last executing test programs: 6m37.936528185s ago: executing program 1 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000800007910000000000000c303e0ff0000000095"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0xfffffffffffffe99}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x48000) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000040)='syzkaller\x00', 0x101, 0x8, &(0x7f0000000080)=""/8, 0x1f00, 0x30, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0x8, 0x7}, 0x10, r4, r1, 0x6, &(0x7f0000000200)=[r0, r0, r0], &(0x7f0000000240)=[{0x4, 0x4, 0x7, 0x3}, {0x5, 0x3, 0x2, 0x3}, {0x0, 0x1, 0xb, 0x5}, {0x1, 0x5}, {0x2, 0x2, 0x9, 0x2}, {0x1, 0x3, 0xc, 0x1}], 0x10, 0xe}, 0x94) 6m37.470066626s ago: executing program 1 (id=2456): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)="78cafb73", 0x4}], 0x2}, 0x8000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x100c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip_vti0\x00', 0x1000}) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1}, 0x4000055) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m37.003837206s ago: executing program 1 (id=2458): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230007) close(0x3) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8004) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x9, 0xff, 0x5, 0x0, 0x5, 0x902, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x8040, 0x6, 0xfffffff7, 0x8, 0xa0df, 0xfa, 0x3, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xd) 6m35.782079732s ago: executing program 1 (id=2462): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$kcm(0x11, 0x2, 0x300) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r5}, 0x18) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 6m35.338088442s ago: executing program 1 (id=2465): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)="78cafb73", 0x4}], 0x2}, 0x8000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x100c2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'ip_vti0\x00', 0x1000}) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}], 0x1}, 0x4000055) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m34.262266436s ago: executing program 1 (id=2468): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='Y\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="040000000400000004000000010000000018"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x44800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r6}, 0x38) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 6m18.895568572s ago: executing program 32 (id=2468): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB='Y\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="040000000400000004000000010000000018"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x44800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r6}, 0x38) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 6.535833307s ago: executing program 3 (id=4319): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x3ff, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x25, 0x5, 0x0) close(r7) (async) close(r7) socket$kcm(0x10, 0x2, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) (async) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000001a00)=ANY=[], 0x12) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) (async) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x0, 0x5}, 0x102000, 0x0, 0x0, 0x8, 0x200000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffbfffffffffff, r1, 0x7) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000180)=r11, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet(r0, &(0x7f0000000e00)={&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}, 0x90) 5.96263166s ago: executing program 3 (id=4323): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018ffff00870b00000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x11a226, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x1f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000001180)=ANY=[@ANYRES8=r6], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x55, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000540)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001149e7220e9a894aad01004c7dd55faf00"/36, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010000) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r12, 0x5452, &(0x7f00000013c0)) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x6, 0x7, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x16, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x5}, @ldst={0x0, 0x0, 0x4, 0x1, 0x8, 0x80, 0xfffffffffffffffc}, @map_val, @alu={0x4, 0x1, 0x8, 0x1, 0x5, 0xffffffffffffffc0, 0xffffffffffffffec}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff01}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x11, &(0x7f00000005c0)=""/17, 0x41000, 0x27, '\x00', r5, @fallback=0x24, r0, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x7, 0x8001, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[r9, r10, r12, r13], &(0x7f0000000780)=[{0x2, 0x3, 0x5, 0x3}, {0x3, 0x2, 0x7, 0x8}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x1, 0xe, 0x8}], 0x10, 0x7}, 0x94) r14 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r14, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800400000000000007a0000000000009500000000040000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) 4.942391642s ago: executing program 3 (id=4332): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xd, &(0x7f0000000000), 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x12, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x3, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x2, 0x3, 0x1, 0x5}, {0x0, 0x5, 0x9, 0xb}, {0x0, 0x1, 0x8}], 0x10, 0xff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)=@generic={&(0x7f0000000280)='./file0\x00', r4}, 0x18) write$cgroup_subtree(r3, &(0x7f0000000340)={[{0x2d, 'cpuset'}]}, 0x8) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r5) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000002000850000008700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f00000000c0)={'some', 0x20, 0xfffffffffffffffe, 0x20, 0x7}, 0x2f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, @perf_bp={0x0}, 0x3900, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0x9f, 0x0, &(0x7f0000001180)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r12 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r12, 0x1, 0x2, &(0x7f0000000000), 0x4) 4.937891872s ago: executing program 0 (id=4333): close(0xffffffffffffffff) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 4.254474117s ago: executing program 0 (id=4337): socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x6, 0x6, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x40, 0x10000, 0x9e1, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.588594131s ago: executing program 0 (id=4339): getpid() perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0xb9, 0x20, 0x0, 0xfe, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x8591, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0xb9, 0x20, 0x0, 0xfe, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x8591, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000a5f4fe5bf070d9cc80f37cd5acf87f5401ac1ff06b4ea71d1dff520e336f7e83a19c1d9ab164c4f603f9c722e30bdd7223", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x0, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6e, 0x5, 0x8000000000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6e, 0x5, 0x8000000000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104115, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x10, 0x2, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r11 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/682], 0x2c8}, 0x20000000) sendmsg$kcm(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) (async) sendmsg$kcm(r11, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.100515412s ago: executing program 2 (id=4342): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = socket$kcm(0x11, 0xa, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x23, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x9, 0x740b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0xa48c, 0xf, 0x43a1bd76, 0x7, 0x100000000000c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) socket$kcm(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004"], 0x48) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x4195, 0x20033, 0xfffffbff, 0x5, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) (async) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540), 0x1}, 0x8804) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r7, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f0000000740)=@raw=[@generic={0x2, 0x8, 0x5, 0x5a}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x10001}, @exit, @generic={0x1, 0x2, 0x8, 0xde9, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x4}], &(0x7f0000000840)='syzkaller\x00', 0x1, 0x56, &(0x7f0000000880)=""/86, 0x40f00, 0x11, '\x00', r9, 0x25, r7, 0x8, &(0x7f0000000c00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x2, 0xeb5, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[r7, r7, r3], &(0x7f0000000cc0)=[{0x0, 0x4, 0xf, 0xf}, {0x0, 0x4, 0xd, 0x3}, {0x5, 0x4, 0x2, 0x9}, {0x5, 0x3, 0x7, 0x5}]}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000006000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c7d659b17ceb25014ced1cf2dd55b8d688ed0466b2899578b3fa53f20b592586"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10}, &(0x7f00000001c0), &(0x7f0000000100)=r8}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000380)="465fce", 0x0}, 0x20) 3.000484544s ago: executing program 4 (id=4343): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xff, 0x20, 0xe2, 0x1, 0x0, 0xfffffffffffffffd, 0x81102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x1c0a8, 0x4000000, 0x5, 0x8, 0xfffffffffffffffb, 0x812b, 0x7, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a8064", 0xc}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.691309511s ago: executing program 4 (id=4344): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000003000)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000084a271e30ffb72481262a0000000c0000000000001204000000030000000000000204000000010000000000000e0200000000000000050000000000000a04000000"], 0x0, 0x74, 0x0, 0x1, 0x69}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, 0x0, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0xb, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000004deba63da2cf80000000800001ff06d07"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x8, 0x43a1bd76, 0xe11ddee1c57f0a5b, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x8, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8918, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000880)='**/#.^\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmsg$sock(r2, &(0x7f0000002fc0)={&(0x7f0000002d00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)="5338e1f6f685d0bc650fa58d3452b581166edab4b3f3b517f5b961d5a873161b152b20f43f279f0d11d379d5e90214f1753488f22296c9ab885b8904c0bebfe9b2ad767c5348fc9b8c6647c879135ae5d35f06e0687de840ae59c70131cf8dcd475f21ffd21af534bfb2335f8a94e6004e2b25e90831de657263d7d849b9ea5419289bb10891f4900a37ee703e9b66d0ce476ae27d510c0e4d1bca71edf3e8143e67788dd428b5963268d6253d9f0d5f6c403ca8d9d78fae95", 0xb9}, {&(0x7f0000002e40)="f4f9c1713982cf6ef47fe73b40f1a7d70eb3e7e0d3e7d1b6a8c1378c62bd4c1c38e399b283f475a5a5aae9da8efcbe8bf56cfa5d6cef0b645a", 0x39}], 0x2, &(0x7f0000002f00)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0xa8}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2901, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffdffffffffffffb, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x67}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) 1.83805831s ago: executing program 0 (id=4345): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b", 0x7}, {0x0}], 0x2}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 1.83680514s ago: executing program 2 (id=4346): close(0xffffffffffffffff) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 1.765912272s ago: executing program 3 (id=4347): socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x6, 0x6, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x40, 0x10000, 0x9e1, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.670091134s ago: executing program 4 (id=4348): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRES16=r3], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x5, 0x7, 0xc9, 0x0, 0xa34, 0x83040, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa534, 0x2, @perf_config_ext={0x3, 0xc3a}, 0x200, 0x9f97, 0x200, 0x1, 0x7ff, 0x0, 0x4, 0x0, 0x8001}, r1, 0x8, r2, 0x3) 1.565461786s ago: executing program 2 (id=4349): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000017000b63d25a80648c2594f945a3cb0b", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x2b, 0x5, 0x0, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe000fff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x2, 0x2}]}]}}}], 0x18}, 0x0) 1.542226296s ago: executing program 3 (id=4350): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020) 1.094554846s ago: executing program 4 (id=4351): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x40000140) 1.093962576s ago: executing program 2 (id=4352): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xff, 0x20, 0xe2, 0x1, 0x0, 0xfffffffffffffffd, 0x81102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x1c0a8, 0x4000000, 0x5, 0x8, 0xfffffffffffffffb, 0x812b, 0x7, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24", 0x12}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 500.003709ms ago: executing program 4 (id=4353): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x400, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0xb, 0x5, 0x100, &(0x7f0000001180)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000140)={'team0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 471.74814ms ago: executing program 0 (id=4354): r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 460.06071ms ago: executing program 2 (id=4355): recvmsg(0xffffffffffffffff, 0x0, 0x40000004) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006dfe5633a2530473fbce99659f6a87764b5972ca34b46e88a89480225c8e42c31c58392d6cbccc873d10952712d47580ecddee03c97fb2ba12bde93330be57f1fa56ddf2264e4a0b1c10b993e42ab54d4a4c3cc8b0bd0c5f01f52215e8e86b19ea14a6fc3a1c56a5f0a1875063883a1c6c31210a6a78408d893cd348bb42b18c7abab679136d832338cf18ee25d5117af22feb54da7aea2ef3a7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x84) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x0, 0x2, 0x0, 0x0, 0x6f32, 0xa892, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffffffffffff99c9, 0xfffffbff, 0x3, 0x9, 0x0, 0x45, 0x0, 0x2b, 0x0, 0x20000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100)=r5, 0x120) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080)={'vlan0', 0x32, 0x31}, 0x8) 140.401937ms ago: executing program 0 (id=4356): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xd, &(0x7f0000000000), 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x12, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x3, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x2, 0x3, 0x1, 0x5}, {0x0, 0x5, 0x9, 0xb}, {0x0, 0x1, 0x8}], 0x10, 0xff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)=@generic={&(0x7f0000000280)='./file0\x00', r4}, 0x18) write$cgroup_subtree(r3, &(0x7f0000000340)={[{0x2d, 'cpuset'}]}, 0x8) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r5) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000002000850000008700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f00000000c0)={'some', 0x20, 0xfffffffffffffffe, 0x20, 0x7}, 0x2f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, @perf_bp={0x0}, 0x3900, 0x5, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0x9f, 0x0, &(0x7f0000001180)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r12 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r12, 0x1, 0x2, &(0x7f0000000000), 0x4) 139.978737ms ago: executing program 3 (id=4357): close(0xffffffffffffffff) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000001, 0x1, r1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 60.552229ms ago: executing program 4 (id=4358): socket$kcm(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x6, 0x6, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x40, 0x10000, 0x9e1, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=4359): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_config_ext={0xff, 0x9}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'devices'}]}, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c80)="3504000010000511d25a80648c63940d0324fc60040035480c0002000200002037153e373da4927f7a684e0150e4ac1e0c040180060410004500", 