last executing test programs: 2m30.800462339s ago: executing program 0 (id=2707): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x108002, 0xac5d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0xc2fa}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25002800e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed", 0xbc}], 0x1}, 0x844) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x5, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0xa4, &(0x7f0000000000)=""/164}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x4, @perf_config_ext={0xee, 0x2}, 0x2c48, 0x0, 0x0, 0x0, 0x0, 0x400, 0x100, 0x0, 0x92}, 0x0, 0x20000000000, r4, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r5, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) 2m30.026222463s ago: executing program 0 (id=2715): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wg2\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="23eee89468fbfb5447cff59371b9fc2e652f915bdf90079b974a32a37e1ee5a674d59dbca838a7ee13eba8cddaf1e8e92bb864f595a7e94db81191715ce61f9bbb4f8eb2feeae4f5c6d80292a5b374ebd8e8643b8952a4a387280a52acc19b1bd9530795f572440f635630800c5d4f8ec0c63c4f6d89aab978d1ff42af0414cf90b27bf4cd6f9ba87d493eaba66f2f868b043ce21a32d9310b65ee4efdef9e6c670e97ba5f77eb7e4e30033cbf596073e7fcaa35b8fb2831133479eaf070089ab0e49c0f8a0685b772aad52b321884d2c0"}, {&(0x7f0000000140)="6e9ae031ce615e85b32e5618e6149922b3006d115ad5c4cee981511efe36322e984d26abd8cbe56a172d06819cc9dd8be2191c40aa344eb6cbf414ad4de1c86f3dc047590db1a032881a00af06de8e4154d41070c8066b"}, {&(0x7f00000001c0)="bbe3d641e952b026fa5c5a6cfc52a527d854885ec91532e5e299c24ccfa3a56bfe2554ed44c09dec7a49cd4dc71dd3ed623349b46311b3e3ddf24ed117ad2b1f004360914d23b442f214e7d15a10ddf5fd191d06224d"}, {&(0x7f0000000240)="572d8060f0350c1b780030e4dd4f41c0aeaf3f0d2a8ba367b2f4ae85263a066637aed6840beefaf0c5a1838894d885726b6db5a97bca5a056348cff456a31434f2db3f7a7d2b4a52de03a88c4898afb46681beae21712b6f698560f308d1e6dc2b9396d7f69a2df99d7bf823a8d6df5ec8abdc611c7220ac5a32f37ffc3dae0e9dc61d"}, {&(0x7f0000000300)="2255359ad994e64e6f055dde1ba1f881c95de37a76d5d4bd2068e6f368b8c171931c83f78aa8d323bcff2573c89337e1"}], 0xffffe62, 0x0, 0xc}, 0x4) 2m29.690601324s ago: executing program 0 (id=2719): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) (rerun: 32) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x2}, 0x12, 0x0, 0x0, 0x7, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xb) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x15, 0x21, &(0x7f0000002400)=ANY=[], 0x0, 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x3, 0xc, 0x80000001, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x0, 0x2, 0x2, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) (async) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d7", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b15c84e21008bf32c19020000f80200000044000200edb556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003000), 0x201, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async, rerun: 64) recvmsg$kcm(r1, &(0x7f00000024c0)={&(0x7f0000001000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/76, 0x4c}, {&(0x7f00000011c0)=""/166, 0xa6}, {&(0x7f0000001280)=""/27, 0x1b}], 0x3, &(0x7f0000002400)=""/183, 0xb7}, 0x40000002) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async, rerun: 32) unlink(&(0x7f0000001400)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (rerun: 64) 2m29.274675197s ago: executing program 0 (id=2721): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x80) 2m28.278465419s ago: executing program 0 (id=2729): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="0500f900"/14, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x32, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e7ffffdf070000000000000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), 0x0}, 0x20) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b006a1000000000200000000020000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r4) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) perf_event_open(&(0x7f0000000d00)={0x2, 0xfffffffffffffeac, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x4, 0xd9, 0x0, 0x0, 0x1}, 0x0, 0x100000, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2m27.805119765s ago: executing program 0 (id=2733): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}, 0x41) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000080)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x53, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001840), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fc0000000000000000000000850000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000a00b704000002000000850000003300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='syzkaller\x00', 0x7, 0xf0, &(0x7f0000001740)=""/240, 0x40f00, 0x40, '\x00', r4, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[r6], 0x0, 0x10, 0x9}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@exit]}, &(0x7f0000000180)='syzkaller\x00', 0xc452, 0xc1, &(0x7f0000000340)=""/193, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x9, 0x2800000, 0x7ff}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x10, 0xd}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000300), 0x12) 2m12.756181708s ago: executing program 32 (id=2733): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}, 0x41) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000080)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x53, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001840), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fc0000000000000000000000850000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000a00b704000002000000850000003300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='syzkaller\x00', 0x7, 0xf0, &(0x7f0000001740)=""/240, 0x40f00, 0x40, '\x00', r4, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[r6], 0x0, 0x10, 0x9}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@exit]}, &(0x7f0000000180)='syzkaller\x00', 0xc452, 0xc1, &(0x7f0000000340)=""/193, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x9, 0x2800000, 0x7ff}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x10, 0xd}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000300), 0x12) 50.592649396s ago: executing program 4 (id=3170): socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffd, 0x0, @perf_config_ext={0x1ff, 0x37d2}, 0x21, 0x0, 0x310, 0x3, 0x0, 0x200, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000009"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x48, &(0x7f0000000000)=r0, 0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000003640)='ns/net\x00') sendmsg$unix(r5, &(0x7f00000036c0)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002440)="cf6f4cab90601f656feb76e09605f8e39d616b414e8f7853ddad91916e1c2bfca484094023a0dbb601b0e380c27cdaedf5afb5ab9ba4b4b378eb4becf786d69eaebccc68d276c4a0deb8f4ee3091e6324a1d568ce5661db4f88d7d60daadbd48a058d22195a7e21efe175dea391c8b0ff78f732b4015a8b194da2feae48cee85fdc08a1c9383799fc6d549fc8589940c28e06f5b25a74e075898c6f1021415e1dcd8949c210ba6fd235b5e4ed5eb018232fe794955a70431569c4c8b4067050f2163a07c14ed2b347ea3bea7130922ceac4b9028e7c6b4bba0300a3a66eddd4eaa3709fc63107ea5e6a5732cfa4b308be8e3aaa9f81da34938987b4fdb9504bf018ddea37c7b82f7ebc58542baa5a52dced78518d41b6f50b202f9a6d583072668de640b7c3e29235b79566676c572892ec133b3b28e09f104e9609196fd0598c287c94a001374654dfa3d2b17235093e8e8ad87f4beea477f163f0bfa6b32699c572a18c3336e07888f27f54d721e601ababff5467f11870ee78d8ccf035f5665664313f51f5cca8b63793cd9d5d9f34fcb3cada97b7d1e9833efa29f1a05ede9a0f4ea333e7aaf25c8e1421c62303a14595cc3afcd2975df918e3b4dec790ea23569a918dec8293489f56ce7990873a49e19718968f0d8a3a0f91f9021001404d6cf368805fd6f3c92a015d36c025d8bd17bd3fee719c775a2934ad457c3784a68f9aed6010f9c2ae9c65dea67da0d3b813cd061d2dc41baac079f5b653c1aadfd41720fff1b170b107965bd9af893138882b4b2e77561af81181c0b3d1d4e2b777c7092fd629b024ce81634ba086563cadbd315c59169aa312a2ce94c8f200334943de714245932f5f7d610f34ed0cb079978a83b874cb41a209511786fc2e523fbe39522351237f2684f08aaf154061a12deb8a9d3d4b5d75070c3af7387af1b340e236d1c5cd78d211f33864c4f0a3f2dda5050f2723da228bcf0daabd093e77bf26b92ec288c3c7bc857d9fc719e1661a9bfc08f5d046474d9f8d61e05342ebbacf40207b7aeec9c7ea9252d28f57431f5ded60d56070283a329e94ede361f6d9ddea4e43d23d3f06835d5daf577c4b14e55db336638777507c5ef77fb71dcfd50bd8d065ae578531aa87e33e8663e252939c3babc47154adf539be9a2ca1d84e6c4308d5b0722ad12683bc80532d520758d36479b337e9cc4ab397a0af3426e584e98bc7c2f3073e4d28e795ef7894d69595664d65c2b9ccc591819b7af301216b7d25fe2c50a81975a84029e8418d7ae719e133afb9883ff4d0d42b4dccf6513f22c0f20cff302689414435c705ca328cd0eb49b7216981c8b66efe9a73558f00ebf577b016497752e0e3bc68b53dcc1717c19fb101ac84bccb73061d7e22957c91b8b1bc17da14eafd2c96ed070dc64287221a0ea9d8e3c99af1217c9e95e65335886321ee844a0065923633893e31d6b081ac3ceb10e3e55afe47d2be06ec92d1e0568f02ee35da0cd621b9a8a4d86b8ae65aafbde98e43ba99237be3575ad2e3732f74fe82b1e4c55f9747346f083cddef803fe9b6d826a2bb4126d2c83f7779dd27285fadb862b8647b58b2f12d02a2bda772836d0cf4a0fa9275b39fc5c68756d6fe7d691596751ac2d3f31e4c5fe2c330e63dd278cd477d32d1501886aabd43a1586e3afb8b95673a67fb8a27ad88395ba52f920ebb424344691049a8a3cf267e79169eda90fd936bbf040ad002b950b0c9622f9a9ee9dd121ea863672e3a68f50ed786ad1f5be0b367ce9c1e1019cf040f212ee64fd2359798a057f00d244cef82d0bbdc2c2e6fe1d56f7c4afb626cbc3d547a5357bb12ab64ab4854eaf5731a600497a6618522083938d8a2d8abd7b09cc6408dc33bfd3974a55374289c0651396975d420a69d287acf02a53843b8d3af9d38c54079b342f94e1e4cf28b21b1bd7ee04a35845212cd71f7bd9d2ab030be9fa02a075a381b8918980d05d3186bff07c51784d7df80f66816235202331b58531b5e4f550f4774ac418a8f68b883a3111f08fc89c7d0503367616a0f26f6d9322a85bf1336066e8ee10f11395ffc5ebc5def37a2e822ccfde6df4e1a1c8c4132d3647c12991e5eb035664d28a78d11617b9542df03b5539c134a810f7e18ae97178b7de3872e806e2fcb30d10bdbf34f57a8279407fcad62d2d4d0e87df400fc6274828b2cfa652afe7d26f0ea2cd276cbcd343b778b50a2775f6cbc85241c0c995461d48b4f866bde4534815d83c866db3b8aefd2da40727ba60b5aa6050b124d3f7f11c809b710a555eac0a6eac233e7392ae2afe6dc378fe4fd84276e9cde52d59523cc24d0d45e8a8f7d713f339cd58a36ed8bf1c43df10397fc3db819e89618d21dfb5b645db2e906c531a809db04f023aeec567bd3b47e687ee8f86d69f935abb7cafeb32862dedb37364f5686fa8d4e139e9ec96fbbe3b1cee0c28fbbb9528022355de65cb3bd6694f11af9aa5879d996d56d017cfc854910699dcaf3da38ecc011e5156c22be07c4b0d676e982a320e52def1a0a85cd537a3cb0fb955e12fa6ae8710cf71b76a3f756f71aafc6f37225f6dbfe600b013687b1a38f02116ab7114d8623c4099599d5a1940ba2a9a8a04297e30e2279ee5f03956cb4e75d2b0db0876b7a987278ca483a28e5b6fe796ddf03ad79335ba0c8477cd43f3c873ef44d8e1492149c7aea609e97633474c45ab73c056db9772736673e0e05842aa8b62416f0a727a229af9e5d77118fccb6bf7f36761a7702eb3ccfa8d14532905579d6f1e5a49a20a6f98a20a6675da42eb9fdca9870aae60ff99b77f4ef06a0f1e7763f17a7616cc1c6ca2adfda54d34e2a6fa33bb5fc8015bf99a0496e1508a7cee8de4a1953078bfe01941cbed9fcd6b2b49072287cdd9ccd3ecb8a08916f31c656eb9c7dfb19a706a3768b6d598485b5d29db57ef3d65990b0839829ee0433160b44558c33d64839ee04c314faa75449cad6a112371e8aa517ee502b232e278c377118412dfdbacf6aef88bc0c9f74cf15bd34de4d7d4351484c3b25483b81048ad968d867a08291a2645f5b0af9bb7a6bc8eeb70973f9276f94aaa3fc88e6a8d5f6c2613bfebbb893eaf674e0bfa59898fe677312cdad74459358896ecf3bd88778fd86cfdcedabd3aa6b052c7bcb3829cdce2d348f1e3b20e8cd74ca2339428622ab6ccf35757d7adaab91c480d7df7377f345a864f4bdf48244c8606db56c25cb178968e586eae141ba2463152c56bb4f5a2dcdd16ffad6fa0176a81fa88e8db3539a9b5bb8c4037e1210f32ead5554f5b4fc29eecb75e775f64716ac14b7eb30840232a13cee81cb8d428257ddd9fb7855d288b92f68938bcfc6ff2384145baffc1d44f5165f55ee6539bdc64f0caa168b22d6fb4124fc1bdb2e0a2f89efa786ca3be9c4114aa83f56daec4bbdb6fb56d7d8d368d71a4345e3516c65b0dcb7f1eca2c09f1dded8f3a04d5d95392930c904e4eb2a5dcf4df09fedc20bcd66200478fff58b97f5ae7e791f87d83d1adc24e220e270952528b7d9978c6b7008c63e5fd2b9af698ec9b85c01f98e8df08e9b9054d3f66bdcab78d03fbc6d46fbf6641f2af7c204930b6b93d485271d24a29be59e8c54125683c286fcc4b88f0348a0f3e44e74dafa1b8d615f1ad6c9a6591623fe709b45444bf86d18b1f50623847c9d1668fba585a0c7405b2a64d6745b26e670924860d69edb29924b2a26c6a83581a8da04a7210ca04aa9c3c5e638a4cdd868ead1c2452aeff6f6a8ff8ca5f84684863c7e01f4ab878934b28fd56c7d5d05ce023354c1ce406934df2f51b8fb40e30bbf2ba2c51f165aee08b0af7bb3691423b15b4425cd292ec37b7521609a591a32e2a5e9b8aed6acac8d46cad31354d2b66d38dcd031e993c15b08dcb7e444fd59d1651237997812d49147e5ebd1a4f56946b2d6d923745c489ad02763f740fccc539faf0fb7a1fdb0ef51f5dffa5de721e8a5465a3653f50293b0ffa4ada012a56b7a0ff5f0fec7b3688ff0a8c106ce28736caffbe2e8f22b8254195fd90472e323e618c01ef78a219989c4799b87c2458b6da99a17e58fb0b8dfc10c3f72a05f661933521848ff9ca77770e205f2634f7a3a0f8e2b0e26e2b97c5473fbf86863b493a5c5c33cf0ea255644d19bbd32be74f7f3e97aa1deafd0c737c09cf16f387f3f11d69d4b92eb9cbcf94d3141137bc4de843640eeed4a118cd50b2baf765928d7ba9a042262ec89ba81db87257be13e33dae5d47a04b6cc17267269ed80bc8a7e83850f98b4800d08bfd81ecc2dd0c2b87f658d7cd98f4a42249dddce57c5f85491afdcc3c1a9edc3f9682d0c35e7f6a15efcf0579fcfccacb815d4634ddcbd809ae4c8bf737cdac0dbdbd99fc0f526009f28adca86442ed898b6e720e987c7dceb79a43eeaebba0044a7eb695956d99fb2b438ff27368ee085baedbaa2ba079ff0b505bbba04d7d604639815013cb3887fb714af35b455367ab982f9e6b1b445242b0b8c6d31c98312bd9a1ff6e8ff09e7e1be3055a2ef2b89c95e38c39baa1a8d94b0cafcf904b73b92e78371f180d015b0a1b6edde15c373a182b2e9fd707c0f80e68b98b11ff7c589c8f418513afb2cd579fb291bdc16608a121bbba86f3028766d6dbeb736a17393cf6fbb82ffdf4051c568dd93af5ec1ab1901c7dcfc657d9e7be86ad23ff9bdd7f6e1f209114c8a5ed8fb873d2f0f3493b1374f188dd069fdd3ad041d06978fdb7ab729bb158a50dcce6c70ce75b788b010d6e9a26a38382890c0af279c04c46a5bec8a303a9ea61efdf08785cbd1644bf8e835ace6889f7a6636a0168884b08008d4ec9b6f4dea2718fabe5dc5c77aa203baca7ca6b38e60b5dc52ae4445ef4bc051125a1e643107040db7ef85d2e2ebb21d032acf07ca06e94851ff3cb3a52541107e5f0953b4958a307bb5d8c5b37b1597e2e81ab4222df9a153955596a58993f5f264277ffa2a9f1d7e522d747bb1822157dcf4d0b0e0026ae54e7210f7fc3744ca3090532993183c0d9f7e7e6200952ea82ac201b5ddad68546a50a8abf2fc3c7d8cab80abbe7d69327c6f14f4d9877d4b1ae0dbd68e814bd810f7a0dabbc93d287d5c58c64e77d853d0243d09e9b8fb73a439990f606582ec7dc7358f978c3ea7bc5ae99dc5a56a4fe969b0a29238b3a28294cc4e72d2bfaa6559c54991482ec02c4e35859fd206067cb3309a94e356b19a1bfa32b2e68c67992e91935441d4bfe07d45dc3c3b3c207186ecfcd66ca9d8ea3709dde545fef961ffda8ace550b63dcca81cc02f6007ee0dfc26e92dff3da75ef0a08ca413445438bdd395b8026d496608a7b36dd3f65b8dbd05028838aa7b6b95bab05b6fc4f37d5402205d1790a46d6ecc27f10681dc479fbda46250ae0744b1df7da5e05351246ba115994072028fae7c267948b366a2dd44a3ea5d629fdf8ab11824a161a5274249ebdcd9fce76160da15089aa67a427583aecc784d587bd74cf33ac269f9a71a7d0c959648e638389ead4d943269bdc98e0a899440b9411d87819ae004c8fd3278899842accc3cf1f2b277e69fcc9648e590ac897475dfcb833594cd6230d04430c054c0d11c7147cd6f11f574aed40a751b42b2b771a18b57e7cfcda63bc764b4758b2f6da1388ed18dbe5cd74b543642673a68ab85a656a0c3249a617076580427777bc8f39c3c93121b50f920b1b068f4d065a937b49eeeb21132fedb9febb1c108995e4c61aea62af136eebd51ac", 0xffa}, {&(0x7f0000003440)="3abb772574a782", 0x7}, {&(0x7f0000003480)}, {&(0x7f00000034c0)="1b575eae717e76fb9b60e18e3b865f7f18f50754957883d2da", 0x19}, {&(0x7f0000003500)="88bdce516d0b724bd96f572e08cab94c8010006cf45ad9fa59dac73567ae47a4f4a2237f10493b6c2f6ab31a0a6574a0e2cc500cfb14b6023ed4c83fbd51212d04edde2c2d7d1f3a", 0x48}, {&(0x7f0000003580)="73cc3dd6d18ed800c65796edfc76ffb8b8022de8a8cf57ea276a7068feaf9de384012da48002525de2956ab33f67c17ae1c98b0acae5ac111c63b10c1261", 0x3e}], 0x6, &(0x7f0000003680)=ANY=[@ANYBLOB="050000000001000000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x20}, 0x400c084) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000ac0)="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", &(0x7f00000003c0)=""/58, &(0x7f0000000540)="079ca8d5e457565e321daeaa716a69154ee7b0ad153b89bdd49219945578cfb1998252df2b2cc9bd4a3af1ba8bec7482de3705160c3aa183690c0dc2364e08e9d4979977ed9870a2d119662224e969a4efe9762ee5c9", &(0x7f0000000700)="03ac6e215661e80df6f1362983a5601d36ba80f2700b990615803d2744ca02830949cfbcedd6a85d7748be7f15032c08f2f8e0b12ee19a8b45097b7faff1bd5560bec3c1421919ab9675", 0x4a47, r3}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x3d5b, 0x30, 0x3, 0x37}, {0x0, 0x4, 0x1, 0x9}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000c00000000e0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x102025, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89fa, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004800)={&(0x7f00000008c0)="b1155b55dc60d5fc55863e2fb7ea0fc6c510bd168cc6ef3ad19088c9ceee04d87f8f5b799f96c43a009460e1bd93362d59f55797d22060093d2b175eca4cc0cb83a4d4c7d181a8a3837a0fc137397db4b8eb731b30f04d952364fd10b9d32f0c02385deafd5355bab40f62756daf", &(0x7f0000003700)=""/4096, &(0x7f0000004700)="71d78b21885f692d1c13b17ff1ac786399f2334c55b08b68fba8", &(0x7f0000004740)="378e821fe66f9ba7bc0292423bc96f4f5b261aac939487dfafede558859975cd387ce05e9c4a3beb34436a45b5d171d44157132ffe06b281af79b6ef8f9e967fe6285fc98d053c63f9317f0c0f027bfee54347f94760908f8c4b56612d2043fd6093d0ba7d116c8774cfd7fc33dc8b75f6e39bdae6aed0224f28f04486b385d6a5e6c0ff131474eb0797712d928afa7786185775d9279ee1fb82bfb78c40b05b3dd189c3dd2bae483b4fd807323bb81f", 0x8000, r3, 0x4}, 0x38) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 48.454142264s ago: executing program 4 (id=3175): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66, 0x0, 0x0, 0x0, 0x6}, @initr0, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x1a, &(0x7f0000000040), 0x47) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)={[{0x2d, 'memory'}, {0x2d, 'io'}, {0x2d, 'devices'}, {0x2d, 'perf_event'}, {0x2b, 'freezer'}, {0x2b, 'devices'}, {0x2d, 'net'}]}, 0x38) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x6}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441414"], 0x48}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYRES16=r7], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 48.094026076s ago: executing program 4 (id=3178): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, 0x0, 0xfcd8) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYBLOB="0000000000000000b7050000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43) 47.592511122s ago: executing program 4 (id=3182): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@restrict={0x3, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000b00)=""/169, 0x2a, 0xa9, 0x1, 0x9}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x8953, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x46, '\x00', 0x0, r2, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7e, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x7, 0x2}, @timestamp={0x44, 0x28, 0xc1, 0x0, 0x2, [0x80000001, 0x5, 0x7, 0x7ff, 0x2, 0x6, 0x9, 0xffff0001, 0x100]}]}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x78}, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={0x0, 0x0, 0x4000}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x88) r5 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0xf, 0x1, 0x81, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r5, r4, 0xf, 0x0, 0x0, @void, @value=r4, @void, @void, r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYRES32], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) 46.799246297s ago: executing program 4 (id=3186): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/154, 0x15e, 0x9a, 0x1, 0x5d}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x2000000000000262, &(0x7f0000001240)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x5, 