last executing test programs: 2m39.084312753s ago: executing program 2 (id=5702): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000800000000000000e1ded014dbd2dae9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0xfd, &(0x7f00000002c0)=""/253, 0x40f00, 0x3, '\x00', r1, @sk_lookup=0x24, r3, 0x8, &(0x7f0000000780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0x7, 0x4}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f0000000800)=[{0x3, 0x5, 0x2, 0x9}]}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23}, 0x94) 2m37.042882865s ago: executing program 2 (id=5714): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1c}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1c}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x365a, 0x0, 0x0, 0x0, 0x58a8}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x2, 0x0, 0x6, 0x4, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[r0, r0], &(0x7f0000000300)=[{0x3, 0x3, 0x5}, {0x5, 0x1, 0x7, 0x3}, {0x1, 0x4, 0x7, 0x1}, {0x1, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x5, 0x2}, {0x5, 0x4, 0x6, 0x2}, {0x4, 0x4, 0x8, 0x4}, {0x5, 0x2, 0xc, 0x4}], 0x10, 0x1000}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x365a, 0x0, 0x0, 0x0, 0x58a8}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x2, 0x0, 0x6, 0x4, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[r0, r0], &(0x7f0000000300)=[{0x3, 0x3, 0x5}, {0x5, 0x1, 0x7, 0x3}, {0x1, 0x4, 0x7, 0x1}, {0x1, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x5, 0x2}, {0x5, 0x4, 0x6, 0x2}, {0x4, 0x4, 0x8, 0x4}, {0x5, 0x2, 0xc, 0x4}], 0x10, 0x1000}, 0x94) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x1f, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240), 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, 0xffffffffffffffff, 0x15, 0x2a, r3, @void, @void, @void, @value=r6, r4}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r0, r2, 0xa, 0x0, r1, @void, @value=r1, @void, @void, r4}, 0x20) 2m36.800135377s ago: executing program 2 (id=5716): mkdir(0x0, 0xbe9bac6d2d0f4e0b) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_config_ext={0x7ff, 0x3}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (rerun: 64) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x6, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8310}, 0x1000, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="42000008006de0e900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xe, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000004000000000000e000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000dfff00009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xa14a, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x10, 0x9, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], 0x0, 0x10, 0x80}, 0x94) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000880)={&(0x7f0000000300)="04be4f844f490ecc01e3ed25f836a265c596dc4389c7451c615fbfe0111ff13b71681813dc239fabcab9b44b3dd461ab2a86984e55944d6f8769ecbe6d9eec5c311586f1f5e8678ef347a3a558bcb878b269ef1ec27a961904fc3f6dd4eb73107149253c74c635ec69457dd33c1fa02f31f7ca281b294dfc37888076c20dcaa040901eab605b9e12c789bf4bfad0fc88803ed1a8fd36a00100458bbc4af12279", &(0x7f00000006c0)=""/185, &(0x7f0000000780), &(0x7f00000007c0)="d64a919ca93efb1ef1816292b2d5bd81f8a0c32999ecc9ac2f4e14a4fb3d050011f7d83a37e55882437fc0220b10fc5a7f427ed0b3f51ccd8fae27d606d7ab18cf6a8a1ce9add7fee76ca29a63e2bd5effc3c7dca2bf446f882f76bc57", 0x6, r5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m35.159513694s ago: executing program 2 (id=5722): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x8, [@fwd={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x4}}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0xc, [{0x10, 0x3, 0x7}, {0x10, 0x2, 0x6}, {0x6, 0x800000, 0x3}, {0xb, 0x4, 0x6}, {0x1, 0x1, 0x9}, {0xf, 0x40, 0xc7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x1}}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x6, 0x3}]}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x30, 0x30, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000200)=""/123, 0xf0, 0x7b, 0x0, 0xfffffffe, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5c576176, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x4, 0x3, 0x6, 0x18, 0xffffffffffffffef}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0xffffffc0, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24, '\x00', r4, 0x0, r3}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x8, [@fwd={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x4}}, @enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0xc, [{0x10, 0x3, 0x7}, {0x10, 0x2, 0x6}, {0x6, 0x800000, 0x3}, {0xb, 0x4, 0x6}, {0x1, 0x1, 0x9}, {0xf, 0x40, 0xc7}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x1}}, @typedef={0x3, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x6, 0x3}]}, @const={0xa, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x30, 0x30, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000200)=""/123, 0xf0, 0x7b, 0x0, 0xfffffffe, 0x10000}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5c576176, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0x4, 0x3, 0x6, 0x18, 0xffffffffffffffef}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='GPL\x00', 0xffffffc0, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24, '\x00', r4, 0x0, r3}, 0x94) (async) 2m34.607219111s ago: executing program 2 (id=5724): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0x7}, 0x5044, 0x0, 0x0, 0x0, 0x0, 0x3, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x10, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@alu={0x7, 0x1, 0xa, 0x6, 0xf, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000a80)='syzkaller\x00', 0xfffff336, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x3, 0x0, 0x6, 0x4}, 0x10, 0x2ddad, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa39c}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000040)=r2, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r3}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={0x0, 0x0, 0xc}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001c40)=""/245}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) r6 = getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x10000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffff}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m33.511471584s ago: executing program 2 (id=5734): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ff0f0000000000000000000045ba5470e1f8b200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000fcc100850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000002c40)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/236, 0xec}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/201, 0xc9}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/93, 0x5d}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/77, 0x4d}], 0x9}, 0x23) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x8}, 0x80}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301740, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="03cd7f4f7c48b6588f6f87a4c1469f2016", 0x11}, {&(0x7f0000000240)="eef0a346567cd91212110b708e4392bd197220c39c9e72b29619ff611990cbeea03688678153acd0d92001c22d97b94992d89431ef3dd86e0ae752c1b345f82f2725f0e49e8b03406ec4501799d5f9aa92567e502d5b2ca0ad0e121beda46401436ee490b8ba33a6be03d57faef5a815e6e9d6813fc4d6947632bc3daa955b24afffdeeb824c", 0x86}, {&(0x7f0000000300)="6035799269b616b32749baa9710f75097d90de6185bcdbd60c7247b1dcf8383aac53c565c84ee97b4a6bffabe97933a44cff86fb8d8d8610c14d15299b053042a92a4d795d40199ec6632a82a4ee5b700367cfeac596464a188bd0816ad9bd0fff198ed65fc597dda96a1ae92fbd490f345d78c59d5607efc9a2ce9f2aae64ea09b995cca8dd3c70f7d8fda13cb664902644", 0x92}, {&(0x7f00000003c0)="7a84b3494787c8c8", 0x8}, {&(0x7f0000000500)="65b9c0ca4088ec0d43e7b2760ae65d624dadeb73f713171777f0baf26b8594483ad86ac644b06ea3ffe1ae76649533aee3e29d65f4d968f1b2cecc910cfb8d3448ce815183eddeeebfb0e13dfaa786976018b6767325d88b6b34388c00e37df01041afd3ffa022b5a5a90fe7a636e78b90b5fe2db45b41239253f0983397df1c08e343be0e3a8fdf1e8cfbc34de491bdffa56e64fde07c725ef6ab643631b7965f93159651081ee5ab29f9f1", 0xac}], 0x5}, 0x8d5) 2m18.432409151s ago: executing program 32 (id=5734): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000ff0f0000000000000000000045ba5470e1f8b200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000fcc100850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000002c40)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/236, 0xec}, {&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/201, 0xc9}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/93, 0x5d}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/77, 0x4d}], 0x9}, 0x23) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x8}, 0x80}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301740, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="03cd7f4f7c48b6588f6f87a4c1469f2016", 0x11}, {&(0x7f0000000240)="eef0a346567cd91212110b708e4392bd197220c39c9e72b29619ff611990cbeea03688678153acd0d92001c22d97b94992d89431ef3dd86e0ae752c1b345f82f2725f0e49e8b03406ec4501799d5f9aa92567e502d5b2ca0ad0e121beda46401436ee490b8ba33a6be03d57faef5a815e6e9d6813fc4d6947632bc3daa955b24afffdeeb824c", 0x86}, {&(0x7f0000000300)="6035799269b616b32749baa9710f75097d90de6185bcdbd60c7247b1dcf8383aac53c565c84ee97b4a6bffabe97933a44cff86fb8d8d8610c14d15299b053042a92a4d795d40199ec6632a82a4ee5b700367cfeac596464a188bd0816ad9bd0fff198ed65fc597dda96a1ae92fbd490f345d78c59d5607efc9a2ce9f2aae64ea09b995cca8dd3c70f7d8fda13cb664902644", 0x92}, {&(0x7f00000003c0)="7a84b3494787c8c8", 0x8}, {&(0x7f0000000500)="65b9c0ca4088ec0d43e7b2760ae65d624dadeb73f713171777f0baf26b8594483ad86ac644b06ea3ffe1ae76649533aee3e29d65f4d968f1b2cecc910cfb8d3448ce815183eddeeebfb0e13dfaa786976018b6767325d88b6b34388c00e37df01041afd3ffa022b5a5a90fe7a636e78b90b5fe2db45b41239253f0983397df1c08e343be0e3a8fdf1e8cfbc34de491bdffa56e64fde07c725ef6ab643631b7965f93159651081ee5ab29f9f1", 0xac}], 0x5}, 0x8d5) 8.082225776s ago: executing program 4 (id=6423): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x1, 0x8, 0x2d, 0x0, 0x10001, 0x5400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x200, 0xa, 0xd4, 0x3, 0x0, 0x1, 0x4, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0xe, r0, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfaa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105880, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8841) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.362341579s ago: executing program 4 (id=6426): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2={0xff, 0x5}, 0x2}, 0x80, &(0x7f0000000280), 0x0, 0x0, 0x45, 0x900}, 0x200480c4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0xa, @empty, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x27}}], 0x18}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000020000000000000e040000000000000000000000000000010500000008000000010000000000000700000000000000000000000300000000030000000200000000000000006161"], 0x0, 0x60}, 0x28) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xb8, 0x2f, &(0x7f00000002c0)="a5d4051a3ce7ae757db90a7dcae9d7d321e19803b8a4c4805a51eae92e7187c101bb454682a39c571f59d1fc2ba30274240f01cae747bc31c1a30a37f494b6b2111903cc2f8efd4fbfff216bbbedfdf344a8866bb4b727400aa5ecb42fce0ae8c96f8500d88bb032c262e0a888e6cb9e84a687b3ae83e81f5f5cf3061b84d640fa8d4437c99122694e2585359a545ff9cb94347a7d35494d804f0096e9ff3174c56504041eceee86c7688a9ed751cf16c8e9db2528539181", &(0x7f0000000380)=""/47, 0x6, 0x0, 0x27, 0x6a, &(0x7f00000003c0)="6e67da2a7084ef67cc2756f265d2503d4646715c68ce1494e5262a3b15523f63446999614d20c4", &(0x7f0000000200)="c1ded13836edc3ee0822a14f2c8a5b49dea702226f5ccebc22f3462197be968ad93f6edf612d9e92c34f9a3f8cfb7010411c56dfd235fad289a879e2031f8f889c8a84468e962b857badf644a966ed566b631eeb654cf14a8a988b0c08595ab7ca174d45f940dc7ceabe", 0x4, 0x0, 0x74}, 0x50) 6.873992023s ago: executing program 4 (id=6429): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x13}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="a7d6001000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, 0x0, 0x32}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01341090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0x21100000, &(0x7f0000000900)="23d7e3acd821de15e93acdd5ec6b206f06aebe3adf7e", 0x16, 0x0, 0x0, &(0x7f0000000a80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x12}, 0x40012103) sendmsg$inet(r0, 0x0, 0x8045) 6.12908431s ago: executing program 1 (id=6432): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000590000000000000000040000000900000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, 0x4}, 0x38) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f00000001c0)="b0fb634daf594b0fff8094295b92963ee942d4965df033042bbb36fdd71a7fc5435f", &(0x7f0000000200)=""/199, &(0x7f0000000340)="a11144ba22f5e91139fd167bdedadd1f95e3285f85aec278b58b64720b90bea63f9854d9197dba28c6e74228fde7a9eacceed952b3ebe363b028d36c9268fa7d967ca87fdb4c643bcea122c57ac80b26edc0a2aef21ca166bc48445ca86860eb01c8cc787d0feb88e249fe2345b8c0b021570e9513ca5d6b1c8327ea9ece6417434ab3055b590ab513a2fd17a87067", &(0x7f0000000500)="22ffde69d43276a91e16922641d2c30193fa5ddd9244ee67d57ad3c8d6d5ed5d2d756f6e642f1c86f20572805b043d3f384a7228e8d2a9126f865857585d59b8ade51cdbc41bebc557130930d8bf06dce006629705c69ef85631e323209f18443a5e9fdf0a23d479de2be1368611e0eae443a57a40ea41ff05d153dbcf2d26147a0bd33deb18f46ff1c1f2f17bac391ac25655732b9cb921bed317de9668df", 0x7, r3}, 0x38) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440), 0x5}, 0x10a0, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x806, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r6, 0x9) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r6, 0x4) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x11, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x1, 0x0, 0x2, 0x9, 0x0, 0x5d31, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x58c8, 0xfffffffffffffffc, 0xfffffffc, 0xf, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) syz_clone(0x80000011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) 4.579173469s ago: executing program 0 (id=6434): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x11, 0x68, &(0x7f0000000100), 0x120) socket$kcm(0x25, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r2}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000fffff000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000003fc0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) 4.501097035s ago: executing program 4 (id=6435): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52, 0x0, 0xffff0f00}, 0x28) 4.108417438s ago: executing program 4 (id=6437): r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x13, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) recvmsg$kcm(r0, &(0x7f0000003c80)={0x0, 0x0, 0x0}, 0x12002) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x613) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xaa, 0xf, 0xa5, 0x0, 0x7, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100030, 0x81, 0x0, 0x8, 0x1, 0x2, 0x2, 0x0, 0x81, 0x0, 0x80}, r2, 0x2, r2, 0xa) (async) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xaa, 0xf, 0xa5, 0x0, 0x7, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100030, 0x81, 0x0, 0x8, 0x1, 0x2, 0x2, 0x0, 0x81, 0x0, 0x80}, r2, 0x2, r2, 0xa) 4.060523839s ago: executing program 1 (id=6438): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2c71, 0x0, @perf_bp={0x0, 0x4}, 0x215, 0x3fd, 0xfffffffa, 0x0, 0xfffffffffffffffd, 0x1, 0xffff, 0x0, 0x10}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r1, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000001540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0xef, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001780)=@can={0x1d, r2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)="e986dbc1cf1d685a31066834b64fe519fb9dfcad60462db213", 0x19}], 0x1, &(0x7f0000001880)=[{0x10, 0x6}, {0x50, 0x4df8b77a5eb4470c, 0xffffffff, "39ee03424eea11b2f13a173f4461d91a16c1c99e1c77f70e061e584ee6f2fb4601504685c9025aed0eec1e17a4939b90887250dc83d99b0bf32728"}, {0x48, 0x0, 0x4, "db46c2f535bb96252d65f45431336eae3a4cbcbc9897ffb1cc3e33ca0b033313a4b0eb5a877b324b99d220782f0185bd98"}, {0x108, 0x21e21fc1efca3fd9, 0x4, "b2246ada3dcc5ae4b93e14be24921907322c860780ec270543e58894e0cea41819c3916d15ae58eb0988f3263875365835ea64049bb3c8317dcda8fc37753a7eb46700aa9f7663c449070228a85febf45400b94a3ba11b9ed037887164bd0f2053812ada70d23e58e2c23134f0f54fa0cb0705364d127377d728038cda620b209ef4ad042f3386504875efa2df965952a33c6587d906d543f54625fa536456fd581601de15c9947610209a79243f73913e363a2a8436d797a1431768e8ec5a26f1bea3e6b120dcd01d57a83e12209b10f2dbb5f9c0fc8c2860607894f9fc3eebc014070581440164214f6bc5c8594d0d9938af4c4a84"}, {0x10, 0x107, 0x4}, {0x78, 0x109, 0x3, "12efbc03fa9fcbadff25d81a5e8c55b4dfdd5eafeda352da86f77e9bed563fa44ec563de83f5b097cf9e63f133945c75fbc2c44ed6d5d03ffbc89da6ca0a2e39f33bce6222782f9f1d0143cb523adf524ce689a5d6228bc71083817699bcc96f6dc7"}], 0x238}, 0x5c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x410202, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x14, &(0x7f0000000040)=r8, 0x3b) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001b00)={0x2, 0x80, 0x1, 0x1, 0x0, 0xff, 0x0, 0x0, 0x80041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0x6, 0x0, 0x0, 0x100000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff9085000000730000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x4, 0x0, &(0x7f0000000000)="e0b9547e", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r4, &(0x7f0000001480)={&(0x7f0000000b80)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000e40)="345d6863e5ebdd44ea107ac6e70d948f028bcb00a848194058a320d623683f888bdafbd39965d607cbc73708f83bfd28d7f8364158fd54676acf10efb3002bbde27cd49f4e6eb3278f2dd9be293706c7196a836dcc09b76f3e0d27d892f0908a6e26dbe28911", 0x66}, {&(0x7f0000000ec0)="a10d4c8bd2e8f530c7163b460c76f97ed5efe297a3404dba9ab03e250dc9a49a475ef97ecf2841c6d6f10e9240756c38caa51b65c66d0a44c3f77918d12dda7a63c192e0fd4c0a4df08b822aeca342221340991e31f4821eac0eb855066a7f929a8a94754745d0006b040aef5ea21bf730ca218b6bfdd363138820970680f16e68e082f4ba715c35ca8de241fc421ca79ca6590468cbef70b2", 0x99}, {&(0x7f0000000f80)="1968419c9cc3aa4e8b9a542340566760b79f98085e68f806670779de976b5196fadfa9a03c86b58391d9eb17ce54471e152c8c0182c10221dc438b5621f07bc496760be58f777645ae42e5e7ab64af902703c579e5ee62c8adb3ccd354f5f74d99ab9e46402250088ef5f65d875cad2d204e17de5e5c67d3a03e0f01d1e7d85b3bb58b89f27adef11f1b120017c8e151aaf6946c175321a5bda3df23a07f4db380c1d86188d49cf8dfb9368eedb18b0e2fa6fd2261", 0xb5}, {&(0x7f0000001040)="63a5a22fb53a1f55b968dc11bd018e48b450369a11ad5972ca3c4d7938d2b831ee58bf6643cd85963b80e431f4fab95aadf6200c4f708b8c5a5fb3edd99bf5d4410b4a0c2c0778e70b22a6c02fb83b58e01663a9dcf3567ead04e5d9bfdc334be6463f2376aba614895d63b0caabbc052e9d595391bc944e3ddb31341afbdd22b6443c4238f1b190efb7d937dccd22cb16b34b07bdb24f1348f3ff35d56c044ee21577434f0f4a9a6d6beed6f4acd6705c3db6579f549d4067d90442671645b8481681d1585af51204281adf156754a3d0c9160738133fd6b0a3205a9ae22dde1cddfd8fd4b6174f04", 0xe9}, {&(0x7f0000001140)="45d67d58ac85bc49a70d4c576bf0ffe68960678c8869275c69d03b9c8eca409f30ad61f3d259d66a46f0802ccbb3e7b1009f983288010ad14b4fd3663b6fd794d83150875a2f1f9658525fc50ca7b8aed70f607fc8b83ae403c9895db935da16af6c7bf3204b593a97af32658b4e45ba00c9d66d4d623410b894485ce82d96806353517b90b747aa27809a04b7a454947beb36280202016ddbb1539acf2f4a9a149cf09794137a06d01b32aed20c5e75dd35d18b970524fdb58267687c89909bf87f", 