0x3a}, {&(0x7f0000000a40)="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", 0x3fb}], 0x2}, 0x0) kernel console output (not intermixed with test programs): 13] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2846'. [ 667.834250][T16215] netlink: 'syz.2.2847': attribute type 1 has an invalid length. [ 667.857731][T16215] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2847'. [ 668.027311][T16220] netlink: 'syz.0.2850': attribute type 1 has an invalid length. [ 668.061303][T16220] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2850'. [ 669.046251][T16236] netlink: 'syz.0.2853': attribute type 2 has an invalid length. [ 669.059057][T16236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2853'. [ 669.693234][T16237] netlink: 'syz.0.2853': attribute type 10 has an invalid length. [ 669.966111][T16256] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2858'. [ 670.454595][T16266] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 670.796038][T16274] netlink: 'syz.4.2864': attribute type 21 has an invalid length. [ 670.804694][T16274] netlink: 'syz.4.2864': attribute type 6 has an invalid length. [ 670.850019][T16274] netlink: 'syz.4.2864': attribute type 46 has an invalid length. [ 671.990695][T16285] netlink: 'syz.0.2867': attribute type 29 has an invalid length. [ 672.085048][T16283] syzkaller0: entered promiscuous mode [ 672.096765][T16283] syzkaller0: entered allmulticast mode [ 672.115465][T16285] netlink: 'syz.0.2867': attribute type 29 has an invalid length. [ 672.147550][T16285] netlink: 'syz.0.2867': attribute type 29 has an invalid length. [ 672.179167][ T2967] syzkaller0: tun_net_xmit 48 [ 672.202173][T16283] syzkaller0: tun_net_xmit 1280 [ 672.228071][T16285] netlink: 'syz.0.2867': attribute type 29 has an invalid length. [ 672.236772][T16283] syzkaller0: create flow: hash 2017523539 index 1 [ 672.425139][T16282] syzkaller0: delete flow: hash 2017523539 index 1 [ 672.958468][T16305] __nla_validate_parse: 4 callbacks suppressed [ 672.958491][T16305] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2872'. [ 672.993262][T16305] openvswitch: netlink: Message has 4 unknown bytes. [ 675.050059][T16311] validate_nla: 3 callbacks suppressed [ 675.050078][T16311] netlink: 'syz.2.2873': attribute type 10 has an invalid length. [ 675.065336][T16311] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2873'. [ 675.081967][T16311] bond0: entered promiscuous mode [ 675.087129][T16311] bond_slave_0: entered promiscuous mode [ 675.093872][T16311] bond_slave_1: entered promiscuous mode [ 675.445686][T16328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.453096][T16328] IPv6: NLM_F_CREATE should be set when creating new route [ 675.563986][T16330] netlink: 'syz.4.2878': attribute type 2 has an invalid length. [ 675.608341][T16330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2878'. [ 676.274999][T16344] netlink: 'syz.2.2881': attribute type 1 has an invalid length. [ 676.276399][T16330] netlink: 'syz.4.2878': attribute type 10 has an invalid length. [ 676.284914][T16344] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2881'. [ 676.296167][T16330] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 676.497454][ T5779] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 677.304495][T16348] FAULT_INJECTION: forcing a failure. [ 677.304495][T16348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.334877][T16348] CPU: 1 PID: 16348 Comm: syz.3.2884 Not tainted syzkaller #0 [ 677.342437][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 677.352634][T16348] Call Trace: [ 677.355967][T16348] [ 677.358940][T16348] dump_stack_lvl+0x18c/0x250 [ 677.363689][T16348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.369915][T16348] ? show_regs_print_info+0x20/0x20 [ 677.375172][T16348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.381412][T16348] should_fail_ex+0x394/0x4c0 [ 677.386597][T16348] _copy_from_user+0x2f/0xe0 [ 677.391250][T16348] ipv6_set_mcast_msfilter+0x126/0x2d0 [ 677.396855][T16348] do_ipv6_setsockopt+0xac7/0x3e50 [ 677.402034][T16348] ? sk_dst_reset+0xa0/0xa0 [ 677.406608][T16348] ? perf_trace_buf_alloc+0x290/0x290 [ 677.412089][T16348] ? perf_tp_event+0x13f5/0x1550 [ 677.417089][T16348] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 677.422987][T16348] ? mark_lock+0x94/0x320 [ 677.427423][T16348] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 677.433211][T16348] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 677.439259][T16348] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 677.446530][T16348] ? lock_chain_count+0x20/0x20 [ 677.451457][T16348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.457682][T16348] ? lockdep_hardirqs_on+0x98/0x150 [ 677.462939][T16348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 677.469169][T16348] ipv6_setsockopt+0x59/0x190 [ 677.473889][T16348] ? sock_common_recvmsg+0x190/0x190 [ 677.479233][T16348] do_sock_setsockopt+0x175/0x1a0 [ 677.484307][T16348] ? __fdget+0x180/0x210 [ 677.489062][T16348] __x64_sys_setsockopt+0x182/0x200 [ 677.494414][T16348] do_syscall_64+0x55/0xb0 [ 677.498911][T16348] ? clear_bhb_loop+0x40/0x90 [ 677.503621][T16348] ? clear_bhb_loop+0x40/0x90 [ 677.508332][T16348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.514275][T16348] RIP: 0033:0x7fdb0fb9de59 [ 677.518808][T16348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.538887][T16348] RSP: 002b:00007fdb10ac8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 677.547334][T16348] RAX: ffffffffffffffda RBX: 00007fdb0fe25fa0 RCX: 00007fdb0fb9de59 [ 677.555421][T16348] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000005 [ 677.563463][T16348] RBP: 00007fdb10ac8090 R08: 0000000000005000 R09: 0000000000000000 [ 677.571583][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.579678][T16348] R13: 00007fdb0fe26038 R14: 00007fdb0fe25fa0 R15: 00007ffdb14a5f58 [ 677.587698][T16348] [ 677.616214][T16356] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 677.667830][T16356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2886'. [ 678.299918][T16384] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 678.311162][T16384] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2895'. [ 678.705495][T16387] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2896'. [ 678.838883][T16387] ksmbd: Unknown IPC event: 0, ignore. [ 679.520009][T16388] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 679.823715][T16408] netlink: 'syz.3.2902': attribute type 1 has an invalid length. [ 679.838424][T16408] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2902'. [ 680.665201][T16414] netlink: 'syz.2.2904': attribute type 5 has an invalid length. [ 681.304465][T16426] syzkaller0: entered promiscuous mode [ 681.327716][T16426] syzkaller0: entered allmulticast mode [ 681.475703][T16426] syzkaller0: tun_net_xmit 1280 [ 681.494893][T16426] syzkaller0: create flow: hash 2017523539 index 1 [ 682.037571][T16425] syzkaller0: delete flow: hash 2017523539 index 1 [ 682.220409][T16446] netlink: 'syz.4.2911': attribute type 29 has an invalid length. [ 682.687967][T16456] can: request_module (can-proto-0) failed. [ 683.251419][T16459] netlink: 'syz.3.2914': attribute type 1 has an invalid length. [ 683.282739][T16459] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2914'. [ 686.196303][T16446] netlink: 'syz.4.2911': attribute type 29 has an invalid length. [ 686.215926][T16472] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 686.224122][T16472] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2918'. [ 686.243072][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.249633][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.412735][T16491] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 687.421067][T16491] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2923'. [ 688.588329][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 688.605230][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 688.641584][T16505] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2927'. [ 688.666458][T16505] bridge_slave_0: entered allmulticast mode [ 688.709110][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'. [ 688.724553][T16505] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2927'. [ 688.764012][T16513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2929'. [ 688.794797][T16515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2929'. [ 689.534626][T16530] netlink: 'syz.2.2933': attribute type 1 has an invalid length. [ 689.544913][T16530] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2933'. [ 691.738599][T16542] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2939'. [ 691.863284][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 691.873224][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2940'. [ 691.888699][T16547] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2940'. [ 691.934726][T16547] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.944057][T16547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.964502][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2940'. [ 691.994272][T16547] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2940'. [ 692.027407][T16553] team0: Port device C removed [ 692.116203][T16556] netlink: 'syz.0.2942': attribute type 1 has an invalid length. [ 692.124325][T16556] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2942'. [ 692.244944][T16563] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 692.253478][T16563] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2945'. [ 692.703665][T16567] netlink: 'syz.3.2946': attribute type 1 has an invalid length. [ 692.737883][T16567] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2946'. [ 693.774497][T16572] netlink: 'syz.4.2948': attribute type 21 has an invalid length. [ 693.784376][T16572] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2948'. [ 693.987103][T16577] netlink: 'syz.4.2957': attribute type 10 has an invalid length. [ 694.011733][T16577] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 694.559178][T16592] netlink: 'syz.0.2951': attribute type 10 has an invalid length. [ 694.589853][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.618946][T16592] bridge_slave_1: left allmulticast mode [ 694.624882][T16592] bridge_slave_1: left promiscuous mode [ 694.636471][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.663595][T16592] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 694.710138][T16594] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 694.785633][T16597] netlink: 'syz.4.2962': attribute type 2 has an invalid length. [ 695.600437][T16633] netlink: 'syz.4.2964': attribute type 1 has an invalid length. [ 695.791848][T16636] netlink: 'syz.0.2965': attribute type 10 has an invalid length. [ 696.185808][T16647] mac80211_hwsim hwsim45 .3c: renamed from wlan1 (while UP) [ 696.997662][T16671] __nla_validate_parse: 8 callbacks suppressed [ 696.997685][T16671] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2977'. [ 697.033530][T16671] netlink: zone id is out of range [ 697.203210][T16683] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2980'. [ 697.405764][T16694] validate_nla: 2 callbacks suppressed [ 697.405788][T16694] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 697.455163][T16694] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2983'. [ 697.485678][T16700] netlink: 'syz.0.2985': attribute type 1 has an invalid length. [ 698.559692][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 698.637430][T16719] netlink: 'syz.3.2989': attribute type 10 has an invalid length. [ 698.652549][T16719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2989'. [ 698.662328][T16719] dummy0: entered promiscuous mode [ 698.667900][T16719] dummy0: entered allmulticast mode [ 698.674126][T16719] bridge0: port 4(dummy0) entered blocking state [ 698.701707][T16719] bridge0: port 4(dummy0) entered disabled state [ 698.711942][T16719] bridge0: port 4(dummy0) entered blocking state [ 698.718518][T16719] bridge0: port 4(dummy0) entered forwarding state [ 698.807244][T16722] syzkaller0: entered promiscuous mode [ 698.817888][T16722] syzkaller0: entered allmulticast mode [ 699.369868][T16733] netlink: 'syz.4.2994': attribute type 1 has an invalid length. [ 699.396201][T16733] netlink: 'syz.4.2994': attribute type 3 has an invalid length. [ 699.406714][T16733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2994'. [ 699.561004][T16741] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2998'. [ 703.122366][T16800] netlink: 'syz.0.3015': attribute type 10 has an invalid length. [ 703.954392][T16777] syzkaller0: entered promiscuous mode [ 704.035731][T16777] syzkaller0: entered allmulticast mode [ 707.356139][T16815] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3019'. [ 707.367036][T16815] bridge_slave_1: default FDB implementation only supports local addresses [ 707.523108][T16824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3022'. [ 707.989305][T16829] mac80211_hwsim hwsim30 .3c: renamed from wlan1 [ 709.606007][T16877] netlink: 'syz.3.3039': attribute type 2 has an invalid length. [ 709.645500][T16877] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.3039'. [ 709.751128][T16872] syzkaller0: entered promiscuous mode [ 709.764228][T16872] syzkaller0: entered allmulticast mode [ 709.773961][T16880] netlink: 'syz.2.3040': attribute type 10 has an invalid length. [ 709.913946][T16880] team0: Device hsr_slave_0 failed to register rx_handler [ 710.027252][T16880] syz.2.3040 (16880) used greatest stack depth: 17896 bytes left [ 712.633247][T16917] delete_channel: no stack [ 712.654664][T16917] delete_channel: no stack [ 712.964864][T16935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3055'. [ 712.993446][T16935] netlink: 'syz.0.3055': attribute type 10 has an invalid length. [ 713.014165][T16935] netlink: 'syz.0.3055': attribute type 10 has an invalid length. [ 713.026370][T16935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3055'. [ 713.882372][T16956] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3062'. [ 713.902268][T16956] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3062'. [ 713.916153][T16958] netlink: 'syz.0.3063': attribute type 6 has an invalid length. [ 713.932729][T16958] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3063'. [ 714.344612][T16975] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3067'. [ 714.813721][T17001] netlink: 'syz.4.3070': attribute type 4 has an invalid length. [ 716.293381][T17022] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.3076'. [ 716.323158][T17024] netlink: 'syz.2.3077': attribute type 4 has an invalid length. [ 716.337734][T17024] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3077'. [ 716.663328][T17027] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3078'. [ 716.682849][T17027] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3078'. [ 716.782558][T17031] netlink: 'syz.3.3080': attribute type 29 has an invalid length. [ 716.792668][T17031] netlink: 'syz.3.3080': attribute type 29 has an invalid length. [ 717.245655][T17041] netlink: 'syz.3.3084': attribute type 4 has an invalid length. [ 717.354793][T17045] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 718.063261][T17082] __nla_validate_parse: 5 callbacks suppressed [ 718.063354][T17082] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3095'. [ 718.513074][T17096] netlink: 'syz.2.3100': attribute type 1 has an invalid length. [ 718.521600][T17096] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.3100'. [ 719.039545][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 719.241828][T17123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3109'. [ 719.328436][T17130] netlink: 'syz.0.3106': attribute type 33 has an invalid length. [ 719.358393][T17130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3106'. [ 720.393702][T17143] netlink: zone id is out of range [ 720.410302][T17143] netlink: set zone limit has 8 unknown bytes [ 720.532840][T17141] sctp: [Deprecated]: syz.3.3113 (pid 17141) Use of int in max_burst socket option deprecated. [ 720.532840][T17141] Use struct sctp_assoc_value instead [ 721.260201][T17171] netlink: 'syz.2.3123': attribute type 10 has an invalid length. [ 721.334023][T17171] team0: Port device netdevsim0 removed [ 721.352116][T17175] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3123'. [ 721.407223][T17178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3125'. [ 721.446438][T17179] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3125'. [ 722.303209][T17189] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3126'. [ 722.321795][T17183] netlink: 'syz.3.3125': attribute type 17 has an