0xc6, &(0x7f00000004c0)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000a80)={0x1, 0x80, 0x6, 0x5, 0x2f, 0x1, 0x0, 0x8000, 0x0, 0xa6374d291f878815, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_config_ext={0x92b0, 0x3}, 0x2, 0x6, 0x1, 0x1, 0x2, 0x4, 0x7f, 0x0, 0xd610, 0x0, 0xe90e}, r3, 0x5, r3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000980)={r3}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000010006b6d373be35c6e17aa31046a876c1d0000007ea60864160af26529001dc0c3000200340031009ee517d34460bc24eab556a745251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ccb7fd40bdbc05c9e753c5b20765a77868c733bf7e25d178779031b2c89c51cda212bd0bdffc464b2540582488bedfdf9f3a68cf0563"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff010003d018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f00000003c0)=""/82, 0x52, 0x0, &(0x7f0000000500)=""/128, 0x80}}, 0x10) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x18, 0x2, 0xd, 0x0, 0x0, 0xc, 0x290, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xb0b, 0x4, @perf_bp={&(0x7f0000000b00), 0x4}, 0x2801, 0x822, 0x80000001, 0x2, 0x1, 0x8, 0x8, 0x0, 0x8000}, 0x0, 0x0, r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x1e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8348}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x2, 0x5, 0x4, 0x50, 0xffffffffffffffff}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x8, 0x4, 0x7}, 0x10, r9, 0x0, 0x2, &(0x7f0000000840)=[r10, 0xffffffffffffffff], &(0x7f0000000880)=[{0x5, 0x5, 0x7, 0x9}, {0x5, 0x2, 0x9, 0x4}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r5, 0x6, 0x21, &(0x7f0000000200), 0x10) 45.331127345s ago: executing program 4 (id=3192): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000060000006111630000000000850000001e0000009500000000000000"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="e9b5000002000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 32.888951814s ago: executing program 3 (id=3247): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r0, 0x0, 0xda, 0x4, &(0x7f0000000680)="05528b3e1e15649400b0b0a9628e83c454c7faf22f5b7b82497b68fa1f7b82443fc9558594a9524b9f7850fcd1677c5f42f25cefe2fd8fa245767f3734c84acfc03bf227565daf27b8a5948783e010596c0fec4c982fe9a719d82fa9a2514b31a638d6c6211a33884135ab27ce5082dba92710d3844156f4107cb353537d98b35cccd25e95bfd9ea540a87fcf8f42e257705c16da32f45e331d0bd41a7a1a64ddbd653c956b5c4fbf234cf42bc731f4cbadb5633806ebf7e6d1919bfb1a8b74551bb8b2d71c1f97f76520bdbcbd0d89e86510b8cc49f507f55a4", &(0x7f0000000780)=""/4, 0x10000, 0x0, 0x9f, 0xd1, &(0x7f00000007c0)="c806432b385dbec3388aca5510fec16a927138fbcf98291d57bde6c05033de36b17c67a4b3f01d4adae91f4b3aa2c1fef4383c38c99f2354788820411818b99cf24b19b7cd49645d26f260dcd19ce7b07ad167a367ebb0f4ef95fa62ddf79b462d4fd7d1b8c1be8cf681cdc79aca2da643fbbf6357069a5fc938121b8488189511da916a86563150084a26554661e657d01190f563daac0374b35b8ca08584", &(0x7f0000000880)="0ddca1f732b62aa47b25c9b19a76a4c1da297892ce3a4d503a0eec88218925a8b144822c94b9132642b0833806ab0208adf4fc499c1265a71f1f425f70fee9752e91fd8ad1c73c94c79816ecabbdd16bdffb92d74691719fbe596ca616dbca5f3b86c1735995bfe418939d0c6b2acaf981e106a0a049a8561a161775c5acfdf5edbd8dc2d75c492e7410df92e9e6fc5dfc320a580aba86cdd8bfb66f4c92875319ff34222cb65953c6b957e30fc019a9a85567f346e08b53c914dece2a867d4c9c2054ab91462d37a03a6c0615d80b1901", 0x6, 0x0, 0x8}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40000222, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xad, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x3, 0x6, 0x8, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}], &(0x7f0000000100)='syzkaller\x00', 0x81, 0xe2, &(0x7f0000000300)=""/226, 0x41100, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x0, 0x495, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x1, r2], &(0x7f0000000580)=[{0x4, 0x2, 0xe, 0x1}, {0x5, 0x3, 0x7, 0x6}], 0x10, 0x800}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 32.310679323s ago: executing program 2 (id=3248): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f00000008c0), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x18, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x80005, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000010c0)={0x0, 0x80, 0xb9, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x9}, 0x8601, 0x2000000, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000180)="6203a105d755af176510122f1eaf", 0xe}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4d}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 32.175701537s ago: executing program 5 (id=3250): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x4, 0x2, 0x401, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xa7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000bc0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5f9}}, @exit, @ldst={0x1, 0x2, 0x4, 0x4, 0xa, 0xfffffffffffffff0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x49, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x1, 0xc6b1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r4], &(0x7f0000000f40)=[{0x0, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x6, 0xb}, {0x1, 0x2, 0xd, 0x5}, {0x4, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x9}], 0x10, 0x4}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x28, 0x4}, 0x4008000) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 27.291873454s ago: executing program 5 (id=3251): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="010000000000000000000000000000000016b71c36fd1e06e52ff97ddcbe000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000020000000500"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x3, 0x1, 0x3, 0x0, 0x6, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xd, 0x5, 0x4, 0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x7, 0xe8, &(0x7f0000000880)=""/232, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x3, 0x5, 0x10001}, 0x10, 0x1c76b, r0, 0x3, &(0x7f0000000d00)=[0xffffffffffffffff, r0, r0], &(0x7f0000000d40)=[{0x3, 0x5, 0x4, 0x1}, {0x1, 0x5}, {0x2, 0x1, 0xe, 0x9}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x81) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33) r12 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c24c5ffbb44709ed0100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0xfffffffa, '\x00', 0x0, r13, 0x1, 0x4, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0xffffffffffffff66, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 27.291548294s ago: executing program 3 (id=3252): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94) 27.058604281s ago: executing program 2 (id=3254): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xb9, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xc, 0x4}, 0x8601, 0x2000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd5a, 0x0, 0x8, 0x47, 0x0}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540)=r3, 0x4) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044943, &(0x7f0000001bc0)={r5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000380)={r0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x210800, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000700000000000000000e82ffff05000000000001bc3c0979f1beda3a54a0773e000000000000aaaaaaaaaabb"]) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) r10 = syz_clone(0x4000000, &(0x7f0000000240)="04f31a5a175f361def692de2fa1985023a0116fb9ac630781160ce0e27f931a9ca1b05c0c251b6d01b3a253787e4823296f5835dc018562ad4dfd7b255a44cf2e295ab39351d623491d6b3517c7b93de503d4f723e733704e500651242a0ad33843b5956a681352a6416406d1e97c7b94e0d58462e9a20b67be1fe0f3228cf00ad43fddf7a6dd6ef62ae2474dda227fc2c46b8", 0x93, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="2038a25c1824ccb5ce3c6aed8cbc83506dbef89d3fbd2a3fdf985a01b921a224e393757ddc557baaaaea6cd848ef6312ae0308e5db44ca95b2895345988a870da2ce6a4bb2e1e191df5889626d37c850252148a5228bd10e47ff45b634aa126320f82b9d676089c35fb9615bd5092b33da2f420c0415619233ab1bac4807c50555c06714b9b321bdaaaf230c067027fd03496e83d12b23541f12853bedbf500107af6daa9154c01b210845479857a82708a93e9e885e196b76") perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x9, 0x7, 0x9, 0x2, 0x0, 0x7, 0x4, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbc83, 0x4, @perf_config_ext={0xffff}, 0x100000, 0x5, 0x5, 0x3, 0xa538, 0x1, 0x10, 0x0, 0x1, 0x0, 0x8}, r10, 0xffffffffffffffff, r1, 0xb) write$cgroup_subtree(r4, 0x0, 0xfe33) 26.309619025s ago: executing program 5 (id=3256): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xe2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10122) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbefdac85f4879fab8a94f30ecc6c66c049a", 0xe8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='syzkaller\x00') 26.285654296s ago: executing program 3 (id=3257): r0 = socket$kcm(0x10, 0x0, 0x4) syz_clone(0x201000, &(0x7f0000000040)="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", 0xff, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)="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") mkdir(&(0x7f0000000200)='./file0\x00', 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000440)="05495a4f240c7ecfd5f70c9a696218bf6238c45c3fa6360ef9bb", 0x1a}, {&(0x7f0000000480)="2031addc9c06ecb428566fe7ac9a8df0cdfd2ab691c89473adc7405edb46acc769876b666b502a45e7c4b2a7bc2143f9f14fe28f34e8495682ef259be7b204aa9bf15738cdf11a87b75c53fd7923142236af51766c990b2c6babb73ebfae", 0x5e}, {&(0x7f0000000500)="e560249eddb5402ed6836df8d47a0eedc51d432edd25af9171cf", 0x1a}, {&(0x7f0000000540)="3c6dfc0bb5771543a3a5a08a3f3ee65b2f7e56295bc5af8aa20e01e6b67e2e6ae3f8248003529a0f6dcabccb91da168675b144fcbf45aee4a56e4cb6783ec3246b8003da2597e62e374651e731c2d04856d4a1609f0b8f61d9f3ebd23ac7810c835f12a7e5b89bb0fa37b5c30f92750c94ca7f1a8a0ea5bc4f3221acd300186150ba58a691ac150df43fda0d40409531a49a62032a3cfea91d92e0c2aa026e58fbe935f9431a423581d3333740328aabe88d8294166a0019631e6e75ad8fcf60f854e8c688ab348cb96b6d3534f0126439c280897b52028360a31064c260f4435d5864b6fe41e6", 0xe7}, {&(0x7f0000000640)="37ca4bd7a89cf215b278c253254b4bda654ee070a85cec21e066815ecd96b165c652874e0e90bb", 0x27}], 0x5, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x92}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0xc0}, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 25.800950732s ago: executing program 2 (id=3259): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000700001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000210b5edaf385f1e2acc65d74bc91b20506914d5855ae8fcd5056329429fc1c66c0dfbdc2564a26a20680cbc6ce29dc22ee4d36ed42a2a895dfd69f798fd8663cb5aabb70649e0a32c8e77ef5399b0afcce610123307099e745763f4afe2b2b2aa74cd42651502bbaac7fe155dde380c6d21d0b979619d991b9c352cc36111aed6b93a4788703086db74eb2cf6bf2bdc8bf4925d8d8a462a1bf425ada1357"], 0x0, 0x1a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @loopback, 0x2}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000004c0)="fd924496252b928e0d8a649ae7164f853397785c573551dcd1ac43b3b25fb17362f1c320c2febcbd09a0753774e103347003b49552051552942b91b5", 0x3c}, {&(0x7f0000000540)="63545bb27a849fb211553bdb1c9f851c88d5249a461ade504b4b1f966f3d48ec21da104e234f6b71a83b3347bbfa90fec62f436f38d29c0c6bca8d57a6f1edee932262db85d7241f9a6839bad2ba417c2d1bfa3a872cb2e0f2edd77e3943c8a6a5f64438412da92d1ebf92c43150752a9136a6bd4b578965444a197b67acec8b3f4267bae98a2c215633235409", 0x8d}, {&(0x7f0000000600)="93fea3082e9c5f4314b9c443684a1ec5b92a81a2f9fef8321ae7bbcf58872acdf93e9e7bab7b366d5892f0b6f6a392c3664c9c980b196f06bdf7943c9eb253267ab337bc563dd5bbdca8c37f250dd6174a757d28cfe9284a09c5c161c84a", 0x5e}, {0x0}, {&(0x7f0000000880)="69a90200cb8c337026eaccff6e59c42795227f9b39be5716090679e4fc507b4cf695abc01e2b73a29aed2813efb68291df5f268608d168f85586530ef5280440977913019d051628a1fd48f04cfc4dad8a7ec0cb838b78921af874dce0396e4fad5a2943df1e61a2190caa57d95d41deb72fd0fbe17d996d55a963fa10bce81906cd48557cb0cf523bc3e17807c93b2d", 0x90}, {&(0x7f0000000a00)="1395a182a412a1b95954b5c10a49a85a506eb10741920ac863f99a15be02333e7503be3b4fa8003542c2ab12ee27e6e74cfe015c21631b1cc58bfd7ce9fb7d", 0x3f}, {&(0x7f0000000a80)}], 0x7}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @loopback, 0x2}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000004c0)="fd924496252b928e0d8a649ae7164f853397785c573551dcd1ac43b3b25fb17362f1c320c2febcbd09a0753774e103347003b49552051552942b91b5", 0x3c}, {&(0x7f0000000540)="63545bb27a849fb211553bdb1c9f851c88d5249a461ade504b4b1f966f3d48ec21da104e234f6b71a83b3347bbfa90fec62f436f38d29c0c6bca8d57a6f1edee932262db85d7241f9a6839bad2ba417c2d1bfa3a872cb2e0f2edd77e3943c8a6a5f64438412da92d1ebf92c43150752a9136a6bd4b578965444a197b67acec8b3f4267bae98a2c215633235409", 0x8d}, {&(0x7f0000000600)="93fea3082e9c5f4314b9c443684a1ec5b92a81a2f9fef8321ae7bbcf58872acdf93e9e7bab7b366d5892f0b6f6a392c3664c9c980b196f06bdf7943c9eb253267ab337bc563dd5bbdca8c37f250dd6174a757d28cfe9284a09c5c161c84a", 0x5e}, {0x0}, {&(0x7f0000000880)="69a90200cb8c337026eaccff6e59c42795227f9b39be5716090679e4fc507b4cf695abc01e2b73a29aed2813efb68291df5f268608d168f85586530ef5280440977913019d051628a1fd48f04cfc4dad8a7ec0cb838b78921af874dce0396e4fad5a2943df1e61a2190caa57d95d41deb72fd0fbe17d996d55a963fa10bce81906cd48557cb0cf523bc3e17807c93b2d", 0x90}, {&(0x7f0000000a00)="1395a182a412a1b95954b5c10a49a85a506eb10741920ac863f99a15be02333e7503be3b4fa8003542c2ab12ee27e6e74cfe015c21631b1cc58bfd7ce9fb7d", 0x3f}, {&(0x7f0000000a80)}], 0x7}, 0x80) r10 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) (async) r11 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a112e61b1444057cc0db1eb4696b49d2dd198c16027d43f01881d9621262f8de7d6a43d898aad61f4ad9d3d7d78cc8328388568b28b97a7734da123a61ff8068a1b03ef626499edbbd214a387b244536c693217d0b99f2658d454319fcfd1633c6e4420f6ad5241b05bee7db1acb98f2af5919e22a85cf0eed9e84e6d270872e0e61927607a8c111af979fbf8d29a9f1887f90d8a497d2f97e77b993a24e1dc4a1ebbc987f817dde0f399bcdbacf71d47127c5f7430c1a38407fe8c6d2950d9c"], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xfffffffd, 0x5}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 25.716778335s ago: executing program 3 (id=3260): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000400000000000000000000000000500000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x8c54) 25.186629272s ago: executing program 5 (id=3261): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x4, 0x2, 0x401, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xa7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000bc0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5f9}}, @exit, @ldst={0x1, 0x2, 0x4, 0x4, 0xa, 0xfffffffffffffff0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x49, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x1, 0xc6b1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r4], &(0x7f0000000f40)=[{0x0, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x6, 0xb}, {0x1, 0x2, 0xd, 0x5}, {0x4, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x9}], 0x10, 0x4}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x28, 0x4}, 0x4008000) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 24.956911069s ago: executing program 1 (id=3262): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11e, 0x8, 0x0, 0x7c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000324d9e5da4958d2500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r3}, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62"], 0xfdef) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="182600", @ANYRES32, @ANYBLOB="c47d3bcd4c2946c500cafb0dc821872afb5a9e68cb5773adf8b9174b19aedcb46f763cbc"], &(0x7f0000000280)='GPL\x00', 0x9, 0xe3, &(0x7f0000000340)=""/227, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xe, 0x3, 0x2}, 0x10, 0x22994, r1, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500), 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, 0x0, &(0x7f0000000680)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000000000000000400000085100000060000001800000000000000000000000000000065000000000000001800000d5847fe7bab51ae2f00000000000000000000000000950000000000000004030000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 24.234114682s ago: executing program 2 (id=3263): socket$kcm(0x2, 0xa, 0x2) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000380)="07d4445daf080a0000000000004511bd0200000000000000ed8de7bf602f17fb5ec0bd47e0d8bf57961e96bdea38e131bc4192ad91d9d830cea1b8de4fb75190d5089db9857d255872d9213c0beab501c4246462ddebf1590b33ba06446457cf3c6ca0cdffededcf570c82a3b0415d30f725a8ce94cf02da2efdfc40234d8207687f991775b29a809ea8d46685bcc18a93650e738862442b1c2b171f8102", 0x9e}], 0x1}, 0x800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0xfea5) (async) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4be68988, 0x10}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x48, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) 23.789169486s ago: executing program 5 (id=3264): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, 0x0, 0xfcd8) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a50000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43) 23.770929847s ago: executing program 3 (id=3265): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="878b0d151f8218e3c73697e40800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="878b0d151f8218e3c73697e40800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000002000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095", @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYBLOB="323791d1241351106053b04d5265de8639e7d6aea6f8f05663ce00af9817", @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4a, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000002000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095", @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYBLOB="323791d1241351106053b04d5265de8639e7d6aea6f8f05663ce00af9817", @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4a, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={r5, 0x20, &(0x7f0000001500)={&(0x7f00000000c0)=""/161, 0xa1, 0x0, &(0x7f0000000500)=""/4096, 0x1000}}, 0x10) 23.417008378s ago: executing program 2 (id=3266): socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[], 0x0, 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94) 23.339394911s ago: executing program 1 (id=3267): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r0, @ANYBLOB="010000000000000000000000000000000016b71c36fd1e06e52ff97ddcbe000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000020000000500"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x3, 0x1, 0x3, 0x0, 0x6, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xd, 0x5, 0x4, 0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x7, 0xe8, &(0x7f0000000880)=""/232, 0x41100, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x3, 0x5, 0x10001}, 0x10, 0x1c76b, r0, 0x3, &(0x7f0000000d00)=[0xffffffffffffffff, r0, r0], &(0x7f0000000d40)=[{0x3, 0x5, 0x4, 0x1}, {0x1, 0x5}, {0x2, 0x1, 0xe, 0x9}], 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000128001007f00000001"], 0x48) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x81) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33) r12 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c24c5ffbb44709ed0100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0xfffffffa, '\x00', 0x0, r13, 0x1, 0x4, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010101}}, 0xffffffffffffff66, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 23.287360232s ago: executing program 5 (id=3268): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x12, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888906", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x4, 0x80, 0x5, 0x2, 0x40, 0x7, 0x0, 0x2e, 0xc4818, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10, 0x4, 0x400, 0x3, 0xc00000000, 0x2, 0xd4d3, 0x0, 0x9, 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 23.06269464s ago: executing program 3 (id=3269): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f00000006c0)="dec17b31dc9fd910ed3d45e7ceaea1662035bf4e31577b05c8393b0658d4be4e4e02ba9f3942df87", 0x28}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 22.266265435s ago: executing program 2 (id=3270): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891b, 0x0) 20.739251104s ago: executing program 1 (id=3271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) 19.874659142s ago: executing program 1 (id=3272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, r1, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x86, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 19.01176245s ago: executing program 1 (id=3273): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x4, 0x2, 0x401, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xa7, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000bc0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5f9}}, @exit, @ldst={0x1, 0x2, 0x4, 0x4, 0xa, 0xfffffffffffffff0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x49, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x3, 0x1, 0xc6b1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r4], &(0x7f0000000f40)=[{0x0, 0x5, 0x0, 0xb}, {0x3, 0x1, 0x6, 0xb}, {0x1, 0x2, 0xd, 0x5}, {0x4, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x1}, {0x1, 0x5, 0xe, 0x9}], 0x10, 0x4}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x28, 0x4}, 0x4008000) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 15.56794183s ago: executing program 1 (id=3274): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000400000000000000000000000000500000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x8c54) 7.506029219s ago: executing program 33 (id=3268): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x12, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888906", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x4, 0x80, 0x5, 0x2, 0x40, 0x7, 0x0, 0x2e, 0xc4818, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x10, 0x4, 0x400, 0x3, 0xc00000000, 0x2, 0xd4d3, 0x0, 0x9, 0x0, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 7.388331003s ago: executing program 34 (id=3269): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f00000006c0)="dec17b31dc9fd910ed3d45e7ceaea1662035bf4e31577b05c8393b0658d4be4e4e02ba9f3942df87", 0x28}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) 6.138107483s ago: executing program 35 (id=3270): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891b, 0x0) 0s ago: executing program 36 (id=3274): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000400000000000000000000000000500000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r6, &(0x7f0000000500), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x8c54) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.3.1869'. [ 449.112542][T10670] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1884'. [ 449.671350][T10679] device wg2 entered promiscuous mode [ 450.827615][T10693] netlink: 'syz.4.1892': attribute type 3 has an invalid length. [ 450.923188][T10693] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1892'. [ 451.061243][T10714] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1899'. [ 451.678024][T10722] netlink: 'syz.1.1898': attribute type 39 has an invalid length. [ 452.046437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 452.249279][T10737] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1905'. [ 452.297626][T10737] netlink: 'syz.3.1905': attribute type 9 has an invalid length. [ 452.330151][T10737] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1905'. [ 452.783422][T10755] device syzkaller0 entered promiscuous mode [ 453.299085][T10771] netlink: 'syz.2.1915': attribute type 4 has an invalid length. [ 453.318371][T10771] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1915'. [ 454.009195][T10779] netlink: 'syz.0.1929': attribute type 29 has an invalid length. [ 458.602726][T10779] netlink: 'syz.0.1929': attribute type 29 has an invalid length. [ 458.610833][T10787] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1919'. [ 458.621126][T10788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1919'. [ 458.632062][T10792] netlink: 'syz.3.1922': attribute type 17 has an invalid length. [ 458.653775][T10792] netlink: 'syz.3.1922': attribute type 16 has an invalid length. [ 458.661692][T10792] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1922'. [ 458.949347][T10804] netlink: 'syz.0.1925': attribute type 3 has an invalid length. [ 458.981720][T10809] netlink: 'syz.3.1927': attribute type 2 has an invalid length. [ 458.998092][T10804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1925'. [ 459.009289][T10809] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1927'. [ 460.301768][T10844] netlink: 'syz.4.1933': attribute type 4 has an invalid length. [ 460.331797][T10844] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1933'. [ 461.295504][T10876] netlink: 'syz.3.1946': attribute type 2 has an invalid length. [ 461.351120][T10876] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1946'. [ 461.439688][T10882] netlink: 'syz.4.1949': attribute type 29 has an invalid length. [ 461.467459][T10882] netlink: 'syz.4.1949': attribute type 29 has an invalid length. [ 461.542544][T10885] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 461.573832][T10885] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1951'. [ 462.509038][T10913] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1962'. [ 463.498547][T10931] device hsr_slave_1 left promiscuous mode [ 463.751771][T10955] validate_nla: 1 callbacks suppressed [ 463.751792][T10955] netlink: 'syz.0.1976': attribute type 2 has an invalid length. [ 464.002005][T10955] device 0 entered promiscuous mode [ 464.099625][T10967] netlink: 'syz.1.1978': attribute type 10 has an invalid length. [ 464.142834][T10967] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1978'. [ 464.400701][T10972] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1980'. [ 465.374144][T10994] netlink: 'syz.4.1987': attribute type 10 has an invalid length. [ 465.423359][T10994] device geneve0 entered promiscuous mode [ 465.555666][T10994] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 466.072242][T11012] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1992'. [ 466.405617][T11001] netlink: 'syz.3.1988': attribute type 10 has an invalid length. [ 466.474277][T11001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1988'. [ 466.632117][T11001] device macvlan1 entered promiscuous mode [ 466.875342][T11001] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 467.061740][T11040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1998'. [ 467.629755][T11053] netlink: 463 bytes leftover after parsing attributes in process `syz.1.2002'. [ 467.689688][T11053] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2002'. [ 468.150414][T11059] netlink: 'syz.4.2003': attribute type 3 has an invalid length. [ 468.171606][T11059] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2003'. [ 468.523910][T11089] netlink: 'syz.1.2010': attribute type 2 has an invalid length. [ 468.534011][T11089] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2010'. [ 469.944789][T11115] netlink: 'syz.4.2012': attribute type 41 has an invalid length. [ 470.027739][T11117] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 470.120790][T11117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 470.162994][T11117] device macvlan1 entered promiscuous mode [ 470.210605][T11117] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 470.509148][T11133] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2017'. [ 470.556333][T11133] ksmbd: Unknown IPC event: 10, ignore. [ 471.589115][T11164] netlink: 'syz.3.2025': attribute type 11 has an invalid length. [ 472.279049][T11181] netlink: 'syz.1.2032': attribute type 4 has an invalid length. [ 472.319702][T11181] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2032'. [ 472.534526][T11189] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 472.569458][T11184] netlink: 'syz.0.2033': attribute type 29 has an invalid length. [ 472.612997][T11184] netlink: 'syz.0.2033': attribute type 29 has an invalid length. [ 472.634310][T11188] netlink: 'syz.0.2033': attribute type 29 has an invalid length. [ 473.086537][T11206] device wg2 entered promiscuous mode [ 473.114900][T11207] netlink: 'syz.2.2041': attribute type 2 has an invalid length. [ 473.146250][T11207] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2041'. [ 473.197328][T11209] netlink: 'syz.3.2040': attribute type 2 has an invalid length. [ 473.279228][T11209] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2040'. [ 474.932162][T11239] device caif0 left promiscuous mode [ 479.789726][T11280] validate_nla: 1 callbacks suppressed [ 479.789739][T11280] netlink: 'syz.2.2063': attribute type 39 has an invalid length. [ 479.805622][T11280] device veth0_macvtap left promiscuous mode [ 480.441544][T11343] netlink: 'syz.1.2082': attribute type 1 has an invalid length. [ 480.789300][T11353] netlink: 'syz.0.2096': attribute type 21 has an invalid length. [ 480.803389][T11353] netlink: 'syz.0.2096': attribute type 6 has an invalid length. [ 480.823604][T11353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2096'. [ 481.145290][T11358] device bond_slave_1 entered promiscuous mode [ 483.339648][T11392] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 484.534270][T11392] device 1 entered promiscuous mode [ 484.551532][T11393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2097'. [ 485.153739][T11415] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2106'. [ 485.510492][T11429] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2109'. [ 488.025719][T11437] netlink: 'syz.4.2113': attribute type 13 has an invalid length. [ 488.042803][T11437] netlink: 'syz.4.2113': attribute type 58 has an invalid length. [ 488.063611][T11437] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2113'. [ 489.265356][T11461] delete_channel: no stack [ 489.524966][ T4326] tipc: Subscription rejected, illegal request [ 491.511779][T11460] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2118'. [ 491.535931][T11496] netlink: 'syz.0.2132': attribute type 16 has an invalid length. [ 491.554954][T11496] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2132'. [ 491.726539][T11501] syz.4.2134[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.726784][T11501] syz.4.2134[11501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.302458][T11521] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2139'. [ 492.646441][T11529] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2141'. [ 492.972071][T11541] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2146'. [ 493.135968][T11550] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2148'. [ 493.221338][T11550] netlink: 'syz.4.2148': attribute type 21 has an invalid length. [ 493.283049][T11550] netlink: 'syz.4.2148': attribute type 20 has an invalid length. [ 494.549299][T11595] netlink: 'syz.3.2162': attribute type 29 has an invalid length. [ 497.273750][T11595] netlink: 'syz.3.2162': attribute type 29 has an invalid length. [ 497.286421][T11600] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2163'. [ 497.313411][T11601] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2163'. [ 497.809408][T11619] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2169'. [ 497.869509][T11619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.894198][T11616] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2170'. [ 497.950000][T11619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.969845][T11621] can: request_module (can-proto-0) failed. [ 498.374113][T11636] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2183'. [ 499.078035][T11638] netlink: 'syz.4.2173': attribute type 16 has an invalid length. [ 499.122410][T11638] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2173'. [ 499.224616][T11662] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2180'. [ 499.253072][T11662] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2180'. [ 499.277040][T11662] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2180'. [ 500.309201][T11682] netlink: 'syz.0.2188': attribute type 9 has an invalid length. [ 500.335199][T11682] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2188'. [ 500.499115][T11686] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.2190'. [ 500.595100][T11686] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.2190'. [ 500.732068][T11692] netlink: 'syz.0.2192': attribute type 11 has an invalid length. [ 500.771657][T11692] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2192'. [ 500.858587][T11690] delete_channel: no stack [ 501.004316][T11695] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2193'. [ 501.025450][T11694] delete_channel: no stack [ 501.128247][T11698] openvswitch: netlink: Flow actions attr not present in new flow. [ 501.341006][T11707] netlink: 'syz.1.2195': attribute type 16 has an invalid length. [ 501.515041][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.521469][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.360632][T11725] netlink: 'syz.1.2201': attribute type 27 has an invalid length. [ 503.237159][T11747] delete_channel: no stack [ 503.277963][T11751] netlink: 'syz.3.2210': attribute type 21 has an invalid length. [ 503.312521][T11751] netlink: 'syz.3.2210': attribute type 4 has an invalid length. [ 503.334140][T11751] netlink: 'syz.3.2210': attribute type 5 has an invalid length. [ 503.348203][T11750] netlink: 'syz.0.2211': attribute type 10 has an invalid length. [ 503.485914][T11748] delete_channel: no stack [ 503.733761][T11759] netlink: 'syz.4.2213': attribute type 7 has an invalid length. [ 507.991966][T11795] __nla_validate_parse: 8 callbacks suppressed [ 507.991989][T11795] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.2224'. [ 508.081468][T11795] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.2224'. [ 509.462868][T11787] validate_nla: 3 callbacks suppressed [ 509.462888][T11787] netlink: 'syz.1.2222': attribute type 39 has an invalid length. [ 509.482778][T11790] netlink: 'syz.1.2222': attribute type 33 has an invalid length. [ 509.490658][T11790] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2222'. [ 509.502556][T11790] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 509.534580][T11798] netlink: 'syz.2.2225': attribute type 15 has an invalid length. [ 509.553067][T11798] netlink: 'syz.2.2225': attribute type 7 has an invalid length. [ 509.560980][T11798] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2225'. [ 509.632377][T11795] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 509.673453][T11795] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 509.694968][T11795] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 510.205703][T11814] netlink: 'syz.4.2231': attribute type 4 has an invalid length. [ 510.236831][T11814] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2231'. [ 510.286969][T11819] netlink: 'syz.0.2232': attribute type 10 has an invalid length. [ 510.296147][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2232'. [ 510.311924][T11819] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 510.364695][T11811] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2229'. [ 510.937036][T11830] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2236'. [ 511.167094][T11840] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2239'. [ 511.183087][T11840] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2239'. [ 511.767452][T11856] delete_channel: no stack [ 511.772081][T11856] delete_channel: no stack [ 512.022985][T11857] netlink: 'syz.0.2244': attribute type 10 has an invalid length. [ 512.219447][T11857] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.230573][T11857] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.261257][T11857] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.291749][T11857] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.967642][T11888] netlink: 'syz.0.2254': attribute type 21 has an invalid length. [ 512.977145][T11888] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.988680][T11888] IPv6: Can't replace route, no match found [ 514.239316][T11908] delete_channel: no stack [ 514.607127][T11917] device syzkaller0 entered promiscuous mode [ 514.647051][T11924] __nla_validate_parse: 2 callbacks suppressed [ 514.647090][T11924] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2264'. [ 515.295195][T11936] netlink: 'syz.2.2267': attribute type 4 has an invalid length. [ 515.456039][T11936] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2267'. [ 516.429638][T11950] delete_channel: no stack [ 520.009140][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2277'. [ 520.042884][T11971] tc_dump_action: action bad kind [ 520.048107][T11968] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 520.082727][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2277'. [ 520.108100][T11968] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 520.158550][T11979] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2280'. [ 520.608730][T11999] delete_channel: no stack [ 521.077453][T12005] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2286'. [ 521.569928][T12026] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 521.684394][T12026] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 521.714729][T12028] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 521.744616][T12026] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 522.579393][T12040] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2297'. [ 522.785324][T12044] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2296'. [ 522.796739][T12046] netlink: 'syz.0.2299': attribute type 2 has an invalid length. [ 522.825552][T12046] netlink: 'syz.0.2299': attribute type 1 has an invalid length. [ 522.873568][T12046] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2299'. [ 522.954861][T12045] delete_channel: no stack [ 523.619851][T12075] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2309'. [ 523.669657][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2310'. [ 523.899220][T12070] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2308'. [ 524.486702][T12108] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 525.081024][T12141] netlink: 'syz.4.2328': attribute type 10 has an invalid length. [ 525.699764][T12157] device wlan1 entered promiscuous mode [ 525.806448][T12163] netlink: 'syz.2.2334': attribute type 10 has an invalid length. [ 525.860107][T12163] __nla_validate_parse: 1 callbacks suppressed [ 525.860134][T12163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2334'. [ 525.937986][T12153] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2330'. [ 526.139177][T12173] netlink: 'syz.1.2337': attribute type 19 has an invalid length. [ 526.189274][T12173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2337'. [ 526.516834][T12182] tipc: Started in network mode [ 526.525070][T12182] tipc: Node identity 9215a268, cluster identity 4711 [ 526.532118][T12184] syz.2.2339 (12184) used obsolete PPPIOCDETACH ioctl [ 526.541003][T12182] tipc: Node number set to 2450891368 [ 526.755350][T12193] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2342'. [ 531.508396][T12226] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2355'. [ 531.558912][T12225] delete_channel: no stack [ 531.614864][T12229] netlink: 'syz.3.2356': attribute type 27 has an invalid length. [ 531.650622][T12229] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2356'. [ 531.836121][T12238] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 531.865388][T12238] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 531.905917][T12242] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 531.972987][T12243] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 532.291423][T12257] netlink: 'syz.1.2365': attribute type 27 has an invalid length. [ 532.328002][T12257] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2365'. [ 532.913875][T12269] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2368'. [ 533.141420][T12282] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2372'. [ 533.181620][T12281] delete_channel: no stack [ 533.427832][T12293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2377'. [ 535.371775][T12317] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2386'. [ 535.379546][T12315] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2387'. [ 535.730945][T12317] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 535.821475][T12317] CPU: 1 PID: 12317 Comm: syz.2.2386 Not tainted syzkaller #0 [ 535.829076][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.839230][T12317] Call Trace: [ 535.842581][T12317] [ 535.845583][T12317] dump_stack_lvl+0x188/0x24e [ 535.850373][T12317] ? show_regs_print_info+0x12/0x12 [ 535.855660][T12317] ? load_image+0x410/0x410 [ 535.860268][T12317] sysfs_warn_dup+0x8a/0xa0 [ 535.864849][T12317] sysfs_do_create_link_sd+0xc0/0x110 [ 535.870295][T12317] device_add+0x83b/0x1050 [ 535.874789][T12317] wiphy_register+0x1d8b/0x2aa0 [ 535.879754][T12317] ? cfg80211_event_work+0x40/0x40 [ 535.884955][T12317] ? minstrel_ht_alloc+0x894/0xa20 [ 535.890151][T12317] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 535.896299][T12317] ieee80211_register_hw+0x2d48/0x39f0 [ 535.901871][T12317] ? ieee80211_register_hw+0xed1/0x39f0 [ 535.907503][T12317] ? ieee80211_register_hw+0xed1/0x39f0 [ 535.913149][T12317] ? ieee80211_tasklet_handler+0x20/0x20 [ 535.918857][T12317] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 535.924833][T12317] ? __debug_object_init+0xed/0x440 [ 535.930144][T12317] ? memset+0x1e/0x40 [ 535.934234][T12317] ? __hrtimer_init+0x189/0x270 [ 535.939179][T12317] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 535.945000][T12317] ? memcpy+0x3c/0x60 [ 535.949063][T12317] hwsim_new_radio_nl+0xab7/0xc90 [ 535.954225][T12317] genl_family_rcv_msg_doit+0x22f/0x350 [ 535.959860][T12317] ? end_current_label_crit_section+0x170/0x170 [ 535.966190][T12317] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 535.972169][T12317] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 535.978177][T12317] ? bpf_lsm_capable+0x5/0x10 [ 535.982930][T12317] ? security_capable+0x85/0xb0 [ 535.987899][T12317] genl_rcv_msg+0x601/0x790 [ 535.992514][T12317] ? genl_bind+0x360/0x360 [ 535.997004][T12317] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 536.003440][T12317] netlink_rcv_skb+0x1ef/0x440 [ 536.008307][T12317] ? genl_bind+0x360/0x360 [ 536.012820][T12317] ? netlink_ack+0x1160/0x1160 [ 536.017702][T12317] ? down_read+0x1a8/0x2d0 [ 536.022195][T12317] genl_rcv+0x24/0x40 [ 536.026251][T12317] netlink_unicast+0x7ad/0x920 [ 536.031116][T12317] netlink_sendmsg+0x8ad/0xbd0 [ 536.035968][T12317] ? netlink_getsockopt+0x550/0x550 [ 536.041255][T12317] ? aa_sock_msg_perm+0x94/0x150 [ 536.046290][T12317] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 536.051671][T12317] ? security_socket_sendmsg+0x7c/0xa0 [ 536.057194][T12317] ? netlink_getsockopt+0x550/0x550 [ 536.062481][T12317] ____sys_sendmsg+0x5ed/0x9a0 [ 536.067357][T12317] ? __sys_sendmsg_sock+0x30/0x30 [ 536.072454][T12317] ? __import_iovec+0x306/0x510 [ 536.077408][T12317] ? import_iovec+0x6f/0xa0 [ 536.082002][T12317] ___sys_sendmsg+0x2a2/0x360 [ 536.086771][T12317] ? __sys_sendmsg+0x2a0/0x2a0 [ 536.091747][T12317] __se_sys_sendmsg+0x1c3/0x2b0 [ 536.096682][T12317] ? __x64_sys_sendmsg+0x80/0x80 [ 536.101731][T12317] ? lockdep_hardirqs_on+0x94/0x140 [ 536.107034][T12317] do_syscall_64+0x4c/0xa0 [ 536.111507][T12317] ? clear_bhb_loop+0x60/0xb0 [ 536.116237][T12317] ? clear_bhb_loop+0x60/0xb0 [ 536.120994][T12317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.126972][T12317] RIP: 0033:0x7fb39cd9ce59 [ 536.131459][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.151136][T12317] RSP: 002b:00007fb39db7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.159614][T12317] RAX: ffffffffffffffda RBX: 00007fb39d015fa0 RCX: 00007fb39cd9ce59 [ 536.167648][T12317] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 536.175686][T12317] RBP: 00007fb39ce32e6f R08: 0000000000000000 R09: 0000000000000000 [ 536.183726][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.191750][T12317] R13: 00007fb39d016038 R14: 00007fb39d015fa0 R15: 00007fff7721e3b8 [ 536.199829][T12317] [ 537.215340][T12333] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2391'. [ 537.263643][T12343] netlink: 'syz.2.2395': attribute type 21 has an invalid length. [ 537.282027][T12343] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.297576][T12343] IPv6: Can't replace route, no match found [ 537.339584][T12342] netlink: 'syz.2.2395': attribute type 21 has an invalid length. [ 537.437907][T12342] IPv6: Can't replace route, no match found [ 537.850935][T12353] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2398'. [ 537.928205][T12357] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2399'. [ 538.657305][T12381] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2409'. [ 538.769923][T12380] delete_channel: no stack [ 539.028482][T12393] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2413'. [ 539.505104][T12403] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2417'. [ 539.699602][T12397] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2414'. [ 540.006569][T12417] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2424'. [ 540.414084][T12430] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2426'. [ 540.495829][T12429] delete_channel: no stack [ 540.834352][T12439] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2432'. [ 541.804293][T12466] netlink: 'syz.0.2439': attribute type 27 has an invalid length. [ 541.813349][T12461] delete_channel: no stack [ 542.270887][T12479] netlink: 'syz.0.2444': attribute type 46 has an invalid length. [ 542.314813][T12480] netlink: 'syz.0.2444': attribute type 46 has an invalid length. [ 542.357333][T12479] netlink: 'syz.0.2444': attribute type 46 has an invalid length. [ 542.381896][T12480] netlink: 'syz.0.2444': attribute type 46 has an invalid length. [ 542.548732][T12483] netlink: 'syz.3.2445': attribute type 33 has an invalid length. [ 542.619512][T12483] __nla_validate_parse: 2 callbacks suppressed [ 542.619533][T12483] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2445'. [ 542.843179][T12485] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2447'. [ 543.566275][T12510] netlink: 'syz.2.2455': attribute type 1 has an invalid length. [ 543.570121][T12503] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2452'. [ 543.622962][T12510] netlink: 'syz.2.2455': attribute type 1 has an invalid length. [ 543.661412][T12502] delete_channel: no stack [ 543.666493][T12510] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2455'. [ 544.579126][T12520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2459'. [ 545.429870][T12537] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2463'. [ 547.491550][T12585] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2480'. [ 547.647530][T12590] netlink: 'syz.0.2481': attribute type 29 has an invalid length. [ 547.785000][T12590] netlink: 'syz.0.2481': attribute type 29 has an invalid length. [ 547.852331][T12584] netlink: 'syz.0.2481': attribute type 29 has an invalid length. [ 547.927540][T12586] can: request_module (can-proto-0) failed. [ 548.070272][T12593] netlink: 'syz.0.2481': attribute type 29 has an invalid length. [ 548.113835][T12590] netlink: 'syz.0.2481': attribute type 29 has an invalid length. [ 548.585139][T12604] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2483'. [ 548.608011][T12603] delete_channel: no stack [ 549.670030][T12634] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2493'. [ 550.242289][T12642] delete_channel: no stack [ 550.701096][T12659] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2502'. [ 550.796484][T12659] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 551.068335][T12671] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2501'. [ 551.177574][T12661] delete_channel: no stack [ 552.052358][T12695] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2512'. [ 552.120293][T12692] delete_channel: no stack [ 552.181024][T12699] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2515'. [ 552.584954][T12714] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2517'. [ 554.188338][T12744] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2528'. [ 554.330747][T12748] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2529'. [ 555.254364][T12749] device wlan1 left promiscuous mode [ 555.376210][T12775] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2535'. [ 555.391679][T12755] device wlan1 entered promiscuous mode [ 555.413247][T12775] openvswitch: netlink: Key type 8194 is out of range max 32 [ 555.476214][T12769] netlink: 'syz.3.2534': attribute type 10 has an invalid length. [ 555.568505][T12769] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 555.648812][T12776] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2536'. [ 556.674037][T12803] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2543'. [ 558.994024][T12837] device bridge_slave_0 left promiscuous mode [ 559.031425][T12837] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.555565][T12839] netlink: 'syz.0.2552': attribute type 33 has an invalid length. [ 559.602321][T12839] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2552'. [ 560.242191][T12859] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2558'. [ 560.496620][T12863] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2560'. [ 560.516277][T12867] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2562'. [ 560.597556][T12864] delete_channel: no stack [ 561.636482][T12896] GPL: port 1(syz_tun) entered blocking state [ 561.658419][T12896] GPL: port 1(syz_tun) entered disabled state [ 561.731507][T12896] device syz_tun entered promiscuous mode [ 561.796779][T12898] device syz_tun left promiscuous mode [ 561.841730][T12898] GPL: port 1(syz_tun) entered disabled state [ 563.144171][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.150570][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.295054][T12909] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.2572'. [ 563.352286][T12908] delete_channel: no stack [ 564.557421][T12914] device virt_wifi0 entered promiscuous mode [ 564.698180][T12921] netlink: 'syz.1.2577': attribute type 10 has an invalid length. [ 564.738425][T12921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2577'. [ 564.789309][T12921] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.851456][T12924] netlink: 'syz.1.2577': attribute type 10 has an invalid length. [ 564.873528][T12924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2577'. [ 564.947341][T12924] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.993714][T12928] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2578'. [ 565.346009][T12935] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2580'. [ 565.395563][T12934] delete_channel: no stack [ 565.828020][T12942] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2584'. [ 565.895121][T12941] delete_channel: no stack [ 566.388241][T12944] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2583'. [ 566.415367][T12944] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 566.608734][T12959] netlink: 'syz.1.2587': attribute type 21 has an invalid length. [ 566.622841][T12959] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2587'. [ 566.893884][T12971] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 567.140382][T12968] device virt_wifi0 entered promiscuous mode [ 567.521492][T12974] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2592'. [ 567.804870][T12985] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2595'. [ 567.840829][T12983] delete_channel: no stack [ 568.129406][T13000] netlink: 'syz.3.2601': attribute type 1 has an invalid length. [ 568.146109][T13000] netlink: 'syz.3.2601': attribute type 4 has an invalid length. [ 568.155031][T13000] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2601'. [ 568.259034][T13006] netlink: 'syz.0.2604': attribute type 2 has an invalid length. [ 568.501863][T13006] device 0 entered promiscuous mode [ 568.525414][T13012] netlink: 'syz.1.2605': attribute type 2 has an invalid length. [ 568.586559][T13012] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 569.340236][T13016] device virt_wifi0 entered promiscuous mode [ 569.403067][T13032] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 569.427544][T13027] netlink: 'syz.2.2609': attribute type 3 has an invalid length. [ 569.614007][T13037] netlink: 'syz.0.2610': attribute type 1 has an invalid length. [ 569.790725][T13041] __nla_validate_parse: 3 callbacks suppressed [ 569.790748][T13041] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2611'. [ 569.823752][T13040] delete_channel: no stack [ 569.873606][T13047] validate_nla: 1 callbacks suppressed [ 569.873639][T13047] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 570.095483][T13056] netlink: 'syz.2.2618': attribute type 10 has an invalid length. [ 570.319983][T13066] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2619'. [ 570.922271][T13074] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2622'. [ 571.258191][T13083] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2626'. [ 571.530286][T13096] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.2628'. [ 571.567541][T13091] delete_channel: no stack [ 571.632501][T13098] netlink: 'syz.1.2629': attribute type 2 has an invalid length. [ 571.683500][T13098] netlink: 'syz.1.2629': attribute type 1 has an invalid length. [ 571.686947][T13102] netlink: 'syz.1.2629': attribute type 10 has an invalid length. [ 571.691329][T13098] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2629'. [ 571.762035][T13102] device wlan1 left promiscuous mode [ 571.790769][T13102] device wlan1 entered promiscuous mode [ 571.803360][T13102] team0: Port device wlan1 added [ 571.810269][T13100] netlink: 'syz.3.2632': attribute type 13 has an invalid length. [ 571.833282][T13100] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2632'. [ 571.848077][T13100] syz_tun: refused to change device tx_queue_len [ 571.861640][T13100] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 572.195931][T13115] netlink: 'syz.1.2636': attribute type 2 has an invalid length. [ 572.216977][T13115] netlink: 'syz.1.2636': attribute type 8 has an invalid length. [ 572.242944][T13115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2636'. [ 572.295611][T13119] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2638'. [ 572.660912][T13134] netlink: 'syz.1.2641': attribute type 3 has an invalid length. [ 572.732540][T13134] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2641'. [ 572.929750][T13139] delete_channel: no stack [ 573.298158][T13146] netlink: 'syz.2.2647': attribute type 3 has an invalid length. [ 573.706704][T13164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.714110][T13164] IPv6: NLM_F_CREATE should be set when creating new route [ 573.721524][T13164] IPv6: NLM_F_CREATE should be set when creating new route [ 573.728931][T13164] IPv6: NLM_F_CREATE should be set when creating new route [ 573.931847][T13176] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 574.082506][T13180] device ipvlan1 entered promiscuous mode [ 574.124126][T13180] bridge0: port 3(ipvlan1) entered blocking state [ 574.130829][T13180] bridge0: port 3(ipvlan1) entered disabled state [ 574.175733][T13180] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 574.639436][T13188] delete_channel: no stack [ 575.111052][T13214] __nla_validate_parse: 6 callbacks suppressed [ 575.111094][T13214] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2667'. [ 576.059112][T13238] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2674'. [ 576.098431][T13235] delete_channel: no stack [ 576.578322][T13261] validate_nla: 3 callbacks suppressed [ 576.578344][T13261] netlink: 'syz.0.2680': attribute type 3 has an invalid length. [ 576.606317][T13261] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2680'. [ 576.809980][T13265] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2681'. [ 577.108577][T13275] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.2685'. [ 577.214341][T13272] delete_channel: no stack [ 578.236950][T13299] netlink: 'syz.1.2694': attribute type 2 has an invalid length. [ 578.288016][T13299] netlink: 'syz.1.2694': attribute type 8 has an invalid length. [ 578.333209][T13299] netlink: 'syz.1.2694': attribute type 9 has an invalid length. [ 578.372248][T13299] netlink: 'syz.1.2694': attribute type 10 has an invalid length. [ 578.414039][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 578.890364][T13315] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2699'. [ 579.019888][T13317] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2700'. [ 579.088319][T13316] delete_channel: no stack [ 579.439275][T13333] netlink: 'syz.3.2704': attribute type 17 has an invalid length. [ 579.483218][T13333] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2704'. [ 579.551647][T13333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 579.633281][T13333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.095142][T13348] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2707'. [ 580.614279][T13359] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2713'. [ 580.905504][T13369] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2716'. [ 580.949796][T13368] delete_channel: no stack [ 581.773750][T13393] FAULT_INJECTION: forcing a failure. [ 581.773750][T13393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.817667][T13393] CPU: 1 PID: 13393 Comm: syz.4.2723 Not tainted syzkaller #0 [ 581.825239][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.835357][T13393] Call Trace: [ 581.838686][T13393] [ 581.841663][T13393] dump_stack_lvl+0x188/0x24e [ 581.846408][T13393] ? show_regs_print_info+0x12/0x12 [ 581.851663][T13393] ? load_image+0x410/0x410 [ 581.856236][T13393] ? __lock_acquire+0x7bd0/0x7bd0 [ 581.861328][T13393] ? trace_call_bpf+0x5d6/0x6b0 [ 581.866254][T13393] should_fail_ex+0x390/0x4c0 [ 581.871002][T13393] _copy_from_user+0x2c/0x170 [ 581.875750][T13393] __sys_bpf+0x2ea/0x780 [ 581.880062][T13393] ? bpf_link_show_fdinfo+0x380/0x380 [ 581.885511][T13393] ? lock_chain_count+0x20/0x20 [ 581.890441][T13393] __x64_sys_bpf+0x78/0x90 [ 581.894930][T13393] do_syscall_64+0x4c/0xa0 [ 581.899409][T13393] ? clear_bhb_loop+0x60/0xb0 [ 581.904169][T13393] ? clear_bhb_loop+0x60/0xb0 [ 581.908904][T13393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.914865][T13393] RIP: 0033:0x7f3ef059ce59 [ 581.919335][T13393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.938998][T13393] RSP: 002b:00007f3ef1388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.947475][T13393] RAX: ffffffffffffffda RBX: 00007f3ef0815fa0 RCX: 00007f3ef059ce59 [ 581.955500][T13393] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000012 [ 581.963529][T13393] RBP: 00007f3ef1388090 R08: 0000000000000000 R09: 0000000000000000 [ 581.971567][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.979613][T13393] R13: 00007f3ef0816038 R14: 00007f3ef0815fa0 R15: 00007ffc93f25af8 [ 581.987675][T13393] [ 582.172979][T13397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2724'. [ 582.652080][T13412] device bond_slave_1 entered promiscuous mode [ 582.931537][T13414] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2730'. [ 583.002336][T13405] delete_channel: no stack [ 583.112083][T13419] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.2733'. [ 583.581111][T13437] netlink: 'syz.4.2740': attribute type 3 has an invalid length. [ 584.202966][T13456] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2746'. [ 584.228519][T13455] delete_channel: no stack [ 584.269245][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 584.743425][T13476] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2754'. [ 584.816736][T13476] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 586.068664][T13491] netlink: 'syz.1.2758': attribute type 3 has an invalid length. [ 586.099229][T13491] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2758'. [ 586.221074][T13494] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2761'. [ 586.267643][T13493] delete_channel: no stack [ 586.449378][T13499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2763'. [ 587.551765][T13520] device syzkaller0 entered promiscuous mode [ 587.723156][T13525] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2773'. [ 587.765624][T13524] delete_channel: no stack [ 590.969506][T13562] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2786'. [ 591.040571][T13561] delete_channel: no stack [ 592.643803][T13540] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2779'. [ 592.658582][T13565] netlink: 'syz.2.2787': attribute type 25 has an invalid length. [ 593.134300][T13579] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2790'. [ 593.171357][T13579] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 593.615330][T13584] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2792'. [ 594.071427][T13604] delete_channel: no stack [ 594.147514][T13602] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2797'. [ 594.215158][T13601] delete_channel: no stack [ 594.365798][T13613] netlink: 'syz.4.2801': attribute type 29 has an invalid length. [ 594.397192][T13613] netlink: 'syz.4.2801': attribute type 29 has an invalid length. [ 594.659934][T13622] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2805'. [ 594.731612][T13625] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 594.770668][T13625] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2808'. [ 595.041497][T13644] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2812'. [ 595.100353][T13638] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2809'. [ 595.111750][T13642] delete_channel: no stack [ 595.130071][T13638] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 595.208540][T13648] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2814'. [ 595.284919][T13651] netlink: 'syz.2.2816': attribute type 16 has an invalid length. [ 595.327221][T13651] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2816'. [ 596.827317][T13676] netlink: 'syz.3.2821': attribute type 21 has an invalid length. [ 597.165147][T13680] netlink: 'syz.3.2823': attribute type 29 has an invalid length. [ 597.213279][T13680] netlink: 'syz.3.2823': attribute type 29 has an invalid length. [ 597.229474][T13680] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 597.244900][T13680] netlink: 'syz.3.2823': attribute type 29 has an invalid length. [ 597.495941][T13684] delete_channel: no stack [ 597.501248][T13680] can: request_module (can-proto-0) failed. [ 598.160468][T13707] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 598.296188][T13707] device syzkaller0 entered promiscuous mode [ 598.324045][T13717] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2834'. [ 598.647967][T13717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.812509][T13717] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 598.829304][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 598.849841][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 598.860241][T13728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 598.871902][T13728] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 598.881342][T13728] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 598.899950][T13728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 598.959733][T13717] bond0 (unregistering): Released all slaves [ 599.461417][T13736] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2838'. [ 599.492109][T13735] delete_channel: no stack [ 600.953294][T13728] Bluetooth: hci5: command 0x0409 tx timeout [ 601.628030][T13720] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2835'. [ 601.775779][T13742] validate_nla: 1 callbacks suppressed [ 601.775798][T13742] netlink: 'syz.2.2841': attribute type 10 has an invalid length. [ 602.412220][T13727] chnl_net:caif_netlink_parms(): no params data found [ 602.578999][T13766] netlink: 'syz.3.2846': attribute type 28 has an invalid length. [ 602.858370][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.892770][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.901524][T13727] device bridge_slave_0 entered promiscuous mode [ 602.911984][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.919796][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.961180][T13727] device bridge_slave_1 entered promiscuous mode [ 602.977169][T13772] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2848'. [ 603.008501][T13771] delete_channel: no stack [ 603.033329][T13728] Bluetooth: hci5: command 0x041b tx timeout [ 603.045450][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.071702][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.187050][T13727] team0: Port device team_slave_0 added [ 603.206921][T13727] team0: Port device team_slave_1 added [ 603.262119][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.269410][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.339205][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.381203][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.396287][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.466774][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.862117][T13727] device hsr_slave_0 entered promiscuous mode [ 604.920848][T13727] device hsr_slave_1 entered promiscuous mode [ 604.967690][T13778] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2850'. [ 605.115914][T13728] Bluetooth: hci5: command 0x040f tx timeout [ 605.217621][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2851'. [ 605.240631][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2851'. [ 605.287474][T13783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2851'. [ 605.504107][T13790] netlink: 'syz.4.2855': attribute type 27 has an invalid length. [ 605.529023][T13790] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2855'. [ 605.649619][T13727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.000635][T13798] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2858'. [ 606.032776][T13797] delete_channel: no stack [ 606.218538][T13804] FAULT_INJECTION: forcing a failure. [ 606.218538][T13804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.237219][T13804] CPU: 0 PID: 13804 Comm: syz.4.2861 Not tainted syzkaller #0 [ 606.244795][T13804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 606.254915][T13804] Call Trace: [ 606.258237][T13804] [ 606.261210][T13804] dump_stack_lvl+0x188/0x24e [ 606.265960][T13804] ? show_regs_print_info+0x12/0x12 [ 606.271214][T13804] ? load_image+0x410/0x410 [ 606.275788][T13804] ? __lock_acquire+0x7bd0/0x7bd0 [ 606.280875][T13804] should_fail_ex+0x390/0x4c0 [ 606.285622][T13804] _copy_from_user+0x2c/0x170 [ 606.290362][T13804] __sys_bpf+0x2ea/0x780 [ 606.294663][T13804] ? bpf_link_show_fdinfo+0x380/0x380 [ 606.300108][T13804] ? lock_chain_count+0x20/0x20 [ 606.305037][T13804] __x64_sys_bpf+0x78/0x90 [ 606.309515][T13804] do_syscall_64+0x4c/0xa0 [ 606.313986][T13804] ? clear_bhb_loop+0x60/0xb0 [ 606.318708][T13804] ? clear_bhb_loop+0x60/0xb0 [ 606.323439][T13804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.329393][T13804] RIP: 0033:0x7f3ef059ce59 [ 606.333861][T13804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.353531][T13804] RSP: 002b:00007f3ef1388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.362093][T13804] RAX: ffffffffffffffda RBX: 00007f3ef0815fa0 RCX: 00007f3ef059ce59 [ 606.370111][T13804] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 606.378151][T13804] RBP: 00007f3ef1388090 R08: 0000000000000000 R09: 0000000000000000 [ 606.386177][T13804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.394197][T13804] R13: 00007f3ef0816038 R14: 00007f3ef0815fa0 R15: 00007ffc93f25af8 [ 606.402252][T13804] [ 607.192789][T13728] Bluetooth: hci5: command 0x0419 tx timeout [ 608.110257][T13727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 608.170066][T13727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 608.208644][T13810] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2863'. [ 608.243684][T13727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.507494][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.543391][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.583579][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.602034][T13727] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.639439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.651303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.668833][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.676115][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.690845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 608.719981][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 608.753246][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.784577][T13830] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2870'. [ 608.795168][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.795292][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.811892][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 608.828269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.841983][T13828] delete_channel: no stack [ 608.865599][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 608.896767][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.929179][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.960921][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 609.002283][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 609.030478][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.069339][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.092130][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.110396][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.134905][T13727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 609.930701][T13856] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2876'. [ 610.346842][T13868] netlink: 'syz.1.2879': attribute type 10 has an invalid length. [ 610.384751][T13868] device geneve0 entered promiscuous mode [ 610.610892][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 610.631008][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.660251][T13878] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2881'. [ 610.684488][T13727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.761067][T13871] delete_channel: no stack [ 612.030638][T13916] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2889'. [ 612.790834][T13931] netlink: 'syz.3.2894': attribute type 9 has an invalid length. [ 612.810915][T13931] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2894'. [ 612.919420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 612.939775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 612.978625][T13931] netlink: 'syz.3.2894': attribute type 4 has an invalid length. [ 612.997773][T13931] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2894'. [ 613.052046][T13931] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 613.121485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.147578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.188826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.228342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 613.250929][T13727] device veth0_vlan entered promiscuous mode [ 613.325052][T13727] device veth1_vlan entered promiscuous mode [ 613.484553][T13939] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2897'. [ 613.520983][T13727] device veth0_macvtap entered promiscuous mode [ 613.538286][T13937] delete_channel: no stack [ 613.563504][T13727] device veth1_macvtap entered promiscuous mode [ 613.576623][T13945] netlink: 'syz.4.2898': attribute type 29 has an invalid length. [ 613.605405][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 613.654099][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 613.706181][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 613.727454][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 613.743823][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 613.760014][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 613.809929][T13941] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2898'. [ 613.858394][T13945] netlink: 'syz.4.2898': attribute type 29 has an invalid length. [ 613.965111][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.016388][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.042671][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.073819][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.113136][T13727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.141132][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 614.167318][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 614.253850][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.289904][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.330742][T13727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.370108][T13727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.406387][T13727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.441915][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 614.494836][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 614.546980][T13727] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.579593][T13727] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.610274][T13727] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.619478][T13727] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.891348][T13967] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2905'. [ 615.269921][T13974] netlink: 'syz.3.2906': attribute type 3 has an invalid length. [ 615.320754][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.338499][T13974] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2906'. [ 615.350477][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.383719][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 615.662821][T11084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.702661][T11084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.714414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 616.168227][T13980] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2909'. [ 616.196034][T13979] delete_channel: no stack [ 617.341854][T14004] netlink: 'syz.5.2917': attribute type 29 has an invalid length. [ 617.402809][T14004] netlink: 'syz.5.2917': attribute type 29 has an invalid length. [ 617.408433][T13999] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2913'. [ 617.444262][T14007] netlink: 'syz.5.2917': attribute type 29 has an invalid length. [ 617.493237][T14004] netlink: 'syz.5.2917': attribute type 29 has an invalid length. [ 617.545679][T13998] delete_channel: no stack [ 617.620365][T14007] netlink: 'syz.5.2917': attribute type 29 has an invalid length. [ 618.171028][T13728] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 618.182202][T13728] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 618.191098][T13728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 618.200724][T13728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 618.209916][T13728] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 618.217610][T13728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 618.359253][T14013] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2918'. [ 618.454995][T14016] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2921'. [ 618.546300][T14012] delete_channel: no stack [ 618.738024][T14014] chnl_net:caif_netlink_parms(): no params data found [ 619.074298][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.081622][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.090367][T14014] device bridge_slave_0 entered promiscuous mode [ 619.101829][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.109193][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.117899][T14014] device bridge_slave_1 entered promiscuous mode [ 619.172950][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.232915][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.401620][T14014] team0: Port device team_slave_0 added [ 619.449066][T14014] team0: Port device team_slave_1 added [ 619.484545][T14032] netlink: 'syz.3.2924': attribute type 10 has an invalid length. [ 620.131911][T14032] device wg1 entered promiscuous mode [ 620.167527][T14032] team0: Device wg1 is of different type [ 620.233148][T13728] Bluetooth: hci6: command 0x0409 tx timeout [ 620.599834][T14045] netlink: 'syz.5.2928': attribute type 9 has an invalid length. [ 620.613113][T14045] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2928'. [ 620.642905][T14046] netlink: 'syz.5.2928': attribute type 33 has an invalid length. [ 620.687832][T14046] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2928'. [ 620.849646][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.878221][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.962974][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.059199][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.067513][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.138082][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.154641][T14053] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2931'. [ 621.177151][T14051] delete_channel: no stack [ 621.505884][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.621193][T14014] device hsr_slave_0 entered promiscuous mode [ 621.722047][T14014] device hsr_slave_1 entered promiscuous mode [ 621.813264][T14014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.821422][T14014] Cannot create hsr debugfs directory [ 621.912232][T14062] netlink: 'syz.1.2934': attribute type 3 has an invalid length. [ 621.932548][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.955208][T14062] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2934'. [ 