last executing test programs: 5.152596464s ago: executing program 1 (id=4468): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044943, 0x0) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x4000000}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfffff804, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50) sendmsg$inet(r7, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000600)='cpu&-0E\xc2\x94\xfc\xb4\x97\xc1T\x8f\t||\x18\xe2\x03yW\x06\x01\x14\x14TGmC\x03\x97\xcfn}\xf4\x89\x93\x17T\xcc[o\x12\xb6\x96\xbe<8f\x1c\xb8\xbaTf\x9c\xd8\xd9\xfe\x1b') syz_clone(0x8880880, 0x0, 0xfcd7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) 4.431760895s ago: executing program 3 (id=4475): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044080) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x3, &(0x7f0000001700)=@framed, &(0x7f0000001740)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="950000e900000000"], &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x22509, r1}, 0x90) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbef, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000003f00000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x40400c0) mkdir(&(0x7f0000000040)='./file0\x00', 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)}], 0x1}, 0x0) close(r6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'wlan0\x00', 0x200}) socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)='a', 0x1}], 0x1}, 0x4000) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010106}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d75", 0x3}], 0x1}, 0x4000004) 4.430154482s ago: executing program 4 (id=4476): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) sendmsg$kcm(r0, 0x0, 0x4040000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x24000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket$kcm(0x2, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r3, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0x1, 0x58, &(0x7f0000000ac0)}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2a, 0x3, 0x10, &(0x7f00000002c0)) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) 4.121800606s ago: executing program 1 (id=4477): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4\x04\x00+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82D\x80'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0x20040004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r5) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r12, &(0x7f0000000080)='syz1\x00', 0x1ff) 3.806017317s ago: executing program 0 (id=4478): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2d, 'cpuacct'}]}, 0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r9 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20044080) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) r10 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000140)=r6, 0x4) 2.825291738s ago: executing program 3 (id=4479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000001000)='./file0\x00', 0xc0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640)=r7, 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) 2.792082396s ago: executing program 2 (id=4480): perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0xb9, 0x1, 0x0, 0x5, 0x0, 0xe4b8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x2980, 0x2000000002, 0xfffffff7, 0x4, 0x1, 0x7, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891f, &(0x7f0000000000)={'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x40012100) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x14}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="a2", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e00010063"], 0x84}}, 0x40) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xf19, @private0, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}, {&(0x7f0000000500)="7ed7744be9c32ba715cc99fcbf514062fb8f83925fe6bfa74602afe1aa8c3724ea9026", 0x23}], 0x2}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 2.765464928s ago: executing program 1 (id=4481): perf_event_open(&(0x7f00000039c0)={0x2, 0x80, 0xea, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x74, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x484, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="11000000000000000040030001", @ANYBLOB="ac1414bbe0000001000000001c0000000000", @ANYBLOB], 0x98}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a40)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xfffffeab) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000500)=""/164, 0xa4}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/252, 0xfc}, {0x0}, {0x0}, {&(0x7f0000002780)=""/49, 0x31}, {&(0x7f0000002800)=""/4096, 0x1000}, {0x0}], 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x7) 2.666597234s ago: executing program 0 (id=4482): bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a0000000000", @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000586ffdce1d34f56309d7f61c2be7a5f63982651f53bee9683a4e987d8ca487b758e99e2fa1ee753149c32187ee1c904674dfde9192f8be0a52668dec0075d3688a1d2846cb5cbf27c21f753040b9c38369a927b861a2b0be15aabf8e78549d9af1565489c38f682623e1f43d0c3316eaee2d17aca0b0c8468d164bfb303b9e3dc1d81aeeb076830a34786a4cdcc777235e305e29bbb2002ca0651edfd5"], 0x50) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x11, 0x20000000000000a, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x32, 0x0, 0x3, 0xfffffffb}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x0, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000300), 0x8}, 0x1410d, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) 2.195959398s ago: executing program 0 (id=4483): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x5, 0x4b, 0x7, 0x1, 0x0, 