invalid length. [ 722.330416][T17183] netlink: 'syz.3.3125': attribute type 16 has an invalid length. [ 722.338618][T17183] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3125'. [ 725.797386][T17219] netlink: 'syz.0.3135': attribute type 10 has an invalid length. [ 725.890449][T17221] netlink: 'syz.2.3136': attribute type 10 has an invalid length. [ 725.949118][T17221] bond0: (slave bond_slave_0): Releasing backup interface [ 726.003201][T17221] bond_slave_0: left promiscuous mode [ 726.526982][T17251] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3143'. [ 727.508224][T17269] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3149'. [ 727.848047][T17280] netlink: 'syz.2.3153': attribute type 10 has an invalid length. [ 727.881367][T17280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3153'. [ 727.961205][T17282] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 728.010145][T17282] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3154'. [ 728.013983][T17284] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3155'. [ 728.313353][T17287] netlink: 'syz.2.3157': attribute type 10 has an invalid length. [ 728.339898][T17287] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 729.178591][T17292] netlink: 'syz.3.3159': attribute type 21 has an invalid length. [ 729.203913][T17292] netlink: 'syz.3.3159': attribute type 6 has an invalid length. [ 729.248287][T17292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3159'. [ 729.855976][T17308] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3164'. [ 729.973063][T17312] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.3165'. [ 730.662066][T17320] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 730.721851][T17320] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3167'. [ 730.764314][T17323] netlink: 'syz.0.3168': attribute type 10 has an invalid length. [ 730.848844][T17323] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 732.100008][T17323] netlink: 'syz.0.3168': attribute type 39 has an invalid length. [ 733.235952][T17334] macvlan1: entered promiscuous mode [ 733.245703][T17334] macvlan1: entered allmulticast mode [ 733.257905][T17334] veth1_vlan: entered allmulticast mode [ 733.693654][T17347] netlink: 'syz.3.3174': attribute type 33 has an invalid length. [ 733.718685][T17347] netlink: 'syz.3.3174': attribute type 3 has an invalid length. [ 733.751070][T17347] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.3174'. [ 733.841934][T17348] aaaaaaaaaaaaaaa: entered promiscuous mode [ 734.344594][T17357] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 734.369529][T17357] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 734.390786][T17357] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 734.425794][T17357] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 734.450578][T17357] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 734.626347][T17370] netlink: 'syz.3.3179': attribute type 1 has an invalid length. [ 734.647683][T17370] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3179'. [ 734.733922][T17369] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 735.946788][T17383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3181'. [ 735.956409][T17381] bridge0: port 5(batadv0) entered blocking state [ 735.975364][T17381] bridge0: port 5(batadv0) entered disabled state [ 735.989015][T17381] batadv0: entered allmulticast mode [ 736.039683][T17381] batadv0: entered promiscuous mode [ 736.052900][T17381] bridge0: port 5(batadv0) entered blocking state [ 736.061652][T17381] bridge0: port 5(batadv0) entered forwarding state [ 736.177922][ T32] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 736.187289][ T32] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 736.204915][T17383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3181'. [ 736.234964][T17384] netlink: 'syz.3.3183': attribute type 10 has an invalid length. [ 736.250976][T17384] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 736.276658][T17384] team0: Port device netdevsim0 removed [ 736.306859][T17384] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 736.914545][T17398] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3190'. [ 737.136570][T17406] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3192'. [ 737.347083][T17411] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3195'. [ 737.883782][T17424] syz.2.3197: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 737.986176][T17424] CPU: 0 PID: 17424 Comm: syz.2.3197 Not tainted syzkaller #0 [ 737.993764][T17424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 738.003978][T17424] Call Trace: [ 738.007311][T17424] [ 738.010302][T17424] dump_stack_lvl+0x18c/0x250 [ 738.015068][T17424] ? show_regs_print_info+0x20/0x20 [ 738.020338][T17424] ? load_image+0x420/0x420 [ 738.024908][T17424] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 738.031386][T17424] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 738.038026][T17424] warn_alloc+0x246/0x340 [ 738.042428][T17424] ? stack_trace_save+0xaa/0x100 [ 738.047436][T17424] ? zone_watermark_ok_safe+0x230/0x230 [ 738.053077][T17424] ? kasan_set_track+0x5f/0x70 [ 738.057941][T17424] ? kasan_set_track+0x4e/0x70 [ 738.062769][T17424] ? __kasan_kmalloc+0x8f/0xa0 [ 738.067590][T17424] ? xsk_init_queue+0xad/0x100 [ 738.072409][T17424] ? xsk_setsockopt+0x4c9/0x750 [ 738.077318][T17424] ? do_sock_setsockopt+0x175/0x1a0 [ 738.082588][T17424] ? __x64_sys_setsockopt+0x182/0x200 [ 738.088038][T17424] __vmalloc_node_range+0x129/0x1320 [ 738.093442][T17424] ? free_vm_area+0x50/0x50 [ 738.098026][T17424] vmalloc_user+0x74/0x80 [ 738.102418][T17424] ? xskq_create+0xbf/0x170 [ 738.106983][T17424] xskq_create+0xbf/0x170 [ 738.111510][T17424] xsk_init_queue+0xad/0x100 [ 738.116167][T17424] xsk_setsockopt+0x4c9/0x750 [ 738.120914][T17424] ? xsk_poll+0x670/0x670 [ 738.125303][T17424] ? __fget_files+0x28/0x460 [ 738.130003][T17424] ? aa_sock_opt_perm+0x74/0x100 [ 738.135009][T17424] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 738.140623][T17424] ? security_socket_setsockopt+0x7e/0xa0 [ 738.146407][T17424] ? xsk_poll+0x670/0x670 [ 738.150802][T17424] do_sock_setsockopt+0x175/0x1a0 [ 738.155946][T17424] ? __fdget+0x180/0x210 [ 738.160277][T17424] __x64_sys_setsockopt+0x182/0x200 [ 738.165643][T17424] do_syscall_64+0x55/0xb0 [ 738.170141][T17424] ? clear_bhb_loop+0x40/0x90 [ 738.174878][T17424] ? clear_bhb_loop+0x40/0x90 [ 738.179619][T17424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.185731][T17424] RIP: 0033:0x7fa9d599de59 [ 738.190204][T17424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.209875][T17424] RSP: 002b:00007fa9d67b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 738.218370][T17424] RAX: ffffffffffffffda RBX: 00007fa9d5c26180 RCX: 00007fa9d599de59 [ 738.226406][T17424] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 738.234633][T17424] RBP: 00007fa9d5a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 738.242758][T17424] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 738.250882][T17424] R13: 00007fa9d5c26218 R14: 00007fa9d5c26180 R15: 00007fffcd4c6488 [ 738.258927][T17424] [ 738.271816][T17424] Mem-Info: [ 738.277746][T17424] active_anon:11933 inactive_anon:0 isolated_anon:0 [ 738.277746][T17424] active_file:19131 inactive_file:40210 isolated_file:0 [ 738.277746][T17424] unevictable:768 dirty:189 writeback:0 [ 738.277746][T17424] slab_reclaimable:11077 slab_unreclaimable:99955 [ 738.277746][T17424] mapped:27484 shmem:6219 pagetables:578 [ 738.277746][T17424] sec_pagetables:0 bounce:0 [ 738.277746][T17424] kernel_misc_reclaimable:0 [ 738.277746][T17424] free:1324218 free_pcp:12641 free_cma:0 [ 738.418084][T17424] Node 0 active_anon:44432kB inactive_anon:0kB active_file:76524kB inactive_file:160640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110660kB dirty:756kB writeback:0kB shmem:19888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11712kB pagetables:2484kB sec_pagetables:0kB all_unreclaimable? no [ 738.479103][T17424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 738.555886][T17424] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.623783][T17424] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 738.649080][T17424] Node 0 DMA32 free:1383612kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:43000kB inactive_anon:0kB active_file:76524kB inactive_file:159820kB unevictable:1536kB writepending:660kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:37240kB local_pcp:16692kB free_cma:0kB [ 738.771865][T17424] lowmem_reserve[]: 0 0 0 0 0 [ 738.776908][T17424] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 738.865739][T17424] lowmem_reserve[]: 0 0 0 0 0 [ 738.891779][T17424] Node 1 Normal free:3897896kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17800kB local_pcp:9604kB free_cma:0kB [ 738.971092][T17424] lowmem_reserve[]: 0 0 0 0 0 [ 738.992516][T17424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 739.036812][T17424] Node 0 DMA32: 431*4kB (UM) 1684*8kB (UME) 1750*16kB (UME) 1384*32kB (UME) 382*64kB (UME) 171*128kB (UME) 43*256kB (UME) 24*512kB (UME) 6*1024kB (UM) 8*2048kB (UME) 294*4096kB (UM) = 1383868kB [ 739.158895][T17424] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 739.176022][T17424] Node 1 Normal: 150*4kB (UME) 62*8kB (UME) 32*16kB (UME) 79*32kB (UME) 24*64kB (UME) 4*128kB (UE) 0*256kB 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3897896kB [ 739.194480][T17424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.233285][T17424] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.253095][T17424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 739.298821][T17424] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 739.318866][T17424] 64963 total pagecache pages [ 739.323645][T17424] 0 pages in swap cache [ 739.343284][T17424] Free swap = 124996kB [ 739.347532][T17424] Total swap = 124996kB [ 739.354086][T17424] 2097051 pages RAM [ 739.363318][T17424] 0 pages HighMem/MovableOnly [ 739.368424][T17424] 416953 pages reserved [ 739.372630][T17424] 0 pages cma reserved [ 739.653744][T17455] netlink: set zone limit has 8 unknown bytes [ 739.910141][T17463] netlink: 209632 bytes leftover after parsing attributes in process `syz.2.3206'. [ 739.976314][T17466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3202'. [ 739.985494][T17466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3202'. [ 740.008546][T17466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3202'. [ 740.086715][T17469] validate_nla: 2 callbacks suppressed [ 740.086733][T17469] netlink: 'syz.4.3208': attribute type 21 has an invalid length. [ 740.123612][T17471] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 740.133705][T17471] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3209'. [ 740.226792][T17473] netlink: 'syz.3.3210': attribute type 21 has an invalid length. [ 740.235242][T17473] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3210'. [ 740.277135][T17473] netlink: 'syz.3.3210': attribute type 5 has an invalid length. [ 740.320561][T17473] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3210'. [ 740.346377][T17476] netlink: 'syz.3.3210': attribute type 3 has an invalid length. [ 740.378219][T17476] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3210'. [ 740.490432][T17479] netlink: 'syz.4.3211': attribute type 21 has an invalid length. [ 740.588545][T17479] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 740.596886][T17479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3211'. [ 740.665349][T17487] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3214'. [ 741.038818][T17494] netlink: 'syz.0.3216': attribute type 29 has an invalid length. [ 741.059829][T17494] netlink: 'syz.0.3216': attribute type 29 has an invalid length. [ 741.120021][T17494] netlink: 'syz.0.3216': attribute type 29 has an invalid length. [ 742.098925][T17508] macvlan1: entered promiscuous mode [ 742.104551][T17508] macvlan1: entered allmulticast mode [ 742.141482][T17508] veth1_vlan: entered allmulticast mode [ 744.515055][T17535] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 744.527208][T17535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.072306][T11116] tipc: Subscription rejected, illegal request [ 745.333841][T17548] __nla_validate_parse: 1 callbacks suppressed [ 745.333874][T17548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3229'. [ 746.464320][T17587] validate_nla: 10 callbacks suppressed [ 746.464340][T17587] netlink: 'syz.0.3241': attribute type 10 has an invalid length. [ 746.507896][T17587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3241'. [ 746.550683][T17587] batman_adv: batadv0: Adding interface: veth0_vlan [ 746.557487][T17587] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.617759][T17587] batman_adv: batadv0: Not using interface veth0_vlan (retrying later): interface not active [ 746.771636][T17594] netlink: 'syz.3.3244': attribute type 10 has an invalid length. [ 746.791088][T17594] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.3244'. [ 746.910141][T17596] netlink: 'syz.4.3242': attribute type 29 has an invalid length. [ 746.943268][T17596] netlink: 'syz.4.3242': attribute type 29 has an invalid length. [ 746.961864][T17601] netlink: 'syz.4.3242': attribute type 29 has an invalid length. [ 746.984946][T17596] netlink: 'syz.4.3242': attribute type 29 has an invalid length. [ 747.017406][T17596] netlink: 'syz.4.3242': attribute type 29 has an invalid length. [ 747.071803][T17596] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 747.097561][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.156886][T17596] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 747.206739][T17596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.614174][T17601] netlink: 'syz.4.3242': attribute type 29 has an invalid length. [ 747.683459][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.697697][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.979631][T17621] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 748.037919][T17621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3248'. [ 748.103236][T17621] ipvlan1: entered promiscuous mode [ 748.165006][T17621] ipvlan1: entered allmulticast mode [ 748.193525][T17621] veth0_vlan: entered allmulticast mode [ 748.268233][T17621] bridge0: port 6(ipvlan1) entered blocking state [ 748.293462][T17621] bridge0: port 6(ipvlan1) entered disabled state [ 748.338619][T17621] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 748.594399][T17631] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 748.611464][T17631] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3255'. [ 749.227528][T17644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3258'. [ 749.741012][T17651] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3259'. [ 749.828821][T17650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3261'. [ 750.647310][T17677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3265'. [ 750.692401][T17677] ipvlan1: entered promiscuous mode [ 750.707979][T17677] ipvlan1: entered allmulticast mode [ 750.721437][T17677] veth0_vlan: entered allmulticast mode [ 750.819693][T17680] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3268'. [ 750.837141][T17677] bridge0: port 2(ipvlan1) entered blocking state [ 750.850140][T17677] bridge0: port 2(ipvlan1) entered disabled state [ 750.911098][T17677] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 752.017534][T17703] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3275'. [ 752.496769][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 752.670366][T17722] validate_nla: 3 callbacks suppressed [ 752.670388][T17722] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 752.702790][T17722] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3281'. [ 753.088517][T17727] netlink: 'syz.0.3282': attribute type 21 has an invalid length. [ 755.887090][T17736] netlink: 'syz.2.3285': attribute type 10 has an invalid length. [ 755.906210][T17736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3285'. [ 755.924323][T17736] ipvlan1: entered promiscuous mode [ 755.931976][T17736] ipvlan1: entered allmulticast mode [ 755.941027][T17736] veth0_vlan: entered allmulticast mode [ 755.980813][T17736] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 756.276891][T17757] netlink: 'syz.3.3292': attribute type 1 has an invalid length. [ 756.292764][T17757] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3292'. [ 757.122372][T17771] netlink: 'syz.0.3295': attribute type 3 has an invalid length. [ 757.146441][T17771] netlink: 'syz.0.3295': attribute type 29 has an invalid length. [ 757.156870][T17771] netlink: 'syz.0.3295': attribute type 3 has an invalid length. [ 757.169198][T17771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3295'. [ 