0xc2}], 0x5, &(0x7f00000013c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xde3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18}}], 0xa8}, 0x4000040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r9, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, 0x0, 0x0, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r11, @ANYBLOB='\b\x00'/19, @ANYRES32=r12, @ANYRES32, @ANYBLOB="050000000100006cfd97f7"], 0x50) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1c0000004a0081144e007c05e8fe55a10a000400014002020a600e41", 0x1c}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.920619068s ago: executing program 0 (id=6439): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000012008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x8, 0x0}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0xa9f, 0x6, 0x6, 0x48a00, r6, 0xffffffff, '\x00', 0x0, r0, 0x5, 0x5, 0x2, 0x2, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000080000000001ae6000018110000", @ANYRES32=r7, @ANYBLOB="000000001e000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500d6190000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018380000040000000000000000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x4, 0x80, &(0x7f00000005c0)=""/128, 0x40f00, 0x1, '\x00', r9, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x3, 0x7fff, 0x5}, 0x10, r10, r1, 0x1, &(0x7f0000000a80)=[r0, r11], &(0x7f0000000ac0)=[{0x3, 0x5, 0x1, 0x6}]}, 0x94) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000400)=@caif, 0x80, 0x0}, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x5}, 0x10}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r12, @ANYBLOB="0100000002"], 0x40) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socket$kcm(0x25, 0x5, 0x0) 3.401527908s ago: executing program 5 (id=6440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) (async) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x3c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40080, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x19000, &(0x7f0000000700)=""/102400, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x19000, &(0x7f0000000700)=""/102400, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.269293828s ago: executing program 0 (id=6441): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500000000000000000000000100"/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="180000002e00818a04fb7fec598f866b29924a005e140600", 0x18}], 0x1}, 0x0) recvmsg$kcm(r2, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000604eb19682aa751b00000009730a54d6d4beff7ab6799456b5950d8ac58dbfff959b2a02482a472ac620a37de42a09118c410109cbbb9036d785aaf5db974ea6070a47126b353408"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x8, 0x0, 0x100, 0x10282, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x8, 0x0, 0x100, 0x10282, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x63) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x63) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x5, 0x4, 0x5, 0x7, 0x0, 0x4, 0x2d082, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58, 0x1, @perf_config_ext={0x1bb2, 0x3}, 0x1a0, 0x6, 0x3, 0x2, 0x8, 0x12c0, 0xff, 0x0, 0xd925, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x5, 0x4, 0x5, 0x7, 0x0, 0x4, 0x2d082, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58, 0x1, @perf_config_ext={0x1bb2, 0x3}, 0x1a0, 0x6, 0x3, 0x2, 0x8, 0x12c0, 0xff, 0x0, 0xd925, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9be5, 0x3}, 0x0, 0x2, 0x71c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.127758709s ago: executing program 1 (id=6442): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8905, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x7, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="61100c0000000000150003000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000700)="00112233445566778899aabb0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r8, &(0x7f0000000c40)="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", &(0x7f0000001c40)=""/165}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r0, r10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.111803772s ago: executing program 3 (id=6443): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ee09837153e370a0101", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x1000c8c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45", 0x8}], 0x1}, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005e000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.986324508s ago: executing program 5 (id=6444): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000d40)={&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/115, 0x73}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/234, 0xea}, {&(0x7f0000000a00)=""/130, 0x82}], 0x8, &(0x7f0000000c40)=""/213, 0xd5}, 0x100) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4e, 0x2, 0x0, 0x0, 0x0, 0xee, 0x80420, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xfffffffffffff031, 0x6}, 0x105c1, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x7a) perf_event_open$cgroup(&(0x7f0000004f80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x22b, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x18, 0x5, 0xfffffffe, 0x7, 0x0, r4, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000f99d6bcd5e5ea462d02a1e4352e60d0ea6aa6c2df1de68fa175d09c7086ddaa6c614677b1f39dd4c1f49d1a6bad65124d2431bd5e6aa2d20909c99d5bfedb5f5a224a983d51c8c8ea703b90f014335b493c412b036fa5da0c05d3e30934e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r5}, 0xc) gettid() syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 1.704527018s ago: executing program 0 (id=6445): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x13}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="a7d6001000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, 0x0, 0x32}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01341090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0x21100000, &(0x7f0000000900)="23d7e3acd821de15e93acdd5ec6b206f06aebe3adf7e", 0x16, 0x0, 0x0, &(0x7f0000000a80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x12}, 0x40012103) sendmsg$inet(r0, 0x0, 0x8045) 1.474748337s ago: executing program 3 (id=6446): r0 = socket$kcm(0x18, 0x4, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1.211139323s ago: executing program 1 (id=6447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52, 0x0, 0x0, 0x18}, 0x28) 1.149123266s ago: executing program 3 (id=6448): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) recvmsg(r0, &(0x7f0000001700)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/234, 0xea}, {&(0x7f0000001400)=""/192, 0xc0}, {&(0x7f00000014c0)=""/169, 0xa9}, {&(0x7f0000001580)=""/195, 0xc3}], 0x5}, 0x10001) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001240)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000001340)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4041) 951.161658ms ago: executing program 1 (id=6449): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000100), 0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034000400000002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 880.903733ms ago: executing program 0 (id=6450): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x11, 0x68, &(0x7f0000000100), 0x120) socket$kcm(0x25, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r2}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000ffff0f000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000003fc0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) 815.514677ms ago: executing program 3 (id=6451): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x5, 0x3, 0x6, 0x20000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x5}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x20, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x0, 0x7, 0x4, 0x5, 0x18, 0x4}, @generic={0x0, 0x5, 0xe, 0x9, 0xffffb44b}, @alu={0x7, 0x0, 0xa, 0x6, 0x0, 0x18, 0xffffffffffffffff}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x16}}, @map_val={0x18, 0x8, 0x2, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) 812.514837ms ago: executing program 5 (id=6452): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000040c0)=""/4052, 0xfd4}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000008c0)=""/38, 0x26}, {&(0x7f0000000dc0)=""/152, 0x98}], 0x5}, 0x22) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000000)="69527e94868e15dbb63a43681ad4e58db9d6", 0x12}, {&(0x7f0000001380)="c4bb628ebe3b9695c10a93bd97ecfc030f2f63cba9ec706f0cb6711872d700235c7988d281ebaebca131e6bdeb46ca4047b3f3ae590f842af8d97582f1e5083bfa279ccee2fb71ed43a6d797b71cd84aefdf76a77a5ef4bfa083efe94acf18b24de4d31c8fa7be562f6e8997126be2feb457b8009f346c393c0030211c3df801a75cca534a18fe05a316658c030bf28037d7e7e17cc3a2f5", 0x98}, {&(0x7f0000001440)="5d4935317cc78085397f392e2773f7c3eedd328837a8639808476885ccf48d5ea4a7f23f3344a09d96f7a9e2aecd61c0f2676191ad89f43ce4892bcd6442b798b13c6fe9dae46a337349f9a2977af61e7d810b7d232e9432ac961623b3124bf472e37fd555952258fc8c69a1b4dd42b245", 0x71}, {&(0x7f00000014c0)="f48db129e664365dbd04a75809949a994862805c7fcca3dbbd1bb42aac313796630e2bd46ce6aea2b369af25ceed586e97d21d76d44f40a02611ad54bc9b22f20eb157b1b2350bca4159a00f73c81a7e5547506a9aad0a22808ddebb6d737ae47f85c752976162d7841832a113277d80e1510beef022f8688576f3b6f169fb831f5843935ea8090343f45c1a73d206011e1a897acac5af1a6df354fdd5644f69a8f0b6e1b8b3", 0xa6}, {&(0x7f0000001580)="bf00fe93eca01857528c5d5efb45e84cfb63243d8506eba7f8737531dfb0e2f46ba8894ee4aad5d8f9d9e295a28b1c4f4b0c2b52967dd8b599a61ee42c440ac11303f153bc05538d5a9d24fc47eb070ad6d3e1df30c451fb3f181e5d95c8fe940a182eb6cbb1bac638aba32f4660e73ff0cb8e8e502226994c1ae2996c3ac0d9112223b2bbc08507292dbe9b0837b925a67c19784c82dffdacadd3b117", 0x9d}, {&(0x7f0000001640)="0c9e662af44abab6ca14e66fedcca18c4ced5da75fc51d8d85aa1c14861e792f36fef62d45739d41f90d99d483101f78b6fef08d5af1bec79444b94800a623615feb76a7d672377d46f51176591af646eaccf3d28fab51f1fd9131f528ba6ebbf1e33d48a47d02b68cc4d2715f7284050c499711ff", 0x75}, {&(0x7f00000016c0)="af0b8cfd92687f254d2c84407b7e079304c2c6bf4addb6860ad0358d5ad62a0cb0e0ba5f594481a04bbd6a7488c8f9a0351fdf9d1d5b6b7db8d7f2cf85453cfcf1f2a56c65ccb7fb98347889d270f8959cddaf16067877ccf6cb0a95185c5f44ba74902c5a14c529f7897ccafd3afc0b037f8e2c920fd23ad02f9fa5be39e4b39b5cda55b12bebcb719beefcf722d7741f04aa5f1ab96c38b8bfe4a1329b3f4768f3fa4ba54b89a633a4f7f241f90e7f0ee12ae8b861dc94e360ab2765dcd6ac6ccd7a7f8225c38828dbcdde", 0xcc}], 0x7, &(0x7f0000001840)=[{0xb8, 0x3a, 0xe, "11c9c981e8d5f8a84782245b50e6fa3fbced0e019941672bdf004b3afb99ac51b0c288fd877edf5c34d337f69c37ad5dbe8e7fb0f0d89dfbaef5fbeef518031dee3cff9d60d697206fc94d21aae2254307945bf545962bab800e74b274f44892cfc4f170ea5717d792cbf2f82b7db76bdf6f9e9d8f884f50a1b24d19b35fbc72fd8fbd17f008110e8fc6e86ce2747f1aef3fed35581d9d0932b87663103622db1348d6ef96b121"}, {0x28, 0x112, 0xc0, "c63e51c0582141b836c19f537b1fc1481e17"}, {0xf8, 0x88, 0x7, "75b053ec6177f30c2340ac8d8b7a71c133471467925a9af07b9623783bedb6071367e8eae300da2a6882b73b4b690441541960c5c6353db7bc30c1e216dad475de9c5c83804bfdbc68961323b0a73e43a19f820b9c86445d7cb1fd797b71fa90da962460c9f79518b3df44f2b0ad9b283bb8b04d46453492e5fb54195c4de18eabf461737ce456e80d7a89c0930c76d6f8d3b3e54cf2d6c721d43b7d2fa3573290374dc6a8fdaf2988370450f8047515c86aae0e6b4c9b144ce309317367dfe3fded7b96511cb3ced0586c7c6f77b2a90c74c66afae539d8fc63773917aecda19763db417625"}, {0x20, 0x114, 0xffffe546, "b831f62cbdeef8b4cef617dc4d8f"}], 0x1f8}, 0x10) r1 = socket$kcm(0x29, 0x8, 0x0) sendmsg$kcm(r1, &(0x7f0000001340)={&(0x7f0000000840)=@ethernet, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)="d04690b2a7fe2180867fc7c533bce75dd2e7dcc3929d7b6144259d810743c37f0684dedc154d5de503359aff0b1ff6dc5d484795ba1854bc0e94661aa37f8dd63a5c0d235ac676af5585197409ee88c6660c583825534e2e8c520e800479170d6ff53be19282439bb1c00a4c41dc2663487b27441d23eaccab889e91e1d00bd1da6141fc263f3f5623fa9d928d9041561658935250d196ce197662f4abe4bc3ceac31b4b6e9a1e587208583de5d12529fd12f81eccc05cf42cfad8f5b8fc8490298a127bd67cae8e35b996a442fdf802f2124e78d55e80bec379b595db26e2cb5f49963e8a65ecf686492dbc1a8f9cc29d87", 0xf2}, {&(0x7f0000000f00)="6a93bca10f404924b94014f0ba0e4df5e94619a988d0347e67b33f0408b353af54eab567d847b1b7487b41f37e8c70e5a9552760016418a4bb801a6f3398865f771916890e9a05b3c59f00f97bc09659e70fb4ec428d314a6590a24d00669426792c5c8d124753a4ece50a3d86d87430b8293990ac6d02e414f86c2b2e8797dfe8846782a6635a45e0dcb76aefa3fe4df1e672bd5ae135be94c94ba3b82339c7153b16781961f66acc147e3a9d55f9ec30287369", 0xb4}], 0x2, &(0x7f0000001000)=[{0xd8, 0x1, 0x7, "a1a28e6b5d0e51a05ebfbaccea5e67a5ce2a7468c27866669409767e37ccf680b1fe290497dc2639bf0c5702e8d1b58951b859f210d16d220e075bc714d37688b16334c56ab73dddccee665b5f966419674849e07662c7334342a6045af19667b7b5ec3134252e6cf23b275f2d4fcba0acb2666b1ec86ae0482aa4da3a5976f44712b557122768ea716b23bab8bd39d533b4a057c2d762d1c4c038cb3b23c05cb4014533ab671b2d5860e8deb30d9247f9b2dc55d87b0f8c49b8f219496b11ab196d5f2d2e"}, {0xf8, 0x107, 0x5, "3cce889c1ca56e793cbc3900b2855e17a2aef406237584b54c6a04a8b1dc7d003dc4909b918e6ae5f3927a8b92d57b4d3a5eb4c577ca87762c61d84765e3fd4ab360536298b79fea7703a63be211078152727ab213faa44871376f6ab87b5d0b36d7d4f8c697246d6890d564eb5439a34c586a2fbbe6bcb5295ef9ca7712826e94e0246b8c0350886207c9015f792c57c00e934221d62f5e4cc36dcdb880316e45f5ed6e83d57722276ee54d75d703ad4b5e702c1b00f9ef4caba7743a19c5bf62eace5be3142db604ac0ef3e8306c27cd92d5c3e1a1e691a2e6b47b4618310d06755d8916"}, {0x78, 0x116, 0x7, "627dfd608b23068fc48bcd3d377e8a2f1567d27a6ec345d22fc5c2023389906b14fe52579737225934183cb6b5c148df4526579b379355bfea45eeb8040e4503f62c9a52a2e3e43256cbfdcf01630706337674ee613279ae9c6f988d07cffdc2e6ce"}, {0x80, 0x88, 0x7, "96dfe15ef967c42fd49348b93812bddb278ef24273474c4fee59bd02f181e6ca73bae44169cbbfc1b4b1b8fa111e7c89fa353e834810366f90c99a54f0e622c196ebbde1d226ea83fc05993c95f2553aeb048577b21f431ef10660fcb1e133c6e736468d8cff03b8623ced6d1cfd"}], 0x2c8}, 0x0) recvmsg$kcm(r1, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0x12, &(0x7f00000005c0)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000680)='GPL\x00', 0x0, 0xe8, &(0x7f00000006c0)=""/232, 0x40f00, 0x48, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x3, 0x4, 0x0, 0x8}, {0x2, 0x1, 0x4}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x7}, {0x4, 0x2, 0x0, 0x7}, {0x1, 0x4, 0xd, 0x5}, {0x3, 0x4, 0xa, 0x2}, {0x2, 0x1, 0xb}, {0x2, 0x4, 0x4, 0x8}, {0x2, 0x4, 0x4, 0x4}], 0x10, 0x7}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff, 0x7, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc29, 0x0, 0x0, 0x0, 0x57}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb78}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xd6, &(0x7f0000000280)=""/214, 0x40f00, 0x50, '\x00', r2, 0x17, r3, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xd, 0xc8, 0x101}, 0x10, 0x8, r4, 0x4, &(0x7f0000000b80)=[r5, r6], &(0x7f0000000bc0)=[{0x3, 0x5, 0x9, 0xb}, {0x0, 0x4, 0x2, 0x4}, {0x0, 0x1, 0x3, 0x3}, {0x1, 0x1, 0x8, 0x4}], 0x10, 0x2}, 0x94) 701.082491ms ago: executing program 3 (id=6453): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[], 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x4, 0x5, 0x58, 0x0, 0x1, 0x20010, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3553, 0x4, @perf_config_ext={0x3, 0x10}, 0x10, 0x7, 0x7fffffff, 0x3, 0x5, 0xd9ad, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x20, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0xf8, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0xa8, &(0x7f0000000000), &(0x7f0000000080)=""/168, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 670.808078ms ago: executing program 1 (id=6454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x1d0, 0x10}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x34, 0x1, 0x3, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x6df, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r2, r0, 0x25, 0x2008, 0x0, @value=r4, @void, @void, @void, r1}, 0x20) 580.733377ms ago: executing program 0 (id=6455): socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000001c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f0000000140), 0x16) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x10, 0x0, 0x24003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40}, 0x0, 0x0, 0xffff, 0x5, 0xd, 0xfffffffc, 0x8000, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x8009, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 372.897621ms ago: executing program 4 (id=6456): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008040000000000001ada04006b0189000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000"], 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 257.398175ms ago: executing program 3 (id=6457): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001080), 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000100000000", @ANYRES32=r1, @ANYBLOB='\t\t\x00'/19, @ANYRES32=0x0, @ANYBLOB="04000000040000000500"/22], 0x50) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x16, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000c103000000000000254e000018280000", @ANYBLOB="0000000009000000182a0000", @ANYRES32=r1, @ANYBLOB="000000000000ca0118110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000300000085200000020000001858000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000c00850000000c000000b700000000000000184500000600000000000000000000009500000000000000de1ad334560205bbde30a4d9f95236fd58588663ea2e11a04dffe53dd3d1345ef08e2d21a2871057d82fc96afc9b4592f37655122341b5f67f7b822160f2"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xa0, &(0x7f00000003c0)=""/160, 0x41000, 0x10, '\x00', r5, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x1, 0x20, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000680)=[r1, r1], &(0x7f00000006c0)=[{0x4, 0x1, 0xf, 0x9}, {0x3, 0x2, 0xf, 0x5}, {0x0, 0x1, 0xc, 0x3}], 0x10, 0x3ecf}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0xe, 0x8, 0x8, 0x0, r1, 0x2, '\x00', r5, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) (rerun: 32) r7 = socket$kcm(0xa, 0x5, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001240)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f0000001340)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}], 0x1}, 0x4041) (rerun: 32) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000400000b000000000000000000000000000000d408c6f6ce389594304c3ad203eb621bac285a7760661e42b3419c57aa68a855272307000000e496e415e2797bbdab805d9a748363956a68058b2967d9a6cad4e98aef8906c42b7a8c3a3656"], 0x18}, 0x880) 203.715856ms ago: executing program 5 (id=6458): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="180000009100000000000000010000001810ff00", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x3ad, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) 126.652383ms ago: executing program 5 (id=6459): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52, 0x0, 0x0, 0x20}, 0x28) 0s ago: executing program 5 (id=6460): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x101602, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x13}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="a7d6001000"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, 0x0, 0x32}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01341090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_clone(0x21100000, &(0x7f0000000900)="23d7e3acd821de15e93acdd5ec6b206f06aebe3adf7e", 0x16, 0x0, 