0x7, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xba93, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x8069, 0xffffffffffffff00, 0x7fff, 0x2, 0x9, 0x81, 0x8, 0x0, 0x6, 0x0, 0xd}, 0x0, 0x7e0, r1, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r4, 0x400454cd, 0x337) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="0002181100000000000064b9000000ffe3000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000008400ecffffffffff7100000000000000"], 0x18}, 0x41) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6_vti0\x00', 0x20}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0x209, 0x70bd22, 0x25dfdbff, {{{@in6=@empty, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x20, 0xa0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4d5, 0x32}, @in=@empty, {0x1, 0xf, 0x4, 0x8001, 0x8, 0x7f9, 0xaaec, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc90a, 0x1, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x4, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x2}, 0x48000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@flushpolicy={0x5c, 0x1d, 0x301, 0x70bd2b, 0x25dfdbfc, "", [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd28, 0x70bd2a, 0x70bd2a}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010101}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e20, 0x4e21, @in=@loopback}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.02613136s ago: executing program 4 (id=4484): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x10, 0x2, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, &(0x7f0000000140)="ffd8b094a019f05ea7", 0x0, 0x6}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x38) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 1.829282874s ago: executing program 1 (id=4485): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x10, 0x2, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, &(0x7f0000000140)="ffd8b094a019f05ea7", 0x0, 0x6}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f00000006c0)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x38) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 1.783010729s ago: executing program 2 (id=4486): perf_event_open(&(0x7f00000039c0)={0x2, 0x80, 0xea, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x74, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x484, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="11000000000000000040030001", @ANYBLOB="ac1414bbe0000001000000001c0000000000", @ANYBLOB], 0x98}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a40)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xfffffeab) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000500)=""/164, 0xa4}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/252, 0xfc}, {0x0}, {0x0}, {&(0x7f0000002780)=""/49, 0x31}, {&(0x7f0000002800)=""/4096, 0x1000}, {0x0}], 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x7) 1.75083987s ago: executing program 3 (id=4487): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = getpid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) perf_event_open(0x0, r1, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe7d) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x109801, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1470c, 0x9, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x10, 0x4, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x37, 0x0, 0x9}, 0x28) 1.369226832s ago: executing program 3 (id=4488): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)}], 0x1}, 0x20000000) perf_event_open(&(0x7f0000000280)={0x826b6be9b9579a0, 0x80, 0x52, 0x1, 0x3, 0x9, 0x0, 0x7fef, 0x84, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x984}, 0x10630d, 0x9, 0xfffffbfd, 0x3, 0x8000, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair(0x1, 0x1, 0x800, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x50, 0x28, 0x6, 0x0, 0x27, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf0b, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x101, 0xffffffffff7ffffe, 0xb38b, 0x8, 0x4, 0x6, 0x136, 0x0, 0x66989203, 0x0, 0xffffffffffffffff}, 0x0, 0xa, r1, 0xf) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/ipc\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000200)=ANY=[], 0x20}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f00000031c0)=""/4110, 0x100e}, {&(0x7f0000000240)=""/129, 0x81}], 0x5}, 0x10100) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x12040) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) close(r3) socket$kcm(0x21, 0x2, 0x2) 1.362882099s ago: executing program 2 (id=4498): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x3}, 0x102, 0xfffffffffffffffc, 0x0, 0x0, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x0, 0x0, 0x8000400000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000700)="03adaa129e17ee8e851f6c", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x31, &(0x7f0000000000), 0x4) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000880)={'wg1\x00', 0x400}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000e80)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES64=r0, @ANYRES64=r4, @ANYRESOCT=r1, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRESDEC=r1], &(0x7f0000000740)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x33}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff05, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x0, &(0x7f0000000780), &(0x7f0000000000)='syzkaller\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) socket$nl_audit(0x10, 0x3, 0x9) 1.28771245s ago: executing program 4 (id=4489): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, 0x0, 0x0) recvmsg$kcm(r1, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'erspan0\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x7e, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b", 0x0, 0xfe, 0x60000000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x80000000}, 