last executing test programs: 5m4.941583678s ago: executing program 1 (id=7626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000fff900b70400000000000085000000a4000000b70000000000000095000000000000007920fff9000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 5m4.634079219s ago: executing program 1 (id=7630): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES64=r1, @ANYBLOB="7f426953da3f8f548e000001ac141400000000011c0e0000000000000000000007006f"], 0x230}, 0x8042) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000840)={0x4, 0x80, 0xed, 0x7, 0x0, 0x0, 0x0, 0x0, 0x614, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x80000000000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x2) sendmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0xd18c9b25, &(0x7f0000000900)=[{&(0x7f0000000940)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x20004800) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r3, 0x0) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) (async) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89ed, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040), 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) 5m4.279582975s ago: executing program 1 (id=7632): perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x80000000}, 0x100028, 0x10000, 0x9e4, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="1800000070006bcd9e3fe3dc6e0800a4070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x3, 0x640a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xff81, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0xfffffffe, &(0x7f00000009c0)=[{&(0x7f0000000a00)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x1d, &(0x7f0000000300)=[{&(0x7f0000000340)="2e00000010008188040f80ec59a5a4d33f921921320000005e140602ffffffff0d0013000100000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="1c000000210081044e81f78200"/28, 0x1c}], 0x1}, 0x8c8c0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b\x00'], 0x20) 5m3.304388224s ago: executing program 1 (id=7638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000f2ff00b70400000000000085000000a4000000b70000000000000095000000000000007920fff9000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 5m3.140705401s ago: executing program 1 (id=7639): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x9a) 5m2.683293727s ago: executing program 1 (id=7642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x36, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000780)=""/185, 0xb9}}, 0x7) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x40, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x1) r4 = syz_clone(0x62200300, &(0x7f0000000180)="3622796c3d296bb197226067d7979fef3010f2fb468ffdb54c9881777878d651b953c71913b0d6175e5d2ee5712a2a0e71055f9bf0c5c069beb8bb5dac7729f688f1ee9c60c4f6eb2b9fb03cceec30159276cbcd9b146780ea", 0x59, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e14523e620c6d2527f76f8be87552d9c98cd0cfb5fb5abf61a18201d") r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3, 0x6, 0xc, 0x1, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xf}, 0x4182, 0x9, 0x0, 0x3, 0x8000000000000000, 0x2c5a, 0x2, 0x0, 0xd11, 0x0, 0x24cc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r4, 0xb, r5, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0xf2, 0x6, 0x3, 0x80, 0x0, 0x4, 0x820a1, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000580), 0x8}, 0x1000, 0x3, 0x5cb32d5c, 0x5, 0x2, 0x3, 0x6, 0x0, 0x7b8, 0x0, 0xfffffffffffffffb}, r2, 0xf, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r4, r6, 0x0, 0x4, &(0x7f0000000640)=',+]\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 4m47.621141233s ago: executing program 32 (id=7642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x36, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f0000000780)=""/185, 0xb9}}, 0x7) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x40, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x1) r4 = syz_clone(0x62200300, &(0x7f0000000180)="3622796c3d296bb197226067d7979fef3010f2fb468ffdb54c9881777878d651b953c71913b0d6175e5d2ee5712a2a0e71055f9bf0c5c069beb8bb5dac7729f688f1ee9c60c4f6eb2b9fb03cceec30159276cbcd9b146780ea", 0x59, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="e14523e620c6d2527f76f8be87552d9c98cd0cfb5fb5abf61a18201d") r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3, 0x6, 0xc, 0x1, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xf}, 0x4182, 0x9, 0x0, 0x3, 0x8000000000000000, 0x2c5a, 0x2, 0x0, 0xd11, 0x0, 0x24cc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r4, 0xb, r5, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0xf2, 0x6, 0x3, 0x80, 0x0, 0x4, 0x820a1, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000580), 0x8}, 0x1000, 0x3, 0x5cb32d5c, 0x5, 0x2, 0x3, 0x6, 0x0, 0x7b8, 0x0, 0xfffffffffffffffb}, r2, 0xf, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r4, r6, 0x0, 0x4, &(0x7f0000000640)=',+]\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 28.340002038s ago: executing program 3 (id=8845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0xfd90, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000500), 0x3}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 28.263427286s ago: executing program 3 (id=8846): r0 = syz_clone(0x44000000, &(0x7f00000000c0)="0b5bb5eb9056a4188e7382d3b9418c74cbfc9f04c0e342dc8663f90ff049063d3022ba149d32013256ac9c544629e763503173dbea7cdd053d098c0a3eb27c8f91c8e9beb963e28f3a6dee18e7c8d0ada6f12a03d2978f46b58920ad21bfe069456c2e1723797e7916bc03b15f68cc1d72a8eefd", 0x74, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="addd54d2f9427ec1fac3b903b08959637211decca2052be6b45700035f7f7eadb9bc74ed16fcaca317f41728b993765c28c17e4fcde64737ed79de3301c053b036894b15b02460bf5fb3d323300c22e41c0ad98100e94d0c58b37afe7332a0f1410de0acfd2df771d353eeb3f19f74497aa0f9930457e2ac347bf86f2351e5915bccb49f121313b2c346f486db99a3128d223c8ac4d481da407efe990e19eaa65593a2c571b06233daaa878118ee84fa75127daa4c9ea8108a22bf5da424c3788133d1172b50e499d2c00295fc3adb76858a30f84220df3115") (async) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x9, 0x6, 0x0, 0x0, 0x100000000, 0x83a00, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_config_ext={0x7}, 0x2110, 0x38c, 0x101, 0x0, 0x6, 0x3, 0x1, 0x0, 0x3, 0x0, 0x60000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xd) r2 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x5, 0x4, 0x0, 0x3, 0x0, 0x632, 0xa008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd0da, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x30, 0x4, 0x4, 0x3, 0x5, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x4cad}, r0, 0xc, r1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r3}, 0x18) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000440)={'some', 0x20, 0x5, 0x20, 0x2}, 0x2f) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x422100, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000500)=r5) (async) syz_open_procfs$namespace(r0, &(0x7f0000000540)='ns/mnt\x00') (async) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000580)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000005c0)='^\x00') (async) syz_clone(0x0, &(0x7f0000000600)="5039deadfd5e12d1f18d6f2000a75c3db2aa9e7023a0951ad891e0781f9d9c0e5860965416c18e5d769f99a750fe25bcae44bc42f3d728fb94e3641fc16489f8602745a0c4caef069f207ea0ae92b77d57cabdd7fc79ac290185a2675602cb4b655210bb8af0c6b875cd7680062e5d09d9eb6c2ebb8c598ba492aa6d817cdf9dee30fcb18ec71ed39698bcf3198e24beb8fe6477475fea5392fbeb3285fae036b6f003f9dea27e456461de6e6bdd81d4ac359a624142aab50be14bdaa7a9569fa3643dd2db56421e7c19b03a7f4338eb61a734", 0xd3, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="32b7290462c9585905ef681a245ad4964f7c743d652632d95c88fe1454d2ac5727a2dd207e4259d43a80684e8cd5bb5e91c811692c80ec6059817aebe38e2ba4064c923318a0b8cc0cb9ca6feadb83a80640b78699db2bac74c27a92e0e48d6733665651c172d65aa63dfacc44e08ce2d15b196651f090ff5d8cf1d29b") (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r5}, 0x8) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffb0946430) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000880)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r6, &(0x7f00000008c0)="0442e60fc03749b759773312302cb37c00b12fc014e191d0d86e595f23a71b622986f1a496c734febc88916c116531b54d8968d6969f8e727d163b4fd0398edad12b086a1d9a444d895eb5df", &(0x7f0000000940)=""/60, 0x4}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d00)={&(0x7f00000009c0)="7604567350c92c367384762f99072e211cf199dfac10fe97f5e854819bd227e415128283b4b8b1a6e740f397723be577cc6916720d87acb8320c49ed6bdfeb961d63deed4d0d7eef573a3ccde95b2b53a6d2a78081273133230aa33c31b7905dac9d158b43c359ef18e045b8ac7226e1c3e0383c39ef30ae3d5d274c0e60ccc42dbd2f43b486cc0aee09f0b7dc61047c9da019960e2648d4282ddba77548399a54de7250e4495fd5cb38f090e108031daa4466ce89c08c3c0be2068e61e6db6ed7cefdd008282d2829b2", &(0x7f0000000ac0)=""/124, &(0x7f0000000b40)="24d3ab6fdf320c28e1fbbe1b17ce635bc6617cd84020be0fd82efb8003200b521b056b4b82c756f8a5c2a12610b3d3724817b444a04e9b889493b870b4735bd6012cf55a6d2e6caa7cd7e6549e04e5b0f6c9273441ee52a94c00c99f5b427c7e84b877bf55900ef3c46359a3d2f27e1d622e104a27e9b6593665c372f2cea843ef2252470871685285a7b6b00a4f825d2d035ba595d6fade8b4bac80", &(0x7f0000000c00)="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", 0x9, r5}, 0x38) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000d40)={r6}, 0x8) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x3) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001e80)={&(0x7f0000000d80)="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", &(0x7f0000001d80)=""/122, &(0x7f0000001e00)="6e01b9d24b5b530b4207d65938980ba9dced92b9ccf0d9569dc8e1ee665402c2d7d24c0c96af46f0c9d1fe4ef6b5c3ac1f762e", &(0x7f0000001e40)="8b7b8cb3648aba2bef86dee45cddb703caffb353573a", 0x1, r5, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r8, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x59, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000021c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x1, '\x00', r9, r6, 0x5, 0x3, 0x5}, 0x50) (async) r10 = openat$cgroup_subtree(r6, &(0x7f0000002240), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000002280)={[{0x2b, 'pids'}]}, 0x6) (async) sendmsg$tipc(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000022c0)="7b6fe5602009566459ce6146099091ea3b8dc90fed047864b1d654adc04496579d2f5dbd29480ab2", 0x28}, {&(0x7f0000002300)="8518c71a73092deeaae021703025f3dbcea823c0f80f32e7b5261b9b63a05f0e236f1ba5409c9b54fb5ad1fab7995bf03036d6ba9db216fdf6dfaf770940c8ac1a2e6b41a689510ae9e82166249fdcc5d51327765a73ac3af0a806b8e3f926b215c1cfc4ddcb5c88770e4c446e422f1da32223334803da", 0x77}, {&(0x7f0000002380)="acb2ede934161bea1a6cb08c4d86a7f16a98f6b3216ef6bf641df070643b27ffea2436b2c4998f19b51643b61c675fbd67284fd4d40fdb6a605f1517c2c0373be275e18d122dcbcb47c5204e1f9dd43932831873a9a547a00dbf770c874932a0bb7be3a5b2258ac4aeb93a5b16285421b6e06867ae71767a0d347884c243cd7c6193f795cad3a3230888a550905300bd7818419b0234afc2e3ae8b7f6b5f6b0f043dd8635b575b8971507a3c931cd0db4610b207f3ab26f8bd67652b788bcf77750468b9522d3b8c8ae1fda48870368fea5953f6d381790b08c2df6e6a4070", 0xdf}, {&(0x7f0000002480)="3df7ece85c8559173f2c72fa31a66bb2d75a27b8ea2c4d4b51902fe642a2fed222529e0dd5a7ed22e79c5b15a29b15309a6d53d0e877b5e3ae00f17070a1dc24b450b9e27b6f3a11c221299143d7bc263085836410870914d7a321178fb633948aed0897c231a94faac6969e1317f5f3ac167d34f510fa14dc8d1e2017f431b64152ef1f757331e79cf8f1c716cfcfca6655e1435118e7d4d8ee92e0b1ba6cd02e0124f6b63942ae2e84d71050ba1d66ad9094b0b2d7f45e90bf6201e8896a5eab426144303049ca4b78b9f0b868bd0a418948ed09625a9accea21f33cda32ab698168", 0xe3}], 0x4, &(0x7f00000025c0)="a7a2f2f48878d3f0d9b63f0d00ed8022e17f2d0246997e9a9d07946e599941267bcb0d5d152192ae1c0831d3ba9080465127721327214c41cf5237684a2805d28ee7ece52a40139db56b7d42cf44ab628ad4fe9a51f552131f71621a6dfe54b95c6c000adb59910801c391158ff5a2e594846e5b1a39498fa01f57379925e04ce6df342b9925dbfaa2", 0x89}, 0x4000000) (async) bpf$LINK_DETACH(0x22, &(0x7f00000026c0)=r8, 0x4) (async) perf_event_open(&(0x7f0000002740)={0x2, 0x80, 0x2, 0x9, 0x78, 0x2, 0x0, 0x7ff, 0x80108, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000002700), 0xa}, 0x110a3, 0x80000001, 0x7ff, 0x4, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd182}, r0, 0x6, 0xffffffffffffffff, 0x0) 27.401301674s ago: executing program 3 (id=8858): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x300e0100, &(0x7f0000000040)="fe2dc1a9064552322834bc307e686245c0c7b2e5a953ab947f260c9bc59260a1bd26", 0x22, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="1bf413696d0912a05679aaaee457002b779dde29ab8eced2d5803d37fcadec43") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x3, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xfffffffe, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 26.206971175s ago: executing program 3 (id=8866): socket$kcm(0x21, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xd, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe0a}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%ps \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000840), 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0x6, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x12, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3c32, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x47db8ea7, 0x11, &(0x7f0000000c00)=""/17, 0x100, 0x2c, '\x00', r4, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0x5, 0x5739ff85, 0x3}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000000cc0)=[r6, r7, r8], &(0x7f0000000d00)=[{0x3, 0x4, 0xa}, {0x5, 0x2, 0x7, 0x5}, {0x4, 0x5, 0xf, 0xa}], 0x10, 0x5}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x7, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) 26.014163194s ago: executing program 3 (id=8869): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x5, 0x8, 0x0, 0x0, 0x0, 0x3, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff, 0x0, 0x2, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40010060) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed00007203feff000003f81d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) 25.684978697s ago: executing program 3 (id=8871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @random="0b1eecfa2d8f"}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x30902, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000002c0)) r6 = gettid() r7 = gettid() r8 = syz_clone(0x0, &(0x7f0000001680)="92d2999775e185e93f633d380549f6619405db63fb24c19078e981e1086e5ddc67d07b231c770b45733efaf7e6d6466b81befbabc255658f8ba8cfb8a270e97241c673a0886e9311afc7e9c2146a54992e021de0e120143845b5e0bcbae7c6386ebb8de724b002c80604fcc568881393837383daf97897c6a32032d260a430939595a775797bfa0336d2d04f473619a51d3c53801d804e4f4f68883b3d9d5d92da7662e6f2", 0xa5, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)="bbd0f838d33bc4ef44bacc8da3df472effe2e6ea96b342fedce3b5afc0ba2891465b32d3d09b2386a52c1d488cb39aa6788e5f4bb422783cc1a9b3befda9f99a48db3a1cfcfbdc84bbd118ea6c2758e1d2e1e03431459adef35e4a0f4dc8ada3fa9538ac1e1625c7c2feee65ed8526f1a824c1fd34c6e50c0658424648a5a12a48a79b4666d41bdd5e9263378fd4e12fa9be0d0a6142f1a4dd86fdb1bf7ee6131cba7b473e1e4b44cf9df92b587659f04a03a074dcdfb29f78565bc50db514a9adf6beb82f1a0c66c2f545f12dbc3304e3303426269a03ff2c453a8ca753e3f117217b99f0a49221") r9 = getpid() r10 = openat$cgroup_procs(r3, &(0x7f00000018c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000380)="9550500126db4d4e84d9847ed88d3299264e823d959266af87e1fc6b", 0x1c}, {&(0x7f00000003c0)="4aff3562f5f9ad2ef866ea1a8017799726a877e7d1b7d6afdcb8f4b51757da8f7831245802695d76e95d86da9cfd2fd903b5c321ce4b7da08425f3ee34ee6318d548e16f1b041430f0ce299c556330", 0x4f}, {&(0x7f0000000440)="d89ee19489b45f6c18a4e35a0d2388359b1a87249d76c4dd9882df1b379ed822a644d57b4ce893b35978260be47739896fd26052747708110c94c99fcd88ad1cd1cea837a6a07daf325d704c1cd10dac3d8f49586fb0221372b226b617f74713d43fc5354a7eef1018c7cad5b94285d16a1f2d8344171b440fe3afdcfbfb6eb8ec7d1c72f6a213b6f761a6ceec2690483da201c5c55c12a9d2204a0f5db00a719848", 0xa2}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="ef9e6f65a8d3e52bb865e4d6d082b7f2f0acf31d9e3523bd2cc3efd5328998bd78034f5e527ffbbdd735", 0x2a}, {&(0x7f0000001540)="53e1672d212ad59a7619b1b6192478", 0xf}, {&(0x7f0000001580)="5bd779bdd2317c22f8472e0e1294ffe24afe8e2c5d69089d59c87266c73a225a449a2e92fce711fd788322c3156714c8de86693c6819acfa232ede95c4b62aceac287cc7bef7c6251c108949a6a195a953dbb32b2f20f1ddb4300f7273754eb19a81f32c730532a9de4b0d6009b47084ad54e718429f46334a811f40f19977", 0x7f}], 0x7, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r10, r3]}}], 0x98, 0x40}, 0x4004000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ec0)={r4, 0xe0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000001cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001d00), &(0x7f0000001d40), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000001d80)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1f, 0x2, &(0x7f0000001a00)=@raw=[@ldst={0x1, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, 0x8}, @exit], &(0x7f0000001a40)='syzkaller\x00', 0x4, 0xfb, &(0x7f0000001a80)=""/251, 0x41000, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001bc0)={0x2, 0x5, 0x6, 0xf}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001fc0)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@arena={0x21, 0x0, 0x0, 0x10, 0x40400, r5, 0x40, '\x00', r11, r4, 0x2, 0x2}, 0x50) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000002080)) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000020c0)=r13) write$cgroup_pid(r10, &(0x7f0000002100), 0x12) 18.730259692s ago: executing program 0 (id=8899): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) close(0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000060000000000000000000000850000000f000000850000005000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) close(r1) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9411a36324ea1790e834c", 0xd8}], 0x1}, 0x0) socketpair(0x26, 0x4, 0x6, &(0x7f0000000900)) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/50, 0x32}], 0x1}, 0x0) (async) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0xc0045878, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 18.702802865s ago: executing program 4 (id=8901): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x0, 0x4, 0xd}, {0x10000002, 0x4, 0x100000f, 0x4}], 0x10, 0x4000001}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000400)=r3, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 18.35416722s ago: executing program 4 (id=8903): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x90}, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf01860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e748fafa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f0844307df70f532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fda0f0a04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0001002d8c38a967c1bbe09315c298774009d8c6a16c7da308bcc87dc3addb08141bdee5d2780cfef663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd805deb28c13c1ed1c0d9cae846bcbfa8cce7b893ebc68578af7dc7d5e87d44ff80800000034c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c568cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7dcf050000000000001491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c78974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000400000000000a5accf93bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9c46136a5755c47287eb00000000000000c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b179509bd9f263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a378700000000000000000000000000631ffc86fe0c8124536afbfc6300ee2c00000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e35776e37c2b7772d0873369ba559e4a9ce9a7878a9a46f2a68adae0f3f5c0715b169ff053d8f5ab73d5f738b0edc71a287418ba45a14fd1ab423d9c392d010af2cf1356c6f78d563822afd3e8fb693ef3e1f1c02289e94b15a0a2a58e9c77a6d388004396baf8af32d0bd7fef1597b20e2eec0273012e344628a8ea5bd0a9da43078b95af7186d5bf36a2e31c0ee3e1ec6accd94b7e3b47e52681128c5b6fb2afbffaa52d53080f7ef112fdffffffffffffff0c1f7b4673fc5202bcc1159ba59b9b5c996079b6c2b9cc011470ce48b53c7339135e0a1e7c90b91a84cfaf95af6edc881ca69cb3d869fcd87a294447e3eb627923970281e28528348f9d0157c80ffd70dd45fc9ae550e191e9f88a1f15c2d997c217bb6d5d24e88d07837851b391ffcf3aa2183952ef4d68757c7511179f0984960b907016a4ad6ba19f89794b545f983e94a980f83794c277dd644651d721a0d0546b3e69b8530d9391068d67cfb4fe879c23933ec59d3e728113fdf3a28800512b9cef65523490caa4f5ec30ad6ded9879843ade683b3263197964e752ca77b966ae22e73a0cbbe549306e49d0e11662cf8bcccd8198ef44911ed6b86792086cc6c758d8c4a872041e58685d4134a5ee5063b4bb7e8035442b1cba567cfee96b3b858c9086c907ddddd16414545f1b94b34f081f3e6248699060d62f236b5204993cf42c180f757938a62b5f302cae4a4a7be523be2db61b74bab36d0e63e4469969482ada533c54bdc9c2ad0b7dce02c869e6c853f92d24823036f8b5f4a6f6f89e1a9cd003c714814277f32bd6d535dcc08c992f2938b2e265ff6bfbf38694255c367867d64c50b6f7f2fd131b5b30059ea2ed6bd2b887f808dee79a76d600883085436d79381d7a4a09c4d73f8046c72b206ae3b76429c719f80ab8ff65494f35a75916d81ce89b94ed2e07540d855ebb2e78bfbb354e29d6b905f2573bec68e340472006f3738f004c24edd7c538ad9f25bda4c443bc816a8fb38081adbf5a80f5cd6fde3aadd56a9283dfdcbf7fdd1b44e717c0b405b3261f19b1c38df6331df8e84619ef307875c893a8f0a436ccfb6319000000000000000000000000001f1c8231baae9e6b907826aa7431ee8ee9deb4db6dca3e4fa3df5cd4015a3771c25bff7d305689ff0a71d821fc6ee9d2d0069a6f4cb434e8183796f89825de4d251bbf526a"], &(0x7f0000001e00)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r0, 