0x0, &(0x7f0000000a80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x12}, 0x40012103) sendmsg$inet(r0, 0x0, 0x8045) kernel console output (not intermixed with test programs): 40] netlink: zone id is out of range [ 1384.789930][T26540] netlink: zone id is out of range [ 1384.985866][T26540] netlink: zone id is out of range [ 1385.048360][T26540] netlink: zone id is out of range [ 1385.114806][T26540] netlink: zone id is out of range [ 1386.694870][T26554] netlink: 'syz.3.5372': attribute type 2 has an invalid length. [ 1389.730155][T26568] netlink: 'syz.3.5374': attribute type 1 has an invalid length. [ 1389.774802][T26568] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1391.681266][T26573] netlink: 'syz.3.5377': attribute type 1 has an invalid length. [ 1391.707509][T26573] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5377'. [ 1391.802344][T26577] netlink: 'syz.1.5376': attribute type 7 has an invalid length. [ 1391.873824][T26577] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1392.481890][T26590] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1392.584561][T26591] netlink: 'syz.4.5382': attribute type 27 has an invalid length. [ 1393.144173][T26594] netlink: 'syz.3.5384': attribute type 39 has an invalid length. [ 1393.863147][T26604] netlink: 'syz.0.5385': attribute type 10 has an invalid length. [ 1393.874583][T26605] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5386'. [ 1395.711241][T26624] netlink: 'syz.3.5391': attribute type 1 has an invalid length. [ 1395.738006][T26624] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5391'. [ 1398.201184][T26647] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5396'. [ 1398.269139][T26647] netlink: 'syz.0.5396': attribute type 27 has an invalid length. [ 1399.872166][T26659] netlink: 'syz.0.5399': attribute type 2 has an invalid length. [ 1400.054488][T26659] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5399'. [ 1401.217946][T26670] delete_channel: no stack [ 1401.379809][T26670] delete_channel: no stack [ 1401.944722][T26679] netlink: 'syz.0.5402': attribute type 39 has an invalid length. [ 1402.109075][T26681] netlink: 'syz.0.5402': attribute type 3 has an invalid length. [ 1402.129346][T26681] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1404.731132][T26707] netlink: 'syz.3.5408': attribute type 10 has an invalid length. [ 1404.739431][T26707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5408'. [ 1404.752493][T26707] net_ratelimit: 3555 callbacks suppressed [ 1404.752513][T26707] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1404.980912][T26703] netlink: 'syz.1.5407': attribute type 7 has an invalid length. [ 1405.002335][T26703] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.5407'. [ 1405.088097][T26715] netlink: 'syz.0.5410': attribute type 27 has an invalid length. [ 1405.101887][T26718] netlink: 'syz.2.5411': attribute type 29 has an invalid length. [ 1405.103507][T26710] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5410'. [ 1405.123570][T26718] netlink: 'syz.2.5411': attribute type 29 has an invalid length. [ 1405.139350][T26712] netlink: 'syz.2.5411': attribute type 29 has an invalid length. [ 1405.165398][T26719] netlink: 'syz.2.5411': attribute type 29 has an invalid length. [ 1405.517713][T26722] netlink: 'syz.0.5413': attribute type 41 has an invalid length. [ 1405.552579][T26728] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5415'. [ 1405.599009][T26728] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1405.640550][T26728] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.5415'. [ 1405.685432][T26733] netlink: 'syz.4.5416': attribute type 1 has an invalid length. [ 1405.724092][T26733] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1406.529049][T26742] netlink: 'syz.1.5417': attribute type 275 has an invalid length. [ 1406.740595][T26755] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5423'. [ 1406.951985][T26753] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.5424'. [ 1407.235763][T26770] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5428'. [ 1407.770485][T26780] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1407.945184][T26791] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5435'. [ 1408.061020][T26798] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5437'. [ 1408.197985][T26800] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1408.531338][T26804] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1408.588343][T26806] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5451'. [ 1409.688077][T26846] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1409.861926][T26855] validate_nla: 23 callbacks suppressed [ 1409.861950][T26855] netlink: 'syz.0.5452': attribute type 10 has an invalid length. [ 1409.983814][T26855] netlink: 'syz.0.5452': attribute type 19 has an invalid length. [ 1410.032712][T26856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5453'. [ 1410.066921][T26855] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5452'. [ 1410.150827][T26858] netlink: 'syz.3.5454': attribute type 27 has an invalid length. [ 1410.906654][T26864] device syzkaller0 entered promiscuous mode [ 1410.920015][T26867] netlink: 'syz.1.5456': attribute type 1 has an invalid length. [ 1410.947465][T26872] netlink: 'syz.0.5458': attribute type 21 has an invalid length. [ 1411.010042][T26875] netlink: 'syz.2.5457': attribute type 275 has an invalid length. [ 1412.099007][T26895] netlink: zone id is out of range [ 1412.116110][T26895] netlink: zone id is out of range [ 1412.144942][T26895] netlink: zone id is out of range [ 1412.157837][T26895] netlink: zone id is out of range [ 1412.163131][T26895] netlink: zone id is out of range [ 1412.176169][T26895] netlink: zone id is out of range [ 1412.199266][T26895] netlink: zone id is out of range [ 1412.217761][T26895] netlink: zone id is out of range [ 1412.227573][T26895] netlink: zone id is out of range [ 1412.246504][T26895] netlink: zone id is out of range [ 1415.732654][T26901] netlink: 'syz.0.5465': attribute type 27 has an invalid length. [ 1415.747870][T26918] netlink: 'syz.2.5469': attribute type 21 has an invalid length. [ 1415.766419][T26918] __nla_validate_parse: 8 callbacks suppressed [ 1415.766439][T26918] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5469'. [ 1415.983043][T26925] netlink: 'syz.0.5471': attribute type 1 has an invalid length. [ 1416.035424][T26925] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1416.224195][T26931] netlink: 'syz.4.5473': attribute type 275 has an invalid length. [ 1416.999649][T26929] netlink: 'syz.3.5472': attribute type 275 has an invalid length. [ 1417.713186][T26974] netlink: 'syz.2.5480': attribute type 10 has an invalid length. [ 1417.736985][T26974] netlink: 'syz.2.5480': attribute type 19 has an invalid length. [ 1417.748977][T26981] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1417.762521][T26974] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1417.803387][T26981] netlink: 'syz.1.5481': attribute type 27 has an invalid length. [ 1418.602749][T26991] netlink: 'syz.1.5485': attribute type 1 has an invalid length. [ 1418.612599][T26991] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1419.021339][T27013] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5491'. [ 1419.176291][T27013] net_ratelimit: 3554 callbacks suppressed [ 1419.176314][T27013] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1419.318608][T27019] netlink: 'syz.3.5489': attribute type 275 has an invalid length. [ 1420.116517][T27030] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5496'. [ 1420.428637][T27036] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5495'. [ 1422.635321][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1422.754077][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1422.855391][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1422.862197][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1422.879708][T27066] validate_nla: 3 callbacks suppressed [ 1422.879778][T27066] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 1422.947670][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1422.975650][T27066] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1422.995930][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1423.074938][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1423.081162][T27061] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1423.201651][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.208241][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.331195][T27071] device sit0 left promiscuous mode [ 1423.627680][T27077] device sit0 entered promiscuous mode [ 1424.610109][T27084] netlink: 'syz.4.5507': attribute type 21 has an invalid length. [ 1424.674086][T27084] netlink: 'syz.4.5507': attribute type 6 has an invalid length. [ 1424.831254][T27084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5507'. [ 1425.167414][T27089] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.5509'. [ 1427.010270][T27102] device xfrm0 entered promiscuous mode [ 1427.207629][T27101] netlink: 'syz.4.5513': attribute type 275 has an invalid length. [ 1429.498068][T27113] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1429.647266][T27113] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1429.754808][T27114] bond0: (slave team0): Error: Slave device does not support XDP [ 1431.133135][T27127] IPv6: NLM_F_CREATE should be specified when creating new route [ 1432.061608][T27135] IPv6: NLM_F_CREATE should be specified when creating new route [ 1432.222941][T27135] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5522'. [ 1432.336361][T27147] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5524'. [ 1432.573877][T27147] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1432.932065][T27154] netlink: 'syz.4.5526': attribute type 21 has an invalid length. [ 1433.479613][T27158] netlink: 'syz.3.5527': attribute type 275 has an invalid length. [ 1433.521568][T27163] netlink: 'syz.0.5528': attribute type 4 has an invalid length. [ 1433.866898][T27163] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5528'. [ 1434.653785][T27178] device ipvlan1 left promiscuous mode [ 1434.698299][T27178] netlink: 'syz.3.5533': attribute type 10 has an invalid length. [ 1434.893531][T27174] netlink: 'syz.4.5531': attribute type 1 has an invalid length. [ 1434.895064][T27178] team0: Device nlmon0 is of different type [ 1434.902349][T27174] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5531'. [ 1435.458240][T27192] netlink: 'syz.4.5535': attribute type 1 has an invalid length. [ 1435.517148][T27198] netlink: 'syz.0.5537': attribute type 2 has an invalid length. [ 1435.547325][T27198] netlink: 'syz.0.5537': attribute type 1 has an invalid length. [ 1435.565918][T27198] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.5537'. [ 1435.657561][T27191] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1436.026472][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1436.527594][T27222] netlink: 'syz.4.5545': attribute type 1 has an invalid length. [ 1436.545949][T27222] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5545'. [ 1437.017992][T27246] netlink: 'syz.2.5548': attribute type 12 has an invalid length. [ 1437.038810][T27246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5548'. [ 1437.259828][T27250] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1438.095687][T27261] validate_nla: 1 callbacks suppressed [ 1438.095729][T27261] netlink: 'syz.3.5552': attribute type 10 has an invalid length. [ 1438.747513][T27281] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5555'. [ 1439.170678][T27285] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5556'. [ 1439.188443][T27297] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5558'. [ 1439.611241][T27296] netlink: 'syz.3.5559': attribute type 1 has an invalid length. [ 1439.627542][T27296] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1441.546177][T27338] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.5568'. [ 1441.648600][T27338] netlink: 'syz.4.5568': attribute type 3 has an invalid length. [ 1441.699107][T27338] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5568'. [ 1441.771680][T27345] netlink: 'syz.3.5571': attribute type 3 has an invalid length. [ 1441.807995][T27345] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1441.920139][T27352] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5570'. [ 1442.117977][T27359] netlink: 'syz.2.5573': attribute type 1 has an invalid length. [ 1442.160032][T27359] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1442.230228][T27361] netlink: 'syz.3.5574': attribute type 10 has an invalid length. [ 1442.340115][T27361] team0: Device wg1 is of different type [ 1443.314547][T27379] netlink: 'syz.0.5577': attribute type 12 has an invalid length. [ 1443.331318][T27379] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5577'. [ 1443.952898][T27401] netlink: 'syz.3.5585': attribute type 1 has an invalid length. [ 1444.035934][T27401] netlink: 74752 bytes leftover after parsing attributes in process `syz.3.5585'. [ 1445.260851][T27405] netlink: 'syz.1.5587': attribute type 1 has an invalid length. [ 1445.315389][T27405] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5587'. [ 1445.346376][T27384] netlink: 'syz.2.5582': attribute type 275 has an invalid length. [ 1445.373077][T27412] netlink: 'syz.3.5588': attribute type 3 has an invalid length. [ 1445.463465][T27412] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1445.580751][T27418] netlink: 'syz.4.5590': attribute type 12 has an invalid length. [ 1445.634941][T27418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1445.953147][T27422] can: request_module (can-proto-0) failed. [ 1446.051237][T27429] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.5594'. [ 1446.884234][T27455] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1447.119297][T27458] netlink: 'syz.4.5601': attribute type 1 has an invalid length. [ 1447.154688][T27458] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5601'. [ 1447.967586][T27478] netlink: 'syz.4.5605': attribute type 10 has an invalid length. [ 1448.036280][T27478] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.5605'. [ 1449.258194][T27486] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.5609'. [ 1450.896055][T27495] netlink: 'syz.0.5608': attribute type 3 has an invalid length. [ 1451.194926][T27495] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5608'. [ 1452.710643][T27511] netlink: 'syz.1.5613': attribute type 1 has an invalid length. [ 1452.865609][T27511] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5613'. [ 1457.896257][T27539] netlink: 'syz.4.5620': attribute type 3 has an invalid length. [ 1457.938900][T27539] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5620'. [ 1457.975642][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 34 [ 1458.083048][T27543] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1458.131637][T27543] netlink: zone id is out of range [ 1458.157004][T27543] netlink: zone id is out of range [ 1458.187035][T27543] netlink: zone id is out of range [ 1458.192750][T27543] netlink: zone id is out of range [ 1458.229185][T27543] netlink: zone id is out of range [ 1458.234294][T27546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1458.256615][T27543] netlink: zone id is out of range [ 1458.267836][T27546] : renamed from caif0 [ 1458.279353][T27561] netlink: 'syz.3.5624': attribute type 2 has an invalid length. [ 1458.322790][T27561] netlink: 'syz.3.5624': attribute type 1 has an invalid length. [ 1458.332540][T27543] netlink: zone id is out of range [ 1458.361303][T27561] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5624'. [ 1458.377696][T27543] netlink: zone id is out of range [ 1458.383264][T27543] netlink: zone id is out of range [ 1458.404684][T27566] netlink: 'syz.4.5625': attribute type 1 has an invalid length. [ 1458.405792][T27543] netlink: zone id is out of range [ 1458.412767][T27566] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5625'. [ 1458.611382][T27567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1459.044089][T27575] can: request_module (can-proto-0) failed. [ 1459.062461][T27582] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5629'. [ 1462.293969][T27612] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 1462.328587][T27612] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5637'. [ 1463.618379][T27636] tipc: Started in network mode [ 1463.647780][T27636] tipc: Node identity 9215a268, cluster identity 4711 [ 1463.690210][T27636] tipc: Node number set to 2450891368 [ 1463.784015][T27647] netlink: 'syz.0.5645': attribute type 21 has an invalid length. [ 1463.804193][T27647] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5645'. [ 1464.391704][T27656] sctp: [Deprecated]: syz.4.5648 (pid 27656) Use of int in max_burst socket option deprecated. [ 1464.391704][T27656] Use struct sctp_assoc_value instead [ 1464.403478][T27654] netlink: 'syz.3.5647': attribute type 275 has an invalid length. [ 1464.823281][T27664] netlink: 'syz.3.5650': attribute type 1 has an invalid length. [ 1464.885061][T27664] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1465.926588][T27680] netlink: 'syz.3.5654': attribute type 275 has an invalid length. [ 1465.967211][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1465.984293][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.044793][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.103375][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.136791][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.191308][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.222764][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.260950][T27679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5656'. [ 1466.552053][T27706] sctp: [Deprecated]: syz.1.5663 (pid 27706) Use of int in max_burst socket option deprecated. [ 1466.552053][T27706] Use struct sctp_assoc_value instead [ 1466.652752][T27718] netlink: 'syz.0.5665': attribute type 1 has an invalid length. [ 1466.998230][T27724] netlink: 'syz.0.5667': attribute type 29 has an invalid length. [ 1467.054025][T27724] netlink: 'syz.0.5667': attribute type 29 has an invalid length. [ 1467.098844][T27724] netlink: 'syz.0.5667': attribute type 29 has an invalid length. [ 1467.133594][T27728] netlink: 'syz.1.5668': attribute type 2 has an invalid length. [ 1467.235999][T27728] netlink: 'syz.1.5668': attribute type 1 has an invalid length. [ 1470.471555][T27785] validate_nla: 1 callbacks suppressed [ 1470.512378][T27785] netlink: 'syz.1.5677': attribute type 1 has an invalid length. [ 1470.573389][T27785] __nla_validate_parse: 2 callbacks suppressed [ 1470.573410][T27785] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5677'. [ 1471.728492][T27790] netlink: 'syz.1.5680': attribute type 2 has an invalid length. [ 1471.817049][T27790] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.5680'. [ 1474.375611][T27820] netlink: 'syz.0.5690': attribute type 1 has an invalid length. [ 1474.417831][T27820] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5690'. [ 1474.452662][T27824] netlink: 'syz.3.5692': attribute type 21 has an invalid length. [ 1474.473981][T27824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1474.499769][T27824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1475.001455][T27833] netlink: 'syz.4.5693': attribute