622.031111][T14064] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2935'. [ 622.216448][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.312754][ T4293] Bluetooth: hci6: command 0x041b tx timeout [ 622.414186][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.442462][ T4293] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 623.031348][T14089] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2942'. [ 623.055648][ T30] device 0 left promiscuous mode [ 623.171325][T14088] delete_channel: no stack [ 623.346765][ T30] device 1 left promiscuous mode [ 623.518960][ T30] tipc: Left network mode [ 623.973210][ T30] device ip6gretap0 left promiscuous mode [ 624.008792][ T30] : port 1(ip6gretap0) entered disabled state [ 624.397355][ T4293] Bluetooth: hci6: command 0x040f tx timeout [ 624.419647][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.426098][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.530555][T14122] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2952'. [ 625.376771][T14014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 625.392275][T14140] netlink: 'syz.4.2953': attribute type 21 has an invalid length. [ 625.453537][T14140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2953'. [ 625.529378][T14014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 625.575132][T14145] netlink: 'syz.5.2955': attribute type 1 has an invalid length. [ 625.617865][T14145] netlink: 'syz.5.2955': attribute type 3 has an invalid length. [ 625.640771][T14145] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2955'. [ 625.669421][T14014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 625.766375][T14014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 626.004682][T14154] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2956'. [ 626.043451][T14152] delete_channel: no stack [ 626.472779][T13728] Bluetooth: hci6: command 0x0419 tx timeout [ 626.597692][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.735288][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.773959][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.833824][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.149513][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.165820][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.219124][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.226526][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.312020][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.334186][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.368876][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.398591][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.405848][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.670698][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.701276][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.052006][T14191] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2966'. [ 628.412160][ T30] device hsr_slave_0 left promiscuous mode [ 628.498832][ T30] device hsr_slave_1 left promiscuous mode [ 628.566901][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.580500][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.582052][T14219] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2970'. [ 628.608839][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.621191][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.637689][ T30] batman_adv: batadv0: Interface deactivated: vlan1 [ 628.652952][ T30] batman_adv: batadv0: Removing interface: vlan1 [ 628.668496][ T30] device bridge_slave_1 left promiscuous mode [ 628.681529][T14216] delete_channel: no stack [ 628.684009][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.733502][ T30] device bridge_slave_0 left promiscuous mode [ 628.741199][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.917953][ T30] device veth1_macvtap left promiscuous mode [ 628.949079][ T30] device veth1_vlan left promiscuous mode [ 632.087861][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.135903][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.406213][ T30] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 632.415502][ T30] bond0 (unregistering): Released all slaves [ 632.508392][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.518473][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.527437][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.537968][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.570095][T14225] netlink: 'syz.4.2972': attribute type 17 has an invalid length. [ 632.582829][T14245] netlink: 'syz.1.2977': attribute type 1 has an invalid length. [ 632.602085][T14246] netlink: 'syz.1.2977': attribute type 4 has an invalid length. [ 632.626109][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.646377][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.666584][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.697006][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.714343][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.757361][T14014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.853458][T14250] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2978'. [ 633.119574][T14258] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2981'. [ 633.193796][T14257] delete_channel: no stack [ 633.209869][T14256] netlink: 'syz.1.2980': attribute type 1 has an invalid length. [ 633.249743][T14256] netlink: 'syz.1.2980': attribute type 3 has an invalid length. [ 633.298205][T14256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2980'. [ 634.324105][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.331799][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.384381][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.476947][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.487577][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.523717][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.544656][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.558871][T14288] netlink: 'syz.3.2998': attribute type 2 has an invalid length. [ 634.570475][T14014] device veth0_vlan entered promiscuous mode [ 634.680232][T14288] device 1 entered promiscuous mode [ 634.704130][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.722733][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.759522][T14014] device veth1_vlan entered promiscuous mode [ 634.969919][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 635.001282][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 635.045489][T14014] device veth0_macvtap entered promiscuous mode [ 635.080675][T14014] device veth1_macvtap entered promiscuous mode [ 635.088980][T14311] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.2992'. [ 635.131597][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.159311][T14310] delete_channel: no stack [ 635.163194][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.183487][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.203589][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.227971][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.244700][T14296] -1: renamed from syzkaller0 [ 635.252956][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.263740][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.284371][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.314450][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.347449][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.368636][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.389537][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.427149][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.481410][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.493199][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.504877][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.552536][T14014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.562358][T14014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.571919][T14014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.583743][T14014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.623790][T14317] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.2994'. [ 635.655146][T14319] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2995'. [ 636.115471][T11084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.116094][T14332] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3001'. [ 636.150182][T11084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.212393][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.351592][T11084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.371607][T11084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.390176][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.454654][T14347] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.3004'. [ 636.468072][T14346] delete_channel: no stack [ 637.549507][T14370] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3011'. [ 637.560903][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 637.573610][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 637.581975][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 637.590461][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 637.598487][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 637.607599][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.547270][T14366] chnl_net:caif_netlink_parms(): no params data found [ 638.783034][T14393] delete_channel: no stack [ 638.849155][T11084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.038759][T11084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.328455][T14419] netlink: 'syz.3.3022': attribute type 4 has an invalid length. [ 639.343099][T11084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.413979][T14418] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3023'. [ 639.457426][T14419] netlink: 82604 bytes leftover after parsing attributes in process `syz.3.3022'. [ 639.502431][T14366] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.515594][T14366] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.533943][T14366] device bridge_slave_0 entered promiscuous mode [ 639.624919][T11084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.654800][T14366] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.663627][T14366] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.672717][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 639.696460][T14366] device bridge_slave_1 entered promiscuous mode [ 639.875972][T14366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.986173][T14433] netlink: 'syz.2.3026': attribute type 21 has an invalid length. [ 640.026698][T14366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.175911][T14445] netlink: 'syz.5.3028': attribute type 2 has an invalid length. [ 640.649129][T14454] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3031'. [ 640.757584][T14450] delete_channel: no stack [ 641.294534][T14467] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3033'. [ 641.752746][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 642.506825][T11084] device ip6gretap0 left promiscuous mode [ 642.526134][T11084] : port 1(ip6gretap0) entered disabled state [ 642.566639][T14366] team0: Port device team_slave_0 added [ 642.617886][T14445] device 0 entered promiscuous mode [ 642.736013][T14366] team0: Port device team_slave_1 added [ 642.855582][T14366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.866197][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.904330][T14366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.976872][T14484] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3037'. [ 643.023914][T14366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.040782][T14484] netlink: 'syz.3.3037': attribute type 2 has an invalid length. [ 643.051717][T14366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.140274][T14484] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 643.184450][T14366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.213634][T14480] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3035'. [ 643.226000][T14484] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3037'. [ 643.553706][T14482] netlink: 'syz.2.3036': attribute type 4 has an invalid length. [ 643.582244][T14482] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3036'. [ 643.832859][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 644.480965][T14366] device hsr_slave_0 entered promiscuous mode [ 644.515187][T14366] device hsr_slave_1 entered promiscuous mode [ 644.528007][T14503] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3041'. [ 644.550138][T14366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.560277][T14366] Cannot create hsr debugfs directory [ 644.584368][T14502] delete_channel: no stack [ 645.912719][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 646.053517][T14521] netlink: 'syz.4.3047': attribute type 21 has an invalid length. [ 646.063583][T14521] netlink: 'syz.4.3047': attribute type 2 has an invalid length. [ 646.899916][T14558] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3053'. [ 647.114069][T14552] delete_channel: no stack [ 647.246677][T14560] netlink: 'syz.2.3054': attribute type 10 has an invalid length. [ 647.270048][T14560] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3054'. [ 647.341429][T14560] netlink: 'syz.2.3054': attribute type 10 has an invalid length. [ 647.530991][T14560] team0: Port device wlan1 added [ 650.894767][T11084] device wlan1 left promiscuous mode [ 651.130719][T11084] team0: Port device wlan1 removed [ 651.259439][T14586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.350245][T14596] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3063'. [ 651.689855][T14605] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3065'. [ 651.717854][T14604] delete_channel: no stack [ 651.826572][T11084] device veth1_macvtap left promiscuous mode [ 651.843447][T11084] device veth0_macvtap left promiscuous mode [ 651.849692][T11084] device veth1_vlan left promiscuous mode [ 651.887335][T11084] device veth0_vlan left promiscuous mode [ 653.279389][T14636] can: request_module (can-proto-0) failed. [ 653.316035][T11084] device team_slave_1 left promiscuous mode [ 653.328803][T11084] team0 (unregistering): Port device team_slave_1 removed [ 653.428825][T11084] device team_slave_0 left promiscuous mode [ 653.438559][T11084] team0 (unregistering): Port device team_slave_0 removed [ 653.490437][T14641] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3077'. [ 653.525142][T14640] delete_channel: no stack [ 653.673316][T14643] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 654.546523][T14664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3085'. [ 654.583250][T14665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3085'. [ 654.624174][T14665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 654.706028][T14663] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3085'. [ 654.879558][T14366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 655.015395][T14366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 655.071831][T14366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 655.134022][T14366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 655.204197][T14677] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3088'. [ 655.219666][T14676] delete_channel: no stack [ 655.548795][T14366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.633348][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.647981][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.688844][T14366] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.803765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.825670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.883444][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.890649][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.958368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.984130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 656.018423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.069327][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.076597][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.128409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.173396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.213675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.256093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.316365][ T4293] Bluetooth: hci6: unexpected event 0x2c length: 151 > 17 [ 656.318965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.369946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.437710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.490890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.539168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.572043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.615919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.651602][T14704] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3097'. [ 657.550946][T14720] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3100'. [ 657.600263][T14727] device syzkaller0 entered promiscuous mode [ 657.772611][T14729] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3093'. [ 657.939438][T14716] delete_channel: no stack [ 660.300945][T14742] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3103'. [ 660.341600][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.350220][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.362311][T14761] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3104'. [ 660.408361][T14366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.589307][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 660.621600][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 660.798105][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 660.820617][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 660.869374][T14366] device veth0_vlan entered promiscuous mode [ 660.930089][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 660.963603][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.011601][T14772] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.3106'. [ 661.041106][T14366] device veth1_vlan entered promiscuous mode [ 661.170495][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 661.216177][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 661.240615][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 661.284412][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.330428][T14366] device veth0_macvtap entered promiscuous mode [ 661.365005][T14366] device veth1_macvtap entered promiscuous mode [ 661.435157][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.492653][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.522627][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.542780][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.582612][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.622739][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.654525][T14366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.664963][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.693793][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.735449][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.786980][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.817526][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.837910][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.848217][T14366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.860413][T14366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.906940][T14366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.954073][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.973395][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 