0x18000000000002a0, 0x13, 0x6000002c, &(0x7f0000001ec0)="b9ff03316844268cb89e14f0082ffee0050000000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff23, &(0x7f0000001fc0), &(0x7f0000002000)}, 0x2c) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000300)={&(0x7f00000005c0)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af0755b798a0", 0x35}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x5, &(0x7f0000000840)=@framed={{}, [@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0x7ffffff8}]}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xa, 0x4c, 0x6, 0x40, 0x0, 0x3, 0x20004, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x1000, 0x3, 0xe, 0x3, 0x7, 0x1ff, 0x40, 0x0, 0x2655, 0x0, 0xa26}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0x2000000000000216, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='devices.list\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000c40)={0x0, 0x2, &(0x7f0000000c80)=[{&(0x7f0000001fc0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r5, &(0x7f0000002fc0)=ANY=[], 0xfffffeff) recvmsg$unix(r6, &(0x7f0000003000)={0x0, 0x0, 0x0}, 0x10061) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="e03f030010000b0fd25a806c8c6f", 0xe}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0xff0b}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) 18.351856561s ago: executing program 0 (id=8904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500f900a4000000b70000000000000095000000000000007920fff9000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 18.216629364s ago: executing program 0 (id=8905): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000180), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="2705021d59feff00060000", 0xb}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208003f00410100000000a8001600a400014020000900feffff7f3626feffff94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cea5d0ab06f4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca8a00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a00000000000", 0xd8}], 0x1}, 0x2000c040) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000180), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="2705021d59feff00060000", 0xb}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208003f00410100000000a8001600a400014020000900feffff7f3626feffff94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cea5d0ab06f4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca8a00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a00000000000", 0xd8}], 0x1}, 0x2000c040) (async) 18.135623513s ago: executing program 2 (id=8906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000000000000015c0fbded45942aa552718b3bf24ae000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1401, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffd, 0x0, @perf_bp={0x0, 0x7}, 0x19cfa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r3 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000ac0)={0x1, 0x3e, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x18080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000b80), 0x4) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000c80)={&(0x7f0000000cc0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @local, 0x6}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a"], 0x10b8}, 0x106) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/8, 0x8}, 0x0) sendmsg$inet(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020011000200060006c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000011"], 0x0, 0x4d}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r9, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.020345574s ago: executing program 0 (id=8907): socket$kcm(0x29, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000580)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000020000004404a60007036f001c"], 0x38}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000016000000ff0100000300000000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x80080, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000001780)='GPL\x00', 0x4, 0x100d, &(0x7f0000002f00)=""/4109, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x3, 0x3, &(0x7f0000002880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000028c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x6, 0x13, &(0x7f00000029c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000002a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000002c80)=r5, 0x120) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000002d40)=r10, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 17.885300078s ago: executing program 2 (id=8908): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r0, 0x0, 0x10001) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x61) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)) openat$cgroup_ro(r2, &(0x7f00000006c0)='cgroup.stat\x00', 0x60ff, 0x8cffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='\"', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x97) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd2, 0x0, 0x3c, 0x24, &(0x7f0000000ac0), 0x0, 0x0, 0xcf, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="cb195064", 0x4}], 0x1}, 0x20004850) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 17.721888884s ago: executing program 2 (id=8909): r0 = socket$kcm(0x15, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001980)={r0, &(0x7f0000000500)="3f03e2a6bf1fbfbfdf7827523665e4306bb4247a2481c0dc087c1deff0aa3a7bc82780c6999d3d24f424bb34fd018bfb8d5fb0293c39a525e9f7c2995a5b31e8345c983b31a40c81e7ab36ce0f4930953babd2ffb15f06f201fea063f227c830e202e3449a784579b96ef2772547465b89ee20a7af2eef44981c96588539168de74f1ed9183624c68ff139c6492b28045268bdb2941943c0098ba359ef816d7d38350ecc5b59e314919e2dd1ce43b6ffc3c8e4b06eae8cc316a7cd8e77f87c731f2325a77e9741222c874380334d", &(0x7f0000000980)=""/4096}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{0x1, 0xffffffffffffffff}, &(0x7f0000002180), &(0x7f00000021c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r3}, &(0x7f0000002240), &(0x7f0000002280)=r1}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000300)="ddda5660ba3bf6a137a75f6383775665891e08c5c6", &(0x7f0000000600)=""/80, &(0x7f0000000680)="5756e0fbd35fbed6d31a664b757816b6a5c713c84b1ef392a58b4be3685ca4cff6", &(0x7f00000006c0)="ee58adeed06f10417dff84ea7654c9e144eaad5d0a243893e9f4b23437eb664817c9433f64fec010af5a44f60dc03700683c50700ff511842b62eef93643b9463cc8d3d2311d6ee4a80247655086df4c7f9e092016c0210ae98dc1", 0xd142, r2}, 0x38) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x3da, 0x0, r2, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={r1, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0], 0x0, 0xcb, &(0x7f0000001bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e80)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f00)=@bpf_lsm={0x1a, 0x3, &(0x7f0000001fc0)=@framed, &(0x7f0000002000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x8, 0x17, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x7, 0xb, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0xc, 0x1, 0x1, 0x10, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @generic={0x5, 0xc, 0x6, 0x3ff, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f00000019c0)='GPL\x00', 0x1, 0x9b, &(0x7f0000001a00)=""/155, 0x41000, 0x12, '\x00', r5, @fallback=0x28, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e40)={0x5, 0xc, 0x0, 0x7}, 0x10, r7, r1, 0x3, &(0x7f0000002040)=[r2, r2, r1, r2, r2], &(0x7f0000002080)=[{0x5, 0x3, 0xa, 0x2}, {0x4, 0x1, 0xe, 0x8}, {0x4, 0x4, 0x5, 0x9}], 0x10, 0x10000}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b37, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x8, 0x10, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x102000, 0x2, 0x0, 0x9, 0x7ff, 0x1, 0x789, 0x0, 0xe, 0x0, 0xff}, 0x0, 0x4, 0xffffffffffffffff, 0x8) sendmsg$sock(r9, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)}, 0x4004011) bpf$MAP_CREATE(0x20000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000bd6c9b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002300)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002340)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 17.354255092s ago: executing program 4 (id=8910): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x73, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f00000003c0), 0x0}, 0x20) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r3, &(0x7f0000000e80)={&(0x7f0000000740)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)="99", 0x1}], 0x1}, 0x20000040) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r3) 17.301437567s ago: executing program 4 (id=8911): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.cpus\x00', 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000c00)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x5, 0x1, 0x0, &(0x7f0000000cc0)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff80fe, 0x200}, 0x50) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000d00), 0x4) sendmsg$kcm(r2, &(0x7f0000000d40)={&(0x7f0000000d80)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000e40)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000f40)="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", 0x1d2}], 0x2}, 0x8001) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r8}, 0xc) r9 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfff}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000050000ed25c9da062f", @ANYRES32=0x1], 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="150000002a000000", @ANYRES16=r6, @ANYBLOB="55d9b31974b8ee6fb4d2a407dcd033bab4712bf43e2893bdeb3e5fa510bd93b587807feecc834c8961f07b94853a51954446", @ANYRES32, @ANYRES64=r2], 0x20) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x20000, 0x0) 17.17411392s ago: executing program 2 (id=8912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000001e80)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000001ec0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000002ec0)=r5, 0x120) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 17.07441217s ago: executing program 0 (id=8913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000003a4000000b70000000000000095000000000000007920fff9000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 17.07174034s ago: executing program 4 (id=8914): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x68a48, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0xa11f, 0xc8, 0x2, 0x1, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000064) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'veth1_macvtap\x00'}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 17.016459686s ago: executing program 0 (id=8915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x6, [{0xb, 0x2, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x0, 0x61]}}, &(0x7f00000006c0)=""/100, 0x38, 0x64, 0x1, 0x6}, 0x28) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0) close(r4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1}, &(0x7f0000000880), &(0x7f00000008c0)='%pI4 \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r6, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2dc0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000580)=""/210, 0x1f00, 0x3e, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0x4, 0x6, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r4, r5, r8, 0x1, r6, r7, r8, 0x1], &(0x7f0000000b00)=[{0x4, 0x2, 0xf, 0x4}, {0x0, 0x2, 0x5, 0x1}, {0x2, 0x1, 0xf, 0x8}, {0x4, 0x5, 0x6, 0x9}, {0x1, 0x1, 0x7, 0x2}, {0x3, 0x4, 0x8, 0x5}, {0x0, 0x3, 0x6, 0x3}, {0x3, 0x5, 0x6, 0x5}, {0x4, 0x3, 0x9}, {0x0, 0x3, 0xd, 0x2}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000e00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x5, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 16.998505967s ago: executing program 4 (id=8916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000c0000004340"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r4, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x1a123, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x3, 0x1, 0xa0, 0x9b9b, 0x8, 0x0, 0xfffffffd, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000000)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0xffffffffffffff8b, 0x75, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x117, 0x117, 0x3, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @datasec={0xd, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}, {0x3, 0x1, 0xff}], 'c='}, @struct={0xf, 0x6, 0x0, 0x4, 0x1, 0x8, [{0x7, 0x4, 0x1ff}, {0x1, 0x1, 0x5}, {0x5, 0x1, 0x7}, {0x2, 0x3, 0x8e35}, {0x8}, {0x8, 0x4, 0x6}]}, @datasec={0x4, 0x8, 0x0, 0xf, 0x1, [{0x5, 0xa2eb, 0x6}, {0x2, 0xf0a, 0x3}, {0x1, 0xe, 0x8}, {0x5, 0x3, 0xc}, {0x3, 0x3, 0x8}, {0x1, 0x3, 0x2c39}, {0x3, 0x2, 0xc}, {0x1, 0xffff645e, 0x7}], "a6"}, @ptr={0xc}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000001980)=""/133, 0x133, 0x85, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xe8, '\x00', r6, r7, 0x4, 0x5, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000001b40)='syz1\x00', 0x1ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter={0x1e, 0x0, 0x2, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001c00)={r9, 0x0, &(0x7f0000001c40)=""/53}, 0x20) r10 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r10, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r10, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d40)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r11 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r11, &(0x7f0000001040)={&(0x7f0000001080)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000780)="00000000000000000064cd202ebae74105c8a1a3e3dec67e1dcf2a27db5e681eea168b233b0c049968b3b7d590ff8f4762e6eaf0af8fd509000000c587f39f3bfd05e9027c4248f00e4662d3ec034edebb723f338f2bc289d9b368dc3f81bf8c0759ba279725ec06428642d2b6aac9cb43544ab1ab1d5ec802b283564a11644aa04dc921948ea702feb912170000000000", 0x91}], 0x1}, 0x20000040) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f00000011c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\\', 0x1}], 0x1}, 0x4000040) 16.722283385s ago: executing program 2 (id=8917): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x116418, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x23, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@arena={0x21, 0x0, 0x0, 0x12, 0x40000, r0, 0x7, '\x00', r1, r2, 0x0, 0x4, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000000900)="90477698a4e81dbc3edb0bad07c684dc0bc1e3be263c1403dc962a06e276d1dddde9a52167b43d2821b7816142d85796b0286f94cab98de07a8b27cc1fd9bea20c16a26394e5c249f83b89e677fa7b9fc3044a59dc405a6899dec00692c10cccaabca0e797ffb3ac22360419ca2dc97842676234a745905490b9af500fefee9aeb7a6536d1c03dc2b46094c80fb9b4873978992de1fec6e842dc545606e3a3", &(0x7f00000009c0)=""/106}, 0x20) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000600)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f4f94007134cf6ee08000a0e408f0d8ef52a9d7c7c0b7a196e6f66102383c5dd612c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf630000215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809", 0xd8}], 0x1}, 0x48004) write$cgroup_type(r3, &(0x7f0000000680), 0x11ffffce1) 15.829939876s ago: executing program 2 (id=8918): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000400)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, 0x0, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000011c0000000000000000000001040000002000000005000000e2"], 0x0, 0x80}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ac0)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000b00)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbc}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x64039, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85fc, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x4005, 0x35, 0x43a1bd78, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xf2a}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000000000670376000"/28]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0xc7, 0xad, &(0x7f0000000240)="f87f5f47d1bdb03f7412bdebd78aa271ef5da90fcc1afe4942a6c09f9c33a95ea8ae444d9a977f3e6246eb2255b3f6a07df1bff92d9b9b36194fbfa1870a70529c5612d3f279bfc85bb33f649486f09acf8b0b5a92e0a3f9bd2d9c4f899697669bfef84e9dbdbb86b8b2643607debd2014c0190a7a19530ce893c562904a5f7f6f7eab5efac156e195552ecb9c3db18408755f50604810c1c34c96f568607426cff20913e2dd07a31eb7a7adbe8c14013245a4c3e51d910dc66f6cd12ebbe36dcf3ac96b6851ce", &(0x7f0000000340)=""/173, 0x7, 0x0, 0xf9, 0xe0, &(0x7f0000000580)="8d20ccf0b3262eec750621adb440f2de7dac27a49504459cef606f7b02568bf93b4e0d48c42cc82f96acc576e9408fe45b1e6b14e43ff0d6d23223b55c9e33233c80651d6365389f18dbf5277a1cd82b429c9417adf5aada664bcc745b214bccee278190759c8e7bd3150d94168453788971babfb45dbfb9b463a006cf5e63834a2b8333357abf3170a467da43d0242b8f1dbd3b3b2d7761bfc34102d75ff23426bd621894085e138f457d0070cba6b22b1d38591b6e33a4d5968acb3d0a2185018128f238d7453bbd87a360f997b42a9a5ae15bae6c34bd3823b9370d8f6a6c702496d7f35f4ce5ff494bb16a1fb7f6f097be930215ef42c4", &(0x7f0000000680)="d933c2c5f76ec7223cd0a4d4261999934b344ea4b4e3cb47df79ce94ff46ca3c702e287520efca8dcf1b61bba84828c16b41a1a6abd8bb237dd2e73fbd02f13bf6d13c3a1b05bddb593ca7b361369aed3958de6d7cf7fe640e8774feade7a80704d62f8b853ea746d6eda9f13099dc76f4bceb4e2bc646cc161d528aeb7dbf8641f5e69c281928a5abaf68113abf1bafdd9656e3e391fd41e374efd2ee5b7bf17cb4c081d49eead739856f1d225f5f74ac3508a1787358f997d26ba5feb29b30f611489771254ad4f452888364761e953b90a77797d574a1b20132f97b211b2a", 0x3, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff067f"}) 9.77307111s ago: executing program 33 (id=8871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @random="0b1eecfa2d8f"}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x30902, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000002c0)) r6 = gettid() r7 = gettid() r8 = syz_clone(0x0, &(0x7f0000001680)="92d2999775e185e93f633d380549f6619405db63fb24c19078e981e1086e5ddc67d07b231c770b45733efaf7e6d6466b81befbabc255658f8ba8cfb8a270e97241c673a0886e9311afc7e9c2146a54992e021de0e120143845b5e0bcbae7c6386ebb8de724b002c80604fcc568881393837383daf97897c6a32032d260a430939595a775797bfa0336d2d04f473619a51d3c53801d804e4f4f68883b3d9d5d92da7662e6f2", 0xa5, &(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)="bbd0f838d33bc4ef44bacc8da3df472effe2e6ea96b342fedce3b5afc0ba2891465b32d3d09b2386a52c1d488cb39aa6788e5f4bb422783cc1a9b3befda9f99a48db3a1cfcfbdc84bbd118ea6c2758e1d2e1e03431459adef35e4a0f4dc8ada3fa9538ac1e1625c7c2feee65ed8526f1a824c1fd34c6e50c0658424648a5a12a48a79b4666d41bdd5e9263378fd4e12fa9be0d0a6142f1a4dd86fdb1bf7ee6131cba7b473e1e4b44cf9df92b587659f04a03a074dcdfb29f78565bc50db514a9adf6beb82f1a0c66c2f545f12dbc3304e3303426269a03ff2c453a8ca753e3f117217b99f0a49221") r9 = getpid() r10 = openat$cgroup_procs(r3, &(0x7f00000018c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000380)="9550500126db4d4e84d9847ed88d3299264e823d959266af87e1fc6b", 0x1c}, {&(0x7f00000003c0)="4aff3562f5f9ad2ef866ea1a8017799726a877e7d1b7d6afdcb8f4b51757da8f7831245802695d76e95d86da9cfd2fd903b5c321ce4b7da08425f3ee34ee6318d548e16f1b041430f0ce299c556330", 0x4f}, {&(0x7f0000000440)="d89ee19489b45f6c18a4e35a0d2388359b1a87249d76c4dd9882df1b379ed822a644d57b4ce893b35978260be47739896fd26052747708110c94c99fcd88ad1cd1cea837a6a07daf325d704c1cd10dac3d8f49586fb0221372b226b617f74713d43fc5354a7eef1018c7cad5b94285d16a1f2d8344171b440fe3afdcfbfb6eb8ec7d1c72f6a213b6f761a6ceec2690483da201c5c55c12a9d2204a0f5db00a719848", 0xa2}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="ef9e6f65a8d3e52bb865e4d6d082b7f2f0acf31d9e3523bd2cc3efd5328998bd78034f5e527ffbbdd735", 0x2a}, {&(0x7f0000001540)="53e1672d212ad59a7619b1b6192478", 0xf}, {&(0x7f0000001580)="5bd779bdd2317c22f8472e0e1294ffe24afe8e2c5d69089d59c87266c73a225a449a2e92fce711fd788322c3156714c8de86693c6819acfa232ede95c4b62aceac287cc7bef7c6251c108949a6a195a953dbb32b2f20f1ddb4300f7273754eb19a81f32c730532a9de4b0d6009b47084ad54e718429f46334a811f40f19977", 0x7f}], 0x7, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r10, r3]}}], 0x98, 0x40}, 0x4004000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ec0)={r4, 0xe0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000001cc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001d00), &(0x7f0000001d40), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000001d80)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1f, 0x2, &(0x7f0000001a00)=@raw=[@ldst={0x1, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, 0x8}, @exit], &(0x7f0000001a40)='syzkaller\x00', 0x4, 0xfb, &(0x7f0000001a80)=""/251, 0x41000, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001b80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001bc0)={0x2, 0x5, 0x6, 0xf}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001fc0)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@arena={0x21, 0x0, 0x0, 0x10, 0x40400, r5, 0x40, '\x00', r11, r4, 0x2, 0x2}, 0x50) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000002080)) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000020c0)=r13) write$cgroup_pid(r10, &(0x7f0000002100), 