757.421656][T17785] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3301'. [ 757.520453][T17785] sit0: entered allmulticast mode [ 757.583979][T17785] sit0: entered promiscuous mode [ 757.746117][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 757.974566][T17799] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 757.982811][T17799] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3305'. [ 759.002845][T17821] netlink: 'syz.3.3311': attribute type 10 has an invalid length. [ 759.207475][T17832] netlink: 'syz.3.3312': attribute type 15 has an invalid length. [ 759.226169][T17832] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3312'. [ 759.251597][T17831] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3313'. [ 759.390561][T17839] netlink: 'syz.4.3315': attribute type 13 has an invalid length. [ 759.422438][T17839] netlink: 'syz.4.3315': attribute type 58 has an invalid length. [ 759.442428][T17839] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3315'. [ 759.471784][T17840] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3315'. [ 759.490743][T17827] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 759.571255][T17844] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 759.931130][T17855] netlink: 'syz.4.3320': attribute type 3 has an invalid length. [ 760.534759][T17865] netlink: 'syz.4.3323': attribute type 10 has an invalid length. [ 760.664351][T17865] team0: Port device geneve1 added [ 760.839000][T17877] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 760.919520][T17883] __nla_validate_parse: 4 callbacks suppressed [ 760.919540][T17883] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3329'. [ 761.392836][T17891] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3331'. [ 761.449780][T17891] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3331'. [ 761.702748][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'. [ 761.774562][T17896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3331'. [ 761.800808][T17896] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 762.778747][T17904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3334'. [ 762.995701][T17916] validate_nla: 3 callbacks suppressed [ 762.995720][T17916] netlink: 'syz.0.3335': attribute type 3 has an invalid length. [ 763.013916][T17916] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3335'. [ 763.574554][T17926] netlink: 'syz.0.3341': attribute type 1 has an invalid length. [ 763.613339][T17926] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3341'. [ 763.879517][T17933] netlink: 'syz.4.3343': attribute type 10 has an invalid length. [ 764.284198][T17933] team0: Port device .3c added [ 764.399355][T17938] netlink: 'syz.0.3352': attribute type 1 has an invalid length. [ 764.430199][T17937] delete_channel: no stack [ 764.436412][T17937] delete_channel: no stack [ 764.445615][T17938] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3352'. [ 765.261031][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'. [ 766.388114][T18002] __nla_validate_parse: 2 callbacks suppressed [ 766.388133][T18002] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3362'. [ 766.566120][T18007] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3364'. [ 766.638338][T18010] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3363'. [ 766.842248][T18013] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 766.949728][T18013] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 767.016356][T18015] netlink: 'syz.0.3366': attribute type 29 has an invalid length. [ 767.298766][T18023] netlink: 'syz.2.3369': attribute type 33 has an invalid length. [ 767.348897][T18023] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3369'. [ 767.377933][T18023] `: renamed from ip6tnl0 (while UP) [ 767.446099][T18023] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 767.481419][T18032] netlink: 185272 bytes leftover after parsing attributes in process `syz.2.3369'. [ 767.499433][T18032] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 768.530220][T18054] netlink: 'syz.4.3376': attribute type 3 has an invalid length. [ 768.541075][T18054] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.3376'. [ 768.572109][T18057] syz.0.3378[18057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.572319][T18057] syz.0.3378[18057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 769.568902][T18060] delete_channel: no stack [ 769.742677][T18072] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3383'. [ 770.205302][T18084] netlink: 'syz.3.3387': attribute type 1 has an invalid length. [ 770.227951][T18084] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3387'. [ 770.961835][T18091] netlink: 'syz.3.3388': attribute type 3 has an invalid length. [ 770.978779][T18091] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3388'. [ 771.532189][T18111] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 771.567911][T18111] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3394'. [ 771.581854][T18111] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 771.849819][T18121] netlink: 'syz.2.3398': attribute type 1 has an invalid length. [ 771.867535][T18121] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3398'. [ 772.934120][T18135] sctp: [Deprecated]: syz.4.3402 (pid 18135) Use of int in maxseg socket option. [ 772.934120][T18135] Use struct sctp_assoc_value instead [ 773.169909][T18139] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3403'. [ 774.013795][T18168] netlink: 'syz.2.3411': attribute type 10 has an invalid length. [ 774.024528][T18168] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3411'. [ 774.245352][T18173] netlink: 'syz.0.3412': attribute type 10 has an invalid length. [ 774.395087][T18178] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3414'. [ 774.426582][T18178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 775.316919][T18196] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 775.352363][T18196] syzkaller1: linktype set to 773 [ 776.565797][T18222] netlink: 'syz.0.3426': attribute type 9 has an invalid length. [ 776.676600][T18222] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3426'. [ 776.748268][T18229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3427'. [ 776.814149][T18229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3427'. [ 777.885844][T18226] netlink: 'syz.0.3426': attribute type 9 has an invalid length. [ 777.918097][T18226] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3426'. [ 778.086055][T18245] netlink: 'syz.2.3431': attribute type 10 has an invalid length. [ 778.095649][T18224] netlink: 'syz.0.3426': attribute type 9 has an invalid length. [ 778.108341][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3431'. [ 778.120110][T18245] netlink: 'syz.2.3431': attribute type 10 has an invalid length. [ 778.132865][T18245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3431'. [ 778.151729][T18224] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3426'. [ 778.710605][T18269] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 778.823294][T18269] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3437'. [ 779.126389][T18278] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3439'. [ 779.725817][T18290] netlink: 'syz.0.3444': attribute type 10 has an invalid length. [ 779.764538][ T5789] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 779.767754][T18290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3444'. [ 779.784483][T18290] netlink: 'syz.0.3444': attribute type 10 has an invalid length. [ 781.059090][T18302] veth1_macvtap: left allmulticast mode [ 781.065048][T18302] veth1_macvtap: left promiscuous mode [ 781.076398][T18302] macsec0: left promiscuous mode [ 781.131399][T18307] veth1_macvtap: entered promiscuous mode [ 781.137218][T18307] veth1_macvtap: entered allmulticast mode [ 781.186057][T18307] macsec0: entered promiscuous mode [ 781.459183][T18312] delete_channel: no stack [ 782.776330][T18329] netlink: 'syz.4.3456': attribute type 10 has an invalid length. [ 782.800276][T18329] __nla_validate_parse: 1 callbacks suppressed [ 782.800295][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3456'. [ 782.989139][T18329] netlink: 'syz.4.3456': attribute type 10 has an invalid length. [ 782.998999][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3456'. [ 783.010497][T18334] netlink: 'syz.0.3455': attribute type 21 has an invalid length. [ 783.019883][T18334] netlink: 'syz.0.3455': attribute type 6 has an invalid length. [ 783.408570][T18349] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3459'. [ 783.431772][T18349] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 783.445297][T18349] CPU: 1 PID: 18349 Comm: syz.0.3459 Not tainted syzkaller #0 [ 783.452955][T18349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 783.463187][T18349] Call Trace: [ 783.466544][T18349] [ 783.469544][T18349] dump_stack_lvl+0x18c/0x250 [ 783.474365][T18349] ? show_regs_print_info+0x20/0x20 [ 783.479705][T18349] ? load_image+0x420/0x420 [ 783.484327][T18349] sysfs_warn_dup+0x8e/0xa0 [ 783.488917][T18349] sysfs_do_create_link_sd+0xc0/0x110 [ 783.494373][T18349] device_add_class_symlinks+0x1cf/0x240 [ 783.500142][T18349] device_add+0x4f9/0xc40 [ 783.504557][T18349] wiphy_register+0x1d99/0x2ac0 [ 783.509533][T18349] ? cfg80211_event_work+0x40/0x40 [ 783.514715][T18349] ? minstrel_ht_alloc+0x88a/0x990 [ 783.519938][T18349] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 783.526098][T18349] ieee80211_register_hw+0x2dd8/0x3b30 [ 783.531658][T18349] ? ieee80211_register_hw+0xef1/0x3b30 [ 783.537301][T18349] ? ieee80211_tasklet_handler+0x20/0x20 [ 783.542999][T18349] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 783.548989][T18349] ? __debug_object_init+0xec/0x450 [ 783.554265][T18349] ? __asan_memset+0x22/0x40 [ 783.559071][T18349] ? __hrtimer_init+0x189/0x270 [ 783.564000][T18349] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 783.569828][T18349] ? mac80211_hwsim_free+0x220/0x220 [ 783.575177][T18349] ? rcu_is_watching+0x15/0xb0 [ 783.579995][T18349] ? kstrndup+0xbd/0x140 [ 783.584331][T18349] hwsim_new_radio_nl+0xdad/0x1a70 [ 783.589533][T18349] ? __nla_validate+0x50/0x50 [ 783.594410][T18349] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 783.600858][T18349] ? __nla_parse+0x40/0x50 [ 783.605340][T18349] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 783.611732][T18349] genl_family_rcv_msg_doit+0x21a/0x310 [ 783.617445][T18349] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 783.623410][T18349] ? bpf_lsm_capable+0x9/0x10 [ 783.628166][T18349] ? security_capable+0x89/0xb0 [ 783.633076][T18349] genl_rcv_msg+0x611/0x7a0 [ 783.637677][T18349] ? genl_bind+0x360/0x360 [ 783.642159][T18349] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 783.648553][T18349] ? perf_trace_lock+0x303/0x3b0 [ 783.653558][T18349] ? __kasan_kmalloc_large+0x8b/0xa0 [ 783.658921][T18349] netlink_rcv_skb+0x235/0x4c0 [ 783.663742][T18349] ? genl_bind+0x360/0x360 [ 783.668218][T18349] ? netlink_ack+0x1160/0x1160 [ 783.673053][T18349] ? __lock_acquire+0x7d80/0x7d80 [ 783.678163][T18349] ? down_read+0x1ac/0x2e0 [ 783.682725][T18349] genl_rcv+0x28/0x40 [ 783.686842][T18349] netlink_unicast+0x7b1/0x930 [ 783.691673][T18349] netlink_sendmsg+0x8d0/0xbf0 [ 783.696502][T18349] ? netlink_getsockopt+0x590/0x590 [ 783.701750][T18349] ? apparmor_socket_sendmsg+0x8e/0x330 [ 783.707345][T18349] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 783.712684][T18349] ? security_socket_sendmsg+0x80/0xa0 [ 783.718195][T18349] ? netlink_getsockopt+0x590/0x590 [ 783.723451][T18349] ____sys_sendmsg+0x61b/0x980 [ 783.728286][T18349] ? __asan_memset+0x22/0x40 [ 783.732930][T18349] ? __sys_sendmsg_sock+0x30/0x30 [ 783.738002][T18349] ? __import_iovec+0x5f2/0x850 [ 783.742918][T18349] ? import_iovec+0x73/0xa0 [ 783.747475][T18349] ___sys_sendmsg+0x2a6/0x360 [ 783.752216][T18349] ? __sys_sendmsg+0x2b0/0x2b0 [ 783.757213][T18349] __se_sys_sendmsg+0x1d0/0x2c0 [ 783.762129][T18349] ? __x64_sys_sendmsg+0x80/0x80 [ 783.767156][T18349] ? lockdep_hardirqs_on+0x98/0x150 [ 783.772413][T18349] do_syscall_64+0x55/0xb0 [ 783.776877][T18349] ? clear_bhb_loop+0x40/0x90 [ 783.781606][T18349] ? clear_bhb_loop+0x40/0x90 [ 783.786333][T18349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.792286][T18349] RIP: 0033:0x7fee3c19de59 [ 783.796747][T18349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.816399][T18349] RSP: 002b:00007fee3cfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.824870][T18349] RAX: ffffffffffffffda RBX: 00007fee3c426090 RCX: 00007fee3c19de59 [ 783.832876][T18349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 783.840993][T18349] RBP: 00007fee3c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 783.849004][T18349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.857048][T18349] R13: 00007fee3c426128 R14: 00007fee3c426090 R15: 00007ffd01914058 [ 783.865288][T18349] [ 785.067382][T18360] netlink: 'syz.0.3465': attribute type 10 has an invalid length. [ 785.079773][T18360] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.3465'. [ 785.249968][T18365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 785.257674][T18365] IPv6: NLM_F_CREATE should be set when creating new route [ 785.265715][T18365] IPv6: NLM_F_CREATE should be set when creating new route [ 785.273423][T18365] IPv6: NLM_F_CREATE should be set when creating new route [ 785.317175][T18365] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3468'. [ 787.401670][T18404] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3480'. [ 787.536569][T18404] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 788.136117][T18415] netlink: 'syz.3.3483': attribute type 6 has an invalid length. [ 788.171538][T18415] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3483'. [ 789.390396][T18438] netlink: 'syz.2.3490': attribute type 1 has an invalid length. [ 789.440353][T18438] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3490'. [ 790.714244][T18448] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.3492'. [ 790.945349][T18449] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3493'. [ 791.136570][T18453] netlink: 'syz.0.3494': attribute type 10 has an invalid length. [ 791.144924][T18453] mac80211_hwsim hwsim30 .3c: left allmulticast mode [ 792.455101][T18479] netlink: 'syz.4.3502': attribute type 1 has an invalid length. [ 792.493267][T18479] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3502'. [ 792.528597][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.538684][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.548756][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.558748][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.568509][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.578354][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.588050][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.597847][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.607605][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 792.617654][T18473] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 794.561399][T18532] netlink: 'syz.0.3515': attribute type 1 has an invalid length. [ 794.607705][T18532] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3515'. [ 794.666231][T18534] netlink: 'syz.2.3517': attribute type 21 has an invalid length. [ 794.725793][T18534] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3517'. [ 795.091367][T18540] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3519'. [ 796.108228][T18566] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3526'. [ 797.247990][T18588] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3532'. [ 797.278050][T18588] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3532'. [ 798.096885][T18614] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3539'. [ 798.152916][T18614] netlink: 'syz.2.3539': attribute type 11 has an invalid length. [ 798.720390][T18634] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3543'. [ 798.891976][T18639] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 798.930988][T18639] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3544'. [ 799.089175][T18641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3546'. [ 799.402303][T18643] delete_channel: no stack [ 800.242926][T18657] netlink: 'syz.0.3551': attribute type 1 has an invalid length. [ 800.257742][T18657] __nla_validate_parse: 1 callbacks suppressed [ 800.257765][T18657] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.3551'. [ 801.822154][T18673] netlink: 'syz.3.3556': attribute type 29 has an invalid length. [ 801.855910][T18673] netlink: 'syz.3.3556': attribute type 29 has an invalid length. [ 801.899914][T18678] netlink: 'syz.3.3556': attribute type 29 has an invalid length. [ 803.198843][T18680] net_ratelimit: 3447 callbacks