662.005576][T14366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.023148][T14366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.042183][T14366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.061363][T14366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.091053][T14783] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3109'. [ 662.263453][T14802] netlink: 'syz.3.3113': attribute type 39 has an invalid length. [ 662.409173][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.423138][T14804] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3114'. [ 662.428243][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.452889][T14803] delete_channel: no stack [ 662.468535][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 662.552172][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.570399][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.589659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 662.858105][T14814] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3117'. [ 662.918348][T14816] netlink: 'syz.1.3008': attribute type 2 has an invalid length. [ 662.950848][T14816] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3008'. [ 663.022242][T14816] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3008'. [ 663.594045][T14823] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3119'. [ 664.147837][T14825] device syzkaller0 entered promiscuous mode [ 666.743287][T14826] netlink: 'syz.1.3120': attribute type 1 has an invalid length. [ 666.785040][T14831] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3119'. [ 666.913284][T13728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.924209][T13728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.931614][T13728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 666.940853][T13728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 666.949798][T13728] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 666.958485][T13728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.355604][T14851] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3124'. [ 667.425361][T14848] delete_channel: no stack [ 667.605288][T14853] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3126'. [ 667.627646][T14852] delete_channel: no stack [ 669.036538][T13728] Bluetooth: hci0: command 0x0409 tx timeout [ 669.472957][T14858] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3128'. [ 669.788578][T14872] netlink: 'syz.2.3131': attribute type 3 has an invalid length. [ 669.796773][T14872] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3131'. [ 670.135323][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 670.176901][T14843] chnl_net:caif_netlink_parms(): no params data found [ 670.211437][T14881] delete_channel: no stack [ 670.472160][T14885] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3135'. [ 670.560104][T14884] delete_channel: no stack [ 670.561511][T11095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.816697][T14891] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3137'. [ 670.840909][T14890] delete_channel: no stack [ 670.907757][T11095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.071825][T11095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.119688][T14899] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3138'. [ 671.131801][T14895] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3138'. [ 671.138009][T13728] Bluetooth: hci0: command 0x041b tx timeout [ 671.155071][T14898] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3139'. [ 671.213594][T14843] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.220821][T14843] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.292881][T14843] device bridge_slave_0 entered promiscuous mode [ 671.454108][T11095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.552481][T14843] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.570669][T14843] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.703958][T14843] device bridge_slave_1 entered promiscuous mode [ 671.941139][T14843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.084102][T14843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.498899][T14843] team0: Port device team_slave_0 added [ 672.564319][T14843] team0: Port device team_slave_1 added [ 672.757562][T14843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.786386][T14843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.912829][T14843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.972979][T14843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.009753][T14843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.125491][T14843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.208636][T13728] Bluetooth: hci0: command 0x040f tx timeout [ 675.258976][T11095] device 0 left promiscuous mode [ 675.272767][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 675.345419][T11095] device 0 left promiscuous mode [ 675.466617][T14843] device hsr_slave_0 entered promiscuous mode [ 675.514064][T14843] device hsr_slave_1 entered promiscuous mode [ 675.541782][T14843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.575187][T14843] Cannot create hsr debugfs directory [ 675.580877][T11095] device 1 left promiscuous mode [ 675.588527][T14933] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3143'. [ 675.707852][T14938] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3146'. [ 675.793854][T14940] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3147'. [ 675.880088][T14940] netlink: 'syz.5.3147': attribute type 27 has an invalid length. [ 676.186290][T14944] delete_channel: no stack [ 676.363304][T14947] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3150'. [ 676.467165][T14946] delete_channel: no stack [ 677.422208][T14970] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3156'. [ 677.466971][T14969] delete_channel: no stack [ 677.788874][T14978] FAULT_INJECTION: forcing a failure. [ 677.788874][T14978] name failslab, interval 1, probability 0, space 0, times 0 [ 677.861759][T14978] CPU: 1 PID: 14978 Comm: syz.4.3160 Not tainted syzkaller #0 [ 677.869323][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 677.879443][T14978] Call Trace: [ 677.882776][T14978] [ 677.885749][T14978] dump_stack_lvl+0x188/0x24e [ 677.890479][T14978] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 677.896703][T14978] ? show_regs_print_info+0x12/0x12 [ 677.901957][T14978] ? load_image+0x410/0x410 [ 677.906544][T14978] should_fail_ex+0x390/0x4c0 [ 677.911283][T14978] should_failslab+0x5/0x20 [ 677.915834][T14978] slab_pre_alloc_hook+0x59/0x300 [ 677.920920][T14978] ? lockdep_hardirqs_on+0x94/0x140 [ 677.926175][T14978] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 677.931964][T14978] __kmem_cache_alloc_node+0x4f/0x270 [ 677.937395][T14978] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 677.943183][T14978] __kmalloc+0xa3/0x240 [ 677.947401][T14978] ? __kmalloc_node+0x240/0x240 [ 677.952316][T14978] tomoyo_realpath_from_path+0xe2/0x5c0 [ 677.957933][T14978] ? tomoyo_domain+0xd2/0x120 [ 677.962681][T14978] ? tomoyo_path_number_perm+0x205/0x650 [ 677.968380][T14978] tomoyo_path_number_perm+0x22f/0x650 [ 677.973906][T14978] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 677.979424][T14978] ? irqentry_enter+0x33/0x50 [ 677.984196][T14978] ? __fget_files+0x28/0x460 [ 677.988863][T14978] security_file_ioctl+0x6c/0xa0 [ 677.993866][T14978] __se_sys_ioctl+0x48/0x170 [ 677.998525][T14978] do_syscall_64+0x4c/0xa0 [ 678.002994][T14978] ? clear_bhb_loop+0x60/0xb0 [ 678.007718][T14978] ? clear_bhb_loop+0x60/0xb0 [ 678.012439][T14978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.018397][T14978] RIP: 0033:0x7f3ef059ce59 [ 678.022861][T14978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.042535][T14978] RSP: 002b:00007f3ef1388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.051005][T14978] RAX: ffffffffffffffda RBX: 00007f3ef0815fa0 RCX: 00007f3ef059ce59 [ 678.059037][T14978] RDX: 0000200000001bc0 RSI: 0000000080044943 RDI: 0000000000000006 [ 678.067070][T14978] RBP: 00007f3ef1388090 R08: 0000000000000000 R09: 0000000000000000 [ 678.075144][T14978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.083198][T14978] R13: 00007f3ef0816038 R14: 00007f3ef0815fa0 R15: 00007ffc93f25af8 [ 678.091250][T14978] [ 678.217195][T14978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 678.251720][T14843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.270485][T14977] delete_channel: no stack [ 678.302689][T14843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 678.339905][T13728] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 678.423120][T14843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 678.508945][T14843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 679.060937][T11095] device hsr_slave_0 left promiscuous mode [ 679.102901][T11095] device hsr_slave_1 left promiscuous mode [ 679.187880][T11095] device veth1_macvtap left promiscuous mode [ 679.197341][T11095] device veth1_vlan left promiscuous mode [ 680.403715][T15016] delete_channel: no stack [ 680.724124][T15024] FAULT_INJECTION: forcing a failure. [ 680.724124][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 680.738595][T15024] CPU: 0 PID: 15024 Comm: syz.2.3173 Not tainted syzkaller #0 [ 680.746124][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.756261][T15024] Call Trace: [ 680.759576][T15024] [ 680.762549][T15024] dump_stack_lvl+0x188/0x24e [ 680.767280][T15024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 680.773496][T15024] ? show_regs_print_info+0x12/0x12 [ 680.778749][T15024] ? load_image+0x410/0x410 [ 680.783319][T15024] should_fail_ex+0x390/0x4c0 [ 680.788056][T15024] should_failslab+0x5/0x20 [ 680.792577][T15024] slab_pre_alloc_hook+0x59/0x300 [ 680.797648][T15024] ? tomoyo_encode+0x28a/0x550 [ 680.802483][T15024] __kmem_cache_alloc_node+0x4f/0x270 [ 680.807942][T15024] ? tomoyo_encode+0x28a/0x550 [ 680.812763][T15024] __kmalloc+0xa3/0x240 [ 680.816988][T15024] tomoyo_encode+0x28a/0x550 [ 680.821609][T15024] tomoyo_realpath_from_path+0x578/0x5c0 [ 680.827269][T15024] ? tomoyo_domain+0xd2/0x120 [ 680.831970][T15024] ? tomoyo_path_number_perm+0x205/0x650 [ 680.837627][T15024] tomoyo_path_number_perm+0x22f/0x650 [ 680.843117][T15024] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 680.848643][T15024] ? perf_trace_preemptirq_template+0x268/0x320 [ 680.854976][T15024] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 680.861013][T15024] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 680.867213][T15024] ? tomoyo_file_ioctl+0xd/0x30 [ 680.872107][T15024] security_file_ioctl+0x6c/0xa0 [ 680.877091][T15024] __se_sys_ioctl+0x48/0x170 [ 680.881719][T15024] do_syscall_64+0x4c/0xa0 [ 680.886167][T15024] ? clear_bhb_loop+0x60/0xb0 [ 680.890876][T15024] ? clear_bhb_loop+0x60/0xb0 [ 680.895596][T15024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 680.901653][T15024] RIP: 0033:0x7f9a6b59ce59 [ 680.906101][T15024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.925741][T15024] RSP: 002b:00007f9a6c385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.934198][T15024] RAX: ffffffffffffffda RBX: 00007f9a6b815fa0 RCX: 00007f9a6b59ce59 [ 680.942205][T15024] RDX: 0000200000001bc0 RSI: 0000000080044943 RDI: 0000000000000006 [ 680.950206][T15024] RBP: 00007f9a6c385090 R08: 0000000000000000 R09: 0000000000000000 [ 680.958205][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.966207][T15024] R13: 00007f9a6b816038 R14: 00007f9a6b815fa0 R15: 00007ffc3397dd88 [ 680.974221][T15024] [ 681.004611][T15024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 681.024250][T15023] delete_channel: no stack [ 681.210595][T11095] device team_slave_1 left promiscuous mode [ 681.221125][T11095] team0 (unregistering): Port device team_slave_1 removed [ 681.275258][T11095] device team_slave_0 left promiscuous mode [ 681.284803][T11095] team0 (unregistering): Port device team_slave_0 removed [ 681.706014][T15009] netlink: 'syz.1.3168': attribute type 10 has an invalid length. [ 681.714272][T15009] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3168'. [ 682.289909][T14843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.333677][T15033] netlink: 'syz.4.3175': attribute type 21 has an invalid length. [ 682.383139][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 682.404052][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 682.428281][T14843] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.467924][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 682.504839][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 682.542909][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.550128][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.598261][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 682.643334][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.681917][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.738683][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.745940][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.791157][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.882849][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.892000][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.946831][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.004019][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.098670][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.126409][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.159564][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.180577][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.249110][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 683.286476][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.326451][T14843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.741149][T15063] FAULT_INJECTION: forcing a failure. [ 683.741149][T15063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.811909][T15063] CPU: 0 PID: 15063 Comm: syz.2.3183 Not tainted syzkaller #0 [ 683.819489][T15063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.829611][T15063] Call Trace: [ 683.832948][T15063] [ 683.835973][T15063] dump_stack_lvl+0x188/0x24e [ 683.840708][T15063] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 683.846940][T15063] ? show_regs_print_info+0x12/0x12 [ 683.852207][T15063] ? load_image+0x410/0x410 [ 683.856789][T15063] should_fail_ex+0x390/0x4c0 [ 683.861516][T15063] _copy_to_user+0x2c/0x130 [ 683.866081][T15063] simple_read_from_buffer+0xe3/0x150 [ 683.871509][T15063] proc_fail_nth_read+0x1a6/0x220 [ 683.876596][T15063] ? proc_fault_inject_write+0x310/0x310 [ 683.882279][T15063] ? fsnotify_perm+0x243/0x550 [ 683.887100][T15063] ? fsnotify_perm+0x248/0x550 [ 683.890924][T15067] __sock_release: fasync list not empty! [ 683.891912][T15063] ? proc_fault_inject_write+0x310/0x310 [ 683.891965][T15063] vfs_read+0x2db/0x960 [ 683.892019][T15063] ? kernel_read+0x1e0/0x1e0 [ 683.912154][T15063] ? __fget_files+0x28/0x460 [ 683.916812][T15063] ? __fget_files+0x3fc/0x460 [ 683.921576][T15063] ? __fdget_pos+0x2ae/0x360 [ 683.926229][T15063] ? ksys_read+0x70/0x260 [ 683.930623][T15063] ksys_read+0x14d/0x260 [ 683.934926][T15063] ? vfs_write+0x9a0/0x9a0 [ 683.939413][T15063] ? lockdep_hardirqs_on+0x94/0x140 [ 683.944682][T15063] do_syscall_64+0x4c/0xa0 [ 683.949152][T15063] ? clear_bhb_loop+0x60/0xb0 [ 683.953885][T15063] ? clear_bhb_loop+0x60/0xb0 [ 683.958636][T15063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.964639][T15063] RIP: 0033:0x7f9a6b55d68e [ 683.969102][T15063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 683.988781][T15063] RSP: 002b:00007f9a6c384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.997306][T15063] RAX: ffffffffffffffda RBX: 00007f9a6c3856c0 RCX: 00007f9a6b55d68e [ 684.005340][T15063] RDX: 000000000000000f RSI: 00007f9a6c3850a0 RDI: 0000000000000007 [ 684.013369][T15063] RBP: 00007f9a6c385090 R08: 0000000000000000 R09: 0000000000000000 [ 684.021444][T15063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.029469][T15063] R13: 00007f9a6b816038 R14: 00007f9a6b815fa0 R15: 00007ffc3397dd88 [ 684.037517][T15063] [ 684.138057][T15073] netlink: 'syz.4.3186': attribute type 29 has an invalid length. [ 684.163360][T15073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3186'. [ 684.250291][T15064] delete_channel: no stack [ 684.798516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.820372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.851251][T14843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.909853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 684.931806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 684.964445][T15093] netlink: 'syz.1.3189': attribute type 3 has an invalid length. [ 685.018914][T15093] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3189'. [ 685.035176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.054389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.076094][T14843] device veth0_vlan entered promiscuous mode [ 685.085309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.095005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.119148][T14843] device veth1_vlan entered promiscuous mode [ 685.147670][T15097] device pim6reg1 entered promiscuous mode [ 685.194704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.231057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 685.299702][T14843] device veth0_macvtap entered promiscuous mode [ 685.325888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.335826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.349256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 685.608664][T14843] device veth1_macvtap entered promiscuous mode [ 685.636974][T13728] Bluetooth: hci6: ISO packet for unknown connection handle 1854 [ 685.707544][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.718617][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.728695][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.739335][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.835444][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.841883][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.872684][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.903091][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.955098][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.002639][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.069557][T14843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.272759][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 686.281116][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 686.333595][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 686.374519][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.412315][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.436193][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.447141][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.457499][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.469677][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.481503][T14843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.492227][T14843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.540024][T14843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.660000][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 