0x12) 1.67635514s ago: executing program 34 (id=8915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x6, [{0xb, 0x2, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x0, 0x61]}}, &(0x7f00000006c0)=""/100, 0x38, 0x64, 0x1, 0x6}, 0x28) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0) close(r4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1}, &(0x7f0000000880), &(0x7f00000008c0)='%pI4 \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r6, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2dc0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000580)=""/210, 0x1f00, 0x3e, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0x4, 0x6, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[r4, r5, r8, 0x1, r6, r7, r8, 0x1], &(0x7f0000000b00)=[{0x4, 0x2, 0xf, 0x4}, {0x0, 0x2, 0x5, 0x1}, {0x2, 0x1, 0xf, 0x8}, {0x4, 0x5, 0x6, 0x9}, {0x1, 0x1, 0x7, 0x2}, {0x3, 0x4, 0x8, 0x5}, {0x0, 0x3, 0x6, 0x3}, {0x3, 0x5, 0x6, 0x5}, {0x4, 0x3, 0x9}, {0x0, 0x3, 0xd, 0x2}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000e00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x5, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r10, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.585809659s ago: executing program 35 (id=8916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000c0000004340"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r4, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x1a123, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="e03f03002a000b05d25a806c8c6f94f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x3, 0x1, 0xa0, 0x9b9b, 0x8, 0x0, 0xfffffffd, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000000)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0xffffffffffffff8b, 0x75, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x117, 0x117, 0x3, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @datasec={0xd, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x2}, {0x3, 0x1, 0xff}], 'c='}, @struct={0xf, 0x6, 0x0, 0x4, 0x1, 0x8, [{0x7, 0x4, 0x1ff}, {0x1, 0x1, 0x5}, {0x5, 0x1, 0x7}, {0x2, 0x3, 0x8e35}, {0x8}, {0x8, 0x4, 0x6}]}, @datasec={0x4, 0x8, 0x0, 0xf, 0x1, [{0x5, 0xa2eb, 0x6}, {0x2, 0xf0a, 0x3}, {0x1, 0xe, 0x8}, {0x5, 0x3, 0xc}, {0x3, 0x3, 0x8}, {0x1, 0x3, 0x2c39}, {0x3, 0x2, 0xc}, {0x1, 0xffff645e, 0x7}], "a6"}, @ptr={0xc}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000001980)=""/133, 0x133, 0x85, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xe8, '\x00', r6, r7, 0x4, 0x5, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000001b40)='syz1\x00', 0x1ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter={0x1e, 0x0, 0x2, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001c00)={r9, 0x0, &(0x7f0000001c40)=""/53}, 0x20) r10 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r10, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r10, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d40)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r11 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r11, &(0x7f0000001040)={&(0x7f0000001080)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000780)="00000000000000000064cd202ebae74105c8a1a3e3dec67e1dcf2a27db5e681eea168b233b0c049968b3b7d590ff8f4762e6eaf0af8fd509000000c587f39f3bfd05e9027c4248f00e4662d3ec034edebb723f338f2bc289d9b368dc3f81bf8c0759ba279725ec06428642d2b6aac9cb43544ab1ab1d5ec802b283564a11644aa04dc921948ea702feb912170000000000", 0x91}], 0x1}, 0x20000040) sendmsg$inet(r11, &(0x7f0000001180)={&(0x7f00000011c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001240)='\\', 0x1}], 0x1}, 0x4000040) 0s ago: executing program 36 (id=8918): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000400)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, 0x0, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000011c0000000000000000000001040000002000000005000000e2"], 0x0, 0x80}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ac0)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000b00)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbc}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x64039, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85fc, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x4005, 0x35, 0x43a1bd78, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xf2a}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000000000000670376000"/28]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0xc7, 0xad, &(0x7f0000000240)="f87f5f47d1bdb03f7412bdebd78aa271ef5da90fcc1afe4942a6c09f9c33a95ea8ae444d9a977f3e6246eb2255b3f6a07df1bff92d9b9b36194fbfa1870a70529c5612d3f279bfc85bb33f649486f09acf8b0b5a92e0a3f9bd2d9c4f899697669bfef84e9dbdbb86b8b2643607debd2014c0190a7a19530ce893c562904a5f7f6f7eab5efac156e195552ecb9c3db18408755f50604810c1c34c96f568607426cff20913e2dd07a31eb7a7adbe8c14013245a4c3e51d910dc66f6cd12ebbe36dcf3ac96b6851ce", &(0x7f0000000340)=""/173, 0x7, 0x0, 0xf9, 0xe0, &(0x7f0000000580)="8d20ccf0b3262eec750621adb440f2de7dac27a49504459cef606f7b02568bf93b4e0d48c42cc82f96acc576e9408fe45b1e6b14e43ff0d6d23223b55c9e33233c80651d6365389f18dbf5277a1cd82b429c9417adf5aada664bcc745b214bccee278190759c8e7bd3150d94168453788971babfb45dbfb9b463a006cf5e63834a2b8333357abf3170a467da43d0242b8f1dbd3b3b2d7761bfc34102d75ff23426bd621894085e138f457d0070cba6b22b1d38591b6e33a4d5968acb3d0a2185018128f238d7453bbd87a360f997b42a9a5ae15bae6c34bd3823b9370d8f6a6c702496d7f35f4ce5ff494bb16a1fb7f6f097be930215ef42c4", &(0x7f0000000680)="d933c2c5f76ec7223cd0a4d4261999934b344ea4b4e3cb47df79ce94ff46ca3c702e287520efca8dcf1b61bba84828c16b41a1a6abd8bb237dd2e73fbd02f13bf6d13c3a1b05bddb593ca7b361369aed3958de6d7cf7fe640e8774feade7a80704d62f8b853ea746d6eda9f13099dc76f4bceb4e2bc646cc161d528aeb7dbf8641f5e69c281928a5abaf68113abf1bafdd9656e3e391fd41e374efd2ee5b7bf17cb4c081d49eead739856f1d225f5f74ac3508a1787358f997d26ba5feb29b30f611489771254ad4f452888364761e953b90a77797d574a1b20132f97b211b2a", 0x3, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff067f"}) kernel console output (not intermixed with test programs): [T31029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.049103][T31029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.266401][T14315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.294977][T14315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.373476][T14315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.381357][T14315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.505908][T31430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1424.513041][T31430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1424.620737][T31433] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7466'. [ 1424.816658][T31438] netlink: 'syz.3.7468': attribute type 21 has an invalid length. [ 1424.825817][T31438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1424.932249][T31440] netlink: 'syz.0.7469': attribute type 29 has an invalid length. [ 1427.054397][T31460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1427.061837][T31460] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.069542][T31460] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.077059][T31460] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.726799][T31474] netlink: 'syz.2.7476': attribute type 10 has an invalid length. [ 1427.751642][T31474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7476'. [ 1427.791546][T31474] batadv_slave_0: entered promiscuous mode [ 1427.804987][T31474] batadv_slave_0: entered allmulticast mode [ 1427.829455][T31474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1427.872696][T31474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.339478][T31474] bridge0: port 3(batadv_slave_0) entered blocking state [ 1428.365566][T31474] bridge0: port 3(batadv_slave_0) entered disabled state [ 1428.426998][T31474] bridge0: port 3(batadv_slave_0) entered blocking state [ 1428.438781][T31474] bridge0: port 3(batadv_slave_0) entered forwarding state [ 1428.658040][T31496] netlink: 'syz.1.7484': attribute type 49 has an invalid length. [ 1428.687593][T31496] netlink: 'syz.1.7484': attribute type 49 has an invalid length. [ 1428.765555][T31496] netlink: 'syz.1.7484': attribute type 19 has an invalid length. [ 1428.784998][T31496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7484'. [ 1429.184121][T31510] netlink: 'syz.2.7490': attribute type 10 has an invalid length. [ 1429.315279][T31510] team0: Device vxcan1 is of different type [ 1429.921647][T31526] bridge0: port 3(ip6gretap0) entered blocking state [ 1429.956391][T31526] bridge0: port 3(ip6gretap0) entered disabled state [ 1430.002110][T31526] ip6gretap0: entered allmulticast mode [ 1430.030996][T31526] ip6gretap0: entered promiscuous mode [ 1430.044639][T31526] bridge0: port 3(ip6gretap0) entered blocking state [ 1430.051515][T31526] bridge0: port 3(ip6gretap0) entered forwarding state [ 1431.013544][T31564] netlink: 'syz.1.7504': attribute type 29 has an invalid length. [ 1431.021438][T31564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7504'. [ 1431.070600][T31564] netlink: 'syz.1.7504': attribute type 29 has an invalid length. [ 1431.099008][T31564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7504'. [ 1431.308321][T31577] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7507'. [ 1431.320723][T31574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1431.340057][T31577] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1431.550095][T31586] FAULT_INJECTION: forcing a failure. [ 1431.550095][T31586] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.563200][T31586] CPU: 0 PID: 31586 Comm: syz.2.7510 Not tainted syzkaller #0 [ 1431.570707][T31586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1431.580808][T31586] Call Trace: [ 1431.584130][T31586] [ 1431.587109][T31586] dump_stack_lvl+0x18c/0x250 [ 1431.591864][T31586] ? show_regs_print_info+0x20/0x20 [ 1431.597125][T31586] ? load_image+0x420/0x420 [ 1431.601682][T31586] ? verify_lock_unused+0x140/0x140 [ 1431.606953][T31586] ? perf_trace_lock_acquire+0x105/0x400 [ 1431.612641][T31586] should_fail_ex+0x394/0x4c0 [ 1431.617376][T31586] should_failslab+0x9/0x20 [ 1431.621940][T31586] slab_pre_alloc_hook+0x59/0x300 [ 1431.627012][T31586] ? nsim_fib_event_nb+0x187/0x1040 [ 1431.632259][T31586] __kmem_cache_alloc_node+0x53/0x260 [ 1431.637666][T31586] ? nsim_fib_event_nb+0x187/0x1040 [ 1431.642897][T31586] kmalloc_trace+0x2a/0xe0 [ 1431.647381][T31586] nsim_fib_event_nb+0x187/0x1040 [ 1431.652470][T31586] ? read_lock_is_recursive+0x20/0x20 [ 1431.657879][T31586] notifier_call_chain+0x18f/0x380 [ 1431.663021][T31586] ? atomic_notifier_call_chain+0x26/0x180 [ 1431.668859][T31586] atomic_notifier_call_chain+0xda/0x180 [ 1431.674552][T31586] call_fib_notifiers+0x31/0x60 [ 1431.679441][T31586] fib6_del+0xfb1/0x1590 [ 1431.683708][T31586] ? fib6_del+0x671/0x1590 [ 1431.688173][T31586] ? fib6_locate_1+0x6b0/0x6b0 [ 1431.692965][T31586] ? do_raw_spin_lock+0x11f/0x2b0 [ 1431.698023][T31586] ? ip6_route_del+0xe3/0x14f0 [ 1431.702874][T31586] ? __ip6_del_rt_siblings+0xa2/0x7b0 [ 1431.708274][T31586] __ip6_del_rt_siblings+0x4a9/0x7b0 [ 1431.713588][T31586] ip6_route_del+0x142e/0x14f0 [ 1431.718390][T31586] ? ip6_route_del+0xe3/0x14f0 [ 1431.723206][T31586] ? mutex_lock_nested+0x20/0x20 [ 1431.728176][T31586] ? ipv6_route_ioctl+0x500/0x500 [ 1431.733256][T31586] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1431.739033][T31586] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1431.744811][T31586] ipv6_route_ioctl+0x384/0x500 [ 1431.749715][T31586] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 1431.755311][T31586] ? __might_fault+0xaa/0x120 [ 1431.760038][T31586] ? __might_fault+0xc6/0x120 [ 1431.764748][T31586] ? __might_fault+0xaa/0x120 [ 1431.769466][T31586] inet6_ioctl+0x247/0x2d0 [ 1431.773984][T31586] ? inet6_getname+0x670/0x670 [ 1431.778786][T31586] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1431.784294][T31586] sock_do_ioctl+0xfc/0x310 [ 1431.788833][T31586] ? sock_show_fdinfo+0xb0/0xb0 [ 1431.793761][T31586] sock_ioctl+0x5be/0x7e0 [ 1431.798131][T31586] ? sock_poll+0x460/0x460 [ 1431.802590][T31586] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1431.807552][T31586] ? security_file_ioctl+0x80/0xa0 [ 1431.812692][T31586] ? sock_poll+0x460/0x460 [ 1431.817135][T31586] __se_sys_ioctl+0xfd/0x170 [ 1431.821780][T31586] do_syscall_64+0x55/0xb0 [ 1431.826232][T31586] ? clear_bhb_loop+0x40/0x90 [ 1431.830941][T31586] ? clear_bhb_loop+0x40/0x90 [ 1431.835649][T31586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1431.841572][T31586] RIP: 0033:0x7f350dd9fb19 [ 1431.846011][T31586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.865638][T31586] RSP: 002b:00007f350ed3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.874089][T31586] RAX: ffffffffffffffda RBX: 00007f350e025fa0 RCX: 00007f350dd9fb19 [ 1431.882085][T31586] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 1431.890088][T31586] RBP: 00007f350ed3d090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.898082][T31586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.906074][T31586] R13: 00007f350e026038 R14: 00007f350e025fa0 R15: 00007ffc3d01ec88 [ 1431.914080][T31586] [ 1431.947202][T31589] netlink: 'syz.1.7511': attribute type 21 has an invalid length. [ 1431.963724][T31589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7511'. [ 1432.080440][T31594] netlink: 'syz.2.7513': attribute type 21 has an invalid length. [ 1432.996008][T31625] netlink: 'syz.3.7519': attribute type 10 has an invalid length. [ 1433.415667][T31625] macvlan1: entered allmulticast mode [ 1433.441919][T31625] veth1_vlan: entered allmulticast mode [ 1433.468717][T31625] team0: Port device macvlan1 added [ 1433.477177][T31618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.656152][T31633] FAULT_INJECTION: forcing a failure. [ 1433.656152][T31633] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.668939][T31633] CPU: 1 PID: 31633 Comm: syz.0.7521 Not tainted syzkaller #0 [ 1433.676453][T31633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1433.686551][T31633] Call Trace: [ 1433.689875][T31633] [ 1433.692857][T31633] dump_stack_lvl+0x18c/0x250 [ 1433.697590][T31633] ? fib6_del+0xfb1/0x1590 [ 1433.702054][T31633] ? ip6_route_del+0x142e/0x14f0 [ 1433.707063][T31633] ? show_regs_print_info+0x20/0x20 [ 1433.712336][T31633] ? load_image+0x420/0x420 [ 1433.716943][T31633] should_fail_ex+0x394/0x4c0 [ 1433.721696][T31633] should_failslab+0x9/0x20 [ 1433.726254][T31633] slab_pre_alloc_hook+0x59/0x300 [ 1433.731355][T31633] ? nsim_fib_event_nb+0x293/0x1040 [ 1433.736621][T31633] ? nsim_fib_event_nb+0x293/0x1040 [ 1433.741896][T31633] __kmem_cache_alloc_node+0x53/0x260 [ 1433.747347][T31633] ? nsim_fib_event_nb+0x293/0x1040 [ 1433.752603][T31633] __kmalloc+0xa7/0x240 [ 1433.756820][T31633] nsim_fib_event_nb+0x293/0x1040 [ 1433.761936][T31633] notifier_call_chain+0x18f/0x380 [ 1433.767086][T31633] ? atomic_notifier_call_chain+0x26/0x180 [ 1433.772931][T31633] atomic_notifier_call_chain+0xda/0x180 [ 1433.778605][T31633] call_fib_notifiers+0x31/0x60 [ 1433.783506][T31633] fib6_del+0xfb1/0x1590 [ 1433.787827][T31633] ? fib6_del+0x671/0x1590 [ 1433.792339][T31633] ? fib6_locate_1+0x6b0/0x6b0 [ 1433.797142][T31633] ? do_raw_spin_lock+0x11f/0x2b0 [ 1433.802238][T31633] ? ip6_route_del+0xe3/0x14f0 [ 1433.807060][T31633] ? __ip6_del_rt_siblings+0xa2/0x7b0 [ 1433.812490][T31633] __ip6_del_rt_siblings+0x4a9/0x7b0 [ 1433.817857][T31633] ip6_route_del+0x142e/0x14f0 [ 1433.822663][T31633] ? ip6_route_del+0xe3/0x14f0 [ 1433.827492][T31633] ? mutex_lock_nested+0x20/0x20 [ 1433.832462][T31633] ? ipv6_route_ioctl+0x500/0x500 [ 1433.837529][T31633] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1433.843318][T31633] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1433.849107][T31633] ipv6_route_ioctl+0x384/0x500 [ 1433.854028][T31633] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 1433.859645][T31633] ? __might_fault+0xaa/0x120 [ 1433.864353][T31633] ? __might_fault+0xc6/0x120 [ 1433.869067][T31633] ? __might_fault+0xaa/0x120 [ 1433.873804][T31633] inet6_ioctl+0x247/0x2d0 [ 1433.878261][T31633] ? inet6_getname+0x670/0x670 [ 1433.883086][T31633] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1433.888605][T31633] sock_do_ioctl+0xfc/0x310 [ 1433.893149][T31633] ? sock_show_fdinfo+0xb0/0xb0 [ 1433.898064][T31633] sock_ioctl+0x5be/0x7e0 [ 1433.902437][T31633] ? sock_poll+0x460/0x460 [ 1433.906904][T31633] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1433.911876][T31633] ? security_file_ioctl+0x80/0xa0 [ 1433.917029][T31633] ? sock_poll+0x460/0x460 [ 1433.921512][T31633] __se_sys_ioctl+0xfd/0x170 [ 1433.926165][T31633] do_syscall_64+0x55/0xb0 [ 1433.930661][T31633] ? clear_bhb_loop+0x40/0x90 [ 1433.935379][T31633] ? clear_bhb_loop+0x40/0x90 [ 1433.940107][T31633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1433.946063][T31633] RIP: 0033:0x7fc7ca19fb19 [ 1433.950528][T31633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.970175][T31633] RSP: 002b:00007fc7cb01c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.978633][T31633] RAX: ffffffffffffffda RBX: 00007fc7ca425fa0 RCX: 00007fc7ca19fb19 [ 1433.986638][T31633] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 1433.994638][T31633] RBP: 00007fc7cb01c090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.002632][T31633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.010638][T31633] R13: 00007fc7ca426038 R14: 00007fc7ca425fa0 R15: 00007ffc14a32688 [ 1434.018670][T31633] [ 1434.083093][T31631] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.7523'. [ 1434.382531][ T52] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 1434.516311][T31656] netlink: 'syz.1.7531': attribute type 3 has an invalid length. [ 1434.756052][T31668] FAULT_INJECTION: forcing a failure. [ 1434.756052][T31668] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.768987][T31668] CPU: 0 PID: 31668 Comm: syz.0.7535 Not tainted syzkaller #0 [ 1434.776490][T31668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1434.786577][T31668] Call Trace: [ 1434.789890][T31668] [ 1434.792865][T31668] dump_stack_lvl+0x18c/0x250 [ 1434.797591][T31668] ? show_regs_print_info+0x20/0x20 [ 1434.802824][T31668] ? load_image+0x420/0x420 [ 1434.807354][T31668] ? rt6_nlmsg_size+0xd0/0x490 [ 1434.812151][T31668] ? __lock_acquire+0x7eb0/0x7eb0 [ 1434.817206][T31668] should_fail_ex+0x394/0x4c0 [ 1434.821919][T31668] should_failslab+0x9/0x20 [ 1434.826459][T31668] slab_pre_alloc_hook+0x59/0x300 [ 1434.831503][T31668] ? rt6_nlmsg_size+0x40a/0x490 [ 1434.836406][T31668] ? atomic_notifier_call_chain+0x26/0x180 [ 1434.842281][T31668] kmem_cache_alloc_node+0x5e/0x320 [ 1434.847504][T31668] ? __alloc_skb+0x103/0x2c0 [ 1434.852130][T31668] __alloc_skb+0x103/0x2c0 [ 1434.856577][T31668] inet6_rt_notify+0xb4/0x240 [ 1434.861295][T31668] fib6_del+0x10e4/0x1590 [ 1434.865656][T31668] ? fib6_del+0x671/0x1590 [ 1434.870135][T31668] ? fib6_locate_1+0x6b0/0x6b0 [ 1434.874932][T31668] ? do_raw_spin_lock+0x11f/0x2b0 [ 1434.879987][T31668] ? ip6_route_del+0xe3/0x14f0 [ 1434.884807][T31668] ? __ip6_del_rt_siblings+0xa2/0x7b0 [ 1434.890224][T31668] __ip6_del_rt_siblings+0x4a9/0x7b0 [ 1434.895539][T31668] ip6_route_del+0x142e/0x14f0 [ 1434.900350][T31668] ? ip6_route_del+0xe3/0x14f0 [ 1434.905160][T31668] ? mutex_lock_nested+0x20/0x20 [ 1434.910126][T31668] ? ipv6_route_ioctl+0x500/0x500 [ 1434.915197][T31668] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1434.920944][T31668] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1434.926698][T31668] ipv6_route_ioctl+0x384/0x500 [ 1434.931592][T31668] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 1434.937186][T31668] ? __might_fault+0xaa/0x120 [ 1434.941891][T31668] ? __might_fault+0xc6/0x120 [ 1434.946595][T31668] ? __might_fault+0xaa/0x120 [ 1434.951297][T31668] inet6_ioctl+0x247/0x2d0 [ 1434.955735][T31668] ? inet6_getname+0x670/0x670 [ 1434.960572][T31668] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1434.966070][T31668] sock_do_ioctl+0xfc/0x310 [ 1434.970606][T31668] ? sock_show_fdinfo+0xb0/0xb0 [ 1434.975524][T31668] sock_ioctl+0x5be/0x7e0 [ 1434.979878][T31668] ? sock_poll+0x460/0x460 [ 1434.984328][T31668] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1434.989288][T31668] ? security_file_ioctl+0x80/0xa0 [ 1434.994430][T31668] ? sock_poll+0x460/0x460 [ 1434.998873][T31668] __se_sys_ioctl+0xfd/0x170 [ 1435.003502][T31668] do_syscall_64+0x55/0xb0 [ 1435.007945][T31668] ? clear_bhb_loop+0x40/0x90 [ 1435.012648][T31668] ? clear_bhb_loop+0x40/0x90 [ 1435.017360][T31668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1435.023285][T31668] RIP: 0033:0x7fc7ca19fb19 [ 1435.027742][T31668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.047370][T31668] RSP: 002b:00007fc7cb01c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.055811][T31668] RAX: ffffffffffffffda RBX: 00007fc7ca425fa0 RCX: 00007fc7ca19fb19 [ 1435.063828][T31668] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 1435.071814][T31668] RBP: 00007fc7cb01c090 R08: 0000000000000000 R09: 0000000000000000 [ 1435.079807][T31668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1435.087819][T31668] R13: 00007fc7ca426038 R14: 00007fc7ca425fa0 R15: 00007ffc14a32688 [ 1435.095822][T31668] [ 1435.221619][T31670] netlink: 