suppressed [ 803.198884][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.214632][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.224179][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.233770][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.243285][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.252801][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.262417][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.271957][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.281457][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.290949][T18680] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 803.965157][T18689] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3561'. [ 803.991479][T18689] bridge_slave_1: default FDB implementation only supports local addresses [ 805.558290][T18726] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3570'. [ 805.952053][T18748] syzkaller0: left allmulticast mode [ 806.817118][T18761] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.3580'. [ 807.342791][T18751] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3577'. [ 807.374587][T18751] bridge_slave_1: default FDB implementation only supports local addresses [ 807.653646][T11099] tipc: Subscription rejected, illegal request [ 807.817867][T18789] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3587'. [ 809.020233][T18811] net_ratelimit: 3319 callbacks suppressed [ 809.020274][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.036050][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.045543][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.055110][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.064536][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.073902][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.083475][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.092944][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.102516][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.112057][T18811] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 809.136788][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.143779][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.343499][T18830] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3603'. [ 810.971700][T18837] : port 1(ip6gretap0) entered blocking state [ 811.004181][T18837] : port 1(ip6gretap0) entered disabled state [ 811.032681][T18837] ip6gretap0: entered allmulticast mode [ 811.074671][T18837] ip6gretap0: entered promiscuous mode [ 811.108608][T18842] netlink: 'syz.2.3606': attribute type 41 has an invalid length. [ 811.148000][T18838] netlink: 'syz.4.3605': attribute type 10 has an invalid length. [ 811.273262][T18838] team0: Port device .3c removed [ 811.342756][T18838] bond0: (slave .3c): Enslaving as an active interface with an up link [ 811.426152][T18842] netlink: 'syz.2.3606': attribute type 41 has an invalid length. [ 811.820638][T18840] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3598'. [ 811.887851][T18840] bridge_slave_1: default FDB implementation only supports local addresses [ 813.531743][T18876] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 813.550307][T18876] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3615'. [ 814.547451][T18888] netlink: 'syz.0.3618': attribute type 10 has an invalid length. [ 814.561015][T18888] netlink: 'syz.0.3618': attribute type 10 has an invalid length. [ 814.570286][T18888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3618'. [ 814.698652][T18890] net_ratelimit: 3062 callbacks suppressed [ 814.698673][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.713849][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.723086][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.732280][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.741498][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.750696][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.759940][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.769128][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.778409][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 814.787616][T18890] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 815.499175][T18897] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3621'. [ 815.564608][T18897] bridge_slave_1: default FDB implementation only supports local addresses [ 816.087251][T18915] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 816.110469][T18915] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3627'. [ 817.520402][T18907] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3624'. [ 817.544478][T18907] bridge_slave_1: default FDB implementation only supports local addresses [ 821.108844][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3643'. [ 821.175387][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3643'. [ 821.212777][T18975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3643'. [ 821.278672][T18976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3643'. [ 821.662012][T18984] net_ratelimit: 6648 callbacks suppressed [ 821.662038][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.677181][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.686391][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.695610][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.704878][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.714059][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.723289][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.732485][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.741667][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 821.750855][T18984] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 822.440564][T18992] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 822.567822][T18999] syz.2.3652[18999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 822.568204][T18999] syz.2.3652[18999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 822.799941][T18992] syzkaller0: entered promiscuous mode [ 822.817809][T18992] syzkaller0: entered allmulticast mode [ 826.951625][T19019] tap0: tun_chr_ioctl cmd 1074025677 [ 826.959673][T19019] tap0: linktype set to 778 [ 827.600811][T19038] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 827.617228][T19038] pim6reg1: linktype set to 776 [ 828.531894][T19055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3667'. [ 829.987030][T19073] netlink: 'syz.0.3674': attribute type 21 has an invalid length. [ 830.007489][T19073] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3674'. [ 830.016761][T19073] netlink: 'syz.0.3674': attribute type 5 has an invalid length. [ 830.057798][T19073] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3674'. [ 830.100276][T19085] netlink: 'syz.3.3675': attribute type 29 has an invalid length. [ 830.123199][T19085] netlink: 'syz.3.3675': attribute type 29 has an invalid length. [ 830.496403][T19090] netlink: 'syz.3.3675': attribute type 29 has an invalid length. [ 831.059539][T19114] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3683'. [ 831.484136][T19120] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3694'. [ 831.889525][T19125] tap0: tun_chr_ioctl cmd 1074025677 [ 831.899452][T19125] tap0: linktype set to 778 [ 832.361854][T19139] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3692'. [ 832.384070][T19142] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3688'. [ 832.404800][T19142] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 832.413223][T19142] CPU: 0 PID: 19142 Comm: syz.0.3688 Not tainted syzkaller #0 [ 832.420754][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 832.430971][T19142] Call Trace: [ 832.434305][T19142] [ 832.437285][T19142] dump_stack_lvl+0x18c/0x250 [ 832.442086][T19142] ? show_regs_print_info+0x20/0x20 [ 832.447381][T19142] ? load_image+0x420/0x420 [ 832.451962][T19142] sysfs_warn_dup+0x8e/0xa0 [ 832.456518][T19142] sysfs_do_create_link_sd+0xc0/0x110 [ 832.461974][T19142] device_add_class_symlinks+0x1cf/0x240 [ 832.467665][T19142] device_add+0x4f9/0xc40 [ 832.472046][T19142] wiphy_register+0x1d99/0x2ac0 [ 832.476976][T19142] ? cfg80211_event_work+0x40/0x40 [ 832.482134][T19142] ? minstrel_ht_alloc+0x88a/0x990 [ 832.487314][T19142] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 832.493441][T19142] ieee80211_register_hw+0x2dd8/0x3b30 [ 832.498993][T19142] ? ieee80211_register_hw+0xef1/0x3b30 [ 832.504592][T19142] ? ieee80211_tasklet_handler+0x20/0x20 [ 832.510262][T19142] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 832.516216][T19142] ? __debug_object_init+0xec/0x450 [ 832.521469][T19142] ? __asan_memset+0x22/0x40 [ 832.526114][T19142] ? __hrtimer_init+0x189/0x270 [ 832.531019][T19142] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 832.536865][T19142] ? mac80211_hwsim_free+0x220/0x220 [ 832.542222][T19142] ? rcu_is_watching+0x15/0xb0 [ 832.547140][T19142] ? kstrndup+0xbd/0x140 [ 832.551610][T19142] hwsim_new_radio_nl+0xdad/0x1a70 [ 832.556786][T19142] ? __nla_validate+0x50/0x50 [ 832.561531][T19142] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 832.567932][T19142] ? __nla_parse+0x40/0x50 [ 832.572417][T19142] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 832.578820][T19142] genl_family_rcv_msg_doit+0x21a/0x310 [ 832.584533][T19142] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 832.590539][T19142] ? bpf_lsm_capable+0x9/0x10 [ 832.595323][T19142] ? security_capable+0x89/0xb0 [ 832.600275][T19142] genl_rcv_msg+0x611/0x7a0 [ 832.604852][T19142] ? genl_bind+0x360/0x360 [ 832.609323][T19142] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 832.615714][T19142] ? ref_tracker_free+0x686/0x830 [ 832.621088][T19142] ? __kasan_kmalloc_large+0x8b/0xa0 [ 832.626439][T19142] netlink_rcv_skb+0x235/0x4c0 [ 832.631264][T19142] ? genl_bind+0x360/0x360 [ 832.635746][T19142] ? netlink_ack+0x1160/0x1160 [ 832.640587][T19142] ? __lock_acquire+0x7d80/0x7d80 [ 832.645698][T19142] ? down_read+0x1ac/0x2e0 [ 832.650259][T19142] genl_rcv+0x28/0x40 [ 832.654301][T19142] netlink_unicast+0x7b1/0x930 [ 832.659394][T19142] netlink_sendmsg+0x8d0/0xbf0 [ 832.664242][T19142] ? netlink_getsockopt+0x590/0x590 [ 832.669500][T19142] ? apparmor_socket_sendmsg+0x8e/0x330 [ 832.675127][T19142] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 832.680549][T19142] ? security_socket_sendmsg+0x80/0xa0 [ 832.686084][T19142] ? netlink_getsockopt+0x590/0x590 [ 832.691342][T19142] ____sys_sendmsg+0x61b/0x980 [ 832.696171][T19142] ? __asan_memset+0x22/0x40 [ 832.700824][T19142] ? __sys_sendmsg_sock+0x30/0x30 [ 832.705903][T19142] ? __import_iovec+0x5f2/0x850 [ 832.710990][T19142] ? import_iovec+0x73/0xa0 [ 832.715547][T19142] ___sys_sendmsg+0x2a6/0x360 [ 832.720287][T19142] ? __sys_sendmsg+0x2b0/0x2b0 [ 832.725163][T19142] __se_sys_sendmsg+0x1d0/0x2c0 [ 832.730068][T19142] ? __x64_sys_sendmsg+0x80/0x80 [ 832.735081][T19142] ? lockdep_hardirqs_on+0x98/0x150 [ 832.740328][T19142] do_syscall_64+0x55/0xb0 [ 832.744796][T19142] ? clear_bhb_loop+0x40/0x90 [ 832.749518][T19142] ? clear_bhb_loop+0x40/0x90 [ 832.754238][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.760189][T19142] RIP: 0033:0x7fee3c19de59 [ 832.764648][T19142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.784390][T19142] RSP: 002b:00007fee3cfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.792859][T19142] RAX: ffffffffffffffda RBX: 00007fee3c426090 RCX: 00007fee3c19de59 [ 832.800975][T19142] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 832.809084][T19142] RBP: 00007fee3c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 832.817410][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.825562][T19142] R13: 00007fee3c426128 R14: 00007fee3c426090 R15: 00007ffd01914058 [ 832.833608][T19142] [ 833.642027][T19156] netlink: 'syz.4.3696': attribute type 1 has an invalid length. [ 833.650098][T19156] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3696'. [ 833.837202][T19160] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3698'. [ 834.526137][T19167] tap0: tun_chr_ioctl cmd 1074025677 [ 834.539736][T19167] tap0: linktype set to 778 [ 835.276319][T19172] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3702'. [ 835.729921][T19182] netlink: 'syz.0.3705': attribute type 10 has an invalid length. [ 835.816941][T19182] hsr0: left allmulticast mode [ 835.835493][T19182] hsr_slave_0: left allmulticast mode [ 835.855818][T19182] hsr_slave_1: left allmulticast mode [ 835.968043][T19182] bridge0: port 3(hsr0) entered disabled state [ 836.261206][T19199] netlink: 'syz.3.3709': attribute type 1 has an invalid length. [ 836.301374][T19182] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 836.317086][T19199] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3709'. [ 837.156293][T19216] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3716'. [ 837.184489][T19216] netlink: 'syz.3.3716': attribute type 19 has an invalid length. [ 837.224314][T19216] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3716'. [ 837.267049][T19220] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3716'. [ 837.505483][T19233] netlink: 'syz.0.3719': attribute type 1 has an invalid length. [ 837.535787][T19233] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3719'. [ 839.130747][T19283] netlink: 'syz.2.3733': attribute type 1 has an invalid length. [ 839.187844][T19283] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3733'. [ 840.950075][T19312] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.3742'. [ 841.293267][T19331] netlink: 'syz.3.3748': attribute type 1 has an invalid length. [ 841.318018][T19331] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3748'. [ 842.464445][T19359] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3755'. [ 842.505383][T19359] net_ratelimit: 3319 callbacks suppressed [ 842.505402][T19359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 842.556368][T19354] netlink: 'syz.3.3754': attribute type 10 has an invalid length. [ 842.668829][T19354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.717257][T19354] team0: Port device bond0 added [ 842.732248][T19355] netlink: 'syz.3.3754': attribute type 10 has an invalid length. [ 842.908269][T19365] netlink: 'syz.0.3757': attribute type 39 has an invalid length. [ 842.916259][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.923964][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.932072][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.940138][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.948209][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.955807][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.964158][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.973189][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.981208][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.989574][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 842.998276][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.006604][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.014290][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.022479][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.030240][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.037948][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.045533][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.053223][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.061728][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.069427][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.076994][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.084676][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.092398][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.100893][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.108760][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.116530][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.124270][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.133107][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.140986][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.148650][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.156205][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.163931][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.171627][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.179259][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.186858][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.194559][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.202426][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.210108][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.217702][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.225264][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.233018][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.240990][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.249651][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.257255][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.264983][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.272646][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.281061][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.288810][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.296386][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.304038][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.313142][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.320758][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.328446][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.335996][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.343782][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.351396][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.359175][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.366741][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.374830][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.382649][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.390338][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.397963][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.405532][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.413234][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 