suppressed [ 524.902438][T17750] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3701'. [ 524.936120][T17750] netlink: 'syz.1.3701': attribute type 1 has an invalid length. [ 524.944752][T17750] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3701'. [ 524.980920][T17750] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 525.016860][T17758] netlink: 'syz.5.3706': attribute type 41 has an invalid length. [ 525.236602][T17768] FAULT_INJECTION: forcing a failure. [ 525.236602][T17768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.264717][T17770] netlink: 'syz.1.3710': attribute type 10 has an invalid length. [ 525.284227][T17768] CPU: 0 PID: 17768 Comm: syz.4.3709 Not tainted syzkaller #0 [ 525.291729][T17768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 525.301812][T17768] Call Trace: [ 525.305097][T17768] [ 525.308028][T17768] dump_stack_lvl+0x188/0x250 [ 525.312713][T17768] ? show_regs_print_info+0x20/0x20 [ 525.317921][T17768] ? load_image+0x410/0x410 [ 525.322434][T17768] ? __lock_acquire+0x7d40/0x7d40 [ 525.327483][T17768] should_fail+0x383/0x4b0 [ 525.331918][T17768] _copy_from_user+0x2e/0x170 [ 525.336609][T17768] map_update_elem+0x3b3/0x760 [ 525.341412][T17768] __sys_bpf+0x46b/0x6f0 [ 525.345674][T17768] ? bpf_link_show_fdinfo+0x380/0x380 [ 525.351077][T17768] __x64_sys_bpf+0x78/0x90 [ 525.355495][T17768] do_syscall_64+0x4c/0xa0 [ 525.359912][T17768] ? clear_bhb_loop+0x30/0x80 [ 525.364585][T17768] ? clear_bhb_loop+0x30/0x80 [ 525.369261][T17768] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.375152][T17768] RIP: 0033:0x7f189c755199 [ 525.379565][T17768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.399439][T17768] RSP: 002b:00007f189a9ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.407962][T17768] RAX: ffffffffffffffda RBX: 00007f189c9dcfa0 RCX: 00007f189c755199 [ 525.415941][T17768] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 525.423909][T17768] RBP: 00007f189a9ad090 R08: 0000000000000000 R09: 0000000000000000 [ 525.431869][T17768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.439832][T17768] R13: 00007f189c9dd038 R14: 00007f189c9dcfa0 R15: 00007ffdef970058 [ 525.447803][T17768] [ 525.565686][T17782] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3713'. [ 525.893595][T17807] netlink: 'syz.1.3716': attribute type 10 has an invalid length. [ 526.133290][T17807] team0: Device wg1 is of different type [ 526.258087][T17811] netlink: 'syz.4.3721': attribute type 41 has an invalid length. [ 526.465864][T17819] netlink: 'syz.3.3723': attribute type 9 has an invalid length. [ 526.506196][T17822] netlink: 'syz.1.3724': attribute type 21 has an invalid length. [ 526.506808][T17819] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3723'. [ 526.550516][T17822] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3724'. [ 526.603619][T17827] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3724'. [ 526.612931][T17824] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3725'. [ 526.775686][ C0] [ 526.775694][ C0] ================================ [ 526.775699][ C0] WARNING: inconsistent lock state [ 526.775719][ C0] syzkaller #0 Not tainted [ 526.775727][ C0] -------------------------------- [ 526.775732][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 526.775739][ C0] syz.4.3728/17834 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 526.775756][ C0] ffff88801ee0a0a0 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b0/0x520 [ 526.775876][ C0] {INITIAL USE} state was registered at: [ 526.775887][ C0] lock_acquire+0x19f/0x400 [ 526.775904][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 526.775920][ C0] htab_map_delete_elem+0x1b0/0x520 [ 526.775932][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x430 [ 526.775945][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 526.775989][ C0] __perf_event_overflow+0x35f/0x550 [ 526.776005][ C0] perf_bp_event+0x276/0x320 [ 526.776019][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 526.776060][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 526.776154][ C0] notify_die+0x141/0x1a0 [ 526.776166][ C0] notify_debug+0x20/0x30 [ 526.776182][ C0] noist_exc_debug+0x73/0x120 [ 526.776197][ C0] asm_exc_debug+0x2f/0x40 [ 526.776211][ C0] irq event stamp: 838 [ 526.776216][ C0] hardirqs last enabled at (837): [] syscall_enter_from_user_mode+0x21/0x70 [ 526.776238][ C0] hardirqs last disabled at (838): [] exc_debug+0x6e/0x130 [ 526.776255][ C0] softirqs last enabled at (674): [] bpf_prog_load+0x10ee/0x14e0 [ 526.776273][ C0] softirqs last disabled at (672): [] bpf_ksym_add+0x28/0x330 [ 526.776287][ C0] [ 526.776287][ C0] other info that might help us debug this: [ 526.776292][ C0] Possible