type 275 has an invalid length. [ 1475.121740][T27840] netlink: 'syz.0.5696': attribute type 21 has an invalid length. [ 1475.132112][T27840] netlink: 'syz.0.5696': attribute type 23 has an invalid length. [ 1475.144307][T27840] netlink: 'syz.0.5696': attribute type 25 has an invalid length. [ 1475.153945][T27840] netlink: 'syz.0.5696': attribute type 27 has an invalid length. [ 1475.216913][T27840] netlink: 'syz.0.5696': attribute type 28 has an invalid length. [ 1475.365549][T27848] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.5698'. [ 1476.457453][T27872] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5703'. [ 1476.523193][T27877] validate_nla: 2 callbacks suppressed [ 1476.523235][T27877] netlink: 'syz.4.5705': attribute type 13 has an invalid length. [ 1476.547401][T27877] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5705'. [ 1476.548831][T27876] netlink: 'syz.0.5704': attribute type 1 has an invalid length. [ 1476.585286][T27876] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5704'. [ 1476.594738][T27877] erspan0: refused to change device tx_queue_len [ 1476.652011][T27877] net_ratelimit: 3535 callbacks suppressed [ 1476.652050][T27877] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1476.700057][T27884] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1476.721902][T27884] device team_slave_0 left promiscuous mode [ 1476.791481][T27884] team0: Port device team_slave_0 removed [ 1476.799369][T27884] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1476.828569][T27886] netlink: 'syz.3.5708': attribute type 10 has an invalid length. [ 1476.854091][T27886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1476.951826][T27886] device dummy0 entered promiscuous mode [ 1476.983185][T27886] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1477.134112][T27892] netlink: 'syz.0.5709': attribute type 10 has an invalid length. [ 1477.154610][T27892] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1477.223212][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1477.672874][T27892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.728231][T27908] netlink: 'syz.4.5710': attribute type 275 has an invalid length. [ 1479.561567][T27940] netlink: 'syz.3.5719': attribute type 1 has an invalid length. [ 1479.625521][T27940] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1479.851444][T27949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5722'. [ 1480.204227][T27945] netlink: 'syz.1.5721': attribute type 6 has an invalid length. [ 1480.747160][T27962] netlink: 'syz.2.5724': attribute type 10 has an invalid length. [ 1480.785602][T27962] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5724'. [ 1481.152503][T27979] netlink: 'syz.4.5727': attribute type 29 has an invalid length. [ 1481.164903][T27979] netlink: 'syz.4.5727': attribute type 29 has an invalid length. [ 1481.577482][T28002] validate_nla: 3 callbacks suppressed [ 1481.577522][T28002] netlink: 'syz.0.5733': attribute type 1 has an invalid length. [ 1481.647103][T28002] __nla_validate_parse: 1 callbacks suppressed [ 1481.647142][T28002] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5733'. [ 1482.540917][T28018] netlink: 'syz.0.5737': attribute type 275 has an invalid length. [ 1482.712730][T28033] netlink: 'syz.1.5741': attribute type 5 has an invalid length. [ 1483.571755][T28058] netlink: 'syz.4.5747': attribute type 1 has an invalid length. [ 1483.580746][T28058] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1483.708844][T28062] netlink: 'syz.1.5749': attribute type 10 has an invalid length. [ 1484.206113][T28090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1484.251133][T28090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1484.271650][T28085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5754'. [ 1484.365719][T28089] netlink: 'syz.0.5755': attribute type 275 has an invalid length. [ 1484.637948][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.644315][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.786411][T28110] netlink: 'syz.0.5760': attribute type 1 has an invalid length. [ 1484.815753][T28110] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1484.843670][T28116] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5762'. [ 1484.938807][T28116] bond0: (slave dummy0): Releasing backup interface [ 1484.967316][T28116] device dummy0 left promiscuous mode [ 1485.020261][T28125] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5764'. [ 1485.669269][T28139] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5768'. [ 1486.052021][T28142] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1487.065584][T28156] sctp: [Deprecated]: syz.3.5773 (pid 28156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.065584][T28156] Use struct sctp_sack_info instead [ 1487.102452][T28148] netlink: 'syz.0.5770': attribute type 275 has an invalid length. [ 1487.390144][T28158] sctp: [Deprecated]: syz.3.5773 (pid 28158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.390144][T28158] Use struct sctp_sack_info instead [ 1488.351499][T28163] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 1488.384947][T28163] __nla_validate_parse: 2 callbacks suppressed [ 1488.385041][T28163] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1489.145887][T28200] netlink: 'syz.3.5783': attribute type 12 has an invalid length. [ 1489.167711][T28200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5783'. [ 1489.510077][T28212] netlink: 'syz.3.5787': attribute type 275 has an invalid length. [ 1489.625942][T28216] netlink: 'syz.1.5789': attribute type 1 has an invalid length. [ 1489.657775][T28216] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1489.921469][T28235] netlink: 'syz.1.5793': attribute type 22 has an invalid length. [ 1489.940621][T28235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5793'. [ 1490.268052][T28244] netlink: 'syz.0.5795': attribute type 22 has an invalid length. [ 1490.315839][T28244] netlink: 14526 bytes leftover after parsing attributes in process `syz.0.5795'. [ 1490.370062][T28256] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5797'. [ 1491.450634][T28280] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.5801'. [ 1491.523442][T28285] netlink: 'syz.3.5802': attribute type 275 has an invalid length. [ 1492.058022][T28289] netlink: 'syz.1.5803': attribute type 1 has an invalid length. [ 1492.099090][T28289] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5803'. [ 1492.119776][T28299] netlink: 'syz.3.5807': attribute type 10 has an invalid length. [ 1492.129769][T28299] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1492.191475][T28304] netlink: 'syz.3.5807': attribute type 10 has an invalid length. [ 1492.251789][T28304] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1492.490380][T28311] netlink: 'syz.3.5810': attribute type 3 has an invalid length. [ 1492.608501][T28315] netlink: 'syz.4.5809': attribute type 2 has an invalid length. [ 1492.756383][T28318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1494.102258][T28333] netlink: 'syz.3.5816': attribute type 2 has an invalid length. [ 1494.186490][T28333] __nla_validate_parse: 2 callbacks suppressed [ 1494.186536][T28333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5816'. [ 1495.008809][T28342] netlink: 'syz.1.5817': attribute type 275 has an invalid length. [ 1495.580050][T28359] netlink: 'syz.3.5823': attribute type 1 has an invalid length. [ 1495.612940][T28359] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1496.141934][T28379] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5826'. [ 1496.579798][T28387] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.5828'. [ 1497.046222][T28400] netlink: 'syz.3.5832': attribute type 3 has an invalid length. [ 1497.144628][T28400] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1497.190710][T28399] netlink: 'syz.0.5833': attribute type 29 has an invalid length. [ 1497.207020][T28397] netlink: 'syz.3.5832': attribute type 3 has an invalid length. [ 1497.216789][T28399] netlink: 'syz.0.5833': attribute type 29 has an invalid length. [ 1497.234608][T28397] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1497.246412][T28404] netlink: 'syz.0.5833': attribute type 29 has an invalid length. [ 1497.403527][T22807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1497.414921][T22807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1497.424052][T22807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1497.432567][T22807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1497.440967][T22807] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1497.457073][T28409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1497.658014][T28412] netlink: 'syz.3.5835': attribute type 1 has an invalid length. [ 1497.674617][T28408] netlink: 'syz.1.5834': attribute type 275 has an invalid length. [ 1497.676738][T28412] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1497.951141][T28407] chnl_net:caif_netlink_parms(): no params data found [ 1498.808959][T28407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.841161][T28407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.861568][T28407] device bridge_slave_0 entered promiscuous mode [ 1498.896185][T28407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.903939][T28407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.925232][T28407] device bridge_slave_1 entered promiscuous mode [ 1498.954058][T28446] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5844'. [ 1498.994280][T28407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.026655][T28407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.102807][T28407] team0: Port device team_slave_0 added [ 1499.111987][T28407] team0: Port device team_slave_1 added [ 1499.158604][T28407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.172500][T28407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.224502][T28407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.248436][T28407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.255756][T28407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.299192][T28407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.391797][T28453] netlink: 'syz.0.5847': attribute type 1 has an invalid length. [ 1499.426962][T28453] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1499.524497][T28409] Bluetooth: hci5: command 0x0409 tx timeout [ 1501.594567][T28409] Bluetooth: hci5: command 0x041b tx timeout [ 1503.256672][T28458] netlink: 'syz.0.5849': attribute type 275 has an invalid length. [ 1503.353578][T28407] device hsr_slave_0 entered promiscuous mode [ 1503.360963][T28407] device hsr_slave_1 entered promiscuous mode [ 1503.526601][T28492] netlink: 'syz.1.5858': attribute type 1 has an invalid length. [ 1503.561647][T28492] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1503.683155][T28409] Bluetooth: hci5: command 0x040f tx timeout [ 1503.915471][T28503] netlink: 'syz.4.5862': attribute type 12 has an invalid length. [ 1504.042848][T28407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1504.104063][T28407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1504.137343][T28407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1504.171619][T28407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1504.740969][T28407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.983120][T28407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.006823][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1505.025609][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1505.077103][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1505.087274][T28520] netlink: 'syz.3.5868': attribute type 9 has an invalid length. [ 1505.106491][T28520] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1505.115434][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1505.125991][T28393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.133352][T28393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.194915][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1505.230576][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1505.252475][T28393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.259868][T28393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.278164][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1505.301545][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1505.329680][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1505.369823][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1505.444531][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1505.476804][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1505.537525][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1505.731972][T28533] netlink: 'syz.4.5872': attribute type 1 has an invalid length. [ 1505.747847][T28407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1505.758240][T28409] Bluetooth: hci5: command 0x0419 tx timeout [ 1505.776457][T28407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.793271][T28533] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5872'. [ 1505.816276][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1505.858688][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1505.943237][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1505.963552][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1506.029983][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1506.043943][T28525] netlink: 'syz.1.5869': attribute type 275 has an invalid length. [ 1506.070346][T28534] netlink: 'syz.0.5871': attribute type 21 has an invalid length. [ 1506.188639][T27282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1506.515868][T28557] netlink: 'syz.3.5876': attribute type 1 has an invalid length. [ 1506.523678][T28557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1507.428285][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1507.453724][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1507.505868][T28407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.198714][T28584] netlink: 'syz.3.5882': attribute type 1 has an invalid length. [ 1508.265436][T28584] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1508.720803][T28590] netlink: 'syz.0.5884': attribute type 275 has an invalid length. [ 1509.860612][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1509.887426][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1509.925571][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1509.939723][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1509.994136][T28407] device veth0_vlan entered promiscuous mode [ 1510.033157][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1510.064162][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1510.087790][T28407] device veth1_vlan entered promiscuous mode [ 1510.170971][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1510.180400][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1510.193591][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1510.258441][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1510.279483][T28407] device veth0_macvtap entered promiscuous mode [ 1510.379097][T28407] device veth1_macvtap entered promiscuous mode [ 1510.428461][T28407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1510.466437][T28407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.481049][T28407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1510.493902][T28407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.509041][T28407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.519140][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1510.568062][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1510.603195][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1510.655405][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1510.731504][T28407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1510.778752][T28407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.854173][T28407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1510.954409][T28407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1511.120790][T28624] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1511.188773][T28407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.347229][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1511.410968][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1511.613298][T28407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.656714][T28407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.679289][T28407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.757548][T28407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.148002][T28634] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5894'. [ 1512.561968][T23067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.600742][T23067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.616912][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1512.685980][T28394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.694091][T28394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.728551][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1512.910669][T28645] netlink: 'syz.4.5897': attribute type 275 has an invalid length. [ 1513.032633][T28643] netlink: 'syz.3.5895': attribute type 1 has an invalid length. [ 1513.079394][T28643] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1513.441881][T28660] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1513.901133][T28661] netlink: 'syz.3.5900': attribute type 29 has an invalid length. [ 1514.099668][T28661] netlink: 'syz.3.5900': attribute type 29 has an invalid length. [ 1514.170922][T28667] netlink: 'syz.3.5900': attribute type 29 has an invalid length. [ 1514.276537][T28660] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1514.604584][T28409] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1514.614657][T28409] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1514.635085][T28409] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1514.663731][T28409] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1514.682174][T28409] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1514.690452][T28409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1514.839128][T28685] netlink: 'syz.0.5906': attribute type 10 has an invalid length. [ 1515.152080][T28685] team0: Device gre0 is of different type [ 1515.330442][T28702] netlink: 'syz.4.5909': attribute type 1 has an invalid length. [ 1515.392488][T28702] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1515.427652][T28696] IPv6: …: Disabled Multicast RS [ 1515.671666][T28704] netlink: 'syz.0.5910': attribute type 275 has an invalid length. [ 1515.861865][T28721] netlink: 8964 bytes leftover after parsing attributes in process `syz.5.5915'. [ 1515.906681][T28715] netlink: 'syz.4.5913': attribute type 1 has an invalid length. [ 1515.992545][T28680] chnl_net:caif_netlink_parms(): no params data found [ 1516.050928][T28715] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5913'. [ 1516.575467][T27282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.704526][T28680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.723659][T28680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.728105][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 1516.778559][T28680] device bridge_slave_0 entered promiscuous mode [ 