843.420951][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 844.912520][T19404] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 844.929079][T19404] pim6reg0: persist enabled [ 844.985422][T19404] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 845.557218][T19404] team0: Device wg1 is of different type [ 845.961984][T19412] netlink: 'syz.4.3769': attribute type 10 has an invalid length. [ 846.134920][T19412] team0: Device vxcan0 is of different type [ 846.377949][T19419] netlink: 'syz.0.3771': attribute type 10 has an invalid length. [ 850.605990][T19459] netlink: 'syz.0.3780': attribute type 11 has an invalid length. [ 850.615260][T19459] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3780'. [ 851.173769][T19474] netlink: 'syz.4.3784': attribute type 4 has an invalid length. [ 851.187076][T19474] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3784'. [ 851.321610][T19474] bridge0: port 3(hsr0) entered disabled state [ 851.364222][T19474] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 851.722102][T19491] netlink: 'syz.3.3789': attribute type 10 has an invalid length. [ 852.513610][T19491] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.698097][T19500] sctp: [Deprecated]: syz.4.3793 (pid 19500) Use of int in max_burst socket option deprecated. [ 852.698097][T19500] Use struct sctp_assoc_value instead [ 853.901530][T19528] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3800'. [ 856.605157][T19566] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3811'. [ 858.464969][T19592] netlink: 'syz.4.3818': attribute type 8 has an invalid length. [ 858.479988][T19592] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3818'. [ 859.215548][T19604] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3822'. [ 862.478395][T19639] netlink: 'syz.2.3833': attribute type 21 has an invalid length. [ 862.684709][T19643] syzkaller0: entered promiscuous mode [ 862.700868][T19643] syzkaller0: entered allmulticast mode [ 863.037067][T19655] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3836'. [ 863.087754][T19655] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3836'. [ 863.766327][T19662] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3832'. [ 867.557709][T19683] netlink: 'syz.2.3844': attribute type 10 has an invalid length. [ 867.594064][T19683] bridge_slave_1: entered promiscuous mode [ 867.616534][T19683] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 867.861536][T19696] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.3849'. [ 868.016943][T19703] netlink: 'syz.4.3852': attribute type 3 has an invalid length. [ 868.024993][T19703] netlink: 'syz.4.3852': attribute type 1 has an invalid length. [ 868.037063][T19703] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3852'. [ 868.427279][T19715] netlink: 'syz.4.3855': attribute type 1 has an invalid length. [ 868.435530][T19715] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.3855'. [ 869.260877][T19725] netlink: 'syz.0.3857': attribute type 10 has an invalid length. [ 869.342925][T19728] netlink: 'syz.3.3858': attribute type 10 has an invalid length. [ 869.353429][T19732] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3859'. [ 869.368919][T19728] bridge0: port 5(batadv0) entered disabled state [ 869.376429][T19728] bridge0: port 4(dummy0) entered disabled state [ 869.383175][T19728] bridge0: port 3(hsr0) entered disabled state [ 869.389795][T19728] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.397708][T19728] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.424653][T19728] bridge0: port 5(batadv0) entered blocking state [ 869.431649][T19728] bridge0: port 5(batadv0) entered forwarding state [ 869.440350][T19728] bridge0: port 4(dummy0) entered blocking state [ 869.446958][T19728] bridge0: port 4(dummy0) entered forwarding state [ 869.453797][T19728] bridge0: port 3(hsr0) entered blocking state [ 869.460301][T19728] bridge0: port 3(hsr0) entered forwarding state [ 869.467079][T19728] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.474521][T19728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.482249][T19728] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.489724][T19728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.552731][T19728] team0: Port device bridge0 added [ 869.905795][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3863'. [ 869.921010][T19745] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3863'. [ 869.939647][T19746] netlink: 'syz.2.3864': attribute type 1 has an invalid length. [ 869.971727][T19746] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3864'. [ 870.065971][T19748] netlink: 'syz.3.3865': attribute type 21 has an invalid length. [ 870.569023][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.575684][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.071303][T19762] netlink: 'syz.2.3869': attribute type 1 has an invalid length. [ 871.088971][T19762] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3869'. [ 871.179137][T19769] vlan0: entered allmulticast mode [ 871.373492][T19776] netlink: 'syz.3.3871': attribute type 10 has an invalid length. [ 871.411946][T19776] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.438212][T19776] bridge_slave_1: left allmulticast mode [ 871.446665][T19776] bridge_slave_1: left promiscuous mode [ 871.482104][T19776] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.510576][T19776] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 871.537483][T19777] delete_channel: no stack [ 872.700244][T19804] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3882'. [ 872.726366][T19804] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 872.745756][T19804] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 872.832864][T19815] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3883'. [ 873.070164][T19826] netlink: 'syz.3.3886': attribute type 3 has an invalid length. [ 873.098973][T19820] netlink: 'syz.0.3885': attribute type 1 has an invalid length. [ 873.107459][T19820] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3885'. [ 873.120147][T19823] netlink: 'syz.3.3886': attribute type 3 has an invalid length. [ 873.140781][T19826] netlink: 'syz.3.3886': attribute type 4 has an invalid length. [ 873.152043][T19823] netlink: 'syz.3.3886': attribute type 4 has an invalid length. [ 873.164001][T19826] netlink: 'syz.3.3886': attribute type 7 has an invalid length. [ 873.172086][T19823] netlink: 'syz.3.3886': attribute type 7 has an invalid length. [ 873.181404][T19826] netlink: 'syz.3.3886': attribute type 8 has an invalid length. [ 873.212221][T19823] netlink: 'syz.3.3886': attribute type 8 has an invalid length. [ 873.238168][T19826] netlink: 'syz.3.3886': attribute type 7 has an invalid length. [ 873.263995][T19823] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.3886'. [ 873.564515][T19834] __nla_validate_parse: 1 callbacks suppressed [ 873.564534][T19834] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3889'. [ 873.582663][T19835] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3889'. [ 875.081975][T19851] bridge0: port 2(batadv0) entered blocking state [ 875.098068][T19851] bridge0: port 2(batadv0) entered disabled state [ 875.104807][T19851] batadv0: entered allmulticast mode [ 875.144734][T19851] batadv0: entered promiscuous mode [ 875.154897][T19851] bridge0: port 2(batadv0) entered blocking state [ 875.161656][T19851] bridge0: port 2(batadv0) entered forwarding state [ 875.174883][T19853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3896'. [ 875.212700][T19853] bridge0: port 4(ipvlan1) entered blocking state [ 875.224347][T19853] bridge0: port 4(ipvlan1) entered disabled state [ 875.235454][T19853] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 875.283748][T11107] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 875.293241][T11107] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 875.396116][T19851] mac80211_hwsim hwsim52 wlan1: entered allmulticast mode [ 876.225371][T19874] Q6`Ҙ: renamed from lo (while UP) [ 876.529025][T19883] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3906'. [ 876.551586][T19883] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3906'. [ 876.725467][T19889] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3909'. [ 876.883096][T19891] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3910'. [ 878.141883][T19905] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3915'. [ 878.286643][T19912] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3915'. [ 878.866872][T19921] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3920'. [ 879.788376][T19934] syz.0.3925[19934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.788757][T19934] syz.0.3925[19934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.811843][T19934] validate_nla: 8 callbacks suppressed [ 879.811860][T19934] netlink: 'syz.0.3925': attribute type 10 has an invalid length. [ 879.857638][T19934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3925'. [ 879.882835][T19934] netlink: 'syz.0.3925': attribute type 10 has an invalid length. [ 879.894924][T19934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3925'. [ 880.023703][T19941] netlink: 'syz.4.3927': attribute type 1 has an invalid length. [ 881.984802][T19979] : port 1(ip6gretap0) entered blocking state [ 881.991752][T19979] : port 1(ip6gretap0) entered disabled state [ 882.002606][T19979] ip6gretap0: entered allmulticast mode [ 882.010131][T19979] ip6gretap0: entered promiscuous mode [ 882.510639][T19988] syzkaller0: entered promiscuous mode [ 882.516894][T19988] syzkaller0: entered allmulticast mode [ 887.440019][T20015] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 887.620059][T20039] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3952'. [ 887.814690][T20037] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3953'. [ 888.689199][T20052] : port 1(ip6gretap0) entered blocking state [ 888.706515][T20052] : port 1(ip6gretap0) entered disabled state [ 888.716061][T20052] ip6gretap0: entered allmulticast mode [ 888.748144][T20052] ip6gretap0: entered promiscuous mode [ 889.136562][T20060] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 889.412293][T20067] netlink: 'syz.4.3961': attribute type 12 has an invalid length. [ 889.431075][T20067] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3961'. [ 889.461588][T20067] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3961'. [ 889.908610][T20071] netlink: 'syz.4.3962': attribute type 29 has an invalid length. [ 889.927125][T20071] netlink: 'syz.4.3962': attribute type 29 has an invalid length. [ 890.293798][T20077] syzkaller0: entered promiscuous mode [ 890.320122][T20077] syzkaller0: entered allmulticast mode [ 890.656272][T20088] netlink: 'syz.0.3966': attribute type 33 has an invalid length. [ 890.681916][T20088] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3966'. [ 891.202453][T20099] netlink: 'syz.4.3967': attribute type 1 has an invalid length. [ 895.265071][T20134] netlink: 'syz.2.3976': attribute type 10 has an invalid length. [ 895.322492][T20134] netlink: 'syz.2.3976': attribute type 10 has an invalid length. [ 895.341146][T20134] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3976'. [ 895.361275][T20134] openvswitch: netlink: Message has 4 unknown bytes. [ 896.379158][T20179] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3981'. [ 896.418375][T20179] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3981'. [ 896.494574][T20167] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3981'. [ 897.085823][T20179] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3981'. [ 897.110562][T20184] netlink: 'syz.3.3985': attribute type 6 has an invalid length. [ 897.143187][T20186] netlink: 'syz.0.3981': attribute type 10 has an invalid length. [ 897.152539][T20186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3981'. [ 897.167385][T20186] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 897.179515][T20186] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.240408][T20186] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 897.747223][T20202] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3988'. [ 897.807768][T20204] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3988'. [ 897.902840][T20206] netlink: 'syz.2.3990': attribute type 3 has an invalid length. [ 897.939362][T20206] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3990'. [ 898.290444][T20206] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3990'. [ 898.623827][T20214] netlink: 'syz.2.3990': attribute type 10 has an invalid length. [ 898.649735][T20214] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 899.682578][T20228] netlink: 'syz.0.3997': attribute type 17 has an invalid length. [ 899.881490][T20231] netlink: 'syz.4.3999': attribute type 10 has an invalid length. [ 900.015330][T20231] bond0: (slave .3c): Releasing backup interface [ 900.170238][T20231] team0: Port device .3c added [ 900.533177][T20238] syzkaller0: entered promiscuous mode [ 900.733817][T20252] __nla_validate_parse: 3 callbacks suppressed [ 900.733840][T20252] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4005'. [ 903.961604][T20250] netlink: 'syz.2.4004': attribute type 10 has an invalid length. [ 903.994774][T20250] team0: Port device syz_tun added [ 904.271347][T20276] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4011'. [ 904.507207][T20283] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4014'. [ 904.564938][T20286] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4014'. [ 905.976527][T11719] team0: Port device syz_tun removed [ 905.995595][T20314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.006828][T20314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.022549][T20314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 906.032885][T20314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 906.048185][T20314] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 906.055739][T20314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 906.171099][T20316] sctp: [Deprecated]: syz.0.4022 (pid 20316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.171099][T20316] Use struct sctp_sack_info instead [ 906.198903][T20322] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4024'. [ 906.255245][T20322] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4024'. [ 906.341574][T20324] netlink: 'syz.4.4023': attribute type 27 has an invalid length. [ 906.347262][T20147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.375524][T20324] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.4023'. [ 906.386068][T20323] netlink: 'syz.4.4023': attribute type 21 has an invalid length. [ 906.396227][T20323] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 906.415293][T20323] netlink: 'syz.4.4023': attribute type 2 has an invalid length. [ 906.427263][T20323] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.4023'. [ 906.537064][T20147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.829145][T20147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.942962][T20147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.964429][T20334] netlink: 'syz.0.4027': attribute type 1 has an invalid length. [ 906.972588][T20334] netlink: 'syz.0.4027': attribute type 2 has an invalid length. [ 906.981464][T20334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4027'. [ 907.044686][T20333] netlink: 