0x8) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.178506777s ago: executing program 0 (id=4490): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002800)={0x2, 0x80, 0x52, 0x1, 0xfd, 0x1, 0x0, 0x7ff0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x7f, 0x5}, 0x11411d, 0x32, 0xfffffbfd, 0x3, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000062c0)=@newtaction={0x6c, 0x30, 0xa29, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x1, 0xc, 0x4, 0xfffffffb}, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x1, 0x20, 0x0, 0xc, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, &(0x7f0000000200)=r5, 0x4) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x5}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x3e8) socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) r7 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.083148038s ago: executing program 1 (id=4491): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x10, 0x2, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, &(0x7f0000000140)="ffd8b094a019f05ea7", 0x0, 0x6}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f00000006c0)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x38) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 902.971803ms ago: executing program 2 (id=4492): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000af02ff02fc0000040042806c360c0001800600390000000900000000000000001ad2f27c6cde20c7b75bd2e164ae5b972209df1575254b089a62f36554e63a52fe7609e60f0f8005852dd63519b371f91a538dd167973cbe0eb17fd3a0d16d276e5ff565112f864ebc874ebad05e8aceecacb7429407b709bd9483e6271847af5ea3d6b449606c5a98479a4b7ede6a626fe81fcaf78d5c60312f3eea4f4293018bcecd94c5f92a016bb900de2021982967c9af05b3c176"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401060028000b05d25a806f8c8094f90300000000000000090001", 0x1b}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffe65) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x1, 0x0, 0x0, 0x0, 0x211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18008, 0x7fff, 0x34f, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000b80)={0x4, 0x80, 0x4a, 0x1, 0x0, 0xff, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x7fffffff, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r1, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0xb3, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000"], 0x88}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000000000000b01000000000000100000000000000010f300000c0000003b66199836352f2de1ec8b9187f433c4577577f21766cca9b9dc0a96557d71d794780f0f55f0f03a8078c8b593481bcd654b01dd66665883debd90b40f7ebe8d0000000000000007000000"], 0x20}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000004, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffe, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 726.888532ms ago: executing program 4 (id=4493): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x4}, {0x0, 0x4, 0x10004}]}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000001947}, 0x11045, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x8d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10182, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x16f04, 0x2e, 0xfffffbff, 0x3, 0x2, 0x100, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r1, 0x29, 0x3, 0x0, 0x500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYBLOB="0765f706fe618d71b506e4d624d37b5d2f88cde38e34ce1e611304364e5466434851b61c9a513e0d91"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305829, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) 685.318677ms ago: executing program 0 (id=4494): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000540)="e02742e86c0d85", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000003c0)}, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000540)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000091401ff"], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000a40)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x10, 0x1, 0x8}], 0x10}, 0x41) 654.360918ms ago: executing program 2 (id=4495): perf_event_open(&(0x7f00000039c0)={0x2, 0x80, 0xea, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x74, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x484, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="11000000000000000040030001", @ANYBLOB="ac1414bbe0000001000000001c0000000000", @ANYBLOB], 0x98}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a40)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xfffffeab) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000500)=""/164, 0xa4}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/252, 0xfc}, {0x0}, {0x0}, {&(0x7f0000002780)=""/49, 0x31}, {&(0x7f0000002800)=""/4096, 0x1000}, {0x0}], 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x7) 334.125466ms ago: executing program 3 (id=4496): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2d, 'cpuacct'}]}, 0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r9 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20044080) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) r10 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000140)=r6, 0x4) 220.752857ms ago: executing program 1 (id=4497): perf_event_open(&(0x7f00000039c0)={0x2, 0x80, 0xea, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x74, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x484, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=ANY=[@ANYBLOB="11000000000000000040030001", @ANYBLOB="ac1414bbe0000001000000001c0000000000", @ANYBLOB], 0x98}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003a40)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f0ffffff0000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xfffffeab) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000500)=""/164, 