unsafe locking scenario: [ 526.776292][ C0] [ 526.776295][ C0] CPU0 [ 526.776298][ C0] ---- [ 526.776300][ C0] lock(&htab->lockdep_key); [ 526.776310][ C0] [ 526.776312][ C0] lock(&htab->lockdep_key); [ 526.776320][ C0] [ 526.776320][ C0] *** DEADLOCK *** [ 526.776320][ C0] [ 526.776323][ C0] no locks held by syz.4.3728/17834. [ 526.776329][ C0] [ 526.776329][ C0] stack backtrace: [ 526.776334][ C0] CPU: 0 PID: 17834 Comm: syz.4.3728 Not tainted syzkaller #0 [ 526.776347][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 526.776355][ C0] Call Trace: [ 526.776360][ C0] <#DB> [ 526.776366][ C0] dump_stack_lvl+0x188/0x250 [ 526.776384][ C0] ? show_regs_print_info+0x20/0x20 [ 526.776402][ C0] ? print_usage_bug+0x43d/0x6a0 [ 526.776415][ C0] ? verify_lock_unused+0x15/0x140 [ 526.776433][ C0] lock_acquire+0x2c3/0x400 [ 526.776449][ C0] ? read_lock_is_recursive+0x10/0x10 [ 526.776467][ C0] ? htab_map_delete_elem+0x1b0/0x520 [ 526.776481][ C0] ? read_lock_is_recursive+0x10/0x10 [ 526.776496][ C0] ? look_up_lock_class+0x71/0x110 [ 526.776512][ C0] ? verify_lock_unused+0x15/0x140 [ 526.776529][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 526.776544][ C0] ? htab_map_delete_elem+0x1b0/0x520 [ 526.776558][ C0] ? _raw_spin_lock+0x40/0x40 [ 526.776573][ C0] ? htab_map_hash+0x33d/0x6d0 [ 526.776588][ C0] htab_map_delete_elem+0x1b0/0x520 [ 526.776605][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x430 [ 526.776619][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 526.776636][ C0] ? perf_get_page_size+0x430/0x430 [ 526.776653][ C0] ? perf_event_switch_output+0x730/0x730 [ 526.776673][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 526.776691][ C0] __perf_event_overflow+0x35f/0x550 [ 526.776708][ C0] perf_bp_event+0x276/0x320 [ 526.776724][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 526.776751][ C0] ? rcu_lock_acquire+0x9/0x30 [ 526.776767][ C0] ? read_lock_is_recursive+0x10/0x10 [ 526.776795][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 526.776810][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 526.776827][ C0] notify_die+0x141/0x1a0 [ 526.776842][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 526.776860][ C0] ? exc_debug+0x6e/0x130 [ 526.776875][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 526.776959][ C0] notify_debug+0x20/0x30 [ 526.776976][ C0] exc_debug+0xcf/0x130 [ 526.776992][ C0] asm_exc_debug+0x1a/0x40 [ 526.777005][ C0] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 526.777032][ C0] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 526.777045][ C0] RSP: 0018:ffffc9000305faa8 EFLAGS: 00040202 [ 526.777058][ C0] RAX: ffffffff83e93a01 RBX: 0000000000000010 RCX: 0000000000000002 [ 526.777068][ C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc9000305fcc0 [ 526.777078][ C0] RBP: 0000000000000000 R08: 00002000000000c0 R09: 1ffff9200060bf99 [ 526.777088][ C0] R10: dffffc0000000000 R11: fffff5200060bf9a R12: 00007ffffffff000 [ 526.777098][ C0] R13: 0000200000000310 R14: ffffc9000305fcc0 R15: 0000200000000300 [ 526.777112][ C0] ? _copy_from_user+0x71/0x170 [ 526.777129][ C0] [ 526.777133][ C0] [ 526.777137][ C0] _copy_from_user+0xfa/0x170 [ 526.777151][ C0] iovec_from_user+0x142/0x370 [ 526.777170][ C0] __import_iovec+0x70/0x490 [ 526.777187][ C0] import_iovec+0x6f/0xa0 [ 526.777202][ C0] ___sys_recvmsg+0x4e2/0x5c0 [ 526.777221][ C0] ? __sys_recvmsg+0x280/0x280 [ 526.777245][ C0] ? __fget_files+0x402/0x470 [ 526.777265][ C0] __x64_sys_recvmsg+0x201/0x2d0 [ 526.777282][ C0] ? ___sys_recvmsg+0x5c0/0x5c0 [ 526.777295][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 526.777318][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 526.777336][ C0] do_syscall_64+0x4c/0xa0 [ 526.777350][ C0] ? clear_bhb_loop+0x30/0x80 [ 526.777366][ C0] ? clear_bhb_loop+0x30/0x80 [ 526.777382][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.777412][ C0] RIP: 0033:0x7f189c755199 [ 526.777426][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.777438][ C0] RSP: 002b:00007f189a9ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 526.777454][ C0] RAX: ffffffffffffffda RBX: 00007f189c9dcfa0 RCX: 00007f189c755199 [ 526.777465][ C0] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 526.777474][ C0] RBP: 00007f189c7ec8e0 R08: 0000000000000000 R09: 0000000000000000 [ 526.777482][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.777491][ C0] R13: 00007f189c9dd038 R14: 00007f189c9dcfa0 R15: 00007ffdef970058 [ 526.777510][ C0] [ 526.793833][T17839] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3729'. [ 527.467936][T17840] team0: Device gre0 is of different type [ 527.514489][T17842] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3727'.