'syz.2.7536': attribute type 9 has an invalid length. [ 1435.242711][T31670] netlink: 'syz.2.7536': attribute type 23 has an invalid length. [ 1435.263517][T31670] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1435.383601][T31677] netlink: 'syz.2.7536': attribute type 9 has an invalid length. [ 1435.406521][T31677] netlink: 'syz.2.7536': attribute type 23 has an invalid length. [ 1435.414770][T31677] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1435.467713][T31683] delete_channel: no stack [ 1435.483976][T31683] delete_channel: no stack [ 1436.284101][ T52] Bluetooth: hci4: unexpected event 0x03 length: 151 > 11 [ 1436.360922][T31692] rxe_eth0 speed is unknown, defaulting to 1000 [ 1436.580860][T31704] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.7544'. [ 1436.893224][T31709] FAULT_INJECTION: forcing a failure. [ 1436.893224][T31709] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.905991][T31709] CPU: 0 PID: 31709 Comm: syz.0.7547 Not tainted syzkaller #0 [ 1436.913672][T31709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1436.923775][T31709] Call Trace: [ 1436.927099][T31709] [ 1436.930080][T31709] dump_stack_lvl+0x18c/0x250 [ 1436.934810][T31709] ? rt6_nlmsg_size+0xd0/0x490 [ 1436.939633][T31709] ? show_regs_print_info+0x20/0x20 [ 1436.944883][T31709] ? load_image+0x420/0x420 [ 1436.949436][T31709] ? rt6_nlmsg_size+0xd0/0x490 [ 1436.954262][T31709] ? __lock_acquire+0x7eb0/0x7eb0 [ 1436.959346][T31709] should_fail_ex+0x394/0x4c0 [ 1436.964119][T31709] should_failslab+0x9/0x20 [ 1436.968676][T31709] slab_pre_alloc_hook+0x59/0x300 [ 1436.973752][T31709] ? rt6_nlmsg_size+0x40a/0x490 [ 1436.978742][T31709] ? atomic_notifier_call_chain+0x26/0x180 [ 1436.984590][T31709] kmem_cache_alloc_node+0x5e/0x320 [ 1436.989902][T31709] ? __alloc_skb+0x103/0x2c0 [ 1436.994529][T31709] __alloc_skb+0x103/0x2c0 [ 1436.998979][T31709] inet6_rt_notify+0xb4/0x240 [ 1437.003697][T31709] fib6_del+0x10e4/0x1590 [ 1437.008077][T31709] ? fib6_del+0x671/0x1590 [ 1437.012679][T31709] ? fib6_locate_1+0x6b0/0x6b0 [ 1437.017496][T31709] ? do_raw_spin_lock+0x11f/0x2b0 [ 1437.022573][T31709] ? ip6_route_del+0xe3/0x14f0 [ 1437.027395][T31709] ? __ip6_del_rt_siblings+0xa2/0x7b0 [ 1437.032832][T31709] __ip6_del_rt_siblings+0x4a9/0x7b0 [ 1437.038163][T31709] ip6_route_del+0x142e/0x14f0 [ 1437.042959][T31709] ? ip6_route_del+0xe3/0x14f0 [ 1437.047766][T31709] ? mutex_lock_nested+0x20/0x20 [ 1437.052733][T31709] ? ipv6_route_ioctl+0x500/0x500 [ 1437.057791][T31709] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1437.063557][T31709] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1437.069323][T31709] ipv6_route_ioctl+0x384/0x500 [ 1437.074226][T31709] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 1437.079846][T31709] ? __might_fault+0xaa/0x120 [ 1437.084549][T31709] ? __might_fault+0xc6/0x120 [ 1437.089251][T31709] ? __might_fault+0xaa/0x120 [ 1437.093966][T31709] inet6_ioctl+0x247/0x2d0 [ 1437.098414][T31709] ? inet6_getname+0x670/0x670 [ 1437.103217][T31709] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1437.108713][T31709] sock_do_ioctl+0xfc/0x310 [ 1437.113269][T31709] ? sock_show_fdinfo+0xb0/0xb0 [ 1437.118193][T31709] sock_ioctl+0x5be/0x7e0 [ 1437.122592][T31709] ? sock_poll+0x460/0x460 [ 1437.127059][T31709] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1437.132024][T31709] ? security_file_ioctl+0x80/0xa0 [ 1437.137166][T31709] ? sock_poll+0x460/0x460 [ 1437.141636][T31709] __se_sys_ioctl+0xfd/0x170 [ 1437.146300][T31709] do_syscall_64+0x55/0xb0 [ 1437.150752][T31709] ? clear_bhb_loop+0x40/0x90 [ 1437.155466][T31709] ? clear_bhb_loop+0x40/0x90 [ 1437.160177][T31709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1437.166137][T31709] RIP: 0033:0x7fc7ca19fb19 [ 1437.170620][T31709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.190252][T31709] RSP: 002b:00007fc7cb01c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.198695][T31709] RAX: ffffffffffffffda RBX: 00007fc7ca425fa0 RCX: 00007fc7ca19fb19 [ 1437.206690][T31709] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 1437.214717][T31709] RBP: 00007fc7cb01c090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.222721][T31709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.230712][T31709] R13: 00007fc7ca426038 R14: 00007fc7ca425fa0 R15: 00007ffc14a32688 [ 1437.238726][T31709] [ 1437.308179][T31711] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7545'. [ 1438.052726][T31720] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7549'. [ 1438.407407][T31720] team0: Port device team_slave_0 removed [ 1438.470073][T31720] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1438.687347][T31739] netlink: set zone limit has 8 unknown bytes [ 1438.739282][T31727] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7550'. [ 1438.847777][T31727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1438.997385][T31736] netlink: 'syz.2.7552': attribute type 21 has an invalid length. [ 1447.823534][T31748] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7555'. [ 1447.863452][T31769] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 1447.870817][T31769] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 1448.526031][T31782] netlink: 'syz.2.7561': attribute type 21 has an invalid length. [ 1448.646013][T31782] IPv6: NLM_F_CREATE should be specified when creating new route [ 1448.694189][T31782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1448.701595][T31782] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.709093][T31782] IPv6: NLM_F_CREATE should be set when creating new route [ 1448.716502][T31782] IPv6: NLM_F_CREATE should be set when creating new route [ 1450.958487][T31795] netlink: 'syz.2.7566': attribute type 9 has an invalid length. [ 1451.037770][T31794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1451.045222][T31794] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.052715][T31794] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.060173][T31794] IPv6: NLM_F_CREATE should be set when creating new route [ 1451.266742][T31795] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7566'. [ 1451.370980][T31792] rxe_eth0 speed is unknown, defaulting to 1000 [ 1454.548468][T31834] netlink: 'syz.0.7574': attribute type 2 has an invalid length. [ 1455.454579][T31852] rxe_eth0 speed is unknown, defaulting to 1000 [ 1455.737222][ T52] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1457.396959][T31910] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.7590'. [ 1457.406762][T31913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1457.414396][T31913] IPv6: NLM_F_CREATE should be set when creating new route [ 1457.422223][T31913] IPv6: NLM_F_CREATE should be set when creating new route [ 1457.430120][T31913] IPv6: NLM_F_CREATE should be set when creating new route [ 1457.455507][ T52] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 1457.525810][T31913] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7591'. [ 1457.991193][T31942] netlink: 'syz.1.7600': attribute type 21 has an invalid length. [ 1458.023613][T31942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7600'. [ 1458.053107][T31942] netlink: 'syz.1.7600': attribute type 1 has an invalid length. [ 1458.083718][T31933] rxe_eth0 speed is unknown, defaulting to 1000 [ 1458.686827][ T52] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 1459.283479][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.404185][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.479583][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.524563][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.541408][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.551509][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.575181][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.609994][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.618797][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.632275][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.641128][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.662913][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.687087][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.773974][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.804849][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1459.813769][T31963] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 1460.088137][T31979] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7610'. [ 1461.684714][T32011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7620'. [ 1462.038259][T32024] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7624'. [ 1462.615869][T32048] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1462.680247][T32048] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.7630'. [ 1462.797667][T32058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1462.813581][T32058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1462.955925][T32062] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7632'. [ 1463.081169][T32060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.107353][T32060] team0: Port device batadv0 added [ 1463.113472][T32061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1463.135977][T32063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1463.197670][T32062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.248220][T32062] bridge_slave_1: left allmulticast mode [ 1463.258364][T32062] bridge_slave_1: left promiscuous mode [ 1463.269796][T32062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.331488][T32062] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1463.422327][T32067] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7633'. [ 1463.444045][T32067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1463.709498][T32077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.717739][T32077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.741380][T32077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.752931][T32077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.421181][T32096] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7641'. [ 1464.794061][T20469] Bluetooth: hci4: command 0x0406 tx timeout [ 1465.238994][T32095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.281084][T32119] validate_nla: 59 callbacks suppressed [ 1468.281103][T32119] netlink: 'syz.3.7645': attribute type 12 has an invalid length. [ 1468.313231][T32119] netlink: 'syz.3.7645': attribute type 15 has an invalid length. [ 1468.333475][T32127] sit0: left promiscuous mode [ 1468.436108][T32100] rxe_eth0 speed is unknown, defaulting to 1000 [ 1468.533766][T32131] netlink: 'syz.3.7647': attribute type 4 has an invalid length. [ 1468.541580][T32131] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7647'. [ 1468.627767][T32131] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1468.853410][ T52] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1469.122975][T32147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1469.175088][T32147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1469.208475][T32147] netlink: 13 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1469.272563][T32150] netlink: 'syz.2.7651': attribute type 7 has an invalid length. [ 1469.349149][T32150] netlink: 'syz.2.7651': attribute type 6 has an invalid length. [ 1469.603841][T32154] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7652'. [ 1470.652713][T20469] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1471.312540][T32172] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1471.433528][T32172] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.507533][T32193] netlink: 'syz.2.7661': attribute type 29 has an invalid length. [ 1471.731320][T32193] netlink: 'syz.2.7661': attribute type 29 has an invalid length. [ 1471.869055][T32194] netlink: 'syz.2.7661': attribute type 29 has an invalid length. [ 1471.885869][T32196] netlink: 'syz.2.7661': attribute type 29 has an invalid length. [ 1472.157940][T32204] netlink: 'syz.2.7663': attribute type 10 has an invalid length. [ 1472.174353][T32204] bridge0: port 3(batadv_slave_0) entered disabled state [ 1472.182657][T32204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.190480][T32204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.254182][T32204] bridge0: port 3(batadv_slave_0) entered blocking state [ 1472.261423][T32204] bridge0: port 3(batadv_slave_0) entered forwarding state [ 1472.269038][T32204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.276272][T32204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.283852][T32204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.291082][T32204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.321394][T32204] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1472.410780][T32203] bridge0: port 3(batadv_slave_0) entered disabled state [ 1472.418232][T32203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.425532][T32203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.401925][ T52] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1474.076694][ T52] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 1476.478100][T32236] veth1_vlan (unregistering): left allmulticast mode [ 1476.682727][T32236] team0: Port device macvlan1 removed [ 1476.746176][T32247] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 1476.772843][T32247] mac80211_hwsim hwsim86 wlan0: entered allmulticast mode [ 1479.160557][T32274] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.7681'. [ 1480.248642][T32172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1480.258400][T32172] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1480.266804][T32172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1480.285851][T32172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1480.296595][T32172] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1480.306228][T32172] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1480.357113][T32290] rxe_eth0 speed is unknown, defaulting to 1000 [ 1480.485257][T29791] bond0: (slave syz_tun): Releasing backup interface [ 1480.626787][T17287] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.831990][T17287] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.206399][T17287] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.330168][T32307] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7689'. [ 1481.408640][T32307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1481.621924][T17287] bond0: (slave netdevsim0): Releasing backup interface [ 1481.634591][T32319] validate_nla: 1 callbacks suppressed [ 1481.634609][T32319] netlink: 'syz.3.7693': attribute type 1 has an invalid length. [ 1481.654079][T17287] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.678693][T32319] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.7693'. [ 1482.006109][T32290] chnl_net:caif_netlink_parms(): no params data found [ 1482.125226][T32323] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.7695'. [ 1482.393443][ T52] Bluetooth: hci0: command tx timeout [ 1482.834529][T32290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.841762][T32290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.864045][T32290] bridge_slave_0: entered allmulticast mode [ 1482.871610][T32290] bridge_slave_0: entered promiscuous mode [ 1483.298550][T32290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.305949][T32290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.313213][T32290] bridge_slave_1: entered allmulticast mode [ 1483.334988][T32290] bridge_slave_1: entered promiscuous mode [ 1483.406043][T17287] bridge0: port 3(ip6gretap0) entered disabled state [ 1483.789967][T17287] ip6gretap0 (unregistering): left allmulticast mode [ 1483.819598][T17287] ip6gretap0 (unregistering): left promiscuous mode [ 1483.837856][T17287] bridge0: port 3(ip6gretap0) entered disabled state [ 1483.871182][ T52] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 1483.993198][T32290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.041758][T32357] netlink: 'syz.0.7698': attribute type 21 has an invalid length. [ 1484.124469][T32354] netlink: 'syz.0.7698': attribute type 5 has an invalid length. [ 1484.481887][ T52] Bluetooth: hci0: command tx timeout [ 1484.499600][T32290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.509810][T32364] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7699'. [ 1484.521983][T32369] netlink: 'syz.3.7700': attribute type 7 has an invalid length. [ 1484.534295][T32367] netlink: 'syz.3.7700': attribute type 7 has an invalid length. [ 1484.727556][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.734182][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.115628][T32290] team0: Port device team_slave_0 added [ 1485.145306][T32290] team0: Port device team_slave_1 added [ 1485.987568][T32290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.006304][T32378] delete_channel: no stack [ 1486.011078][T32290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.079374][T32290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.172495][T32290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.210374][T32290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.249677][T32290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.297180][T32388] netlink: 69116 bytes leftover after parsing attributes in process `syz.0.7704'. [ 1486.533998][T32394] tap0: tun_chr_ioctl cmd 1074025677 [ 1486.547615][T32394] tap0: linktype set to 270 [ 1486.553535][ T52] Bluetooth: hci0: command tx timeout [ 1486.896782][T32290] hsr_slave_0: entered promiscuous mode [ 1486.914525][T32290] hsr_slave_1: entered promiscuous mode [ 1486.941845][T32290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1486.965188][T32290] Cannot create hsr debugfs directory [ 1487.418869][T32409] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7709'. [ 1488.310835][T32421] netlink: 763 bytes leftover after parsing attributes in process `syz.0.7712'. [ 1488.634199][ T52] Bluetooth: hci0: command tx timeout [ 1489.126982][T17287] hsr_slave_0: left promiscuous mode [ 1489.143577][T17287] hsr_slave_1: left promiscuous mode [ 1489.181135][T17287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.199053][T17287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.221108][T17287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.239608][T17287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.264084][T17287] bridge_slave_0: left allmulticast mode [ 1489.269784][T17287] bridge_slave_0: left promiscuous mode [ 1489.299433][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.426288][T17287] veth1_macvtap: left promiscuous mode [ 1489.431948][T17287] veth0_macvtap: left promiscuous mode [ 1489.465601][T17287] veth1_vlan: left promiscuous mode [ 1489.470936][T17287] veth0_vlan: left promiscuous mode [ 1490.944400][T17287] team0 (unregistering): Port device team_slave_1 removed [ 1491.036089][T17287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.087776][T17287] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1491.288583][T17287] team0 (unregistering): Port device batadv0 removed [ 1491.388024][T17287] bond0 (unregistering): Released all slaves [ 1491.616019][T32458] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.7718'. [ 1491.707454][T32290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1491.751785][T32290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1491.781966][T32290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1491.798624][T32290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1491.929950][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1492.171354][T32290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.203216][T32290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.235398][T17293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.243059][T17293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.286440][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.293690][T17287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.408629][T32172] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1493.114086][T32500] delete_channel: no stack [ 1493.116039][T32172] Bluetooth: hci3: unexpected subevent 0x03 length: 150 > 9 [ 1493.285349][T32290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.698633][T32519] netlink: 'syz.0.7730': attribute type 10 has an invalid length. [ 1495.342719][T32519] team0: Device hsr_slave_0 failed to register rx_handler [ 1495.904508][T32510] netlink: 'syz.0.7730': attribute type 21 has an invalid length. [ 1495.924627][T32510] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7730'. [ 1496.271258][T32290] veth0_vlan: entered promiscuous mode [ 1496.289006][T32290] veth1_vlan: entered promiscuous mode [ 1496.347973][T32290] veth0_macvtap: entered promiscuous mode [ 1496.358793][T32530] netlink: 'syz.0.7733': attribute type 10 has an invalid length. [ 1496.374354][T32530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7733'. [ 1496.405111][T32530] team0: entered promiscuous mode [ 1496.414173][T32530] team_slave_0: entered promiscuous mode [ 1496.448381][T32530] team_slave_1: entered promiscuous mode [ 1496.494610][T32530] team0: entered allmulticast mode [ 1496.499991][T32530] team_slave_0: entered allmulticast mode [ 1496.534624][T32530] team_slave_1: entered