686.674625][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 686.699119][T14843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.719034][T14843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.739421][T14843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.779993][T14843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.137135][T11079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.175513][T11079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.328410][T15134] delete_channel: no stack [ 687.340316][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 687.445162][T11079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.475023][T11079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.630064][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.793140][T15201] sock: sock_set_timeout: `syz.5.3209' (pid 15201) tries to set negative timeout [ 690.805359][ T4293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 690.816008][ T4293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 690.824710][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 690.853849][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 690.864071][ T4293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 690.870420][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.888993][ T4293] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 690.985434][T15201] netlink: 'syz.5.3209': attribute type 13 has an invalid length. [ 691.049971][T15201] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3209'. [ 691.150369][T15201] syz_tun: refused to change device tx_queue_len [ 691.181122][T15201] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 691.345548][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.411279][T15213] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3213'. [ 691.557239][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.658188][T15226] netlink: 'syz.5.3225': attribute type 10 has an invalid length. [ 691.809891][T15226] team0: Device wg1 is of different type [ 691.953665][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.506823][T15204] chnl_net:caif_netlink_parms(): no params data found [ 692.528055][ T4332] tipc: Left network mode [ 692.953137][ T4293] Bluetooth: hci3: command 0x0409 tx timeout [ 693.374482][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.381987][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.391274][T15204] device bridge_slave_0 entered promiscuous mode [ 693.496756][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.507756][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.523599][T15204] device bridge_slave_1 entered promiscuous mode [ 693.677750][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.716667][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.108580][T15204] team0: Port device team_slave_0 added [ 694.136548][T15204] team0: Port device team_slave_1 added [ 694.192005][T15295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3228'. [ 694.242750][T15295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 694.270799][T15295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.348391][T15282] netlink: 'syz.1.3228': attribute type 10 has an invalid length. [ 694.396955][T15282] device netdevsim0 entered promiscuous mode [ 694.573215][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.580259][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.692679][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.739575][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.767529][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.855660][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.927448][T15299] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 694.977641][T15299] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 695.035925][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 695.247790][T15204] device hsr_slave_0 entered promiscuous mode [ 695.321243][T15204] device hsr_slave_1 entered promiscuous mode [ 695.363827][T15204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.371508][T15204] Cannot create hsr debugfs directory [ 695.378996][T15317] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.3243'. [ 696.359403][ T4332] team0: Port device wlan1 removed [ 697.123155][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 697.787854][T15360] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3245'. [ 697.922924][T15360] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3245'. [ 697.934010][T15345] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3241'. [ 697.992668][T15345] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 698.047520][T15345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.113385][T15365] netlink: 'syz.3.3247': attribute type 3 has an invalid length. [ 698.146899][T15365] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3247'. [ 698.252828][ T4332] device hsr_slave_0 left promiscuous mode [ 698.299471][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.309798][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.339997][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.366985][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.399954][ T4332] device bridge_slave_1 left promiscuous mode [ 698.430978][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.519401][ T4332] device bridge_slave_0 left promiscuous mode [ 698.529672][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.857831][T15375] netlink: 'syz.1.3249': attribute type 2 has an invalid length. [ 698.866975][ T4332] device veth1_macvtap left promiscuous mode [ 698.884493][ T4332] device veth1_vlan left promiscuous mode [ 698.926146][T15375] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3249'. [ 699.192971][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 699.884292][ T4332] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 701.709161][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 701.965882][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 702.144281][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.339085][T15342] delete_channel: no stack [ 703.011543][ T4332] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 703.084811][ T4332] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 703.094160][ T4332] bond0 (unregistering): Released all slaves [ 703.277143][T15371] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3250'. [ 703.805836][T15204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 703.859770][T15204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 703.906126][T15204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 703.966600][T15204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 704.512447][T15204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.569114][T15407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3258'. [ 704.589499][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 704.608324][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 704.668102][T15204] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.716548][T15407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3258'. [ 704.762941][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 704.783900][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 704.826320][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.833614][T11095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.866995][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 704.938762][T15414] netlink: 'syz.5.3256': attribute type 2 has an invalid length. [ 704.992766][T15414] netlink: 'syz.5.3256': attribute type 8 has an invalid length. [ 705.000618][T15414] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3256'. [ 705.202442][T15424] netlink: 'syz.2.3259': attribute type 7 has an invalid length. [ 705.214534][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 705.225381][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 705.235619][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.242846][T11095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.271049][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 705.304413][T11095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 705.772824][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 705.823150][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 705.873500][T11079] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 705.915865][T15432] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3261'. [ 706.006836][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 706.022801][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 706.084396][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 706.112505][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 706.153745][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 706.198831][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 706.240236][T15204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 707.464032][T15462] netlink: 56843 bytes leftover after parsing attributes in process `syz.5.3268'. [ 724.114118][T13728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 724.128119][T13728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 724.137313][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 724.145980][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 724.154150][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 724.162878][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 724.552390][ T4286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 724.572870][ T4286] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 724.581514][ T4286] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 724.602203][T13728] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 724.610423][T13728] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 724.618507][T13728] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 725.193720][T15538] chnl_net:caif_netlink_parms(): no params data found [ 725.615954][T15542] chnl_net:caif_netlink_parms(): no params data found [ 725.725941][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.753410][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.767785][T15538] device bridge_slave_0 entered promiscuous mode [ 725.806712][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.814373][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.826928][T15538] device bridge_slave_1 entered promiscuous mode [ 725.954345][T13728] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 725.964179][T13728] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 725.972577][T13728] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 725.981622][T13728] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 726.019901][T13728] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 726.028785][T13728] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 726.183317][ T4293] Bluetooth: hci4: command 0x0409 tx timeout [ 726.357949][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.406337][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.435709][T15542] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.444684][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.463872][T15542] device bridge_slave_0 entered promiscuous mode [ 726.519490][T15542] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.527108][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.547153][T15542] device bridge_slave_1 entered promiscuous mode [ 726.613619][T15538] team0: Port device team_slave_0 added [ 726.625828][T15538] team0: Port device team_slave_1 added [ 726.633196][ T4293] Bluetooth: hci7: command 0x0409 tx timeout [ 726.711510][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.092713][ T4293] Bluetooth: hci8: command 0x0409 tx timeout [ 728.233061][ T4293] Bluetooth: hci4: command 0x041b tx timeout [ 728.733230][ T4293] Bluetooth: hci7: command 0x041b tx timeout [ 730.182962][ T4293] Bluetooth: hci8: command 0x041b tx timeout [ 730.333039][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 730.833210][ T4293] Bluetooth: hci7: command 0x040f tx timeout [ 731.244206][ T4286] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 731.254866][ T4286] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 731.264723][ T4286] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 731.274681][ T4286] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 731.293827][ T4286] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 731.301495][ T4286] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 732.233151][ T4293] Bluetooth: hci8: command 0x040f tx timeout [ 732.432977][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 732.883341][ T4293] Bluetooth: hci7: command 0x0419 tx timeout [ 733.383256][ T4293] Bluetooth: hci9: command 0x0409 tx timeout [ 734.350592][ T4293] Bluetooth: hci8: command 0x0419 tx timeout [ 734.483695][T14264] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2656 jiffies s: 61709 root: 0x1/. [ 734.511330][T14264] rcu: blocking rcu_node structures (internal RCU debug): [ 734.518956][T14264] Sending NMI from CPU 1 to CPUs 0: [ 734.524337][ C0] NMI backtrace for cpu 0 [ 734.524354][ C0] CPU: 0 PID: 15465 Comm: modprobe Not tainted syzkaller #0 [ 734.524372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.524383][ C0] RIP: 0010:kasan_check_range+0x1b0/0x290 [ 734.524419][ C0] Code: f3 4d 01 f3 49 89 df 49 8d 5f 07 4d 85 ff 49 0f 49 df 48 83 e3 f8 49 29 df 74 0e 41 80 3b 00 75 69 49 ff c3 49 ff cf 75 f2 5b <41> 5c 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 734.524434][ C0] RSP: 0018:ffffc90004886f98 EFLAGS: 00000056 [ 734.524449][ C0] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff816406d9 [ 734.524461][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af2240 [ 734.524472][ C0] RBP: ffffc900048871f0 R08: ffffffff90af2247 R09: 1ffffffff215e448 [ 734.524486][ C0] R10: dffffc0000000000 R11: fffffbfff215e449 R12: dffffc0000000001 [ 734.524499][ C0] R13: ffff88802ce78000 R14: 1ffffffff215e448 R15: 0000000000000001 [ 734.524511][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 734.524526][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 734.524538][ C0] CR2: 00007f4efbaaee9c CR3: 000000005c554000 CR4: 00000000003506f0 [ 734.524553][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 734.524563][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 734.524574][ C0] Call Trace: [ 734.524581][ C0] [ 734.524590][ C0] __lock_acquire+0xdd9/0x7bd0 [ 734.524626][ C0] ? __virt_addr_valid+0x188/0x540 [ 734.524757][ C0] ? verify_lock_unused+0x140/0x140 [ 734.524782][ C0] ? llist_add_batch+0x12b/0x180 [ 734.524802][ C0] ? find_next_clump8+0x1a0/0x1a0 [ 734.524823][ C0] ? __virt_addr_valid+0x467/0x540 [ 734.524850][ C0] lock_acquire+0x1bb/0x4a0 [ 734.524873][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 734.524901][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 734.524924][ C0] ? read_lock_is_recursive+0x10/0x10 [ 734.524948][ C0] ? __lock_acquire+0x7bd0/0x7bd0 [ 734.524976][ C0] trace_call_bpf+0xe0/0x6b0 [ 734.524998][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 734.525021][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 734.525043][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 734.525065][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 734.525090][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 734.525122][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 734.525145][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 734.525168][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 734.525193][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 734.525223][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 734.525248][ C0] ? irqentry_enter+0x33/0x50 [ 734.525272][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 734.525297][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 734.525323][ C0] ? lock_chain_count+0x20/0x20 [ 734.525346][ C0] ? irqentry_enter+0x33/0x50 [ 734.525368][ C0] trace_hardirqs_off_finish+0x13f/0x180 [ 734.525393][ C0] irqentry_enter+0x33/0x50 [ 734.525414][ C0] sysvec_irq_work+0xa/0xc0 [ 734.525434][ C0] asm_sysvec_irq_work+0x16/0x20 [ 734.525462][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 734.525522][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 734.525537][ C0] RSP: 0018:ffffc90004887680 EFLAGS: 00000206 [ 734.525551][ C0] RAX: 03663f7cd10ac900 RBX: 1ffff92000910ed8 RCX: 03663f7cd10ac900 [ 734.525564][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 734.525577][ C0] RBP: ffffc90004887780 R08: ffffffff90af2247 R09: 1ffffffff215e448 [ 734.525590][ C0] R10: dffffc0000000000 R11: fffffbfff215e449 R12: 0000000000000246 [ 734.525604][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 734.525625][ C0] ? lock_downgrade+0x820/0x830 [ 734.525648][ C0] ? __lock_acquire+0x7bd0/0x7bd0 [ 734.525673][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 734.525693][ C0] ? page_ext_get+0x1de/0x2a0 [ 734.525740][ C0] __rcu_read_unlock+0x78/0xd0 [ 734.525758][ C0] page_ext_put+0x91/0xb0 [ 734.525780][ C0] unmap_page_range+0x1905/0x25b0 [ 734.525842][ C0] unmap_vmas+0x260/0x390 [ 734.525867][ C0] ? unmap_vmas+0x1bd/0x390 [ 734.525893][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 734.525939][ C0] ? __lock_acquire+0x7bd0/0x7bd0 [ 734.525972][ C0] exit_mmap+0x20d/0x970 [ 734.525996][ C0] ? vm_brk+0x20/0x20 [ 734.526017][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 734.526042][ C0] ? exit_mm+0x23d/0x350 [ 734.526139][ C0] ? uprobe_clear_state+0x274/0x290 [ 734.526177][ C0] __mmput+0x118/0x3a0 [ 734.526201][ C0] exit_mm+0x24d/0x350 [ 734.526235][ C0] ? do_exit+0x2570/0x2570 [ 734.526260][ C0] ? taskstats_exit+0x355/0x9e0 [ 734.526320][ C0] do_exit+0x958/0x2570 [ 734.526344][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 734.526375][ C0] ? put_task_struct+0x80/0x80 [ 734.526399][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 734.526423][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 734.526446][ C0] ? lock_chain_count+0x20/0x20 [ 734.526474][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 734.526503][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 734.526530][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 734.526554][ C0] do_group_exit+0x229/0x2e0 [ 734.526581][ C0] __x64_sys_exit_group+0x3b/0x40 [ 734.526606][ C0] do_syscall_64+0x4c/0xa0 [ 734.526624][ C0] ? clear_bhb_loop+0x60/0xb0 [ 734.526639][ C0] ? clear_bhb_loop+0x60/0xb0 [ 734.526655][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.526681][ C0] RIP: 0033:0x7f4efbc0d6c5 [ 734.526694][ C0] Code: Unable to access opcode bytes at 0x7f4efbc0d69b. [ 734.526702][ C0] RSP: 002b:00007fffa121c778 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 734.526718][ C0] RAX: ffffffffffffffda RBX: 00007f4efbd0efe8 RCX: 00007f4efbc0d6c5 [ 734.526731][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 734.526742][ C0] RBP: 0000000000000001 R08: 00007fffa121c708 R09: 0000000000000000 [ 734.526753][ C0] R10: 00007fffa121c5a0 R11: 0000000000000206 R12: 0000000000000000 [ 734.526763][ C0] R13: 0000000000000001 R14: 00007f4efbd0d680 R15: 00007f4efbd0f000 [ 734.526782][ C0] [ 735.440501][ T4293] Bluetooth: hci9: command 0x041b tx timeout [ 737.541254][ T4293] Bluetooth: hci9: command 0x040f tx timeout [ 739.641255][ T4293] Bluetooth: hci9: command 0x0419 tx timeout