1516.937898][T27282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.242098][T28680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.249632][T28680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.265699][T28680] device bridge_slave_1 entered promiscuous mode [ 1518.454698][T27282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.510154][T28680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.586174][T28761] netlink: 'syz.4.5925': attribute type 16 has an invalid length. [ 1518.594156][T28761] netlink: 'syz.4.5925': attribute type 3 has an invalid length. [ 1518.683212][T27282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.685904][T28761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1518.730327][T28680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.768225][T28758] netlink: 'syz.0.5926': attribute type 275 has an invalid length. [ 1518.794413][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 1518.839583][T28680] team0: Port device team_slave_0 added [ 1518.856441][T28680] team0: Port device team_slave_1 added [ 1518.984085][T28680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.008545][T28680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.137359][T28680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.224871][T28680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.254827][T28680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.367816][T28680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.558233][T28783] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5931'. [ 1519.630247][T27282] device 0 left promiscuous mode [ 1519.696173][T28680] device hsr_slave_0 entered promiscuous mode [ 1519.790507][T28680] device hsr_slave_1 entered promiscuous mode [ 1519.816672][T28680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.829930][T28680] Cannot create hsr debugfs directory [ 1520.133977][T28800] device syzkaller0 entered promiscuous mode [ 1520.241338][T28803] FAULT_INJECTION: forcing a failure. [ 1520.241338][T28803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.314734][T28803] CPU: 1 PID: 28803 Comm: syz.4.5937 Not tainted syzkaller #0 [ 1520.322549][T28803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1520.332852][T28803] Call Trace: [ 1520.336330][T28803] [ 1520.339300][T28803] dump_stack_lvl+0x188/0x24e [ 1520.344025][T28803] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1520.350236][T28803] ? show_regs_print_info+0x12/0x12 [ 1520.355571][T28803] ? load_image+0x410/0x410 [ 1520.360137][T28803] should_fail_ex+0x390/0x4c0 [ 1520.364865][T28803] _copy_from_user+0x2c/0x170 [ 1520.369594][T28803] __sys_bpf+0x2ea/0x780 [ 1520.373965][T28803] ? bpf_link_show_fdinfo+0x380/0x380 [ 1520.379406][T28803] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1520.385660][T28803] __x64_sys_bpf+0x78/0x90 [ 1520.390122][T28803] do_syscall_64+0x4c/0xa0 [ 1520.394754][T28803] ? clear_bhb_loop+0x60/0xb0 [ 1520.399574][T28803] ? clear_bhb_loop+0x60/0xb0 [ 1520.404297][T28803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1520.410233][T28803] RIP: 0033:0x7f880fb9e159 [ 1520.414685][T28803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.434373][T28803] RSP: 002b:00007f880ddf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1520.442828][T28803] RAX: ffffffffffffffda RBX: 00007f880fe25fa0 RCX: 00007f880fb9e159 [ 1520.450929][T28803] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1520.459352][T28803] RBP: 00007f880ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.467533][T28803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.475624][T28803] R13: 00007f880fe26038 R14: 00007f880fe25fa0 R15: 00007fffe949f738 [ 1520.483636][T28803] [ 1520.988580][T28409] Bluetooth: hci3: command 0x040f tx timeout [ 1522.649093][T28816] netlink: 'syz.4.5940': attribute type 275 has an invalid length. [ 1523.037398][T28409] Bluetooth: hci3: command 0x0419 tx timeout [ 1523.674308][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 19 [ 1523.692609][T28868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5948'. [ 1524.029356][T28680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1524.121228][T28680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1524.211122][T28680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1524.265659][T28680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1524.735536][T28885] netlink: 'syz.4.5952': attribute type 275 has an invalid length. [ 1525.317965][T27282] device bond0 left promiscuous mode [ 1525.345660][T27282] device bond_slave_1 left promiscuous mode [ 1525.354918][T27282] device team0 left promiscuous mode [ 1525.379467][T27282] device team_slave_1 left promiscuous mode [ 1525.390768][T27282] device geneve1 left promiscuous mode [ 1525.409496][T27282] ¥: port 1(bond0) entered disabled state [ 1525.475581][T27282] device veth1_vlan left promiscuous mode [ 1525.494577][T27282] device veth0_vlan left promiscuous mode [ 1526.130667][T27282] team0 (unregistering): Port device geneve1 removed [ 1527.003032][T27282] team0 (unregistering): Port device team_slave_1 removed [ 1527.106096][T27282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.441483][T27282] bond0 (unregistering): (slave team0): Releasing backup interface [ 1527.486713][T27282] bond0 (unregistering): Released all slaves [ 1527.556161][T28910] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1527.572420][T28921] netlink: 'syz.3.5963': attribute type 10 has an invalid length. [ 1527.591838][T28927] netlink: 'syz.0.5966': attribute type 275 has an invalid length. [ 1527.736616][T28680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.801686][T20232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.825414][T20232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.851837][T28680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.894179][T20232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.922563][T20232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.940694][T20232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.948296][T20232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.962589][T20232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1528.005031][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1528.018033][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1528.080929][T23067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.088176][T23067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.112047][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1528.121526][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1528.171855][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1528.202901][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1528.242823][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1528.894650][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1528.903633][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1528.959385][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1529.023232][T27280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1529.047794][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1529.067418][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1529.095909][T28680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1529.432252][T28968] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5974'. [ 1529.785240][T28984] netlink: 'syz.4.5977': attribute type 275 has an invalid length. [ 1530.548118][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1530.565024][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1530.609889][T28680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.669379][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1530.705195][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1530.829800][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1530.859408][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1530.902573][T28680] device veth0_vlan entered promiscuous mode [ 1530.940179][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1530.993784][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1531.028954][T28680] device veth1_vlan entered promiscuous mode [ 1531.219780][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1531.233746][T29026] FAULT_INJECTION: forcing a failure. [ 1531.233746][T29026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.238267][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1531.306631][T29026] CPU: 0 PID: 29026 Comm: syz.0.5985 Not tainted syzkaller #0 [ 1531.314355][T29026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.324458][T29026] Call Trace: [ 1531.327769][T29026] [ 1531.330719][T29026] dump_stack_lvl+0x188/0x24e [ 1531.335425][T29026] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1531.341688][T29026] ? show_regs_print_info+0x12/0x12 [ 1531.347183][T29026] ? load_image+0x410/0x410 [ 1531.351749][T29026] should_fail_ex+0x390/0x4c0 [ 1531.356542][T29026] _copy_from_user+0x2c/0x170 [ 1531.361259][T29026] btf_new_fd+0x326/0x760 [ 1531.365697][T29026] __sys_bpf+0x612/0x780 [ 1531.369980][T29026] ? bpf_link_show_fdinfo+0x380/0x380 [ 1531.375408][T29026] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1531.381695][T29026] __x64_sys_bpf+0x78/0x90 [ 1531.386305][T29026] do_syscall_64+0x4c/0xa0 [ 1531.390745][T29026] ? clear_bhb_loop+0x60/0xb0 [ 1531.395434][T29026] ? clear_bhb_loop+0x60/0xb0 [ 1531.400122][T29026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.406052][T29026] RIP: 0033:0x7fc47599e159 [ 1531.410574][T29026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.430448][T29026] RSP: 002b:00007fc47682b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1531.438963][T29026] RAX: ffffffffffffffda RBX: 00007fc475c25fa0 RCX: 00007fc47599e159 [ 1531.446947][T29026] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1531.454933][T29026] RBP: 00007fc47682b090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.462919][T29026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.471378][T29026] R13: 00007fc475c26038 R14: 00007fc475c25fa0 R15: 00007ffcf9bf77d8 [ 1531.479653][T29026] [ 1531.485898][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1531.522355][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1531.592943][T28680] device veth0_macvtap entered promiscuous mode [ 1531.640167][T28680] device veth1_macvtap entered promiscuous mode [ 1531.730554][T28680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.782938][T28680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.798924][T28680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.811347][T28680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.828523][T28680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.840426][T28680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.874488][T28680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.902133][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1531.917475][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1531.960131][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1531.992593][T28680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.017586][T28680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.040921][T28680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.062072][T28680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.100868][T28680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.120806][T28680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.157391][T28680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.204617][T29051] netlink: 8192 bytes leftover after parsing attributes in process `syz.5.5990'. [ 1532.235168][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1532.251547][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1532.310319][T28680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.376113][T28680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.433590][T28680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.496500][T28680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.602135][T29055] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5990'. [ 1533.299367][T29055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.376185][T29055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.434298][T29055] bond0 (unregistering): Released all slaves [ 1533.494705][T29063] netlink: 'syz.0.5991': attribute type 275 has an invalid length. [ 1533.521132][T29072] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5994'. [ 1533.573518][T29078] netlink: 'syz.3.5995': attribute type 7 has an invalid length. [ 1533.614414][T29078] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5995'. [ 1533.838080][T29088] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5997'. [ 1533.894071][T20227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.929383][T20227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.965939][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1534.032244][T27280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.045519][T27280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.106701][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.575036][T28409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1535.599772][T16661] bond0: (slave syz_tun): Releasing backup interface [ 1535.619271][T29120] netlink: 'syz.5.6005': attribute type 275 has an invalid length. [ 1535.634565][T28409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1535.643416][T28409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1535.653308][T28409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1535.663240][T28409] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1535.673633][T28409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1536.657652][T20232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.725024][T29142] netlink: 'syz.0.6009': attribute type 10 has an invalid length. [ 1536.869370][T29142] team0: Device wg1 is of different type [ 1537.099728][T20232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.315838][T20232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.491364][T20232] bond0: (slave netdevsim0): Releasing backup interface [ 1537.522035][T20232] device netdevsim0 left promiscuous mode [ 1537.754769][T28409] Bluetooth: hci1: command 0x0409 tx timeout [ 1537.940836][T29131] chnl_net:caif_netlink_parms(): no params data found [ 1538.528117][T29184] netlink: 'syz.1.6019': attribute type 275 has an invalid length. [ 1538.605242][T20232] tipc: Left network mode [ 1538.605383][T29131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.627154][T29131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.677565][T29131] device bridge_slave_0 entered promiscuous mode [ 1538.717959][T29131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.762252][T29131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.801603][T29131] device bridge_slave_1 entered promiscuous mode [ 1538.842090][T29219] netlink: 'syz.5.6026': attribute type 39 has an invalid length. [ 1539.371187][T29226] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6027'. [ 1539.414478][T29226] device hsr_slave_0 left promiscuous mode [ 1539.527825][T29226] device hsr_slave_1 left promiscuous mode [ 1539.835279][T28409] Bluetooth: hci1: command 0x041b tx timeout [ 1540.030330][T29228] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6027'. [ 1540.040555][T29239] netlink: 'syz.1.6029': attribute type 10 has an invalid length. [ 1540.056034][T29240] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6029'. [ 1540.220160][T29131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.268492][T29131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.485157][T29131] team0: Port device team_slave_0 added [ 1540.549471][T29131] team0: Port device team_slave_1 added [ 1540.609711][T29265] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6034'. [ 1540.701767][T29261] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.6035'. [ 1540.761961][T29131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.773009][T29131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.811325][T29131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.906608][T29131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.923999][T29131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.952736][T29131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.289582][T29131] device hsr_slave_0 entered promiscuous mode [ 1541.327373][T29131] device hsr_slave_1 entered promiscuous mode [ 1541.345449][T29131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1541.376932][T29131] Cannot create hsr debugfs directory [ 1541.914713][T28409] Bluetooth: hci1: command 0x040f tx timeout [ 1542.000114][T29281] netlink: 'syz.1.6037': attribute type 275 has an invalid length. [ 1542.313957][T29293] delete_channel: no stack [ 1542.320320][T29292] delete_channel: no stack [ 1542.332361][T29293] delete_channel: no stack [ 1542.334452][T29292] delete_channel: no stack [ 1542.602832][T29310] netlink: 'syz.5.6043': attribute type 2 has an invalid length. [ 1542.663452][T29310] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6043'. [ 1543.791391][T29320] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6045'. [ 1543.821467][T29320] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1543.994895][T28409] Bluetooth: hci1: command 0x0419 tx timeout [ 1544.103392][T29339] FAULT_INJECTION: forcing a failure. [ 1544.103392][T29339] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.171245][T29339] CPU: 1 PID: 29339 Comm: syz.5.6049 Not tainted syzkaller #0 [ 1544.178951][T29339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1544.189237][T29339] Call Trace: [ 1544.192552][T29339] [ 1544.195513][T29339] dump_stack_lvl+0x188/0x24e [ 1544.200304][T29339] ? show_regs_print_info+0x12/0x12 [ 1544.205528][T29339] ? load_image+0x410/0x410 [ 1544.210079][T29339] ? __might_sleep+0xd0/0xd0 [ 1544.214802][T29339] ? __lock_acquire+0x7c40/0x7c40 [ 1544.219875][T29339] ? mark_lock+0x94/0x320 [ 1544.224258][T29339] should_fail_ex+0x390/0x4c0 [ 1544.229065][T29339] should_failslab+0x5/0x20 [ 1544.233605][T29339] slab_pre_alloc_hook+0x59/0x300 [ 1544.238773][T29339] kmem_cache_alloc_lru+0x49/0x2e0 [ 1544.243924][T29339] ? __d_alloc+0x2e/0x6e0 [ 1544.248294][T29339] __d_alloc+0x2e/0x6e0 [ 1544.252666][T29339] ? d_alloc_pseudo+0xe/0x70 [ 1544.257303][T29339] d_alloc_pseudo+0x19/0x70 [ 1544.261840][T29339] alloc_file_pseudo+0xe0/0x200 [ 1544.266734][T29339] ? alloc_empty_file_noaccount+0x80/0x80 [ 1544.272710][T29339] ? alloc_fd+0x590/0x640 [ 1544.277101][T29339] anon_inode_getfd+0xc6/0x1b0 [ 1544.282146][T29339] btf_new_fd+0x5d3/0x760 [ 1544.286640][T29339] __sys_bpf+0x612/0x780 [ 1544.291282][T29339] ? bpf_link_show_fdinfo+0x380/0x380 [ 1544.297080][T29339] ? lock_chain_count+0x20/0x20 [ 1544.302767][T29339] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1544.309437][T29339] __x64_sys_bpf+0x78/0x90 [ 1544.313994][T29339] do_syscall_64+0x4c/0xa0 [ 1544.318621][T29339] ? clear_bhb_loop+0x60/0xb0 [ 1544.323513][T29339] ? clear_bhb_loop+0x60/0xb0 [ 1544.328245][T29339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1544.334284][T29339] RIP: 0033:0x7f18d939e159 [ 1544.338817][T29339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.358723][T29339] RSP: 002b:00007f18da33a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1544.367254][T29339] RAX: ffffffffffffffda RBX: 00007f18d9625fa0 RCX: 00007f18d939e159 [ 1544.375365][T29339] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1544.383371][T29339] RBP: 