'syz.0.4027': attribute type 10 has an invalid length. [ 907.263471][T20313] chnl_net:caif_netlink_parms(): no params data found [ 907.603724][T20345] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4030'. [ 907.647184][T20345] sit0: left promiscuous mode [ 907.763911][T20352] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4032'. [ 908.080381][ T5789] Bluetooth: hci0: command tx timeout [ 908.234764][T20313] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.255656][T20313] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.267350][T20313] bridge_slave_0: entered allmulticast mode [ 908.281596][T20313] bridge_slave_0: entered promiscuous mode [ 908.294321][T20349] sit0: entered promiscuous mode [ 908.357263][T20352] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4032'. [ 908.472730][T20313] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.499786][T20313] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.507112][T20313] bridge_slave_1: entered allmulticast mode [ 908.529378][T20313] bridge_slave_1: entered promiscuous mode [ 908.632997][T20367] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4033'. [ 908.890134][T20367] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.4033'. [ 909.028204][T20313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.059521][T20313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.142614][T20313] team0: Port device team_slave_0 added [ 909.191431][T20313] team0: Port device team_slave_1 added [ 909.275306][T20313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.290384][T20313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.321279][T20313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.383377][T20313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.390999][T20313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.426115][T20313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.685313][T20313] hsr_slave_0: entered promiscuous mode [ 909.696371][T20313] hsr_slave_1: entered promiscuous mode [ 909.705723][T20313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.716406][T20313] Cannot create hsr debugfs directory [ 910.163003][ T5789] Bluetooth: hci0: command tx timeout [ 911.167481][T20423] netlink: 'syz.3.4047': attribute type 29 has an invalid length. [ 911.202922][T20421] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 911.305877][T20423] netlink: 'syz.3.4047': attribute type 29 has an invalid length. [ 911.366474][T20421] __nla_validate_parse: 3 callbacks suppressed [ 911.366499][T20421] netlink: 135056 bytes leftover after parsing attributes in process `syz.4.4046'. [ 911.398807][T20421] openvswitch: netlink: Key type 4112 is out of range max 32 [ 911.417153][T20424] netlink: 'syz.3.4047': attribute type 29 has an invalid length. [ 911.432926][T20427] netlink: 'syz.3.4047': attribute type 29 has an invalid length. [ 911.962241][T20434] delete_channel: no stack [ 912.176729][T20454] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4052'. [ 912.237797][ T5789] Bluetooth: hci0: command tx timeout [ 912.513311][T20313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 912.592104][T20313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 912.770047][T20313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 912.791777][T20313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 912.872068][T20147] hsr_slave_0: left promiscuous mode [ 912.947933][T20147] veth0_macvtap: left promiscuous mode [ 912.953946][T20147] veth1_vlan: left promiscuous mode [ 912.967985][T20147] veth0_vlan: left promiscuous mode [ 914.318826][ T5789] Bluetooth: hci0: command tx timeout [ 916.850271][T20147] team0 (unregistering): Port device team_slave_1 removed [ 916.967713][T20147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.976901][T20147] bond_slave_1 (unregistering): left promiscuous mode [ 917.080247][T20147] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 917.089873][T20147] bridge_slave_1 (unregistering): left promiscuous mode [ 917.445924][T20147] bond0 (unregistering): Released all slaves [ 917.893124][T20313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.934042][T20484] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4061'. [ 918.010834][T20313] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.050499][T20162] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.057741][T20162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.081029][T20162] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.088295][T20162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.189395][T20492] syz.0.4063[20492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.192268][T20492] syz.0.4063[20492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.264680][T20489] @0: renamed from bond_slave_1 (while UP) [ 918.680565][T20508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4067'. [ 918.900339][T20313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.074719][T20524] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4070'. [ 919.129068][T20313] veth0_vlan: entered promiscuous mode [ 919.175531][T20313] veth1_vlan: entered promiscuous mode [ 919.306438][T20313] veth0_macvtap: entered promiscuous mode [ 919.333209][T20313] veth1_macvtap: entered promiscuous mode [ 919.383144][T20313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.425215][T20313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.439565][T20313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.450404][T20313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.479947][T20313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.494236][T20313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.513103][T20313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.533903][T20313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.553303][T20313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.577710][T20313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.586527][T20313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.635813][T20313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.901753][T20146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.930183][T20146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.947300][T20552] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4079'. [ 919.978772][T20552] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4079'. [ 920.066570][T20162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.083765][T20162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.349556][T20567] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4081'. [ 920.559490][T20573] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4083'. [ 921.712153][T20606] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4088'. [ 921.750311][T20610] netlink: 'syz.3.4090': attribute type 33 has an invalid length. [ 921.782187][T20610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4090'. [ 921.816081][T20610] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 921.949295][T20615] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4091'. [ 923.140813][T20663] netlink: 'syz.3.4103': attribute type 25 has an invalid length. [ 923.182858][T20663] netlink: 'syz.3.4103': attribute type 9 has an invalid length. [ 923.214945][T20666] __nla_validate_parse: 2 callbacks suppressed [ 923.214964][T20666] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4104'. [ 923.530898][T20679] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4108'. [ 923.653496][T20673] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode [ 924.155659][T20694] netlink: 'syz.3.4110': attribute type 10 has an invalid length. [ 924.261704][T20694] team0 (unregistering): Port device team_slave_0 removed [ 924.293266][T20694] team0 (unregistering): Port device team_slave_1 removed [ 924.316393][T20694] team0 (unregistering): Port device bond0 removed [ 924.328005][T20694] bridge0: port 5(batadv0) entered disabled state [ 924.335675][T20694] bridge0: port 4(dummy0) entered disabled state [ 924.342349][T20694] bridge0: port 3(hsr0) entered disabled state [ 924.348837][T20694] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.382493][T20694] team0 (unregistering): Port device bridge0 removed [ 924.484607][T20707] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4113'. [ 924.776549][T20716] netlink: 'syz.3.4118': attribute type 33 has an invalid length. [ 924.806454][T20718] netlink: 'syz.2.4117': attribute type 10 has an invalid length. [ 924.808449][T20716] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4118'. [ 924.838526][T20718] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.4117'. [ 924.848409][T20716] `: renamed from ip6tnl0 (while UP) [ 924.872972][T20718] openvswitch: netlink: Flow key attr not present in new flow. [ 924.979675][T20716] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 925.148852][T20720] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4117'. [ 925.765183][T20314] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.787664][T20314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.801282][T20314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.824690][T20314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.834765][T20314] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 925.843293][T20314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 925.868256][T20161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.896241][T20738] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4123'. [ 926.008015][T20161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.149000][T20161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.261769][T20161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.610860][T20732] chnl_net:caif_netlink_parms(): no params data found [ 927.666416][T20762] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4129'. [ 927.928113][ T5789] Bluetooth: hci1: command tx timeout [ 927.986547][T20773] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4132'. [ 928.280658][T20732] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.300471][T20732] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.313476][T20732] bridge_slave_0: entered allmulticast mode [ 928.326709][T20732] bridge_slave_0: entered promiscuous mode [ 928.352823][T20732] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.376972][T20732] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.390921][T20732] bridge_slave_1: entered allmulticast mode [ 928.399289][T20732] bridge_slave_1: entered promiscuous mode [ 928.522208][T20732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.553283][T20732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.613899][T20784] netlink: zone id is out of range [ 928.638025][T20784] netlink: set zone limit has 8 unknown bytes [ 928.694175][T20732] team0: Port device team_slave_0 added [ 928.726753][T20732] team0: Port device team_slave_1 added [ 928.867470][T20732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.911757][T20732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.995616][T20732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.240021][T20161] ip6gretap0 (unregistering): left allmulticast mode [ 929.263270][T20161] ip6gretap0 (unregistering): left promiscuous mode [ 929.296272][T20161] : port 1(ip6gretap0) entered disabled state [ 929.369847][T20732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.376880][T20732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.494819][T20732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.625617][T20798] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 929.997951][ T5789] Bluetooth: hci1: command tx timeout [ 931.390047][T20817] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4140'. [ 931.440596][T20732] hsr_slave_0: entered promiscuous mode [ 931.470591][T20732] hsr_slave_1: entered promiscuous mode [ 931.533518][T20819] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4141'. [ 932.078831][ T5789] Bluetooth: hci1: command tx timeout [ 932.088203][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.094729][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.187125][T20849] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4148'. [ 933.319436][T20849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.382257][T20850] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4148'. [ 933.589041][T20850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 933.884024][T20865] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4150'. [ 934.158160][ T5789] Bluetooth: hci1: command tx timeout [ 936.585224][T20732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 936.635337][T20732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 936.689536][T20732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 936.743545][T20732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 937.154871][T20902] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4159'. [ 937.603383][T20732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.849698][T20927] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.4162'. [ 938.097641][T20927] netlink: 'syz.2.4162': attribute type 10 has an invalid length. [ 938.115328][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.123526][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.210400][T20927] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.217884][T20927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.225734][T20927] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.233113][T20927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.304003][T20927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 938.360775][T20933] netlink: 'syz.3.4165': attribute type 29 has an invalid length. [ 938.425407][T20732] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.434108][T20936] netlink: 'syz.3.4165': attribute type 29 has an invalid length. [ 938.454155][T20933] netlink: 'syz.3.4165': attribute type 29 has an invalid length. [ 938.467350][T20933] netlink: 17015 bytes leftover after parsing attributes in process `syz.3.4165'. [ 938.511507][T20933] netlink: 'syz.3.4165': attribute type 29 has an invalid length. [ 938.533740][T20161] hsr_slave_0: left promiscuous mode [ 938.552607][T20161] hsr_slave_1: left promiscuous mode [ 938.572519][T20161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.581323][T20161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.602096][T20161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.617954][T20161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.637925][T20161] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 938.654022][T20161] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 938.669020][T20161] batman_adv: batadv0: Removing interface: veth0_vlan [ 938.687932][T20161] batadv0: left allmulticast mode [ 938.694185][T20161] batadv0: left promiscuous mode [ 938.707859][T20161] bridge0: port 2(batadv0) entered disabled state [ 938.729151][T20161] bridge_slave_0: left allmulticast mode [ 938.735066][T20161] bridge_slave_0: left promiscuous mode [ 938.749427][T20161] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.851146][T20161] veth1_macvtap: left promiscuous mode [ 938.860249][T20161] veth0_macvtap: left promiscuous mode [ 938.872789][T20161] veth1_vlan: left allmulticast mode [ 938.886226][T20161] veth1_vlan: left promiscuous mode [ 940.182564][T20161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.241837][T20161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.296520][T20161] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 940.640567][T20161] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 940.652398][T20161] bond0 (unregistering): Released all slaves [ 940.761234][T20933] netlink: 'syz.3.4165': attribute type 29 has an invalid length. [ 940.797756][T20950] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4168'. [ 940.835984][T20146] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.844863][T20146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.924807][T20147] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.932648][T20147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.994429][T20972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'. [ 941.515489][T20999] netlink: 'syz.2.4175': attribute type 9 has an invalid length. [ 941.554896][T20999] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4175'. [ 941.633977][T20732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.827621][T20732] veth0_vlan: entered promiscuous mode [ 941.853322][T20732] veth1_vlan: entered promiscuous mode [ 941.912345][T20732] veth0_macvtap: entered promiscuous mode [ 941.936844][T20732] veth1_macvtap: entered promiscuous mode [ 