0xa4}, {0x0}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/252, 0xfc}, {0x0}, {0x0}, {&(0x7f0000002780)=""/49, 0x31}, {&(0x7f0000002800)=""/4096, 0x1000}, {0x0}], 0x9}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x7) 169.26646ms ago: executing program 4 (id=4499): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2d, 'cpuacct'}]}, 0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, 0x0, 0x30004001) r9 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x20044080) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r10 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x11b, 0x2, &(0x7f0000000140)=r6, 0x4) 131.156103ms ago: executing program 3 (id=4500): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fff7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x1, 0x400000000000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x19, &(0x7f0000000000)=r9, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x109c, 0x14, 0x100, 0x70bd28, 0x25dfdbfe, {0x1, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa, 0x1, "90f3f3e9a37d"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "a9334baa79b522b6117364f36521ce98015b4eddbedf7afc2652adf306870ecbfbfaa250e141ea4fd9b4b0f95e0ab654884a6c563112ee51e84ad35af0d84365815fb16740bc375ef846"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "71dbed8ab588a8378f0e4dcd5b7e3c54e6a4495a5d17c6358b6450fd2e04afd37cccc9ea4e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xffc, 0x1, "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"}]}, 0x109c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2fae00}, {}, {}, [@alu={0x4, 0x1, 0x7, 0x9, 0xb, 0x100, 0xffffffffffffffff}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0x9, 0x6, 0x6, 0x8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000400)=""/72, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x7a92, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000004c0)=[{0x2, 0x5, 0xb, 0xc}, {0x3, 0x5, 0x4, 0x3}, {0x4, 0x5, 0x7, 0xb}, {0x3, 0x3, 0xa, 0x2}, {0x3, 0x5, 0x0, 0x1}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000, 0x4}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x0) r13 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r13, r12, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) 90.257002ms ago: executing program 2 (id=4501): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x10, 0x2, 0x10) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, &(0x7f0000000140)="ffd8b094a019f05ea7", 0x0, 0x6}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f00000006c0)}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x38) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 36.084419ms ago: executing program 4 (id=4502): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) 0s ago: executing program 0 (id=4503): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a97, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80044944, &(0x7f0000000200)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800164000000004"], 0x6c}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9d, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0xb, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000880)=""/2, 0x28, 0x2, 0x1, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', r3, r5, 0x5, 0x2, 0x4}, 0x50) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x80, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x702, 0xe, 0x0, &(0x7f0000000080)="e860334470b8d480eb00c15286f9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x800) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000100060004404e2200000c000280080001407f00000100"/84], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a040016400800154000"], 0xd4}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): 32][T11823] netlink: 'syz.4.1783': attribute type 8 has an invalid length. [ 372.673295][T11823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1783'. [ 372.760524][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 372.784048][T11823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1783'. [ 372.807277][T11827] delete_channel: no stack [ 373.058930][T11837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1787'. [ 373.186627][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 373.333485][T11843] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1790'. [ 373.503792][T11843] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1790'. [ 373.949037][T11843] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1790'. [ 374.076796][T11854] lo speed is unknown, defaulting to 1000 [ 374.573892][T11864] delete_channel: no stack [ 374.779962][T11854] wlan1 speed is unknown, defaulting to 1000 [ 375.578007][T11877] lo speed is unknown, defaulting to 1000 [ 375.943008][T11877] wlan1 speed is unknown, defaulting to 1000 [ 377.043620][T11909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.312460][T11913] netlink: 'syz.3.1810': attribute type 2 has an invalid length. [ 377.320822][T11913] netlink: 'syz.3.1810': attribute type 8 has an invalid length. [ 377.342290][T11913] __nla_validate_parse: 2 callbacks suppressed [ 377.342322][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1810'. [ 377.386055][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 377.398302][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1810'. [ 377.844113][ T36] syzkaller0: tun_net_xmit 76 [ 377.849774][ T36] syzkaller0: tun_net_xmit 48 [ 377.865707][ T5895] syzkaller0: tun_net_xmit 76 [ 377.898702][T11926] syzkaller0: create flow: hash 3308393803 index 1 [ 377.987949][T11937] netlink: 'syz.4.1818': attribute type 2 has an invalid length. [ 378.000012][T11935] netlink: 'syz.0.1816': attribute type 9 has an invalid length. [ 378.008799][T11935] netlink: 211924 bytes leftover after