00007f18da33a090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.391714][T29339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.399724][T29339] R13: 00007f18d9626038 R14: 00007f18d9625fa0 R15: 00007ffd818f9ec8 [ 1544.407775][T29339] [ 1545.972917][T20232] device team0 left promiscuous mode [ 1546.008816][T20232] device C left promiscuous mode [ 1546.024607][T20232] device team_slave_1 left promiscuous mode [ 1546.031133][T20232] device bond0 left promiscuous mode [ 1546.062158][T20232] device bond_slave_0 left promiscuous mode [ 1546.070565][T20232] device bond_slave_1 left promiscuous mode [ 1546.095895][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.102313][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.177817][T20232] ¥: port 2(team0) entered disabled state [ 1546.239437][T29377] netlink: 'syz.5.6054': attribute type 11 has an invalid length. [ 1546.267971][T29377] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6054'. [ 1546.718400][T29367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1546.791067][T20232] device veth1_macvtap left promiscuous mode [ 1546.804448][T20232] device veth0_macvtap left promiscuous mode [ 1547.338084][T29403] FAULT_INJECTION: forcing a failure. [ 1547.338084][T29403] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.351950][T29403] CPU: 1 PID: 29403 Comm: syz.5.6063 Not tainted syzkaller #0 [ 1547.359531][T29403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1547.369629][T29403] Call Trace: [ 1547.372920][T29403] [ 1547.375859][T29403] dump_stack_lvl+0x188/0x24e [ 1547.380552][T29403] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1547.386775][T29403] ? show_regs_print_info+0x12/0x12 [ 1547.392094][T29403] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1547.398364][T29403] should_fail_ex+0x390/0x4c0 [ 1547.403069][T29403] should_failslab+0x5/0x20 [ 1547.407578][T29403] slab_pre_alloc_hook+0x59/0x300 [ 1547.412700][T29403] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1547.418950][T29403] kmem_cache_alloc+0x56/0x2f0 [ 1547.423724][T29403] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1547.429114][T29403] radix_tree_node_alloc+0x7e/0x3a0 [ 1547.434419][T29403] idr_get_free+0x28b/0xa10 [ 1547.439049][T29403] idr_alloc_cyclic+0x286/0x610 [ 1547.444007][T29403] ? idr_alloc+0x2e0/0x2e0 [ 1547.448441][T29403] ? do_raw_spin_lock+0x128/0x2f0 [ 1547.453477][T29403] ? __radix_tree_preload+0x82/0x880 [ 1547.458774][T29403] ? btf_alloc_id+0x30/0x2d0 [ 1547.463376][T29403] btf_alloc_id+0x4f/0x2d0 [ 1547.467891][T29403] btf_new_fd+0x597/0x760 [ 1547.472267][T29403] __sys_bpf+0x612/0x780 [ 1547.476544][T29403] ? bpf_link_show_fdinfo+0x380/0x380 [ 1547.481950][T29403] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1547.488143][T29403] __x64_sys_bpf+0x78/0x90 [ 1547.492572][T29403] do_syscall_64+0x4c/0xa0 [ 1547.497206][T29403] ? clear_bhb_loop+0x60/0xb0 [ 1547.501889][T29403] ? clear_bhb_loop+0x60/0xb0 [ 1547.506573][T29403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1547.512486][T29403] RIP: 0033:0x7f18d939e159 [ 1547.516913][T29403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.536631][T29403] RSP: 002b:00007f18da33a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1547.545071][T29403] RAX: ffffffffffffffda RBX: 00007f18d9625fa0 RCX: 00007f18d939e159 [ 1547.553144][T29403] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1547.561125][T29403] RBP: 00007f18da33a090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.569124][T29403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1547.577129][T29403] R13: 00007f18d9626038 R14: 00007f18d9625fa0 R15: 00007ffd818f9ec8 [ 1547.585224][T29403] [ 1548.335882][T20232] team0 (unregistering): Port device team_slave_1 removed [ 1548.393528][T20232] team0 (unregistering): Port device C removed [ 1548.441172][T20232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.493150][T20232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.545277][T20232] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1548.799378][T20232] team0 (unregistering): Port device bond0 removed [ 1548.842333][T20232] bond0 (unregistering): Released all slaves [ 1548.891752][T29369] netlink: 'syz.1.6055': attribute type 275 has an invalid length. [ 1549.261394][T29131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1549.353958][T29131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1549.397303][T29131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1549.434634][T29131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1549.728663][T29131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.815879][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1549.859135][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1549.906056][T29131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.923382][T29440] sctp: [Deprecated]: syz.0.6072 (pid 29440) Use of int in maxseg socket option. [ 1549.923382][T29440] Use struct sctp_assoc_value instead [ 1550.063325][T29443] netlink: 'syz.5.6073': attribute type 3 has an invalid length. [ 1550.083064][T29444] netlink: 'syz.5.6073': attribute type 3 has an invalid length. [ 1550.112971][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1550.160732][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1550.184955][T23068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.192238][T23068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.253110][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1550.282382][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1550.312085][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1550.352895][T29451] FAULT_INJECTION: forcing a failure. [ 1550.352895][T29451] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.353808][T23068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.373011][T23068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.465536][T29451] CPU: 0 PID: 29451 Comm: syz.3.6076 Not tainted syzkaller #0 [ 1550.473164][T29451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1550.483378][T29451] Call Trace: [ 1550.486724][T29451] [ 1550.489778][T29451] dump_stack_lvl+0x188/0x24e [ 1550.494585][T29451] ? show_regs_print_info+0x12/0x12 [ 1550.499840][T29451] ? load_image+0x410/0x410 [ 1550.504501][T29451] ? __might_sleep+0xd0/0xd0 [ 1550.509222][T29451] ? __lock_acquire+0x7c40/0x7c40 [ 1550.514309][T29451] should_fail_ex+0x390/0x4c0 [ 1550.519043][T29451] should_failslab+0x5/0x20 [ 1550.523725][T29451] slab_pre_alloc_hook+0x59/0x300 [ 1550.528810][T29451] kmem_cache_alloc_lru+0x49/0x2e0 [ 1550.534068][T29451] ? __d_alloc+0x2e/0x6e0 [ 1550.538466][T29451] __d_alloc+0x2e/0x6e0 [ 1550.542750][T29451] ? d_alloc_pseudo+0xe/0x70 [ 1550.547477][T29451] d_alloc_pseudo+0x19/0x70 [ 1550.552020][T29451] alloc_file_pseudo+0xe0/0x200 [ 1550.557009][T29451] ? alloc_empty_file_noaccount+0x80/0x80 [ 1550.562769][T29451] ? alloc_fd+0x590/0x640 [ 1550.567162][T29451] anon_inode_getfd+0xc6/0x1b0 [ 1550.571978][T29451] btf_new_fd+0x5d3/0x760 [ 1550.576360][T29451] __sys_bpf+0x612/0x780 [ 1550.580744][T29451] ? bpf_link_show_fdinfo+0x380/0x380 [ 1550.586178][T29451] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1550.592394][T29451] __x64_sys_bpf+0x78/0x90 [ 1550.596936][T29451] do_syscall_64+0x4c/0xa0 [ 1550.601382][T29451] ? clear_bhb_loop+0x60/0xb0 [ 1550.606195][T29451] ? clear_bhb_loop+0x60/0xb0 [ 1550.610906][T29451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1550.616851][T29451] RIP: 0033:0x7fe1e0f9e159 [ 1550.619774][T29461] netlink: 'syz.5.6077': attribute type 2 has an invalid length. [ 1550.621281][T29451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.621302][T29451] RSP: 002b:00007fe1e1ebb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1550.657285][T29451] RAX: ffffffffffffffda RBX: 00007fe1e1225fa0 RCX: 00007fe1e0f9e159 [ 1550.665485][T29451] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1550.673858][T29451] RBP: 00007fe1e1ebb090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.681871][T29451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.689970][T29451] R13: 00007fe1e1226038 R14: 00007fe1e1225fa0 R15: 00007fffb9f14338 [ 1550.698181][T29451] [ 1550.717754][T29461] netlink: 'syz.5.6077': attribute type 8 has an invalid length. [ 1550.770249][T29461] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6077'. [ 1550.876434][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1550.897409][T29458] netlink: 'syz.0.6075': attribute type 275 has an invalid length. [ 1551.014803][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1551.039141][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1551.070517][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1551.140526][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1551.173800][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1551.251719][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1551.286362][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1551.333328][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1551.447425][T29131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.494934][T29131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1551.503253][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1551.545686][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1552.169494][T29506] netlink: 'syz.3.6085': attribute type 16 has an invalid length. [ 1552.200618][T29506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1552.294590][T29510] netlink: 'syz.3.6085': attribute type 16 has an invalid length. [ 1552.375936][T29510] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1552.935477][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1552.943292][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1553.007038][T29131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.072954][T29520] netlink: 'syz.3.6089': attribute type 21 has an invalid length. [ 1553.085134][T29520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6089'. [ 1553.121936][T29520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6089'. [ 1553.199227][T29529] netlink: 'syz.0.6090': attribute type 275 has an invalid length. [ 1553.470964][T29535] FAULT_INJECTION: forcing a failure. [ 1553.470964][T29535] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.542471][T29535] CPU: 0 PID: 29535 Comm: syz.1.6091 Not tainted syzkaller #0 [ 1553.550009][T29535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.560184][T29535] Call Trace: [ 1553.563477][T29535] [ 1553.566438][T29535] dump_stack_lvl+0x188/0x24e [ 1553.571145][T29535] ? show_regs_print_info+0x12/0x12 [ 1553.576360][T29535] ? load_image+0x410/0x410 [ 1553.580875][T29535] ? __might_sleep+0xd0/0xd0 [ 1553.585570][T29535] ? __lock_acquire+0x7c40/0x7c40 [ 1553.590708][T29535] should_fail_ex+0x390/0x4c0 [ 1553.595491][T29535] should_failslab+0x5/0x20 [ 1553.600009][T29535] slab_pre_alloc_hook+0x59/0x300 [ 1553.605051][T29535] kmem_cache_alloc+0x56/0x2f0 [ 1553.609919][T29535] ? __alloc_file+0x25/0x230 [ 1553.614522][T29535] __alloc_file+0x25/0x230 [ 1553.618951][T29535] alloc_empty_file+0x90/0x180 [ 1553.623726][T29535] alloc_file+0x5b/0x5f0 [ 1553.628064][T29535] alloc_file_pseudo+0x180/0x200 [ 1553.633006][T29535] ? alloc_empty_file_noaccount+0x80/0x80 [ 1553.638749][T29535] ? anon_inode_getfd+0x84/0x1b0 [ 1553.643789][T29535] anon_inode_getfd+0xc6/0x1b0 [ 1553.648574][T29535] btf_new_fd+0x5d3/0x760 [ 1553.653030][T29535] __sys_bpf+0x612/0x780 [ 1553.657307][T29535] ? bpf_link_show_fdinfo+0x380/0x380 [ 1553.662724][T29535] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1553.668902][T29535] __x64_sys_bpf+0x78/0x90 [ 1553.673335][T29535] do_syscall_64+0x4c/0xa0 [ 1553.677764][T29535] ? clear_bhb_loop+0x60/0xb0 [ 1553.682815][T29535] ? clear_bhb_loop+0x60/0xb0 [ 1553.687526][T29535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1553.693447][T29535] RIP: 0033:0x7fde17b9e159 [ 1553.698340][T29535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.718417][T29535] RSP: 002b:00007fde189ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1553.727030][T29535] RAX: ffffffffffffffda RBX: 00007fde17e25fa0 RCX: 00007fde17b9e159 [ 1553.735126][T29535] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1553.743156][T29535] RBP: 00007fde189ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.751936][T29535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1553.760809][T29535] R13: 00007fde17e26038 R14: 00007fde17e25fa0 R15: 00007ffef80a7d38 [ 1553.769096][T29535] [ 1554.309711][T29557] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6096'. [ 1554.621547][T29566] netlink: 'syz.5.6098': attribute type 11 has an invalid length. [ 1554.659739][T29566] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6098'. [ 1554.711465][T29575] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6100'. [ 1554.773114][T29569] netlink: 'syz.0.6099': attribute type 9 has an invalid length. [ 1554.792004][T29569] netlink: 90128 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1554.836752][T29565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1554.986584][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1555.059440][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1555.296827][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1555.328213][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1555.382922][T29131] device veth0_vlan entered promiscuous mode [ 1555.391432][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1555.420009][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1555.451114][T29131] device veth1_vlan entered promiscuous mode [ 1555.520916][T29597] FAULT_INJECTION: forcing a failure. [ 1555.520916][T29597] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.568422][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1555.577594][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1555.596462][T29597] CPU: 1 PID: 29597 Comm: syz.5.6106 Not tainted syzkaller #0 [ 1555.604167][T29597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1555.614385][T29597] Call Trace: [ 1555.617692][T29597] [ 1555.620634][T29597] dump_stack_lvl+0x188/0x24e [ 1555.625422][T29597] ? show_regs_print_info+0x12/0x12 [ 1555.630630][T29597] ? load_image+0x410/0x410 [ 1555.635161][T29597] ? __might_sleep+0xd0/0xd0 [ 1555.639759][T29597] ? __lock_acquire+0x7c40/0x7c40 [ 1555.644816][T29597] should_fail_ex+0x390/0x4c0 [ 1555.649530][T29597] should_failslab+0x5/0x20 [ 1555.654147][T29597] slab_pre_alloc_hook+0x59/0x300 [ 1555.659187][T29597] kmem_cache_alloc+0x56/0x2f0 [ 1555.663965][T29597] ? security_file_alloc+0x30/0x110 [ 1555.669175][T29597] security_file_alloc+0x30/0x110 [ 1555.674306][T29597] __alloc_file+0xc2/0x230 [ 1555.678741][T29597] alloc_empty_file+0x90/0x180 [ 1555.683515][T29597] alloc_file+0x5b/0x5f0 [ 1555.687776][T29597] alloc_file_pseudo+0x180/0x200 [ 1555.692778][T29597] ? alloc_empty_file_noaccount+0x80/0x80 [ 1555.698813][T29597] anon_inode_getfd+0xc6/0x1b0 [ 1555.703646][T29597] btf_new_fd+0x5d3/0x760 [ 1555.708002][T29597] __sys_bpf+0x612/0x780 [ 1555.712290][T29597] ? bpf_link_show_fdinfo+0x380/0x380 [ 1555.717870][T29597] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1555.724490][T29597] __x64_sys_bpf+0x78/0x90 [ 1555.729027][T29597] do_syscall_64+0x4c/0xa0 [ 1555.733582][T29597] ? clear_bhb_loop+0x60/0xb0 [ 1555.738269][T29597] ? clear_bhb_loop+0x60/0xb0 [ 1555.743050][T29597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1555.749048][T29597] RIP: 0033:0x7f18d939e159 [ 1555.753564][T29597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.773355][T29597] RSP: 002b:00007f18da33a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1555.781866][T29597] RAX: ffffffffffffffda RBX: 00007f18d9625fa0 RCX: 00007f18d939e159 [ 1555.791048][T29597] RDX: 0000000000000028 RSI: 0000200000000500 RDI: 0000000000000012 [ 1555.799032][T29597] RBP: 00007f18da33a090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.807010][T29597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.814991][T29597] R13: 00007f18d9626038 R14: 00007f18d9625fa0 R15: 00007ffd818f9ec8 [ 1555.822987][T29597] [ 1555.906748][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1555.980326][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1556.015246][T29131] device veth0_macvtap entered promiscuous mode [ 1556.032360][T29600] netlink: 'syz.0.6107': attribute type 12 has an invalid length. [ 1556.059889][T29600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1556.080106][T29608] netlink: 'syz.0.6107': attribute type 10 has an invalid length. [ 1556.094044][T29608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1556.125202][T29608] bridge0: port 2(ipvlan1) entered blocking state [ 1556.142856][T29608] bridge0: port 2(ipvlan1) entered disabled state [ 1556.165572][T29608] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1556.237102][T29131] device veth1_macvtap entered promiscuous mode [ 1556.265646][T29611] netlink: 'syz.1.6108': attribute type 275 has an invalid length. [ 1556.372205][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.415261][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.451764][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.483825][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.507889][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.536134][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.562193][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.581967][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.596564][T29131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.609836][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1556.628323][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1556.662886][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.681216][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.691984][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.757289][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.776953][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.828844][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.842293][T29131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.872568][T29131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.912560][T29131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.926484][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1556.967338][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1556.987040][T29635] netlink: 'syz.5.6112': attribute type 21 has an invalid length. [ 1557.007892][T29131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.041998][T29131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.053453][T29131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.101475][T29131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.326797][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.349740][T29650] netlink: 'syz.0.6116': attribute type 2 has an invalid length. [ 1557.371054][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.451876][T29650] __nla_validate_parse: 2 callbacks suppressed [ 1557.451896][T29650] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1557.454116][T29653] netlink: 'syz.5.6117': attribute type 1 has an invalid length. [ 1557.509362][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1557.568525][T29658] netlink: 'syz.5.6117': attribute type 1 has an invalid length. [ 1557.609905][T27199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.668050][T27199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.679909][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1558.109072][T29671] netlink: 'syz.3.6119': attribute type 275 has an invalid length. [ 1559.106812][T29684] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6122'. [ 1559.216067][T29686] netlink: 'syz.5.6122': attribute type 7 has an invalid length. [ 1560.089564][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1560.114936][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1560.124853][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1560.132887][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1560.141744][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1560.149195][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1560.191970][T23068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.438864][T29711] validate_nla: 1 callbacks suppressed [ 1560.438885][T29711] netlink: 'syz.3.6127': attribute type 4 has an invalid length. [ 1560.670149][T23068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.024993][T29723] netlink: 'syz.4.6132': attribute type 21 has an invalid length. [ 1561.094778][T29723] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1561.382463][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1561.685909][T23068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.786164][T29727] netlink: 'syz.3.6133': attribute type 275 has an invalid length. [ 1562.149162][T23068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.234666][T28409] Bluetooth: hci2: command 0x0409 tx timeout [ 1562.654766][T23068] device .