941.984721][T20732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.001849][T20732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.015517][T20732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.034635][T20732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.053403][T20732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.064099][T20732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.082393][T20732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.097875][T20732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.113405][T20732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.127375][T20732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.153661][T20732] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.167029][T20732] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.181536][T20732] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.195105][T20732] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.280222][T21005] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4177'. [ 942.437730][T20163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.457622][T20163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.523287][T11111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.552732][T11111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.027969][T21035] netlink: 'syz.3.4183': attribute type 10 has an invalid length. [ 943.064684][T21035] netlink: 'syz.3.4183': attribute type 10 has an invalid length. [ 943.073181][T21035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4183'. [ 943.699179][T21048] netlink: 'syz.0.4185': attribute type 21 has an invalid length. [ 943.711098][T21048] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4185'. [ 943.722016][T21048] netlink: 'syz.0.4185': attribute type 4 has an invalid length. [ 943.733543][T21048] netlink: 'syz.0.4185': attribute type 5 has an invalid length. [ 943.744680][T21048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4185'. [ 943.941532][T21052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.994094][T21056] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4190'. [ 944.335346][T21061] netlink: 'syz.4.4190': attribute type 17 has an invalid length. [ 944.372000][T21061] netlink: 'syz.4.4190': attribute type 16 has an invalid length. [ 944.384282][T21061] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4190'. [ 948.763858][T21109] netlink: 'syz.0.4205': attribute type 21 has an invalid length. [ 948.838195][T21109] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4205'. [ 948.862724][T21107] netlink: 'syz.4.4204': attribute type 3 has an invalid length. [ 948.906582][T21109] netlink: 'syz.0.4205': attribute type 5 has an invalid length. [ 948.933085][T21109] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4205'. [ 948.938619][T21107] netlink: 'syz.4.4204': attribute type 6 has an invalid length. [ 948.980219][T21107] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.4204'. [ 949.303262][T21121] netlink: 'syz.0.4207': attribute type 5 has an invalid length. [ 949.424804][T21125] tun0: tun_chr_ioctl cmd 1074025675 [ 949.438581][T21125] tun0: persist enabled [ 949.537153][T21129] netlink: 'syz.4.4209': attribute type 10 has an invalid length. [ 949.546623][T21129] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4209'. [ 950.277651][T21149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4216'. [ 950.905976][T21149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4216'. [ 950.976113][T21147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4216'. [ 950.994490][T21148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4216'. [ 953.035190][T21208] netlink: 'syz.4.4234': attribute type 10 has an invalid length. [ 953.140496][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.161070][T21216] syzkaller0: entered promiscuous mode [ 953.166814][T21216] syzkaller0: entered allmulticast mode [ 953.386878][T21205] netlink: 'syz.2.4231': attribute type 10 has an invalid length. [ 953.406505][T21205] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.414104][T21205] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.439811][T21205] bond0: (slave bridge0): Releasing backup interface [ 953.463557][T21205] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.471269][T21205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.480645][T21205] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.487934][T21205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.518680][T21205] team0: Port device bridge0 added [ 953.630245][T21222] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 954.249204][T21238] netlink: 'syz.0.4241': attribute type 10 has an invalid length. [ 954.275621][T21240] netlink: 'syz.3.4242': attribute type 29 has an invalid length. [ 954.453838][T21238] team0: Port device geneve1 added [ 954.480796][T21240] netlink: 'syz.3.4242': attribute type 29 has an invalid length. [ 954.709354][T21247] netlink: 'syz.4.4244': attribute type 1 has an invalid length. [ 954.717323][T21247] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.4244'. [ 954.885801][T21261] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4248'. [ 955.194813][T21278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4253'. [ 955.227734][T21278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4253'. [ 955.262303][T21278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4253'. [ 955.279342][T21278] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4253'. [ 955.316457][T21278] netlink: 'syz.2.4253': attribute type 6 has an invalid length. [ 955.337585][T21278] netlink: 'syz.2.4253': attribute type 3 has an invalid length. [ 955.353119][T21278] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.4253'. [ 955.649667][T21287] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4257'. [ 955.687082][T21289] netlink: 'syz.2.4257': attribute type 12 has an invalid length. [ 955.755185][T21289] netlink: 185596 bytes leftover after parsing attributes in process `syz.2.4257'. [ 955.926491][T21286] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4255'. [ 955.965703][T21299] netlink: 'syz.0.4260': attribute type 12 has an invalid length. [ 956.250674][T21310] netlink: 'syz.3.4264': attribute type 10 has an invalid length. [ 957.301365][T21318] netlink: 'syz.0.4267': attribute type 10 has an invalid length. [ 957.437272][T21318] bond0: (slave bond_slave_0): Releasing backup interface [ 960.560022][T21355] sctp: [Deprecated]: syz.0.4275 (pid 21355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 960.560022][T21355] Use struct sctp_sack_info instead [ 960.809324][T21366] : renamed from veth1_vlan (while UP) [ 961.086955][T21369] __nla_validate_parse: 4 callbacks suppressed [ 961.086978][T21369] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4281'. [ 961.388013][T21383] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4283'. [ 961.418093][T21383] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4283'. [ 961.462106][T21371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4283'. [ 961.515848][T21378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4283'. [ 961.966977][T21397] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4290'. [ 962.103276][T21397] team0: Port device C removed [ 962.112828][T21397] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 962.227253][T21401] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4291'. [ 962.632250][T21422] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4293'. [ 962.657133][T21422] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 965.490989][T21436] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4302'. [ 965.956298][T21438] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4303'. [ 965.986924][T21438] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 966.393666][T21477] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4312'. [ 966.458293][T21477] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4312'. [ 966.505577][T21478] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4312'. [ 966.535287][T21481] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.4314'. [ 967.417169][T21504] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4318'. [ 967.438382][T21505] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4320'. [ 967.563592][T21510] validate_nla: 1 callbacks suppressed [ 967.563609][T21510] netlink: 'syz.2.4320': attribute type 29 has an invalid length. [ 967.578933][T21510] netlink: 'syz.2.4320': attribute type 29 has an invalid length. [ 967.714462][T21505] netlink: 'syz.2.4320': attribute type 39 has an invalid length. [ 967.972271][T21523] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4324'. [ 969.155352][T21557] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4334'. [ 969.326798][T21561] netlink: 'syz.4.4335': attribute type 33 has an invalid length. [ 969.335355][T21561] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4335'. [ 970.162790][T21572] netlink: 'syz.2.4338': attribute type 12 has an invalid length. [ 970.179851][T21572] netlink: 14409 bytes leftover after parsing attributes in process `syz.2.4338'. [ 972.388010][T21600] __nla_validate_parse: 3 callbacks suppressed [ 972.388052][T21600] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4345'. [ 972.391760][T21606] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4350'. [ 973.071608][T21614] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4352'. [ 973.364504][T21625] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4354'. [ 974.219973][T21640] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4359'. [ 976.627436][T21630] ------------[ cut here ]------------ [ 976.633370][T21630] WARNING: CPU: 1 PID: 21630 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 976.643754][T21630] Modules linked in: [ 976.647760][T21630] CPU: 1 PID: 21630 Comm: syz.0.4356 Not tainted syzkaller #0 [ 976.655278][T21630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 976.665904][T21630] RIP: 0010:perf_pending_task+0x357/0x480 [ 976.672157][T21630] Code: e8 9e d0 d5 ff 84 db 75 10 e8 05 ce d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cd d5 ff e8 b0 85 4f ff eb e9 e8 e9 cd d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 976.692458][T21630] RSP: 0018:ffffc900034379c8 EFLAGS: 00010293 [ 976.699203][T21630] RAX: ffffffff81b11787 RBX: ffff88801d7eec00 RCX: ffff88802ceb9e00 [ 976.707319][T21630] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 976.715513][T21630] RBP: ffff88801d7ee9c0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 976.724568][T21630] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff88802ceb9e00 [ 976.732759][T21630] R13: ffff88805d974530 R14: 0000000000000000 R15: 1ffff11003afdd38 [ 976.740870][T21630] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 976.750056][T21630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.756713][T21630] CR2: 000055555b1b54e8 CR3: 000000005f2db000 CR4: 00000000003506e0 [ 976.764868][T21630] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 976.773150][T21630] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 976.781502][T21630] Call Trace: [ 976.784849][T21630] [ 976.788077][T21630] task_work_run+0x1d4/0x260 [ 976.792768][T21630] ? task_work_cancel+0x220/0x220 [ 976.798366][T21630] do_exit+0x986/0x2530 [ 976.802706][T21630] ? put_task_struct+0xc0/0xc0 [ 976.808289][T21630] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 976.814351][T21630] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 976.821791][T21630] ? lock_chain_count+0x20/0x20 [ 976.826797][T21630] ? _raw_spin_lock_irq+0xbb/0xf0 [ 976.832090][T21630] do_group_exit+0x22d/0x2f0 [ 976.836880][T21630] ? lockdep_hardirqs_on+0x98/0x150 [ 976.842257][T21630] get_signal+0x12a6/0x1390 [ 976.846858][T21630] arch_do_signal_or_restart+0xc2/0x7b0 [ 976.852615][T21630] ? get_sigframe_size+0x20/0x20 [ 976.858143][T21630] ? perf_trace_preemptirq_template+0xac/0x330 [ 976.864627][T21630] ? exit_to_user_mode_loop+0x3b/0x110 [ 976.870292][T21630] exit_to_user_mode_loop+0x70/0x110 [ 976.875769][T21630] exit_to_user_mode_prepare+0xee/0x180 [ 976.882431][T21630] syscall_exit_to_user_mode+0x1a/0x50 [ 976.888112][T21630] do_syscall_64+0x61/0xb0 [ 976.892621][T21630] ? clear_bhb_loop+0x40/0x90 [ 976.897791][T21630] ? clear_bhb_loop+0x40/0x90 [ 976.902948][T21630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 976.909274][T21630] RIP: 0033:0x7faae739de59 [ 976.913763][T21630] Code: Unable to access opcode bytes at 0x7faae739de2f. [ 976.920989][T21630] RSP: 002b:00007faae8343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 976.929618][T21630] RAX: fffffffffffffffc RBX: 00007faae7625fa0 RCX: 00007faae739de59 [ 976.937826][T21630] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 976.946132][T21630] RBP: 00007faae7433e6f R08: 0000000000000000 R09: 0000000000000000 [ 976.954221][T21630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.963001][T21630] R13: 00007faae7626038 R14: 00007faae7625fa0 R15: 00007ffc0e7b77c8 [ 976.971316][T21630] [ 976.974437][T21630] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 976.981874][T21630] CPU: 1 PID: 21630 Comm: syz.0.4356 Not tainted syzkaller #0 [ 976.989383][T21630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 977.000072][T21630] Call Trace: [ 977.003506][T21630] [ 977.006576][T21630] dump_stack_lvl+0x18c/0x250 [ 977.011301][T21630] ? show_regs_print_info+0x20/0x20 [ 977.016733][T21630] ? load_image+0x420/0x420 [ 977.021332][T21630] panic+0x2ca/0x720 [ 977.025301][T21630] ? bpf_jit_dump+0xd0/0xd0 [ 977.029886][T21630] __warn+0x2e0/0x470 [ 977.033928][T21630] ? perf_pending_task+0x357/0x480 [ 977.039196][T21630] ? perf_pending_task+0x357/0x480 [ 977.044589][T21630] report_bug+0x2be/0x4f0 [ 977.049099][T21630] ? perf_pending_task+0x357/0x480 [ 977.054374][T21630] ? perf_pending_task+0x357/0x480 [ 977.059821][T21630] ? perf_pending_task+0x359/0x480 [ 977.065266][T21630] handle_bug+0xcf/0x120 [ 977.069940][T21630] exc_invalid_op+0x1a/0x50 [ 977.075220][T21630] asm_exc_invalid_op+0x1a/0x20 [ 977.080133][T21630] RIP: 0010:perf_pending_task+0x357/0x480 [ 977.086176][T21630] Code: e8 9e d0 d5 ff 84 db 75 10 e8 05 ce d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f5 cd d5 ff e8 b0 85 4f ff eb e9 e8 e9 cd d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 977.106609][T21630] RSP: 0018:ffffc900034379c8 EFLAGS: 00010293 [ 977.112734][T21630] RAX: ffffffff81b11787 RBX: ffff88801d7eec00 RCX: ffff88802ceb9e00 [ 977.120760][T21630] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 977.128863][T21630] RBP: ffff88801d7ee9c0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 977.136997][T21630] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff88802ceb9e00 [ 977.145223][T21630] R13: ffff88805d974530 R14: 0000000000000000 R15: 1ffff11003afdd38 [ 977.153493][T21630] ? perf_pending_task+0x357/0x480 [ 977.158831][T21630] ? perf_pending_task+0x357/0x480 [ 977.164073][T21630] task_work_run+0x1d4/0x260 [ 977.168714][T21630] ? task_work_cancel+0x220/0x220 [ 977.173784][T21630] do_exit+0x986/0x2530 [ 977.178074][T21630] ? put_task_struct+0xc0/0xc0 [ 977.182908][T21630] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 977.188973][T21630] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 977.196254][T21630] ? lock_chain_count+0x20/0x20 [ 977.201139][T21630] ? _raw_spin_lock_irq+0xbb/0xf0 [ 977.206213][T21630] do_group_exit+0x22d/0x2f0 [ 977.211108][T21630] ? lockdep_hardirqs_on+0x98/0x150 [ 977.216339][T21630] get_signal+0x12a6/0x1390 [ 977.220902][T21630] arch_do_signal_or_restart+0xc2/0x7b0 [ 977.227241][T21630] ? get_sigframe_size+0x20/0x20 [ 977.232243][T21630] ? perf_trace_preemptirq_template+0xac/0x330 [ 977.238452][T21630] ? exit_to_user_mode_loop+0x3b/0x110 [ 977.244050][T21630] exit_to_user_mode_loop+0x70/0x110 [ 977.249377][T21630] exit_to_user_mode_prepare+0xee/0x180 [ 977.254966][T21630] syscall_exit_to_user_mode+0x1a/0x50 [ 977.260772][T21630] do_syscall_64+0x61/0xb0 [ 977.265416][T21630] ? clear_bhb_loop+0x40/0x90 [ 977.270128][T21630] ? clear_bhb_loop+0x40/0x90 [ 977.274847][T21630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.280783][T21630] RIP: 0033:0x7faae739de59 [ 977.285243][T21630] Code: Unable to access opcode bytes at 0x7faae739de2f. [ 977.292284][T21630] RSP: 002b:00007faae8343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 977.300832][T21630] RAX: fffffffffffffffc RBX: 00007faae7625fa0 RCX: 00007faae739de59 [ 977.308874][T21630] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 977.316888][T21630] RBP: 00007faae7433e6f R08: 0000000000000000 R09: 0000000000000000 [ 977.324893][T21630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.332915][T21630] R13: 00007faae7626038 R14: 00007faae7625fa0 R15: 00007ffc0e7b77c8 [ 977.341117][T21630] [ 977.344824][T21630] Kernel Offset: disabled [ 977.349164][T21630] Rebooting in 86400 seconds..