parsing attributes in process `syz.0.1816'. [ 378.018389][T11937] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 378.031679][T11937] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1818'. [ 378.085713][T11937] block nbd5: not configured, cannot reconfigure [ 378.133520][T11925] syzkaller0: delete flow: hash 3308393803 index 1 [ 378.183654][T11939] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1819'. [ 378.529479][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.543531][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.738343][T11970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.951297][T11979] veth0_vlan: entered allmulticast mode [ 380.962762][T11978] netlink: 64707 bytes leftover after parsing attributes in process `syz.0.1831'. [ 380.983746][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 381.192017][T11989] veth0_vlan: left promiscuous mode [ 381.217795][T11989] veth0_vlan: entered promiscuous mode [ 381.609626][T11998] netlink: 'syz.1.1839': attribute type 10 has an invalid length. [ 381.721499][T11998] bridge0: port 1(netdevsim0) entered blocking state [ 381.763065][T11998] bridge0: port 1(netdevsim0) entered disabled state [ 381.779678][T11998] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 381.861244][T11998] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 382.811706][T12021] nftables ruleset with unbound chain [ 382.849362][T12023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1845'. [ 382.864013][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.908901][T12023] bridge_slave_0 (unregistering): left allmulticast mode [ 382.917098][T12023] bridge_slave_0 (unregistering): left promiscuous mode [ 382.934696][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.385213][T12042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.759316][T12053] netlink: 'syz.2.1865': attribute type 33 has an invalid length. [ 383.767926][T12053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1865'. [ 383.867850][T12054] wg2: left promiscuous mode [ 383.872906][T12054] wg2: left allmulticast mode [ 383.929854][T12051] wg2: entered promiscuous mode [ 383.935016][T12051] wg2: entered allmulticast mode [ 383.946473][ T5844] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23 [ 384.384977][T12066] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1859'. [ 384.541848][T12074] lo speed is unknown, defaulting to 1000 [ 385.487889][T12074] wlan1 speed is unknown, defaulting to 1000 [ 385.629317][T12109] rdma_rxe: rxe_newlink: failed to add lo [ 385.916748][T12114] syzkaller0: entered promiscuous mode [ 385.922273][T12114] syzkaller0: entered allmulticast mode [ 386.009645][T12119] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 386.068274][T12121] sit0: entered allmulticast mode [ 387.174930][T12137] netlink: 'syz.0.1884': attribute type 2 has an invalid length. [ 387.195210][T12137] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1884'. [ 387.397209][T12154] netlink: 'syz.1.1888': attribute type 2 has an invalid length. [ 387.420038][T12154] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1888'. [ 387.781512][T12161] wg2: left promiscuous mode [ 387.786688][T12161] wg2: left allmulticast mode [ 387.866194][T12168] wg2: entered promiscuous mode [ 387.891169][T12168] wg2: entered allmulticast mode [ 388.382741][T12178] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 388.476964][T12179] netlink: 'syz.1.1896': attribute type 11 has an invalid length. [ 388.502722][T12179] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1896'. [ 388.807875][T12184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.060964][T12191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.163245][T12195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1900'. [ 390.014617][T12195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1900'. [ 390.390900][T12217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1906'. [ 390.517263][T12219] netlink: 'syz.3.1908': attribute type 10 has an invalid length. [ 390.535842][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1908'. [ 391.790295][T12236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.183023][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1922'. [ 393.402716][T12265] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 393.412294][T12265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'. [ 394.163154][T12276] sit0: left promiscuous mode [ 395.169456][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1937'. [ 395.234300][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 395.442757][T12309] netlink: 'syz.0.1939': attribute type 2 has an invalid length. [ 395.466064][T12309] netlink: 'syz.0.1939': attribute type 1 has an invalid length. [ 395.483145][T12309] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1939'. [ 395.496341][T12309] block nbd5: not configured, cannot reconfigure [ 395.900735][ T5844] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 396.318872][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1949'. [ 397.052307][T12347] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1954'. [ 397.091007][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1953'. [ 397.116006][T12351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1954'. [ 397.157129][T12351] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1954'. [ 398.063617][T12364] netlink: 'syz.0.1959': attribute type 2 has an invalid length. [ 398.071756][T12364] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1959'. [ 398.610629][T12379] veth0_vlan: left promiscuous mode [ 398.638695][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1964'. [ 398.660736][T12379] veth0_vlan: entered promiscuous mode [ 399.138988][T12396] netlink: 'syz.0.1967': attribute type 4 has an invalid length. [ 400.159310][T12412] lo