*! left promiscuous mode [ 1562.770643][T29703] chnl_net:caif_netlink_parms(): no params data found [ 1562.902841][T23068] tipc: Left network mode [ 1563.034141][T29703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.074506][T29703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.095810][T29703] device bridge_slave_0 entered promiscuous mode [ 1563.471252][T29703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.504407][T29703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.540503][T29703] device bridge_slave_1 entered promiscuous mode [ 1563.878824][T29703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.900764][T29790] netlink: 'syz.4.6144': attribute type 16 has an invalid length. [ 1563.924644][T29790] netlink: 'syz.4.6144': attribute type 3 has an invalid length. [ 1563.953517][T29790] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6144'. [ 1564.211797][T29703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.314949][T28409] Bluetooth: hci2: command 0x041b tx timeout [ 1564.340558][T29703] team0: Port device team_slave_0 added [ 1564.349627][T29703] team0: Port device team_slave_1 added [ 1564.433320][T29809] netlink: 'syz.4.6147': attribute type 275 has an invalid length. [ 1564.659953][T29703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.681350][T29703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.808178][T29703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.496061][T29831] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6151'. [ 1566.395495][T28409] Bluetooth: hci2: command 0x040f tx timeout [ 1567.700534][T29703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.707895][T29703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.823743][T29703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.880666][T29831] netlink: 'syz.5.6151': attribute type 10 has an invalid length. [ 1567.894749][T29831] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1568.243204][T29703] device hsr_slave_0 entered promiscuous mode [ 1568.360709][T29703] device hsr_slave_1 entered promiscuous mode [ 1568.855060][T22807] Bluetooth: hci2: command 0x0419 tx timeout [ 1568.869065][T29846] netlink: 'syz.1.6154': attribute type 8 has an invalid length. [ 1568.904630][T29703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1568.912267][T29703] Cannot create hsr debugfs directory [ 1568.935316][T29846] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6154'. [ 1569.138024][T29846] netlink: 'syz.1.6154': attribute type 1 has an invalid length. [ 1569.264614][T29846] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6154'. [ 1570.082442][T29874] netlink: 'syz.4.6160': attribute type 2 has an invalid length. [ 1570.109873][T29874] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6160'. [ 1570.251908][T29876] netlink: 'syz.1.6161': attribute type 275 has an invalid length. [ 1570.637965][T29890] netlink: 'syz.4.6165': attribute type 3 has an invalid length. [ 1570.655664][T29890] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.6165'. [ 1570.752915][T29890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 1571.183356][T29703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1571.252964][T29703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1571.322418][T29912] netlink: 'syz.5.6169': attribute type 3 has an invalid length. [ 1571.353901][T29912] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6169'. [ 1571.560789][T29703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1572.367241][T29703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1572.694143][T23068] device veth0_to_team left promiscuous mode [ 1572.716275][T23068] Ÿë: port 1(veth0_to_team) entered disabled state [ 1572.765146][T23068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.772648][T23068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.811552][T23068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.854975][T23068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.894037][T23068] device bridge_slave_0 left promiscuous mode [ 1572.911810][T23068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.991459][T23068] device veth1_macvtap left promiscuous mode [ 1572.998157][T23068] device veth0_macvtap left promiscuous mode [ 1573.013431][T23068] device veth1_vlan left promiscuous mode [ 1573.031650][T23068] device veth0_vlan left promiscuous mode [ 1573.313641][T23068] team0 (unregistering): Port device geneve1 removed [ 1573.896798][T23068] team0 (unregistering): Port device team_slave_1 removed [ 1573.976333][T23068] team0 (unregistering): Port device team_slave_0 removed [ 1575.301814][T29953] netlink: 'syz.1.6177': attribute type 275 has an invalid length. [ 1575.615598][T29703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.656586][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1575.704132][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1575.735312][T29703] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.921346][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1575.945387][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1576.024980][T28394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.032319][T28394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.084912][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1576.123396][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1576.160542][T28394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.167777][T28394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.204998][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1576.243832][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1576.286908][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1576.305210][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1576.314644][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1576.324781][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1576.333792][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1576.357723][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1576.377079][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1576.395431][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1576.435911][T29989] device syzkaller0 entered promiscuous mode [ 1576.443417][T30002] netlink: 'syz.1.6190': attribute type 2 has an invalid length. [ 1576.452150][T30002] netlink: 'syz.1.6190': attribute type 8 has an invalid length. [ 1576.474445][T30002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6190'. [ 1576.547528][T29703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1576.579601][T29703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1579.160675][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1579.170583][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1579.206323][T30019] netlink: 'syz.4.6195': attribute type 12 has an invalid length. [ 1579.225204][T30019] netlink: 'syz.4.6195': attribute type 15 has an invalid length. [ 1579.569252][T30026] netlink: 'syz.5.6197': attribute type 275 has an invalid length. [ 1580.686086][T30051] netlink: 'syz.5.6203': attribute type 10 has an invalid length. [ 1580.699335][T30051] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1580.980541][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1581.003930][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1581.055236][T29703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.123813][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1581.146228][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1581.257018][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1581.276360][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1581.303921][T29703] device veth0_vlan entered promiscuous mode [ 1581.322451][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1581.333895][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1581.367910][T29703] device veth1_vlan entered promiscuous mode [ 1581.516497][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1581.536530][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1581.560185][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1581.579992][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1581.622625][T29703] device veth0_macvtap entered promiscuous mode [ 1581.653706][T29703] device veth1_macvtap entered promiscuous mode [ 1581.696805][T30077] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1581.724078][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.744706][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.763371][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.810662][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.841216][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.872633][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.912795][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1581.941308][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.981685][T29703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.003889][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1582.033621][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1582.058696][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1582.107467][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1582.144682][T30072] netlink: 'syz.5.6208': attribute type 2 has an invalid length. [ 1582.153266][T30072] netlink: 'syz.5.6208': attribute type 8 has an invalid length. [ 1582.187862][T30072] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6208'. [ 1582.211883][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.265718][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.304499][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.317887][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.330173][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.347414][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.361251][T29703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.377650][T29703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.396892][T29703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.418970][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1582.513458][T13463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1582.592225][T30084] netlink: 'syz.3.6212': attribute type 275 has an invalid length. [ 1582.702066][T30094] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6215'. [ 1582.740117][T29703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.764670][T29703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.773549][T29703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.820419][T29703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.852191][T30095] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6215'. [ 1583.101111][ T5794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.144387][ T5794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.188010][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1583.248638][T30102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1583.276614][T30104] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1583.338516][T13453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.374371][T13453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.397618][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1584.070312][T30116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1584.090358][T30116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1584.122465][T30116] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1584.550750][T30118] netlink: 'syz.0.6121': attribute type 1 has an invalid length. [ 1584.944998][T30139] netlink: 'syz.1.6225': attribute type 275 has an invalid length. [ 1586.084180][T22807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1586.121995][T22807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1586.133972][T22807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1586.146959][T22807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1586.164582][T22807] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1586.173432][T22807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1586.332095][T23068] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.572944][T23068] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.747689][T23068] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.873998][T23068] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.161912][T30158] chnl_net:caif_netlink_parms(): no params data found [ 1587.207296][T30191] netlink: 'syz.4.6243': attribute type 2 has an invalid length. [ 1587.234984][T30194] netlink: 763 bytes leftover after parsing attributes in process `syz.5.6240'. [ 1587.264430][T30191] netlink: 'syz.4.6243': attribute type 1 has an invalid length. [ 1587.272323][T30191] netlink: 'syz.4.6243': attribute type 4 has an invalid length. [ 1587.294366][T30191] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.6243'. [ 1587.377828][T23068] device .*! left promiscuous mode [ 1587.646929][T23068] tipc: Left network mode [ 1587.689150][T30203] netlink: 'syz.0.6244': attribute type 275 has an invalid length. [ 1587.966754][T30210] netlink: 'syz.4.6245': attribute type 29 has an invalid length. [ 1588.185765][T22807] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 1588.254969][T22807] Bluetooth: hci4: command 0x0409 tx timeout [ 1589.441507][T30210] netlink: 'syz.4.6245': attribute type 29 has an invalid length. [ 1589.474692][T30226] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6247'. [ 1589.663836][T30226] team0: Port device team_slave_0 removed [ 1590.106925][T30158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.131516][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.197463][T30158] device bridge_slave_0 entered promiscuous mode [ 1590.314641][T28409] Bluetooth: hci4: command 0x041b tx timeout [ 1590.444109][T30158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.466184][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.525831][T30158] device bridge_slave_1 entered promiscuous mode [ 1590.751505][T30257] netlink: 'syz.0.6254': attribute type 2 has an invalid length. [ 1590.828244][T30158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.882652][T30158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.953523][T30257] device .*! entered promiscuous mode [ 1591.522870][T30158] team0: Port device team_slave_0 added [ 1591.682341][T30274] bridge0: port 3(batadv0) entered blocking state [ 1591.703853][T30274] bridge0: port 3(batadv0) entered disabled state [ 1591.725264][T30274] device batadv0 entered promiscuous mode [ 1591.733556][T30274] bridge0: port 3(batadv0) entered blocking state [ 1591.740418][T30274] bridge0: port 3(batadv0) entered forwarding state [ 1591.748278][T27199] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1591.758119][T27199] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1591.761193][T30158] team0: Port device team_slave_1 added [ 1591.873219][T30158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.904435][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.983809][T30158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.013658][T30158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.028705][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.102014][T30158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.129828][T30273] netlink: 'syz.0.6258': attribute type 275 has an invalid length. [ 1592.394450][T28409] Bluetooth: hci4: command 0x040f tx timeout [ 1592.413266][T30158] device hsr_slave_0 entered promiscuous mode [ 1592.450486][T30158] device hsr_slave_1 entered promiscuous mode [ 1592.503568][T30158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1592.550805][T30158] Cannot create hsr debugfs directory [ 1592.593905][T30300] netlink: 'syz.4.6265': attribute type 28 has an invalid length. [ 1592.622360][T30300] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6265'. [ 1592.680379][T30304] netlink: 'syz.1.6266': attribute type 10 has an invalid length. [ 1592.800548][T30296] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6263'. [ 1594.244594][T30327] netlink: 'syz.4.6272': attribute type 275 has an invalid length. [ 1594.474405][T28409] Bluetooth: hci4: command 0x0419 tx timeout [ 1594.815032][T23068] device veth1_macvtap left promiscuous mode [ 1594.821309][T23068] device veth0_macvtap left promiscuous mode [ 1594.844732][T23068] device veth1_vlan left promiscuous mode [ 1594.850634][T23068] device veth0_vlan left promiscuous mode [ 1594.873659][T28409] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1595.822062][T30367] netlink: 'syz.4.6284': attribute type 3 has an invalid length. [ 1595.839135][T30367] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6284'. [ 1596.556688][T23068] team0 (unregistering): Port device team_slave_1 removed [ 1596.969736][T22807] Bluetooth: hci1: command 0x0409 tx timeout [ 1597.018585][T30346] netlink: 'syz.0.6278': attribute type 10 has an invalid length. [ 1597.028812][T30346] device macvlan0 entered promiscuous mode [ 1597.039247][T30346] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1597.065169][T30355] netlink: 'syz.0.6278': attribute type 13 has an invalid length. [ 1597.073119][T30355] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6278'. [ 1597.089108][T30359] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1597.343909][T30384] netlink: 'syz.4.6287': attribute type 19 has an invalid length. [ 1597.417036][T30384] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.6287'. [ 1597.687930][T30158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1597.787398][T30158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1597.865903][T30158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1597.956815][T30158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1598.080175][T30398] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6291'. [ 1598.086647][T30396] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.6291'. [ 