allmulticast mode [ 1496.585789][T32530] bridge0: port 3(team0) entered blocking state [ 1496.664338][T32530] bridge0: port 3(team0) entered disabled state [ 1496.850704][T32530] bridge0: port 3(team0) entered blocking state [ 1496.858013][T32530] bridge0: port 3(team0) entered forwarding state [ 1496.949384][T32290] veth1_macvtap: entered promiscuous mode [ 1497.025669][T32290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.160889][T32290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.192856][T32555] netlink: 'syz.2.7738': attribute type 3 has an invalid length. [ 1497.212338][T32290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.213620][T32555] netlink: 'syz.2.7738': attribute type 5 has an invalid length. [ 1497.239564][T32555] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.7738'. [ 1497.252716][T32290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.290128][T32290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.313353][T32290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.333314][T32290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.355171][T32290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.392805][T32290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.420725][T32290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.441621][T32290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.469653][T32290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.768422][T32568] netlink: 'syz.2.7741': attribute type 22 has an invalid length. [ 1497.865502][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.892445][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.973091][T17288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.990922][T17288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.641419][T32591] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7746'. [ 1498.709557][T32591] netlink: 'syz.3.7746': attribute type 29 has an invalid length. [ 1498.745705][T32591] netlink: 'syz.3.7746': attribute type 29 has an invalid length. [ 1498.868113][T32593] netlink: 'syz.3.7746': attribute type 29 has an invalid length. [ 1499.728147][T32172] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1500.360217][T32643] netlink: 'syz.3.7756': attribute type 3 has an invalid length. [ 1500.444183][T32643] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7756'. [ 1502.858616][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.068573][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.169959][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.343699][T32677] syzkaller0: entered promiscuous mode [ 1503.370173][T32677] syzkaller0: entered allmulticast mode [ 1503.388826][T32680] delete_channel: no stack [ 1503.404339][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.429372][T32680] delete_channel: no stack [ 1503.435273][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.480592][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.628899][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1503.648597][T32664] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1504.464946][T32172] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1504.635928][T32715] sctp: [Deprecated]: syz.3.7764 (pid 32715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1504.635928][T32715] Use struct sctp_sack_info instead [ 1509.575037][T32756] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1510.135899][ T302] netlink: 'syz.0.7776': attribute type 10 has an invalid length. [ 1510.168842][ T302] hsr0: entered promiscuous mode [ 1510.215174][ T302] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1510.241081][ T302] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1510.254830][ T302] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1510.272311][ T302] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1510.279977][ T304] netlink: 'syz.0.7776': attribute type 10 has an invalid length. [ 1510.289725][ T304] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1510.333516][ T304] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1510.344117][ T304] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1510.413628][ T304] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1511.598548][ T345] netlink: 'syz.4.7785': attribute type 10 has an invalid length. [ 1511.652433][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.674049][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.088950][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.106678][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1512.129283][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.142491][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1512.209948][ T345] team0: Port device bridge0 added [ 1512.393476][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.522129][ T354] netlink: 'syz.4.7788': attribute type 3 has an invalid length. [ 1512.531457][ T354] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7788'. [ 1515.021800][ T367] netlink: 'syz.2.7789': attribute type 1 has an invalid length. [ 1515.040209][ T369] delete_channel: no stack [ 1515.045975][ T369] delete_channel: no stack [ 1515.056037][ T367] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7789'. [ 1515.212184][ T374] can: request_module (can-proto-0) failed. [ 1515.297705][ T385] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7794'. [ 1517.402891][ T418] netlink: 'syz.2.7799': attribute type 11 has an invalid length. [ 1517.424181][ T418] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7799'. [ 1517.448993][ T419] netlink: 'syz.0.7797': attribute type 29 has an invalid length. [ 1517.483792][ T419] netlink: 'syz.0.7797': attribute type 29 has an invalid length. [ 1517.544021][ T419] netlink: 'syz.0.7797': attribute type 29 has an invalid length. [ 1517.569848][ T419] netlink: 'syz.0.7797': attribute type 29 has an invalid length. [ 1517.591183][ T424] netlink: 'syz.3.7800': attribute type 3 has an invalid length. [ 1517.614317][ T419] netlink: 'syz.0.7797': attribute type 29 has an invalid length. [ 1517.663515][ T424] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7800'. [ 1518.435543][ T441] netlink: 'syz.4.7803': attribute type 49 has an invalid length. [ 1518.455898][ T441] netlink: set zone limit has 8 unknown bytes [ 1519.998857][ T490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7812'. [ 1520.058156][ T486] netlink: 'syz.2.7812': attribute type 9 has an invalid length. [ 1520.066754][ T486] netlink: 463 bytes leftover after parsing attributes in process `syz.2.7812'. [ 1520.241763][ T492] syzkaller0: entered promiscuous mode [ 1520.249080][ T492] syzkaller0: entered allmulticast mode [ 1527.147484][ T501] netlink: 'syz.0.7817': attribute type 4 has an invalid length. [ 1527.155492][ T501] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7817'. [ 1527.220831][ T506] netlink: 'syz.3.7818': attribute type 21 has an invalid length. [ 1527.586926][ T523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1527.712124][ T523] netlink: 'syz.2.7820': attribute type 9 has an invalid length. [ 1527.753439][ T523] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7820'. [ 1527.763860][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1531.231688][ T595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1531.268555][ T587] syzkaller0: entered promiscuous mode [ 1531.279706][ T587] syzkaller0: entered allmulticast mode [ 1531.297056][ T595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1531.329869][ T590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1531.370749][ T593] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7830'. [ 1533.875152][ T616] netlink: 'syz.0.7833': attribute type 10 has an invalid length. [ 1533.940019][ T625] netlink: 'syz.2.7835': attribute type 2 has an invalid length. [ 1533.957488][ T625] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7835'. [ 1534.407973][ T649] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7841'. [ 1534.456351][ T647] netlink: 'syz.3.7841': attribute type 1 has an invalid length. [ 1534.958171][ T667] syzkaller0: entered promiscuous mode [ 1534.963961][ T667] syzkaller0: entered allmulticast mode [ 1535.411431][ T682] netlink: 'syz.0.7848': attribute type 9 has an invalid length. [ 1535.429557][ T686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1535.452420][ T682] netlink: 463 bytes leftover after parsing attributes in process `syz.0.7848'. [ 1535.489540][ T688] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7847'. [ 1535.508415][ T691] netlink: 'syz.3.7847': attribute type 21 has an invalid length. [ 1535.539413][ T691] IPv6: NLM_F_CREATE should be specified when creating new route [ 1535.660187][ T689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1535.682632][ T689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1535.702698][ T689] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1535.716662][ T689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1535.731646][ T689] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1539.249037][ T746] netlink: 'syz.3.7859': attribute type 10 has an invalid length. [ 1539.266002][ T742] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7860'. [ 1539.289611][ T745] netlink: 'syz.3.7859': attribute type 21 has an invalid length. [ 1539.304829][ T745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1539.333495][ T745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1539.391590][ T749] netlink: 'syz.2.7861': attribute type 10 has an invalid length. [ 1539.464977][ T750] netlink: 'syz.2.7861': attribute type 10 has an invalid length. [ 1539.758350][ T761] cgroup: fork rejected by pids controller in /syz0 [ 1540.668041][ T909] netlink: 'syz.4.7872': attribute type 29 has an invalid length. [ 1540.917116][T27583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.956167][ T909] netlink: 'syz.4.7872': attribute type 29 has an invalid length. [ 1540.978077][ T910] netlink: 'syz.4.7872': attribute type 29 has an invalid length. [ 1541.132979][T27583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.151097][ T909] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7872'. [ 1541.169675][ T913] netlink: 'syz.4.7872': attribute type 29 has an invalid length. [ 1541.178935][ T921] netlink: 'syz.4.7872': attribute type 29 has an invalid length. [ 1541.226737][T27583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.247587][T27583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.350968][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1542.360719][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1542.368955][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1542.377273][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1542.385611][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1542.393145][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1542.742273][ T948] netlink: 'syz.4.7878': attribute type 10 has an invalid length. [ 1543.116169][ T948] team0: Device vxcan1 is of different type [ 1543.377606][ T957] rxe_eth0 speed is unknown, defaulting to 1000 [ 1543.965889][ T983] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7886'. [ 1543.990767][ T983] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 1544.082337][ T981] team0 (unregistering): Port device team_slave_1 removed [ 1544.134305][ T981] team0 (unregistering): Port device bond0 removed [ 1544.223826][ T989] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.7887'. [ 1544.260087][ T984] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7886'. [ 1544.567065][T32172] Bluetooth: hci2: command tx timeout [ 1544.704733][ T1005] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7891'. [ 1544.745361][ T1011] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7891'. [ 1545.140682][ T1018] validate_nla: 3 callbacks suppressed [ 1545.140701][ T1018] netlink: 'syz.4.7893': attribute type 29 has an invalid length. [ 1545.472247][ T1028] netlink: 'syz.4.7893': attribute type 10 has an invalid length. [ 1545.492540][ T1054] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.7895'. [ 1545.503207][ T1028] veth0_vlan: entered allmulticast mode [ 1545.571522][ T1028] veth0_vlan: left promiscuous mode [ 1545.599082][ T1028] veth0_vlan: entered promiscuous mode [ 1545.639252][ T1028] team0: Device veth0_vlan failed to register rx_handler [ 1545.741975][ T1018] netlink: 'syz.4.7893': attribute type 29 has an invalid length. [ 1545.771291][ T1019] netlink: 'syz.4.7893': attribute type 29 has an invalid length. [ 1545.786640][ T1035] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7893'. [ 1545.814008][ T1049] netlink: 'syz.3.7895': attribute type 5 has an invalid length. [ 1545.889681][ T1027] netlink: 'syz.4.7893': attribute type 29 has an invalid length. [ 1545.911680][ T1033] netlink: 'syz.4.7893': attribute type 29 has an invalid length. [ 1545.995219][ T1061] netlink: 'syz.2.7896': attribute type 21 has an invalid length. [ 1546.016855][ T1061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1546.073852][ T1068] netlink: 'syz.3.7897': attribute type 10 has an invalid length. [ 1546.174686][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.181061][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.320207][ T957] chnl_net:caif_netlink_parms(): no params data found [ 1546.634403][T32172] Bluetooth: hci2: command tx timeout [ 1546.736344][ T1081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1547.131803][ T1098] netlink: 'syz.3.7903': attribute type 15 has an invalid length. [ 1547.173864][ T1098] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.7903'. [ 1547.338241][T27583] hsr_slave_0: left promiscuous mode [ 1547.354885][T27583] hsr_slave_1: left promiscuous mode [ 1547.375119][T27583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1547.382586][T27583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.419174][T27583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1547.445887][T27583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.505811][T27583] bridge0: port 3(team0) entered disabled state [ 1547.550266][T27583] bridge_slave_1: left allmulticast mode [ 1547.564294][T27583] bridge_slave_1: left promiscuous mode [ 1547.580685][T27583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.606692][T27583] bridge_slave_0: left allmulticast mode [ 1547.617214][T27583] bridge_slave_0: left promiscuous mode [ 1547.638255][T27583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.814384][T27583] veth1_macvtap: left promiscuous mode [ 1547.825230][T27583] veth0_macvtap: left promiscuous mode [ 1547.841723][T27583] veth1_vlan: left promiscuous mode [ 1547.851917][T27583] veth0_vlan: left promiscuous mode [ 1548.731043][T32172] Bluetooth: hci2: command tx timeout [ 1549.439809][T27583] team_slave_1 (unregistering): left promiscuous mode [ 1549.447872][T27583] team_slave_1 (unregistering): left allmulticast mode [ 1549.474473][T27583] team0 (unregistering): Port device team_slave_1 removed [ 1549.598689][T27583] team_slave_0 (unregistering): left promiscuous mode [ 1549.610253][T27583] team_slave_0 (unregistering): left allmulticast mode [ 1549.632480][T27583] team0 (unregistering): Port device team_slave_0 removed [ 1549.730659][T27583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.863058][T27583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.793352][T32172] Bluetooth: hci2: command tx timeout [ 1550.896678][T27583] bond0 (unregistering): Released all slaves [ 1553.679091][ T957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.686438][ T957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.694034][ T957] bridge_slave_0: entered allmulticast mode [ 1553.701724][ T957] bridge_slave_0: entered promiscuous mode [ 1553.711121][ T957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.719379][ T957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.741140][ T957] bridge_slave_1: entered allmulticast mode [ 1553.755798][ T957] bridge_slave_1: entered promiscuous mode [ 1553.809748][ T1137] netlink: 'syz.2.7910': attribute type 10 has an invalid length. [ 1553.823597][ T1137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7910'. [ 1553.851461][ T1137] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1553.869222][ T1137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1553.977606][ T957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.007190][ T957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.087285][T32172] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1554.142893][ T957] team0: Port device team_slave_0 added [ 1554.210004][ T957] team0: Port device team_slave_1 added [ 1554.345718][ T957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.352773][ T957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.427649][ T1157] netlink: 'syz.2.7913': attribute type 3 has an invalid length. [ 1554.503307][ T957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.545622][ T1159] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1554.556956][ T1157] netlink: 175320 bytes leftover after parsing attributes in process `syz.2.7913'. [ 1557.201177][ T1158] netlink: 'syz.4.7914': attribute type 27 has an invalid length. [ 1557.223674][ T1158] netlink: 'syz.4.7914': attribute type 4 has an invalid length. [ 1557.256220][ T1158] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7914'. [ 1557.291735][ T957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.299069][ T957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1557.350242][ T957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.560660][ T1178] netlink: 'syz.3.7916': attribute type 10 has an invalid length. [ 1557.578222][ T1178] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7916'. [ 1557.649412][ T957] hsr_slave_0: entered promiscuous mode [ 1557.660246][ T957] hsr_slave_1: entered promiscuous mode [ 1558.467609][ T1241] netlink: 'syz.3.7921': attribute type 3 has an invalid length. [ 1558.476870][ T1241] netlink: 'syz.3.7921': attribute type 16 has an invalid length. [ 1558.494220][ T1241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1558.730025][ T1250] netlink: 'syz.3.7921': attribute type 63 has an invalid length. [ 1558.791023][ T1250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1559.416852][ T1250] netlink: 'syz.3.7921': attribute type 63 has an invalid length. [ 1559.444996][ T1250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1559.466807][T32172] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1559.910796][ T1268] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1559.972512][ T1268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1559.996331][ T1269] netlink: 59987 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1560.015132][ T1269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7925'. [ 1560.061838][ T1273] netlink: 'syz.4.7926': attribute type 2 has an invalid length. [ 1560.184350][ T1273] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7926'. [ 1560.196784][ T1263] netlink: 'syz.2.7924': attribute type 4 has an invalid length. [ 1560.239684][ T1263] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7924'. [ 1560.847888][ T1288] netlink: 'syz.2.7930': attribute type 3 has an invalid length. [ 1560.859662][ T957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1560.877219][ T1288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7930'. [ 1560.897492][ T957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1560.922994][ T957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1560.962083][ T957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1561.227610][ T957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.301126][ T957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.341288][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.348623][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1561.398606][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.405927][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1561.791493][T32172] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1562.720220][ T957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1562.803505][ T1323] netlink: 'syz.3.7935': attribute type 10 has an invalid length. [ 1563.168386][ T1336] netlink: 'syz.4.7936': attribute type 10 has an invalid length. [ 1563.210317][ T1336] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1563.262441][ T957] veth0_vlan: entered promiscuous mode [ 1563.351230][ T957] veth1_vlan: entered promiscuous mode [ 1563.713392][ T957] veth0_macvtap: entered promiscuous mode [ 1563.755348][ T957] veth1_macvtap: entered promiscuous mode [ 1563.840806][ T957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.892323][ T957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.935360][ T957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.976594][ T957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.023583][ T957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.063276][ T957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1564.115591][ T957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1564.193610][ T957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1564.297430][ T1346] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 1564.958158][ T957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.013363][ T957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.043510][ T957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.072734][ T957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.381703][ T1377] netlink: 'syz.2.7943': attribute type 3 has an invalid length. [ 1565.403515][ T1377] netlink: 'syz.2.7943': attribute type 16 has an invalid length. [ 1565.411412][ T1377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7943'. [ 1565.423920][ T1235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.443566][ T1235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.522167][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.564174][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.639157][ T1381] netlink: 'syz.2.7943': attribute type 63 has an invalid length. [ 1565.669380][ T1381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7943'. [ 1565.714235][ T1381] netlink: 'syz.2.7943': attribute type 63 has an invalid length. [ 1565.797380][ T1381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7943'. [ 1566.443876][ T1401] netlink: 'syz.2.7945': attribute type 1 has an invalid length. [ 1566.483434][ T1401] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1566.573350][ T1401] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1566.656197][ T1403] netlink: 'syz.2.7945': attribute type 23 has an invalid length. [ 1566.703844][ T1403] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.7945'. [ 1567.420999][ T1411] netlink: 'syz.4.7947': attribute type 41 has an invalid length. [ 1567.468836][ T1430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1567.507806][ T1430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1567.567324][ T1428] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1568.099237][ T1442] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.7954'. [ 1568.426806][ T1452] netlink: 'syz.4.7956': attribute type 17 has an invalid length. [ 1568.434833][ T1452] netlink: 'syz.4.7956': attribute type 16 has an invalid length. [ 1568.544677][ T1450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1570.385609][ T1497] IPv6: Can't replace route, no match found [ 1570.422595][ T1505] __nla_validate_parse: 2 callbacks suppressed [ 1570.422613][ T1505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1570.459007][ T1505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1570.574049][ T1512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1571.440929][ T1548] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.7973'. [ 1571.459921][ T1549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1571.471768][ T1552] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.7975'. [ 1571.491506][ T1552] tc_dump_action: action bad kind [ 1571.924960][ T1567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7978'. [ 1571.953646][ T1567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7978'. [ 1571.981062][ T1567] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.7978'. [ 1572.012578][ T1567] openvswitch: netlink: IP tunnel dst address not specified [ 1572.214344][ T1564] delete_channel: no stack [ 1572.312105][ T1577] netlink: 'syz.3.7980': attribute type 10 has an invalid length. [ 1572.336614][ T1579] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7981'. [ 1572.350626][ T1577] geneve0: entered promiscuous mode [ 1572.466996][ T1577] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1572.496514][ T1579] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1572.548687][ T1586] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7982'. [ 1573.753829][ T1630] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1573.773705][ T1630] CPU: 1 PID: 1630 Comm: syz.2.7990 Not tainted syzkaller #0 [ 1573.781162][ T1630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1573.791269][ T1630] Call Trace: [ 1573.794631][ T1630] [ 1573.797610][ T1630] dump_stack_lvl+0x18c/0x250 [ 1573.802389][ T1630] ? show_regs_print_info+0x20/0x20 [ 1573.807637][ T1630] ? load_image+0x420/0x420 [ 1573.812237][ T1630] sysfs_warn_dup+0x8e/0xa0 [ 1573.816802][ T1630] sysfs_do_create_link_sd+0xc0/0x110 [ 1573.822228][ T1630] device_add_class_symlinks+0x1cf/0x240 [ 1573.827922][ T1630] device_add+0x4f9/0xc40 [ 1573.832305][ T1630] wiphy_register+0x1f24/0x2c70 [ 1573.837233][ T1630] ? cfg80211_event_work+0x40/0x40 [ 1573.842395][ T1630] ? minstrel_ht_alloc+0x88a/0x990 [ 1573.847606][ T1630] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1573.853752][ T1630] ieee80211_register_hw+0x2f3d/0x3cb0 [ 1573.859297][ T1630] ? ieee80211_register_hw+0xf51/0x3cb0 [ 1573.864904][ T1630] ? ieee80211_tasklet_handler+0x20/0x20 [ 1573.870589][ T1630] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1573.876541][ T1630] ? __debug_object_init+0xec/0x450 [ 1573.881773][ T1630] ? __asan_memset+0x22/0x40 [ 1573.886394][ T1630] ? __hrtimer_init+0x189/0x270 [ 1573.891269][ T1630] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1573.897044][ T1630] ? mac80211_hwsim_free+0x220/0x220 [ 1573.902351][ T1630] ? rcu_is_watching+0x15/0xb0 [ 1573.907143][ T1630] ? kstrndup+0xbd/0x140 [ 1573.911426][ T1630] hwsim_new_radio_nl+0xdad/0x1a70 [ 1573.916575][ T1630] ? __nla_validate+0x50/0x50 [ 1573.921308][ T1630] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1573.927767][ T1630] ? __nla_parse+0x40/0x50 [ 1573.932213][ T1630] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1573.938577][ T1630] genl_family_rcv_msg_doit+0x21a/0x310 [ 1573.944156][ T1630] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1573.950102][ T1630] ? bpf_lsm_capable+0x9/0x10 [ 1573.954806][ T1630] ? security_capable+0x89/0xb0 [ 1573.959676][ T1630] genl_rcv_msg+0x611/0x7a0 [ 1573.964204][ T1630] ? genl_bind+0x360/0x360 [ 1573.968634][ T1630] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1573.974989][ T1630] ? ref_tracker_free+0x686/0x830 [ 1573.980041][ T1630] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1573.985388][ T1630] netlink_rcv_skb+0x235/0x4c0 [ 1573.990177][ T1630] ? genl_bind+0x360/0x360 [ 1573.994621][ T1630] ? netlink_ack+0x1160/0x1160 [ 1573.999448][ T1630] ? __lock_acquire+0x7eb0/0x7eb0 [ 1574.004502][ T1630] ? down_read+0x1ac/0x2e0 [ 1574.008942][ T1630] genl_rcv+0x28/0x40 [ 1574.012948][ T1630] netlink_unicast+0x856/0x9e0 [ 1574.017764][ T1630] netlink_sendmsg+0x8d0/0xbf0 [ 1574.022578][ T1630] ? netlink_getsockopt+0x590/0x590 [ 1574.027814][ T1630] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1574.033394][ T1630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1574.038719][ T1630] ? security_socket_sendmsg+0x80/0xa0 [ 1574.044203][ T1630] ? netlink_getsockopt+0x590/0x590 [ 1574.049425][ T1630] ____sys_sendmsg+0x61b/0x980 [ 1574.054221][ T1630] ? __asan_memset+0x22/0x40 [ 1574.058841][ T1630] ? __sys_sendmsg_sock+0x30/0x30 [ 1574.063895][ T1630] ? __import_iovec+0x5f2/0x850 [ 1574.068784][ T1630] ? import_iovec+0x73/0xa0 [ 1574.073324][ T1630] ___sys_sendmsg+0x2a6/0x360 [ 1574.078072][ T1630] ? __sys_sendmsg+0x2b0/0x2b0 [ 1574.082900][ T1630] __se_sys_sendmsg+0x1d0/0x2c0 [ 1574.087774][ T1630] ? __x64_sys_sendmsg+0x80/0x80 [ 1574.092750][ T1630] ? lockdep_hardirqs_on+0x98/0x150 [ 1574.097991][ T1630] do_syscall_64+0x55/0xb0 [ 1574.102435][ T1630] ? clear_bhb_loop+0x40/0x90 [ 1574.107137][ T1630] ? clear_bhb_loop+0x40/0x90 [ 1574.111845][ T1630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.117852][ T1630] RIP: 0033:0x7f350dd9fb19 [ 1574.122290][ T1630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.141918][ T1630] RSP: 002b:00007f350ecfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.150363][ T1630] RAX: ffffffffffffffda RBX: 00007f350e026180 RCX: 00007f350dd9fb19 [ 1574.158371][ T1630] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000049 [ 1574.166374][ T1630] RBP: 00007f350de37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1574.174372][ T1630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.182404][ T1630] R13: 00007f350e026218 R14: 00007f350e026180 R15: 00007ffc3d01ec88 [ 1574.190471][ T1630] [ 1574.761763][ T1651] netlink: 'syz.3.7996': attribute type 27 has an invalid length. [ 1574.804401][ T1645] netlink: 'syz.0.7995': attribute type 9 has an invalid length. [ 1575.033374][ T1649] rxe_eth0 speed is unknown, defaulting to 1000 [ 1575.346674][ T1659] netlink: 'syz.4.7999': attribute type 29 has an invalid length. [ 1575.365557][ T1659] netlink: 'syz.4.7999': attribute type 29 has an invalid length. [ 1575.391962][ T1659] netlink: 'syz.4.7999': attribute type 29 has an invalid length. [ 1576.845374][ T1692] __nla_validate_parse: 6 callbacks suppressed [ 1576.845394][ T1692] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8006'. [ 1576.916184][ T1692] openvswitch: netlink: Key type 29 is not supported [ 1577.175194][ T1695] netlink: 'syz.4.8006': attribute type 9 has an invalid length. [ 1577.192660][ T1695] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.8006'. [ 1577.234117][ T1692] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.8006'. [ 1577.776329][T32172] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1577.922568][ T1708] Q6`Ҙ: renamed from lo (while UP) [ 1579.278753][ T1727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1579.301794][ T1727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1579.323015][ T1727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1579.343777][ T1727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8014'. [ 1579.872984][ T1736] rxe_eth0 speed is unknown, defaulting to 1000 [ 1579.919936][ T1738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8016'. [ 1579.936124][ T1743] netlink: 'syz.2.8019': attribute type 46 has an invalid length. [ 1579.995572][ T1743] netlink: 'syz.2.8019': attribute type 46 has an invalid length. [ 1580.400179][T32172] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1580.521293][ T1752] netlink: 'syz.0.8022': attribute type 29 has an invalid length. [ 1580.642208][ T1752] netlink: 'syz.0.8022': attribute type 29 has an invalid length. [ 1580.697255][ T1757] netlink: 'syz.0.8022': attribute type 29 has an invalid length. [ 1580.946439][ T1761] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.8024'. [ 1581.303538][ T1762] netlink: 'syz.4.8025': attribute type 21 has an invalid length. [ 1581.315143][ T1762] netlink: 'syz.4.8025': attribute type 6 has an invalid length. [ 1581.335939][ T1762] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8025'. [ 1582.146388][T32172] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 1583.295532][ T1804] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode [ 1583.353275][ T1804] mac80211_hwsim hwsim94 wlan0: entered allmulticast mode [ 1584.179069][ T1835] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.8044'. [ 1584.441198][ T1842] netlink: 'syz.3.8046': attribute type 11 has an invalid length. [ 1584.455261][T32172] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 1584.463010][ T1842] netlink: 212896 bytes leftover after parsing attributes in process `syz.3.8046'. [ 1584.517978][ T1844] netlink: 'syz.3.8046': attribute type 10 has an invalid length. [ 1584.605399][ T1844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.648087][ T1844] bridge_slave_1: left allmulticast mode [ 1584.664198][ T1844] bridge_slave_1: left promiscuous mode [ 1584.683683][ T1844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.730307][ T1844] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1584.856458][ T1849] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8047'. [ 1584.871675][ T1849] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1585.540735][T32172] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1585.712742][ T1870] rxe_eth0 speed is unknown, defaulting to 1000 [ 1586.754893][T32172] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 1587.504244][ T1928] netlink: 'syz.0.8070': attribute type 15 has an invalid length. [ 1587.532621][ T1928] netlink: 'syz.0.8070': attribute type 7 has an invalid length. [ 1587.558759][ T1928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8070'. [ 1587.568480][ T1923] netlink: 'syz.2.8069': attribute type 3 has an invalid length. [ 1587.577375][ T1923] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8069'. [ 1588.135230][T32172] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 1588.592853][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1588.890760][ T1960] netlink: 'syz.2.8082': attribute type 10 has an invalid length. [ 1588.899105][ T1960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1588.926365][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1588.954455][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1588.995463][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.195093][ T1959] __nla_validate_parse: 20 callbacks suppressed [ 1589.195113][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.275809][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.309233][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.330015][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.356215][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.378768][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8082'. [ 1589.860433][ T1998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.903119][ T1998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.004867][ T1998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.024041][ T1998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.384292][ T1999] netlink: 'syz.4.8093': attribute type 7 has an invalid length. [ 1590.666866][ T2010] mac80211_hwsim hwsim83 .3c: renamed from wlan1 [ 1590.719530][ T2013] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8098'. [ 1590.741447][ T2013] tc_dump_action: action bad kind [ 1590.934821][ T2022] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8101'. [ 1591.271913][ T2042] netlink: 'syz.2.8103': attribute type 3 has an invalid length. [ 1591.284603][ T2042] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8103'. [ 1591.716315][ T2051] netlink: 'syz.0.8109': attribute type 10 has an invalid length. [ 1591.767041][ T2051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.798048][ T2051] bridge_slave_1: left allmulticast mode [ 1591.820765][ T2051] bridge_slave_1: left promiscuous mode [ 1591.847105][ T2051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.956048][ T2051] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1592.001486][T32172] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 1592.149760][ T2063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8114'. [ 1592.243918][ T2073] netlink: 'syz.0.8116': attribute type 10 has an invalid length. [ 1592.301703][ T2073] syz_tun: entered promiscuous mode [ 1592.963278][ T2073] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1593.214468][ T2065] syzkaller0: entered promiscuous mode [ 1593.223290][ T2065] syzkaller0: entered allmulticast mode [ 1593.253490][ T2075] netlink: 'syz.0.8116': attribute type 2 has an invalid length. [ 1593.266742][ T2075] netlink: 'syz.0.8116': attribute type 8 has an invalid length. [ 1594.010199][ T2111] netlink: 'syz.3.8123': attribute type 29 has an invalid length. [ 1595.558971][ T2104] sit0: entered allmulticast mode [ 1595.598276][ T2109] __nla_validate_parse: 12 callbacks suppressed [ 1595.598295][ T2109] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.8123'. [ 1595.627860][ T2111] netlink: 'syz.3.8123': attribute type 29 has an invalid length. [ 1595.907967][T32172] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 1596.017660][ T2133] delete_channel: no stack [ 1596.051750][ T2133] delete_channel: no stack [ 1598.611253][ T2164] netlink: 'syz.3.8138': attribute type 29 has an invalid length. [ 1598.667503][ T2164] netlink: 'syz.3.8138': attribute type 29 has an invalid length. [ 1598.722392][ T2165] netlink: 'syz.3.8138': attribute type 29 has an invalid length. [ 1598.749215][ T2166] netlink: 'syz.3.8138': attribute type 29 has an invalid length. [ 1598.817880][ T2160] delete_channel: no stack [ 1598.901564][ T2171] netlink: 'syz.0.8139': attribute type 29 has an invalid length. [ 1598.923043][ T2171] netlink: 'syz.0.8139': attribute type 29 has an invalid length. [ 1598.963952][ T2171] netlink: 'syz.0.8139': attribute type 29 has an invalid length. [ 1598.992478][ T2173] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8140'. [ 1599.396187][ T2187] netlink: 'syz.2.8142': attribute type 10 has an invalid length. [ 1601.429451][ T2187] team0: Port device wlan1 added [ 1601.648500][ T2199] bridge0: port 3(batadv_slave_0) entered disabled state [ 1601.681688][ T2199] bridge_slave_1: left allmulticast mode [ 1601.706503][ T2199] bridge_slave_1: left promiscuous mode [ 1601.712430][ T2199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.749404][ T2199] bridge_slave_0: left promiscuous mode [ 1601.773678][ T2199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.825394][ T2199] bond0: (slave bridge0): Releasing backup interface [ 1602.207888][ T2220] delete_channel: no stack [ 1602.978259][ T2237] netlink: 'syz.2.8159': attribute type 10 has an invalid length. [ 1602.986919][ T2237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8159'. [ 1602.999301][ T2237] ipvlan1: entered promiscuous mode [ 1603.006363][ T2237] ipvlan1: entered allmulticast mode [ 1603.012197][ T2237] veth0_vlan: entered allmulticast mode [ 1603.055208][ T2237] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1603.270745][ T2240] netlink: 'syz.2.8160': attribute type 10 has an invalid length. [ 1603.302071][ T2240] netdevsim netdevsim2 : entered promiscuous mode [ 1604.142571][ T2274] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8166'. [ 1604.558268][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1604.618152][ T2297] netlink: 'syz.4.8171': attribute type 10 has an invalid length. [ 1604.631119][ T2297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1604.651707][ T2297] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1604.688987][ T2297] netlink: 'syz.4.8171': attribute type 1 has an invalid length. [ 1604.698375][ T2298] netlink: 'syz.4.8171': attribute type 1 has an invalid length. [ 1604.716427][ T2297] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1604.735281][ T2298] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8171'. [ 1604.889292][T32172] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1605.579518][ T2340] netlink: 4330 bytes leftover after parsing attributes in process `syz.3.8180'. [ 1605.612952][ T2341] netlink: 4330 bytes leftover after parsing attributes in process `syz.3.8180'. [ 1605.865299][T32172] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 1606.168980][ T2349] netlink: 'syz.4.8184': attribute type 11 has an invalid length. [ 1606.184509][ T2349] netlink: 212896 bytes leftover after parsing attributes in process `syz.4.8184'. [ 1606.568255][ T2357] netlink: 'syz.3.8187': attribute type 153 has an invalid length. [ 1606.593332][ T2357] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.8187'. [ 1606.610228][ T2362] netlink: 'syz.0.8188': attribute type 39 has an invalid length. [ 1606.988432][ T2378] netlink: 'syz.2.8192': attribute type 21 has an invalid length. [ 1607.108424][T32172] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 1607.600547][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.614625][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.582318][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.937551][ T2466] netlink: 'syz.0.8210': attribute type 1 has an invalid length. [ 1609.984920][ T2466] netlink: 'syz.0.8210': attribute type 3 has an invalid length. [ 1610.012079][ T2466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8210'. [ 1610.077153][ T2474] netlink: 'syz.3.8211': attribute type 21 has an invalid length. [ 1610.099680][ T2474] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8211'. [ 1610.144637][ T2474] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8211'. [ 1610.169189][ T2465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8209'. [ 1612.238682][ T2549] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8226'. [ 1612.265189][ T2543] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8226'. [ 1612.418231][ T2556] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1612.443538][ T2556] hsr_slave_0: left promiscuous mode [ 1612.472025][ T2556] hsr_slave_1: left promiscuous mode [ 1612.579614][ T2565] sctp: [Deprecated]: syz.3.8230 (pid 2565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1612.579614][ T2565] Use struct sctp_sack_info instead [ 1614.756508][ T2598] delete_channel: no stack [ 1614.981549][ T2623] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.8241'. [ 1615.054376][ T2623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8241'. [ 1615.126575][ T2627] rxe_eth0 speed is unknown, defaulting to 1000 [ 1615.309981][ T2637] netlink: 'syz.3.8242': attribute type 63 has an invalid length. [ 1615.334590][ T2637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8242'. [ 1615.389187][ T2637] netlink: 'syz.3.8242': attribute type 63 has an invalid length. [ 1615.406881][ T2637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8242'. [ 1618.158668][ T2672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.143553][ T2710] netlink: 'syz.4.8257': attribute type 21 has an invalid length. [ 