speed is unknown, defaulting to 1000 [ 400.437732][T12412] wlan1 speed is unknown, defaulting to 1000 [ 400.460423][T12433] __nla_validate_parse: 5 callbacks suppressed [ 400.460455][T12433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1980'. [ 400.890620][T12441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1982'. [ 400.912101][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 402.105226][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'. [ 402.938267][ T5844] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 404.592739][T12512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2000'. [ 404.601834][T12511] netlink: 'syz.0.2001': attribute type 39 has an invalid length. [ 405.209737][T12517] lo speed is unknown, defaulting to 1000 [ 405.655050][T12517] wlan1 speed is unknown, defaulting to 1000 [ 405.662195][T12530] lo speed is unknown, defaulting to 1000 [ 405.763713][T12534] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2007'. [ 405.799520][T12536] netlink: 'syz.2.2007': attribute type 11 has an invalid length. [ 405.811009][T12536] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2007'. [ 405.903729][T12534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.955496][T12530] wlan1 speed is unknown, defaulting to 1000 [ 406.756763][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2015'. [ 406.771180][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2015'. [ 406.980287][T12569] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 406.989666][T12569] netlink: 209028 bytes leftover after parsing attributes in process `syz.1.2017'. [ 407.683272][T12582] netlink: 'syz.0.2021': attribute type 10 has an invalid length. [ 407.708364][T12582] team0: left promiscuous mode [ 407.713204][T12582] team_slave_0: left promiscuous mode [ 407.720601][T12582] team_slave_1: left promiscuous mode [ 407.734600][T12582] bond0: left promiscuous mode [ 407.747368][T12582] bond_slave_0: left promiscuous mode [ 407.891781][T12582] bond_slave_1: left promiscuous mode [ 407.987356][T12582] macvlan0: left promiscuous mode [ 407.993779][T12582] team0: left allmulticast mode [ 408.046874][T12582] team_slave_0: left allmulticast mode [ 408.064255][T12582] team_slave_1: left allmulticast mode [ 408.094513][T12582] bond0: left allmulticast mode [ 408.123949][T12582] bond_slave_0: left allmulticast mode [ 408.171891][T12582] bond_slave_1: left allmulticast mode [ 408.178736][T12582] geneve0: left allmulticast mode [ 408.535757][T12582] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.099917][T12599] lo speed is unknown, defaulting to 1000 [ 409.174786][T12604] sit0: entered allmulticast mode [ 409.550887][T12613] netlink: 'syz.3.2030': attribute type 39 has an invalid length. [ 410.029071][T12599] wlan1 speed is unknown, defaulting to 1000 [ 410.037191][T12616] delete_channel: no stack [ 410.308540][T12623] netlink: 'syz.1.2033': attribute type 10 has an invalid length. [ 410.338544][T12623] bond0: (slave .3ãc¤±): Enslaving as an active interface with an up link [ 411.015144][T12649] xt_l2tp: invalid flags combination: 0 [ 411.309903][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 411.669430][T12663] delete_channel: no stack [ 412.279598][T12690] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2056'. [ 412.323316][T12690] lo speed is unknown, defaulting to 1000 [ 412.640979][T12703] netlink: 'syz.4.2058': attribute type 39 has an invalid length. [ 413.033776][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2060'. [ 413.043220][T12690] wlan1 speed is unknown, defaulting to 1000 [ 413.411839][T12710] delete_channel: no stack [ 416.684542][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 416.959952][T12759] netlink: 'syz.2.2072': attribute type 4 has an invalid length. [ 417.012542][T12759] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.2072'. [ 418.159417][T12786] netlink: 'syz.3.2080': attribute type 39 has an invalid length. [ 418.184759][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'. [ 418.358701][T12791] lo speed is unknown, defaulting to 1000 [ 418.813341][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2083'. [ 418.848012][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 418.941863][T12791] wlan1 speed is unknown, defaulting to 1000 [ 419.300580][T12811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.468145][T12817] netlink: 'syz.2.2088': attribute type 39 has an invalid length. [ 420.380322][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 420.526992][T12842] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2096'. [ 420.559542][T12836] lo speed is unknown, defaulting to 1000 [ 421.103429][T12857] veth0_vlan: entered allmulticast mode [ 421.250109][T12836] wlan1 speed is unknown, defaulting to 1000 [ 421.840710][T12858] veth0_vlan: left promiscuous mode [ 421.860864][T12858] veth0_vlan: entered promiscuous mode [ 422.942307][T12893] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 422.991025][T12895] lo speed is unknown, defaulting to 1000 [ 423.328582][T12895] wlan1 speed is unknown, defaulting to 1000 [ 423.831449][T12917] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2118'. [ 423.926958][ T5844] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 424.611897][ T5844] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 425.038892][T12930] delete_channel: no stack [ 425.122604][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2126'. [ 425.501018][T12957] netlink: 'syz.3.2132': attribute type 10 has an invalid length. [ 425.728484][T12965] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2134'. [ 426.171702][T12970] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 426.184228][T12970] team0: Port device wlan1 added [ 426.234902][T12969] lo speed is unknown, defaulting to 1000 [ 