1598.456212][T30406] netlink: 'syz.0.6293': attribute type 10 has an invalid length. [ 1598.741323][T30406] device macvlan0 left promiscuous mode [ 1598.819245][T30406] bond0: (slave macvlan0): Releasing backup interface [ 1599.000462][T30406] team0: Port device macvlan0 added [ 1599.056220][T30385] netlink: 'syz.1.6288': attribute type 275 has an invalid length. [ 1599.125038][T30158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.215574][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1599.238590][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1599.306570][T30158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.331803][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1599.355435][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1599.405774][T20227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.413039][T20227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.556097][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1599.578452][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1599.617068][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1599.657688][T20227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.664966][T20227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.721035][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1599.788751][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1599.804434][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1599.833678][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1599.934896][T23068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1599.961547][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1599.978623][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1600.035723][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1600.063903][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1600.115745][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1600.139891][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1600.176275][T30158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1600.232841][T30439] netlink: 'syz.0.6301': attribute type 4 has an invalid length. [ 1600.314739][T30439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6301'. [ 1601.434908][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1601.442571][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1601.520866][T30158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.610086][T30466] netlink: 'syz.5.6307': attribute type 275 has an invalid length. [ 1601.643481][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1601.676013][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1601.759737][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1601.770250][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1601.803393][T30158] device veth0_vlan entered promiscuous mode [ 1601.812322][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1601.835364][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1601.851144][T30158] device veth1_vlan entered promiscuous mode [ 1601.939596][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1601.966234][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1602.008522][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1602.046364][T28394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1602.080965][T30158] device veth0_macvtap entered promiscuous mode [ 1602.105206][T30158] device veth1_macvtap entered promiscuous mode [ 1602.202325][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.244584][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.264449][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.284428][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.322259][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.352085][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.385124][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.433293][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.453906][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.474797][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.520235][T30158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.532610][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1602.564929][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1602.596238][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1602.663759][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1602.716247][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.749054][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.811619][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.865501][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.904379][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.915265][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.951041][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.985962][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.051659][T30158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.094866][T30158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.129163][T30158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.184608][T30487] netlink: 'syz.1.6311': attribute type 10 has an invalid length. [ 1603.343527][T30487] team0: Device hsr_slave_0 failed to register rx_handler [ 1603.531678][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1603.561190][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1603.627697][T30158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.668439][T30158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.713383][T30158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.753714][T30158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.787067][T30509] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6314'. [ 1603.992951][T13453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.024807][T13453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.047375][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1604.124490][T27199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.132886][T27199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.190798][T20227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1604.295521][T30524] netlink: 'syz.5.6317': attribute type 275 has an invalid length. [ 1604.985789][T30541] netlink: 'syz.3.6227': attribute type 29 has an invalid length. [ 1605.125758][T30541] netlink: 'syz.3.6227': attribute type 3 has an invalid length. [ 1605.133649][T30541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6227'. [ 1605.205541][T30549] netlink: 'syz.1.6321': attribute type 2 has an invalid length. [ 1605.236261][T30549] netlink: 'syz.1.6321': attribute type 8 has an invalid length. [ 1605.252996][T30549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1605.341641][T30565] netlink: 'syz.1.6321': attribute type 2 has an invalid length. [ 1605.378417][T30566] netlink: 126612 bytes leftover after parsing attributes in process `syz.4.6322'. [ 1605.395195][T30565] netlink: 'syz.1.6321': attribute type 8 has an invalid length. [ 1605.412257][T30565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1605.427542][T30577] netlink: 'syz.5.6324': attribute type 29 has an invalid length. [ 1605.437122][T30566] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6322'. [ 1605.484409][T30577] netlink: 'syz.5.6324': attribute type 29 has an invalid length. [ 1605.534623][T30577] netlink: 'syz.5.6324': attribute type 29 has an invalid length. [ 1606.123993][T30591] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1606.516400][T30610] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6333'. [ 1606.530395][T30611] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6332'. [ 1607.517591][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.524210][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.092481][T30636] tap0: tun_chr_ioctl cmd 1074025677 [ 1608.100714][T30636] tap0: linktype set to 776 [ 1608.536831][T30658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1609.173899][T30676] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6352'. [ 1609.769307][T30693] bridge0: port 3(batadv0) entered blocking state [ 1609.779732][T30693] bridge0: port 3(batadv0) entered disabled state [ 1609.790884][T30693] device batadv0 entered promiscuous mode [ 1609.816787][T30693] bridge0: port 3(batadv0) entered blocking state [ 1609.823504][T30693] bridge0: port 3(batadv0) entered forwarding state [ 1610.276688][T30557] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1610.286321][T30557] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1611.297004][T30720] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1611.354125][T30720] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1611.437505][T30720] validate_nla: 7 callbacks suppressed [ 1611.437526][T30720] netlink: 'syz.0.6362': attribute type 7 has an invalid length. [ 1611.478018][T30720] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1611.631642][T30726] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6364'. [ 1611.678487][T30726] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1612.016947][T30735] netlink: 'syz.0.6366': attribute type 275 has an invalid length. [ 1612.088947][T30738] netlink: 'syz.5.6367': attribute type 21 has an invalid length. [ 1612.248040][T30740] device syzkaller0 entered promiscuous mode [ 1614.422421][T30794] netlink: 'syz.4.6382': attribute type 29 has an invalid length. [ 1614.507024][T30788] netlink: 'syz.5.6379': attribute type 3 has an invalid length. [ 1614.528027][T30794] netlink: 'syz.4.6382': attribute type 29 has an invalid length. [ 1614.555675][T30788] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6379'. [ 1614.600515][T30798] netlink: 'syz.4.6382': attribute type 29 has an invalid length. [ 1614.726268][T30787] netlink: 'syz.5.6379': attribute type 10 has an invalid length. [ 1614.963496][T30787] team0: Device wg1 is of different type [ 1615.072301][T30800] can: request_module (can-proto-0) failed. [ 1615.182753][T30808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.694103][T30812] netlink: 'syz.0.6383': attribute type 275 has an invalid length. [ 1619.835416][T22807] Bluetooth: hci5: command 0x0406 tx timeout [ 1620.925090][T30891] netlink: 'syz.4.6398': attribute type 275 has an invalid length. [ 1625.863995][T30946] netlink: 'syz.3.6413': attribute type 9 has an invalid length. [ 1626.011617][T30948] netlink: 'syz.4.6414': attribute type 275 has an invalid length. [ 1626.907862][T30976] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6420'. [ 1627.079081][T30981] netlink: 'syz.4.6423': attribute type 10 has an invalid length. [ 1627.117091][T30981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1627.201443][T30981] bridge0: port 3(veth0_vlan) entered blocking state [ 1627.223614][T30981] bridge0: port 3(veth0_vlan) entered disabled state [ 1627.460015][T30981] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1629.233250][T31019] netlink: 'syz.5.6431': attribute type 3 has an invalid length. [ 1629.264556][T31019] netlink: 13435 bytes leftover after parsing attributes in process `syz.5.6431'. [ 1629.281046][T31020] netlink: 'syz.1.6432': attribute type 10 has an invalid length. [ 1629.420727][T31020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1629.899065][T31006] netlink: 'syz.4.6429': attribute type 275 has an invalid length. [ 1633.161813][T31067] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.6443'. [ 1633.709015][T31076] netlink: 'syz.0.6445': attribute type 275 has an invalid length. [ 1634.288537][T31096] netlink: 'syz.5.6452': attribute type 29 has an invalid length. [ 1634.371642][T31096] netlink: 'syz.5.6452': attribute type 29 has an invalid length. [ 1634.405169][T31099] netlink: 'syz.3.6453': attribute type 3 has an invalid length. [ 1634.420097][T31099] netlink: 'syz.3.6453': attribute type 1 has an invalid length. [ 1634.431578][T31099] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6453'. [ 1634.441617][T31097] netlink: 'syz.5.6452': attribute type 29 has an invalid length. [ 1634.500563][T31102] netlink: 'syz.5.6452': attribute type 29 has an invalid length. [ 1635.047367][ T27] INFO: task syz.2.5734:28007 blocked for more than 143 seconds. [ 1635.076136][ T27] Not tainted syzkaller #0 [ 1635.081145][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1635.108583][ T27] task:syz.2.5734 state:D stack:25552 pid:28007 ppid:17204 flags:0x00004004 [ 1635.154514][ T27] Call Trace: [ 1635.157996][ T27] [ 1635.160987][ T27] __schedule+0x107f/0x4030 [ 1635.179540][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 1635.194454][ T27] ? release_firmware_map_entry+0x187/0x187 [ 1635.203537][ T27] ? task_work_cancel+0xa1/0x220 [ 1635.216212][ T27] ? task_work_cancel_func+0x210/0x210 [ 1635.221825][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1635.232652][ T27] schedule+0xb9/0x180 [ 1635.238756][ T27] ? _free_event+0x10d/0x1050 [ 1635.264326][ T27] _free_event+0x176/0x1050 [ 1635.269028][ T27] perf_event_release_kernel+0x7c4/0x850 [ 1635.275313][ T27] ? __might_sleep+0xd0/0xd0 [ 1635.280149][ T27] ? calc_timer_values+0x410/0x410 [ 1635.291787][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1635.298667][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 1635.304040][ T27] ? perf_mmap+0x1470/0x1470 [ 1635.309655][ T27] perf_release+0x37/0x40 [ 1635.316333][ T27] __fput+0x20a/0x8b0 [ 1635.324409][ T27] task_work_run+0x1d0/0x260 [ 1635.329263][ T27] ? task_work_cancel+0x220/0x220 [ 1635.344334][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 1635.349927][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 1635.363452][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1635.369588][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1635.377790][ T27] do_syscall_64+0x58/0xa0 [ 1635.382280][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1635.387786][ T27] ? clear_bhb_loop+0x60/0xb0 [ 1635.392785][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1635.399336][ T27] RIP: 0033:0x7f935299e159 [ 1635.403963][ T27] RSP: 002b:00007f9353838fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1635.412851][ T27] RAX: ffffffffffffffff RBX: 00007f9352c25fa0 RCX: 00007f935299e159 [ 1635.421073][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080 [ 1635.430206][ T27] RBP: 00007f9352a3506b R08: ffffffffff600000 R09: ffffffffff600000 [ 1635.438725][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1635.447250][ T27] R13: 00007f9352c26038 R14: 00007f9352c25fa0 R15: 00007ffc2d98e238 [ 1635.456269][ T27] ? 0xffffffffff600000 [ 1635.460480][ T27] ? 0xffffffffff600000 [ 1635.465024][ T27] [ 1635.468314][ T27] [ 1635.468314][ T27] Showing all locks held in the system: [ 1635.484013][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1635.489868][ T27] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1635.511271][ T27] 1 lock held by rcu_tasks_trace/13: [ 1635.517264][ T27] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1635.528870][ T27] 1 lock held by khungtaskd/27: [ 1635.534070][ T27] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1635.551923][ T27] 2 locks held by getty/4028: [ 1635.558457][ T27] #0: ffff88814d745098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1635.588713][T31121] netlink: 'syz.5.6460': attribute type 275 has an invalid length. [ 1635.591585][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1635.612867][ T27] 2 locks held by kworker/1:4/4315: [ 1635.619293][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1635.634375][ T27] #1: ffffc900047b7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1635.647937][ T27] 4 locks held by kworker/u4:23/30556: [ 1635.653529][ T27] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1635.670119][ T27] #1: ffffc90005f6fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1635.680739][ T27] #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 1635.690713][ T27] #3: ffffffff8cb33380 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0 [ 1635.700863][ T27] 2 locks held by syz.0.6455/31103: [ 1635.706575][ T27] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1635.716469][ T27] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1635.727565][ T27] 2 locks held by syz.0.6455/31105: [ 1635.732789][ T27] #0: ffffffff8dd575c8 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 1635.744436][ T27] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1635.756694][ T27] 1 lock held by syz.4.6456/31111: [ 1635.763214][ T27] #0: ffffffff8dd575c8 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 1635.774778][ T27] 1 lock held by syz.5.6460/31119: [ 1635.779914][ T27] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1635.789560][ T27] [ 1635.814911][ T27] ============================================= [ 1635.814911][ T27] [ 1635.823782][ T27] NMI backtrace for cpu 0 [ 1635.828273][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1635.835594][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1635.845692][ T27] Call Trace: [ 1635.849002][ T27] [ 1635.851964][ T27] dump_stack_lvl+0x188/0x24e [ 1635.856684][ T27] ? irq_work_queue+0xbf/0x140 [ 1635.861496][ T27] ? show_regs_print_info+0x12/0x12 [ 1635.866832][ T27] ? load_image+0x410/0x410 [ 1635.871362][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1635.876162][ T27] ? printk_sprint+0x460/0x460 [ 1635.880995][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1635.886249][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1635.892434][ T27] ? _printk+0xda/0x130 [ 1635.896619][ T27] ? load_image+0x410/0x410 [ 1635.901139][ T27] ? load_image+0x410/0x410 [ 1635.905682][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1635.911765][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1635.917981][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1635.924096][ T27] watchdog+0xf0e/0xf50 [ 1635.928307][ T27] ? watchdog+0x1ed/0xf50 [ 1635.933045][ T27] kthread+0x29d/0x330 [ 1635.937241][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1635.942482][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1635.947121][ T27] ret_from_fork+0x1f/0x30 [ 1635.951596][ T27] [ 1635.955549][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1635.960784][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 1635.963567][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1635.978440][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1635.985980][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1635.996072][ T27] Call Trace: [ 1635.999383][ T27] [ 1636.002343][ T27] dump_stack_lvl+0x188/0x24e [ 1636.007057][ T27] ? memcpy+0x3c/0x60 [ 1636.011141][ T27] ? show_regs_print_info+0x12/0x12 [ 1636.016394][ T27] ? load_image+0x410/0x410 [ 1636.021115][ T27] panic+0x2d3/0x710 [ 1636.025030][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1636.031011][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1636.035612][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1636.041159][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1636.047503][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1636.053856][ T27] watchdog+0xf4d/0xf50 [ 1636.058115][ T27] ? watchdog+0x1ed/0xf50 [ 1636.062541][ T27] kthread+0x29d/0x330 [ 1636.066783][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1636.071824][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1636.076419][ T27] ret_from_fork+0x1f/0x30 [ 1636.080856][ T27] [ 1636.084204][ T27] Kernel Offset: disabled [ 1636.088541][ T27] Rebooting in 86400 seconds..