1619.178668][ T2710] netlink: 'syz.4.8257': attribute type 6 has an invalid length. [ 1619.929240][ T2722] netlink: 'syz.2.8260': attribute type 39 has an invalid length. [ 1621.921879][ T2763] vcan0: entered allmulticast mode [ 1622.666182][ T2796] netlink: 'syz.3.8272': attribute type 5 has an invalid length. [ 1624.031297][ T2782] rxe_eth0 speed is unknown, defaulting to 1000 [ 1625.082200][ T2863] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8285'. [ 1632.305166][ T2889] rxe_eth0 speed is unknown, defaulting to 1000 [ 1632.460837][ T2897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8292'. [ 1633.048282][ T2915] netlink: 'syz.4.8295': attribute type 10 has an invalid length. [ 1633.066224][ T2915] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8295'. [ 1633.083677][ T2915] veth1_to_team: entered promiscuous mode [ 1633.096390][ T2915] veth1_to_team: entered allmulticast mode [ 1633.133955][ T2915] bridge0: port 3(veth1_to_team) entered blocking state [ 1633.141106][ T2915] bridge0: port 3(veth1_to_team) entered disabled state [ 1633.199678][ T2915] bridge0: port 3(veth1_to_team) entered blocking state [ 1633.206896][ T2915] bridge0: port 3(veth1_to_team) entered forwarding state [ 1633.511517][ T2924] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8299'. [ 1634.926481][ T2934] netlink: 'syz.3.8302': attribute type 29 has an invalid length. [ 1635.263857][ T2934] netlink: 'syz.3.8302': attribute type 29 has an invalid length. [ 1635.367960][ T2940] netlink: 'syz.3.8302': attribute type 10 has an invalid length. [ 1635.448090][ T2947] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1635.463709][ T2935] netlink: 'syz.3.8302': attribute type 29 has an invalid length. [ 1635.483716][ T2935] netlink: 'syz.3.8302': attribute type 29 has an invalid length. [ 1635.504746][ T2935] netlink: 'syz.3.8302': attribute type 29 has an invalid length. [ 1635.522424][ T2933] netlink: 'syz.3.8302': attribute type 29 has an invalid length. [ 1635.853465][ T2954] netlink: 'syz.2.8305': attribute type 27 has an invalid length. [ 1635.861397][ T2954] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8305'. [ 1636.079453][ T2975] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8310'. [ 1637.835758][ T3002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1639.621538][ T3025] netlink: 'syz.4.8322': attribute type 10 has an invalid length. [ 1640.043517][ T3025] team0: Port device geneve1 added [ 1640.074149][ T3034] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8324'. [ 1641.851382][ T3067] netlink: 139600 bytes leftover after parsing attributes in process `syz.0.8333'. [ 1642.166208][ T3081] netlink: 'syz.4.8336': attribute type 29 has an invalid length. [ 1642.193682][ T3081] netlink: 'syz.4.8336': attribute type 29 has an invalid length. [ 1642.213955][ T3084] netlink: 'syz.4.8336': attribute type 29 has an invalid length. [ 1642.856103][ T3114] netlink: 'syz.0.8343': attribute type 29 has an invalid length. [ 1642.887719][ T3114] netlink: 'syz.0.8343': attribute type 29 has an invalid length. [ 1643.325184][ T3131] IPv6: Can't replace route, no match found [ 1643.699331][ T3135] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8351'. [ 1643.830368][ T3137] sit0: entered allmulticast mode [ 1645.345809][ T3160] netlink: 'syz.0.8357': attribute type 11 has an invalid length. [ 1645.359507][ T3160] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8357'. [ 1646.005717][ T3177] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1646.129900][ T3173] netlink: 'syz.3.8361': attribute type 29 has an invalid length. [ 1646.146409][ T3173] netlink: 'syz.3.8361': attribute type 29 has an invalid length. [ 1646.381034][ T3182] rxe_eth0 speed is unknown, defaulting to 1000 [ 1647.712638][ T3223] netlink: 'syz.4.8373': attribute type 3 has an invalid length. [ 1648.061336][ T3228] : port 1(vlan0) entered blocking state [ 1648.102090][ T3228] : port 1(vlan0) entered disabled state [ 1648.130640][ T3228] vlan0: entered allmulticast mode [ 1648.169068][ T3228] vlan0: entered promiscuous mode [ 1648.257859][ T3242] bond0: (slave syz_tun): Releasing backup interface [ 1648.533948][ T3244] netlink: 'syz.0.8379': attribute type 10 has an invalid length. [ 1648.547911][ T3244] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8379'. [ 1648.589269][ T3244] hsr0: entered promiscuous mode [ 1648.599891][ T3244] bridge0: port 2(hsr0) entered blocking state [ 1648.616954][ T3244] bridge0: port 2(hsr0) entered disabled state [ 1648.626643][ T3244] hsr0: entered allmulticast mode [ 1648.634972][ T3244] hsr_slave_0: entered allmulticast mode [ 1648.642314][ T3244] hsr_slave_1: entered allmulticast mode [ 1648.680499][ T3244] bridge0: port 2(hsr0) entered blocking state [ 1648.690114][ T3244] bridge0: port 2(hsr0) entered forwarding state [ 1648.751016][ T3250] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8381'. [ 1648.967501][ T3254] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.8382'. [ 1648.992452][ T3254] netlink: 'syz.4.8382': attribute type 2 has an invalid length. [ 1649.868815][ T3278] sctp: [Deprecated]: syz.4.8389 (pid 3278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1649.868815][ T3278] Use struct sctp_sack_info instead [ 1652.868208][ T3299] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1653.039402][ T3303] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8394'. [ 1653.455235][ T3314] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1655.242172][ T3339] team0: Port device team_slave_0 removed [ 1657.622431][ T3390] netlink: 'syz.0.8418': attribute type 10 has an invalid length. [ 1657.630939][ T3390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8418'. [ 1657.644439][ T3390] bond0: entered allmulticast mode [ 1657.649631][ T3390] bond_slave_0: entered allmulticast mode [ 1657.677050][ T3390] bond_slave_1: entered allmulticast mode [ 1657.682871][ T3390] bridge_slave_1: entered allmulticast mode [ 1657.714208][ T3390] syz_tun: entered allmulticast mode [ 1657.720464][ T3390] bridge0: port 3(bond0) entered blocking state [ 1657.739205][ T3390] bridge0: port 3(bond0) entered disabled state [ 1657.750251][ T3390] bond0: entered promiscuous mode [ 1657.755806][ T3390] bond_slave_0: entered promiscuous mode [ 1657.761909][ T3390] bond_slave_1: entered promiscuous mode [ 1657.768271][ T3390] bridge_slave_1: entered promiscuous mode [ 1657.776034][ T3390] bridge0: port 3(bond0) entered blocking state [ 1657.782422][ T3390] bridge0: port 3(bond0) entered forwarding state [ 1657.982966][ T3401] syzkaller0: entered promiscuous mode [ 1657.989394][ T3401] syzkaller0: entered allmulticast mode [ 1657.998309][ T3390] syzkaller0: entered promiscuous mode [ 1658.004500][ T3390] syzkaller0: entered allmulticast mode [ 1660.350280][ T3432] netlink: 191684 bytes leftover after parsing attributes in process `syz.3.8429'. [ 1660.388797][ T3434] netlink: 191684 bytes leftover after parsing attributes in process `syz.3.8429'. [ 1660.916199][ T3426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8425'. [ 1661.325447][ T3448] rxe_eth0 speed is unknown, defaulting to 1000 [ 1662.232114][ T3481] netlink: 'syz.4.8438': attribute type 21 has an invalid length. [ 1662.254563][ T3481] netlink: 'syz.4.8438': attribute type 19 has an invalid length. [ 1662.275346][ T3481] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.8438'. [ 1665.572133][ T3525] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.8450'. [ 1665.996162][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1666.380539][ T3534] netlink: 'syz.3.8451': attribute type 10 has an invalid length. [ 1666.440312][ T3534] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1666.622881][ T3540] netlink: 'syz.4.8454': attribute type 9 has an invalid length. [ 1666.643886][ T3540] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8454'. [ 1667.430549][ T3544] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.8455'. [ 1667.447339][ T3544] netlink: 'syz.0.8455': attribute type 2 has an invalid length. [ 1667.655051][ T3551] netlink: 'syz.3.8457': attribute type 2 has an invalid length. [ 1668.032984][ T3557] netlink: 'syz.3.8460': attribute type 33 has an invalid length. [ 1668.408658][ T3565] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.8463'. [ 1668.597533][ T3570] rxe_eth0 speed is unknown, defaulting to 1000 [ 1669.050937][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.057956][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.326618][ T3604] netlink: 'syz.3.8474': attribute type 2 has an invalid length. [ 1669.346942][ T3604] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8474'. [ 1669.510562][ T3604] bridge0: port 3(dummy0) entered disabled state [ 1669.643520][ T3604] bridge0: port 3(dummy0) entered disabled state [ 1670.163415][ T3620] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8477'. [ 1671.576147][ T3649] netlink: 'syz.3.8482': attribute type 10 has an invalid length. [ 1672.364800][ T3669] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1672.487666][ T3659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1672.911051][ T3682] netlink: 'syz.4.8489': attribute type 29 has an invalid length. [ 1672.938198][ T3682] netlink: 'syz.4.8489': attribute type 29 has an invalid length. [ 1672.968349][ T3680] netlink: 'syz.4.8489': attribute type 29 has an invalid length. [ 1672.988307][ T3680] netlink: 'syz.4.8489': attribute type 29 has an invalid length. [ 1673.003957][ T3680] netlink: 'syz.4.8489': attribute type 29 has an invalid length. [ 1673.077133][ T3685] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.8490'. [ 1673.793855][ T3716] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8500'. [ 1674.249555][ T3726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8504'. [ 1674.273334][ T3726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8504'. [ 1674.295181][ T3726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8504'. [ 1674.598048][ T3736] netlink: 'syz.0.8507': attribute type 21 has an invalid length. [ 1674.755351][ T3738] netlink: 'syz.2.8506': attribute type 3 has an invalid length. [ 1674.768889][ T3738] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1675.102045][ T3751] netlink: 'syz.0.8511': attribute type 6 has an invalid length. [ 1675.123414][ T3751] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8511'. [ 1675.648585][ T3762] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.8514'. [ 1675.661843][ T3764] netlink: 'syz.3.8514': attribute type 27 has an invalid length. [ 1675.701512][ T3764] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8514'. [ 1677.909877][ T3796] netlink: 'syz.2.8521': attribute type 21 has an invalid length. [ 1678.053323][ T3796] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1678.115610][ T3804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1678.656220][ T3820] netlink: 'syz.0.8529': attribute type 29 has an invalid length. [ 1678.673699][ T3820] netlink: 'syz.0.8529': attribute type 29 has an invalid length. [ 1679.281190][ T3838] netlink: 'syz.0.8535': attribute type 2 has an invalid length. [ 1680.681814][ T3860] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.8539'. [ 1680.980970][ T3870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8543'. [ 1681.000915][ T3870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8543'. [ 1681.023051][ T3870] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8543'. [ 1681.064048][ T3871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8543'. [ 1681.639899][ T3890] netlink: 'syz.2.8549': attribute type 10 has an invalid length. [ 1681.758620][ T3890] team0: Port device wlan1 removed [ 1681.790881][ T3890] bond0: (slave wlan1): Opening slave failed [ 1682.029770][ T3879] rxe_eth0 speed is unknown, defaulting to 1000 [ 1682.113837][ T3898] netlink: 'syz.4.8551': attribute type 10 has an invalid length. [ 1682.139400][ T3898] macvlan0: entered promiscuous mode [ 1682.163638][ T3898] macvlan0: entered allmulticast mode [ 1682.182343][ T3898] veth1_vlan: entered allmulticast mode [ 1682.751772][ T3907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8556'. [ 1682.803459][ T3907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8556'. [ 1683.253671][ T3916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8559'. [ 1683.286111][ T3916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8559'. [ 1683.323733][ T3913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8559'. [ 1683.598034][ T3918] netlink: 'syz.4.8557': attribute type 4 has an invalid length. [ 1683.633814][ T3918] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8557'. [ 1684.011282][ T3928] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8562'. [ 1684.041374][ T3928] netlink: get zone limit has 4 unknown bytes [ 1686.206497][ T3960] delete_channel: no stack [ 1686.213050][ T3960] delete_channel: no stack [ 1686.246968][ T3952] delete_channel: no stack [ 1686.251712][ T3952] delete_channel: no stack [ 1686.412547][ T3966] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8571'. [ 1687.000483][ T3981] syzkaller0: entered promiscuous mode [ 1687.027425][ T3981] syzkaller0: entered allmulticast mode [ 1690.445424][ T4016] netlink: 'syz.4.8582': attribute type 10 has an invalid length. [ 1690.456854][ T4016] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1690.493581][ T4016] team0: Port device netdevsim0 added [ 1690.506164][ T4024] netlink: 'syz.4.8582': attribute type 10 has an invalid length. [ 1690.546698][ T4024] team0: Port device netdevsim0 removed [ 1690.565627][ T4024] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1691.330083][ T4037] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1691.741211][ T4044] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8591'. [ 1692.382549][ T4059] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8594'. [ 1692.421616][ T4062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8594'. [ 1692.438662][ T4057] netlink: 'syz.3.8594': attribute type 12 has an invalid length. [ 1692.448761][ T4057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8594'. [ 1692.480625][ T4058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8594'. [ 1692.847779][ T4068] netlink: 'syz.3.8596': attribute type 5 has an invalid length. [ 1692.875532][ T4070] netlink: 'syz.2.8599': attribute type 3 has an invalid length. [ 1692.894268][ T4070] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8599'. [ 1693.321979][ T4079] netlink: 'syz.2.8602': attribute type 29 has an invalid length. [ 1693.358053][ T4079] netlink: 'syz.2.8602': attribute type 29 has an invalid length. [ 1693.377312][ T4079] netlink: 'syz.2.8602': attribute type 29 has an invalid length. [ 1693.403804][ T4079] netlink: 'syz.2.8602': attribute type 29 has an invalid length. [ 1693.453905][ T4086] netlink: 'syz.0.8604': attribute type 6 has an invalid length. [ 1693.461701][ T4086] netlink: 148204 bytes leftover after parsing attributes in process `syz.0.8604'. [ 1693.498334][ T4084] rxe_eth0 speed is unknown, defaulting to 1000 [ 1693.592646][ T4095] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8608'. [ 1693.616764][ T4093] netlink: 181324 bytes leftover after parsing attributes in process `syz.4.8607'. [ 1694.018025][ T4102] mac80211_hwsim hwsim86 wlan0: left promiscuous mode [ 1694.030788][ T4096] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8607'. [ 1694.042995][ T4102] mac80211_hwsim hwsim86 wlan0: left allmulticast mode [ 1694.274034][ T4111] tun0: tun_chr_ioctl cmd 1074025678 [ 1694.279409][ T4111] tun0: group set to 0 [ 1694.314072][ T4113] hsr_slave_0: left promiscuous mode [ 1694.390827][ T4113] hsr_slave_1: left promiscuous mode [ 1700.760892][ T4147] __nla_validate_parse: 2 callbacks suppressed [ 1700.760916][ T4147] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8621'. [ 1700.818908][ T4147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1700.854724][ T4147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1700.894523][ T4147] bond0 (unregistering): (slave .3c): Releasing backup interface [ 1700.918202][ T4147] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1700.953982][ T4147] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1700.972374][ T4147] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1701.007785][ T4147] bond0 (unregistering): Released all slaves [ 1701.835773][ T4171] validate_nla: 3 callbacks suppressed [ 1701.835791][ T4171] netlink: 'syz.4.8627': attribute type 10 has an invalid length. [ 1701.867988][ T4171] team0: Port device hsr_slave_0 added [ 1701.882199][ T4175] netlink: 'syz.4.8627': attribute type 10 has an invalid length. [ 1702.076686][ T4190] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.8632'. [ 1702.086777][ T4190] openvswitch: netlink: Flow key attr not present in new flow. [ 1702.102240][ T4190] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8632'. [ 1702.195778][ T4188] sit0: entered promiscuous mode [ 1702.741547][ T4206] netlink: 'syz.0.8634': attribute type 29 has an invalid length. [ 1702.774754][ T4206] netlink: 'syz.0.8634': attribute type 29 has an invalid length. [ 1703.120447][ T4220] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1703.133919][ T4220] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1703.149309][ T4220] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1703.762631][ T4246] sit0: left promiscuous mode [ 1704.051488][ T4250] netlink: 'syz.2.8648': attribute type 4 has an invalid length. [ 1704.104484][ T4250] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8648'. [ 1704.176451][ T4262] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.8651'. [ 1704.228630][ T4262] netlink: zone id is out of range [ 1704.242839][ T4250] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1704.273729][ T4262] netlink: zone id is out of range [ 1704.325392][ T4262] netlink: zone id is out of range [ 1704.331387][ T4262] netlink: zone id is out of range [ 1704.343517][ T4262] netlink: zone id is out of range [ 1704.370842][ T4262] netlink: zone id is out of range [ 1704.396200][ T4262] netlink: zone id is out of range [ 1704.414927][ T4262] netlink: zone id is out of range [ 1704.541715][ T4263] netlink: 'syz.3.8650': attribute type 17 has an invalid length. [ 1704.588705][ T4263] netlink: 'syz.3.8650': attribute type 16 has an invalid length. [ 1704.624523][ T4263] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8650'. [ 1705.461605][ T4286] netlink: 'syz.2.8654': attribute type 9 has an invalid length. [ 1705.500193][ T4286] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8654'. [ 1706.160514][ T4291] rxe_eth0 speed is unknown, defaulting to 1000 [ 1706.261808][ T4305] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 1706.475188][ T4311] netlink: 'syz.2.8660': attribute type 1 has an invalid length. [ 1706.496597][ T4311] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8660'. [ 1707.655665][ T4320] netlink: 'syz.2.8661': attribute type 10 has an invalid length. [ 1707.679454][ T4320] veth0_macvtap: left promiscuous mode [ 1707.783324][ T4319] netlink: 'syz.2.8661': attribute type 10 has an invalid length. [ 1708.207071][ T4342] netlink: 'syz.4.8666': attribute type 4 has an invalid length. [ 1708.218976][ T4342] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1708.474923][ T4357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8671'. [ 1708.546561][ T4357] netlink: 'syz.4.8671': attribute type 10 has an invalid length. [ 1708.577933][ T4357] veth0_vlan: left allmulticast mode [ 1708.586388][ T4357] veth0_vlan: left promiscuous mode [ 1708.597492][ T4357] veth0_vlan: entered promiscuous mode [ 1708.620104][ T4357] team0: Device veth0_vlan failed to register rx_handler [ 1709.026802][ T4360] netlink: 'syz.2.8673': attribute type 10 has an invalid length. [ 1709.046136][ T4360] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8673'. [ 1710.105097][ T4407] netlink: 'syz.3.8689': attribute type 10 has an invalid length. [ 1711.037816][ T4437] netlink: 'syz.2.8696': attribute type 21 has an invalid length. [ 1711.328400][ T4442] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8699'. [ 1711.339770][ T4442] net_ratelimit: 82 callbacks suppressed [ 1711.339789][ T4442] openvswitch: netlink: Flow key attribute not present in set flow. [ 1711.372569][ T4445] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8699'. [ 1711.389265][ T4445] openvswitch: netlink: Flow key attribute not present in set flow. [ 1711.785776][ T4457] netlink: 'syz.3.8701': attribute type 10 has an invalid length. [ 1711.811608][ T4457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8701'. [ 1711.891447][ T4457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1713.051727][ T4470] netlink: 'syz.4.8705': attribute type 12 has an invalid length. [ 1713.093474][ T4470] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8705'. [ 1713.377584][ T4477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1713.396252][ T4474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1714.987646][ T4485] netlink: 11518 bytes leftover after parsing attributes in process `syz.4.8707'. [ 1715.063896][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8707'. [ 1715.523357][ T4505] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8713'. [ 1715.560960][ T4505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1715.907430][ T4515] syzkaller0: entered promiscuous mode [ 1715.913018][ T4515] syzkaller0: entered allmulticast mode [ 1715.921415][ T4517] netlink: 'syz.0.8717': attribute type 2 has an invalid length. [ 1716.258383][ T4523] netlink: 'syz.2.8718': attribute type 3 has an invalid length. [ 1716.271017][ T4523] netlink: 'syz.2.8718': attribute type 1 has an invalid length. [ 1716.279683][ T4523] netlink: 'syz.2.8718': attribute type 1 has an invalid length. [ 1716.288315][ T4523] netlink: 'syz.2.8718': attribute type 2 has an invalid length. [ 1716.299036][ T4523] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.8718'. [ 1716.555401][ T4528] netlink: 'syz.4.8719': attribute type 9 has an invalid length. [ 1716.572363][ T4528] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.8719'. [ 1719.102648][ T4555] netlink: 'syz.4.8727': attribute type 6 has an invalid length. [ 1719.133455][ T4555] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8727'. [ 1719.157493][ T4556] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.8724'. [ 1719.193583][ T4556] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.8724'. [ 1719.258807][ T4555] netlink: 'syz.4.8727': attribute type 1 has an invalid length. [ 1719.278261][ T4555] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8727'. [ 1720.307161][ T4603] netlink: 'syz.3.8737': attribute type 12 has an invalid length. [ 1720.319676][ T4603] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1720.398270][ T4607] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8739'. [ 1720.410166][ T4607] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8739'. [ 1720.918096][ T4620] netlink: 'syz.3.8743': attribute type 10 has an invalid length. [ 1721.263456][ T4641] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8748'. [ 1721.504013][ T4651] netlink: 'syz.2.8751': attribute type 4 has an invalid length. [ 1721.511828][ T4651] netlink: 'syz.2.8751': attribute type 16 has an invalid length. [ 1721.524257][ T4651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8751'. [ 1721.543469][ T4650] netlink: 'syz.4.8750': attribute type 29 has an invalid length. [ 1721.577406][ T4650] netlink: 'syz.4.8750': attribute type 29 has an invalid length. [ 1721.594574][ T4654] netlink: 'syz.4.8750': attribute type 29 has an invalid length. [ 1721.623970][ T4650] netlink: 'syz.4.8750': attribute type 29 has an invalid length. [ 1722.371843][ T4674] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8757'. [ 1725.055895][ T4681] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.8759'. [ 1725.157736][ T4682] veth0_vlan: left promiscuous mode [ 1725.163062][ T4682] veth0_vlan: entered allmulticast mode [ 1725.191673][ T4682] veth0_vlan: entered promiscuous mode [ 1725.271436][ T4690] validate_nla: 1 callbacks suppressed [ 1725.271582][ T4690] netlink: 'syz.3.8761': attribute type 10 has an invalid length. [ 1725.343812][ T4690] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8761'. [ 1726.033054][ T4707] netlink: 'syz.0.8767': attribute type 21 has an invalid length. [ 1726.057549][ T4707] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8767'. [ 1726.495513][ T4713] rxe_eth0 speed is unknown, defaulting to 1000 [ 1726.987198][ T4725] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.8773'. [ 1727.921102][ T4752] delete_channel: no stack [ 1727.961944][ T4752] delete_channel: no stack [ 1728.097228][ T4755] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8783'. [ 1728.436558][ T4759] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8785'. [ 1728.583226][ T4764] netlink: 'syz.4.8787': attribute type 6 has an invalid length. [ 1728.613320][ T4764] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1728.795939][ T4772] netlink: 'syz.0.8789': attribute type 10 has an invalid length. [ 1729.174158][ T4779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8794'. [ 1729.633509][ T4794] bridge_slave_0: entered promiscuous mode [ 1729.917356][ T4796] IPv6: Can't replace route, no match found [ 1730.122066][ T4810] delete_channel: no stack [ 1730.258939][ T4821] netlink: 'syz.0.8804': attribute type 9 has an invalid length. [ 1730.280331][ T4821] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8804'. [ 1730.489000][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.496974][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.674801][ T4834] syz.0.8808[4834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.674967][ T4834] syz.0.8808[4834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.963168][ T4844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8812'. [ 1731.184387][ T4852] IPv6: Can't replace route, no match found [ 1731.215089][ T4854] netlink: 'syz.3.8815': attribute type 4 has an invalid length. [ 1731.490175][ T4862] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1731.508022][ T4866] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1735.320990][ T4920] sit0: entered allmulticast mode [ 1735.436447][ T4921] sit0: entered promiscuous mode [ 1739.029100][ T4961] rxe_eth0 speed is unknown, defaulting to 1000 [ 1739.094695][ T4962] syzkaller0: entered promiscuous mode [ 1739.102843][ T4962] syzkaller0: entered allmulticast mode [ 1739.514566][ T4982] netlink: 'syz.2.8852': attribute type 10 has an invalid length. [ 1739.525806][ T4982] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8852'. [ 1739.921969][ T5009] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1739.929101][ T5009] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1742.449586][ T5075] netlink: 'syz.4.8875': attribute type 3 has an invalid length. [ 1742.492715][ T5075] netlink: 'syz.4.8875': attribute type 5 has an invalid length. [ 1742.509424][ T5075] netlink: 'syz.4.8875': attribute type 6 has an invalid length. [ 1742.518407][ T5075] netlink: 198296 bytes leftover after parsing attributes in process `syz.4.8875'. [ 1743.005655][ T5092] netlink: 'syz.0.8880': attribute type 2 has an invalid length. [ 1743.043493][ T5092] netlink: 'syz.0.8880': attribute type 8 has an invalid length. [ 1743.051540][ T5092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8880'. [ 1744.280671][ T5104] syzkaller0: entered promiscuous mode [ 1744.334292][ T5104] syzkaller0: entered allmulticast mode [ 1744.377663][ T5112] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8883'. [ 1744.393764][ T5111] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8883'. [ 1747.656137][ T5143] netlink: 'syz.2.8890': attribute type 63 has an invalid length. [ 1747.664179][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1747.724500][ T5143] netlink: 'syz.2.8890': attribute type 63 has an invalid length. [ 1747.742412][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1748.162961][ T5159] netlink: 'syz.4.8895': attribute type 21 has an invalid length. [ 1748.219210][ T5159] IPv6: NLM_F_CREATE should be specified when creating new route [ 1748.294483][ T5169] netlink: 'syz.2.8898': attribute type 13 has an invalid length. [ 1748.313444][ T5169] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.8898'. [ 1748.420592][ T5174] netlink: 'syz.0.8899': attribute type 28 has an invalid length. [ 1748.436617][ T5174] netlink: 'syz.0.8899': attribute type 3 has an invalid length. [ 1748.444783][ T5174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8899'. [ 1748.799296][ T5187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8902'. [ 1748.852475][ T5187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1748.925759][ T5196] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1748.947985][ T5196] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1749.439828][ T5211] netlink: 'syz.2.8909': attribute type 10 has an invalid length. [ 1749.779236][ T5211] team0: Port device geneve1 added [ 1757.779178][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1757.791883][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1757.806722][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1757.817930][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1757.825766][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1757.834421][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1757.909936][ T5246] rxe_eth0 speed is unknown, defaulting to 1000 [ 1758.462540][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 1758.639305][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.654577][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.662164][ T5246] bridge_slave_0: entered allmulticast mode [ 1758.673945][ T5246] bridge_slave_0: entered promiscuous mode [ 1758.687797][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.695105][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.702406][ T5246] bridge_slave_1: entered allmulticast mode [ 1758.710790][ T5246] bridge_slave_1: entered promiscuous mode [ 1758.769801][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1758.787870][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.862277][ T5246] team0: Port device team_slave_0 added [ 1758.877759][ T5246] team0: Port device team_slave_1 added [ 1758.921645][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.928735][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.964547][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.981454][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.989130][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1759.020447][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.913793][ T52] Bluetooth: hci4: command tx timeout [ 1762.003464][ T52] Bluetooth: hci4: command tx timeout [ 1764.073569][ T52] Bluetooth: hci4: command tx timeout [ 1766.153550][T32172] Bluetooth: hci4: command tx timeout [ 1766.478662][T32172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1766.488988][T32172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1766.501814][T32172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1766.511254][T32172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1766.523682][T32172] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1766.531215][T32172] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1766.704985][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1766.719866][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1766.728409][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1766.742655][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1766.750897][ T52] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1766.763972][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1767.576715][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1767.586796][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1767.595299][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1767.603703][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1767.611492][ T52] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1767.619479][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1768.633562][ T52] Bluetooth: hci5: command tx timeout [ 1768.803536][ T52] Bluetooth: hci6: command tx timeout [ 1769.673571][ T52] Bluetooth: hci7: command tx timeout [ 1770.713509][ T52] Bluetooth: hci5: command tx timeout [ 1770.873263][ T52] Bluetooth: hci6: command tx timeout [ 1771.763418][ T52] Bluetooth: hci7: command tx timeout [ 1772.793556][ T52] Bluetooth: hci5: command tx timeout [ 1772.953613][ T52] Bluetooth: hci6: command tx timeout [ 1773.833502][ T52] Bluetooth: hci7: command tx timeout [ 1774.873768][ T52] Bluetooth: hci5: command tx timeout [ 1775.043524][ T52] Bluetooth: hci6: command tx timeout [ 1775.932460][ T52] Bluetooth: hci7: command tx timeout [ 1791.918327][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.924801][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1818.881423][T32172] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1818.892643][T32172] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1818.900756][T32172] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1818.909247][T32172] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1818.917074][T32172] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1818.924624][T32172] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1820.953495][T32172] Bluetooth: hci8: command tx timeout [ 1823.043447][T32172] Bluetooth: hci8: command tx timeout [ 1825.113223][T32172] Bluetooth: hci8: command tx timeout [ 1827.006396][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1827.020903][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1827.029117][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1827.037639][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1827.046341][ T52] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1827.054140][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1827.203782][ T52] Bluetooth: hci8: command tx timeout [ 1827.644353][T32172] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1827.661110][T32172] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1827.673800][T32172] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1827.682043][T32172] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1827.696635][T32172] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1827.704292][T32172] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1828.544297][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1828.559117][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1828.567396][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1828.585818][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1828.593989][ T52] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1828.601473][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1829.123777][T32172] Bluetooth: hci9: command tx timeout [ 1829.754457][T32172] Bluetooth: hci10: command tx timeout [ 1830.633598][T32172] Bluetooth: hci11: command tx timeout [ 1831.193614][T32172] Bluetooth: hci9: command tx timeout [ 1831.833510][T32172] Bluetooth: hci10: command tx timeout [ 1832.713475][T32172] Bluetooth: hci11: command tx timeout [ 1833.283424][T32172] Bluetooth: hci9: command tx timeout [ 1833.931515][T32172] Bluetooth: hci10: command tx timeout [ 1834.803601][ T52] Bluetooth: hci11: command tx timeout [ 1835.353749][T32172] Bluetooth: hci9: command tx timeout [ 1836.003606][T32172] Bluetooth: hci10: command tx timeout [ 1836.883473][T32172] Bluetooth: hci11: command tx timeout [ 1853.368421][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.379378][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.153151][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1855.159979][ C0] rcu: 0-....: (1 GPs behind) idle=a8b4/1/0x4000000000000000 softirq=169592/169594 fqs=4278 [ 1855.171354][ C0] rcu: hardirqs softirqs csw/system [ 1855.177825][ C0] rcu: number: 1360150 0 0 [ 1855.184258][ C0] rcu: cputime: 18377 34112 64 ==> 52490(ms) [ 1855.192103][ C0] rcu: (t=10500 jiffies g=202665 q=2589 ncpus=2) [ 1855.198541][ C0] CPU: 0 PID: 5228 Comm: syz.4.8916 Not tainted syzkaller #0 [ 1855.205954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1855.216031][ C0] RIP: 0010:unwind_next_frame+0x1ce6/0x2990 [ 1855.221965][ C0] Code: 00 49 8b 07 4c 39 f3 0f 96 c1 4c 39 f0 0f 97 c2 84 d1 74 3c 49 8d 4e 08 48 39 d9 0f 96 c2 48 39 c1 0f 97 c0 4d 39 e6 0f 97 c3 <08> c3 08 d3 4c 89 f7 4c 89 e6 e8 eb df 4b 00 80 fb 01 0f 85 5b 01 [ 1855.241599][ C0] RSP: 0018:ffffc90000007418 EFLAGS: 00000212 [ 1855.247687][ C0] RAX: ffffc90000008000 RBX: ffffc90000000001 RCX: ffffc900000075e8 [ 1855.255678][ C0] RDX: ffff8880681bbc00 RSI: 0000000000000002 RDI: ffffc90000007550 [ 1855.263668][ C0] RBP: 0000000000000002 R08: ffff8880681bbc00 R09: 0000000000000003 [ 1855.271670][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007548 [ 1855.279660][ C0] R13: ffffc90000007548 R14: ffffc900000075e0 R15: ffffc90000007558 [ 1855.287652][ C0] FS: 00007f396f73b6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1855.296603][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1855.303209][ C0] CR2: 0000000100000000 CR3: 0000000051f8f000 CR4: 00000000003506f0 [ 1855.311199][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000240 [ 1855.319196][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1855.327197][ C0] Call Trace: [ 1855.330514][ C0] [ 1855.333407][ C0] ? arch_stack_walk+0xf8/0x190 [ 1855.338287][ C0] __unwind_start+0x5bb/0x730 [ 1855.342986][ C0] ? stack_trace_save+0x100/0x100 [ 1855.348040][ C0] arch_stack_walk+0xf8/0x190 [ 1855.352745][ C0] ? stack_trace_save+0xaa/0x100 [ 1855.357721][ C0] stack_trace_save+0xaa/0x100 [ 1855.362535][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1855.367681][ C0] ? memset_orig+0x7b/0xac [ 1855.372137][ C0] kasan_set_track+0x4e/0x70 [ 1855.376805][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 1855.381848][ C0] kasan_save_free_info+0x28/0x40 [ 1855.386905][ C0] ____kasan_slab_free+0x126/0x1f0 [ 1855.392049][ C0] slab_free_freelist_hook+0x154/0x240 [ 1855.397538][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1855.402758][ C0] ? skb_release_data+0x609/0x7f0 [ 1855.407807][ C0] __kmem_cache_free+0xba/0x1f0 [ 1855.412692][ C0] skb_release_data+0x609/0x7f0 [ 1855.417580][ C0] kfree_skb_reason+0x10e/0x170 [ 1855.422462][ C0] inet_frag_destroy+0x179/0x290 [ 1855.427456][ C0] ip_expire+0x55b/0x850 [ 1855.431722][ C0] ? ip_expire+0xe2/0x850 [ 1855.436094][ C0] ? ip4_frag_free+0x50/0x50 [ 1855.440750][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1855.446793][ C0] call_timer_fn+0x189/0x540 [ 1855.451422][ C0] ? ip4_frag_free+0x50/0x50 [ 1855.456050][ C0] ? call_timer_fn+0xd2/0x540 [ 1855.460765][ C0] ? __run_timers+0x810/0x810 [ 1855.465501][ C0] ? ip4_frag_free+0x50/0x50 [ 1855.470131][ C0] __run_timers+0x570/0x810 [ 1855.474680][ C0] ? detach_timer+0x2b0/0x2b0 [ 1855.479405][ C0] run_timer_softirq+0x67/0xf0 [ 1855.484204][ C0] handle_softirqs+0x27d/0x820 [ 1855.488995][ C0] ? read_tsc+0x9/0x20 [ 1855.493135][ C0] ? ktime_get+0x24b/0x280 [ 1855.497633][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1855.502454][ C0] ? do_softirq+0x1a0/0x1a0 [ 1855.507007][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1855.512290][ C0] __irq_exit_rcu+0xd3/0x190 [ 1855.516915][ C0] ? irq_exit_rcu+0x20/0x20 [ 1855.521471][ C0] irq_exit_rcu+0x9/0x20 [ 1855.525745][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1855.531427][ C0] [ 1855.534403][ C0] [ 1855.537361][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1855.543370][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 1855.549307][ C0] Code: 75 11 e8 2c 15 0b 00 48 85 db 75 16 e8 22 15 0b 00 eb 15 e8 1b 15 0b 00 e8 f6 18 1b 09 48 85 db 74 ea e8 0c 15 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1855.568934][ C0] RSP: 0018:ffffc9000e4d7a00 EFLAGS: 00000246 [ 1855.575029][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 1855.583022][ C0] RDX: ffffc9000d62c000 RSI: 0000000000001bf2 RDI: 0000000000001bf3 [ 1855.591116][ C0] RBP: ffffc9000e4d7ad0 R08: ffffffff92223607 R09: 1ffffffff24446c0 [ 1855.599134][ C0] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: 1ffff92001c9af44 [ 1855.607126][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001c9af65 [ 1855.615135][ C0] ? event_function+0x300/0x300 [ 1855.620016][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1855.625792][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 1855.631559][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1855.636787][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 1855.642461][ C0] smp_call_function_single+0x36d/0x5a0 [ 1855.648036][ C0] ? event_function+0x300/0x300 [ 1855.652928][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1855.659120][ C0] ? event_function+0x300/0x300 [ 1855.664030][ C0] perf_install_in_context+0x5bb/0x920 [ 1855.669549][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 1855.674686][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1855.680774][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 1855.686013][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1855.691237][ C0] ? perf_event__header_size+0x165/0x220 [ 1855.696906][ C0] __se_sys_perf_event_open+0x180d/0x1d40 [ 1855.702663][ C0] ? security_bpf+0x7e/0xa0 [ 1855.707202][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1855.712875][ C0] ? lock_chain_count+0x20/0x20 [ 1855.717759][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1855.722978][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1855.728636][ C0] do_syscall_64+0x55/0xb0 [ 1855.733079][ C0] ? clear_bhb_loop+0x40/0x90 [ 1855.737795][ C0] ? clear_bhb_loop+0x40/0x90 [ 1855.742507][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1855.748423][ C0] RIP: 0033:0x7f396e79fb19 [ 1855.752855][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.772494][ C0] RSP: 002b:00007f396f73b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1855.780950][ C0] RAX: ffffffffffffffda RBX: 00007f396ea25fa0 RCX: 00007f396e79fb19 [ 1855.788946][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000700 [ 1855.796939][ C0] RBP: 00007f396e837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1855.804932][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1855.812918][ C0] R13: 00007f396ea26038 R14: 00007f396ea25fa0 R15: 00007ffe513520c8 [ 1855.820922][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)