426.243012][T12970] netlink: 'syz.3.2136': attribute type 11 has an invalid length. [ 426.251479][T12970] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2136'. [ 426.556640][T12981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.604483][T12980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.087238][T12985] lo speed is unknown, defaulting to 1000 [ 427.096588][T12969] wlan1 speed is unknown, defaulting to 1000 [ 427.520711][T12985] wlan1 speed is unknown, defaulting to 1000 [ 430.564561][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2155'. [ 430.684395][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 431.405070][T13068] netlink: 'syz.1.2163': attribute type 29 has an invalid length. [ 431.430849][T13075] netlink: 'syz.1.2163': attribute type 29 has an invalid length. [ 431.447334][T13068] netlink: 'syz.1.2163': attribute type 29 has an invalid length. [ 431.775164][T13070] lo speed is unknown, defaulting to 1000 [ 432.360329][T13087] netlink: 'syz.3.2167': attribute type 10 has an invalid length. [ 432.385608][T13087] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 432.763141][T13070] wlan1 speed is unknown, defaulting to 1000 [ 433.228483][T13109] sctp: [Deprecated]: syz.3.2172 (pid 13109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.228483][T13109] Use struct sctp_sack_info instead [ 434.344342][T13138] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2178'. [ 434.714904][T13149] delete_channel: no stack [ 434.808411][T13158] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2188'. [ 435.020170][T13165] netlink: 'syz.4.2191': attribute type 13 has an invalid length. [ 435.068804][T13165] macvtap0: entered promiscuous mode [ 435.080174][T13165] macvtap0: refused to change device tx_queue_len [ 435.328409][T13174] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2193'. [ 435.339166][T13174] netlink: 'syz.3.2193': attribute type 1 has an invalid length. [ 435.659404][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 435.706969][T13180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2195'. [ 436.202014][T13189] lo speed is unknown, defaulting to 1000 [ 436.268991][T13196] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2201'. [ 436.709183][T13204] delete_channel: no stack [ 436.977794][T13215] netlink: 'syz.0.2208': attribute type 2 has an invalid length. [ 436.986497][T13215] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2208'. [ 436.999601][T13215] nbd: must specify an index to disconnect [ 437.004875][T13200] lo speed is unknown, defaulting to 1000 [ 437.012709][T13215] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 437.016304][T13189] wlan1 speed is unknown, defaulting to 1000 [ 437.282797][T13200] wlan1 speed is unknown, defaulting to 1000 [ 437.686753][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2219'. [ 438.887084][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 439.003063][T13243] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2215'. [ 439.140279][T13247] netlink: 'syz.4.2216': attribute type 4 has an invalid length. [ 439.167640][T13247] netlink: 209028 bytes leftover after parsing attributes in process `syz.4.2216'. [ 439.961157][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.972342][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.249570][T13261] wg2: left promiscuous mode [ 440.255141][T13261] wg2: left allmulticast mode [ 440.580109][T13278] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2228'. [ 441.300714][T13295] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.2234'. [ 442.377257][T13317] delete_channel: no stack [ 442.499458][T13321] bpf: Bad value for 'gid' [ 442.564489][T13328] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2244'. [ 443.012164][T13337] ãÿ: entered promiscuous mode [ 443.052079][T13337] netlink: 'syz.1.2250': attribute type 10 has an invalid length. [ 443.201329][T13347] netlink: 'syz.1.2253': attribute type 10 has an invalid length. [ 443.346047][T13349] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2252'. [ 443.392088][T13351] delete_channel: no stack [ 444.030643][T13381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2263'. [ 444.912013][T13398] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2269'. [ 444.973497][T13402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.013848][T13402] netlink: 'syz.0.2270': attribute type 11 has an invalid length. [ 445.024419][T13402] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2270'. [ 445.112772][T13404] netlink: 'syz.4.2271': attribute type 39 has an invalid length. [ 445.659151][T13405] delete_channel: no stack [ 445.774859][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 446.617291][T13446] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2284'. [ 447.567551][T13480] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2296'. [ 448.454179][T13498] lo speed is unknown, defaulting to 1000 [ 448.893031][T13515] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.2306'. [ 449.707921][T13498] wlan1 speed is unknown, defaulting to 1000 [ 450.452217][T13542] netlink: 'syz.4.2315': attribute type 13 has an invalid length. [ 450.839231][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.871159][T13542] bond_slave_0: left promiscuous mode [ 450.877675][T13542] bond_slave_1: left promiscuous mode [ 451.234824][T13545] bridge0: port 3(ip6gretap0) entered blocking state [ 451.241894][T13545] bridge0: port 3(ip6gretap0) entered disabled state [ 451.249452][T13545] ip6gretap0: entered allmulticast mode [ 451.257075][T13545] ip6gretap0: entered promiscuous mode [ 451.263125][T13545] bridge0: port 3(ip6gretap0) entered blocking state [ 451.269996][T13545] bridge0: port 3(ip6gretap0) entered forwarding state [ 451.299723][ T3559] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.313712][ T3559] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.412255][T13553] lo speed is unknown, defaulting to 1000 [ 451.418400][ T3559] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.561877][T13562] syzkaller0: entered promiscuous mode [ 451.576010][T13562] syzkaller0: entered allmulticast mode [ 451.745600][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'. [ 451.896205][T13574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.990326][T13574] netlink: 'syz.1.2323': attribute type 11 has an invalid length. [ 452.007379][T13574] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2323'. [ 452.054907][T13553] wlan1 speed is unknown, defaulting to 1000 [ 452.238162][T13588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2326'. [ 452.313188][T13591] netlink: 'syz.4.2328': attribute type 8 has an invalid length. [ 452.321485][T13591] netlink: 'syz.4.2328': attribute type 3 has an invalid length. [ 452.329693][T13591] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.2328'. [ 452.371980][T13591] netlink: 'syz.4.2328': attribute type 13 has an invalid length. [ 452.380251][T13591] netlink: 'syz.4.2328': attribute type 17 has an invalid length. [ 452.899648][T13591] sit0: left allmulticast mode [ 453.118790][T13591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.129382][T13601] netlink: 'syz.1.2331': attribute type 4 has an invalid length. [ 453.137384][T13601] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2331'. [ 453.192112][T13591] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.283237][T13591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.703784][T13620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 453.721211][T13620] siw: device registration error -23 [ 453.862530][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'. [ 453.883465][T13622] lo speed is unknown, defaulting to 1000 [ 454.024715][T13629] delete_channel: no stack [ 454.192324][ T5844] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 454.212004][T13638] netlink: 'syz.0.2341': attribute type 2 has an invalid length. [ 454.238923][T13638] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2341'. [ 454.249210][T13638] nbd: must specify at least one socket [ 454.255672][T13637] netlink: 'syz.3.2343': attribute type 11 has an invalid length. [ 454.263775][T13637] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.2343'. [ 454.303806][T13622] wlan1 speed is unknown, defaulting to 1000 [ 454.349044][T13637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.462087][T13644] lo speed is unknown, defaulting to 1000 [ 455.028405][T13644] wlan1 speed is unknown, defaulting to 1000 [ 455.054085][ T5844] Bluetooth: hci3: ISO packet for unknown connection handle 45 [ 455.069182][T13660] netlink: 'syz.0.2348': attribute type 23 has an invalid length. [ 455.342158][T13664] lo speed is unknown, defaulting to 1000 [ 455.603229][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'. [ 455.741762][T13664] wlan1 speed is unknown, defaulting to 1000 [ 455.748816][T13676] siw: device registration error -23 [ 455.868132][T13680] delete_channel: no stack [ 456.637273][T13688] lo speed is unknown, defaulting to 1000 [ 456.924721][T13688] wlan1 speed is unknown, defaulting to 1000 [ 458.339629][T13728] __nla_validate_parse: 1 callbacks suppressed [ 458.339665][T13728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2367'. [ 458.396926][T13728] siw: device registration error -23 [ 459.003940][T13755] netlink: 'syz.2.2374': attribute type 10 has an invalid length. [ 459.429011][T13777] bridge0: port 4(veth0_to_team) entered blocking state [ 459.445157][T13777] bridge0: port 4(veth0_to_team) entered disabled state [ 459.458708][T13777] veth0_to_team: entered allmulticast mode [ 459.472663][T13777] veth0_to_team: entered promiscuous mode [ 459.688015][T13778] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2380'. [ 459.975825][T13786] delete_channel: no stack [ 460.042017][T13790] delete_channel: no stack [ 460.796234][T13823] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2396'. [ 461.168876][T13834] netlink: 'syz.1.2402': attribute type 39 has an invalid length. [ 461.189533][T13836] delete_channel: no stack [ 461.802090][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 461.834072][ T5844] Bluetooth: hci2: ISO packet for unknown connection handle 45 [ 461.848286][T13862] netlink: 'syz.4.2410': attribute type 23 has an invalid length. [ 462.230805][T13877] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2417'. [ 462.535815][T13892] : renamed from gre0 (while UP) [ 463.166770][T13919] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2431'. [ 464.652348][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 465.062890][T13977] tmpfs: Bad value for 'gid' [ 465.068796][T13977] tmpfs: Bad value for 'gid' [ 465.207140][T13987] netlink: 'syz.3.2454': attribute type 8 has an invalid length. [ 465.215257][T13987] netlink: 'syz.3.2454': attribute type 3 has an invalid length. [ 465.239034][T13987] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2454'. [ 465.264102][T13987] netlink: 'syz.3.2454': attribute type 13 has an invalid length. [ 465.287683][T13987] netlink: 'syz.3.2454': attribute type 17 has an invalid length. [ 465.723706][T13987] sit0: left allmulticast mode [ 465.871744][T13987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.896369][T13987] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.971108][T13987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.019706][ T1215] lo speed is unknown, defaulting to 1000 [ 466.036598][ T1215] syz2: Port: 1 Link ACTIVE [ 466.046906][ T1215] lo speed is unknown, defaulting to 1000 [ 466.796561][T14027] bpf: Bad value for 'gid' [ 467.939052][T14044] netlink: 'syz.3.2472': attribute type 39 has an invalid length. [ 468.229818][T14060] netlink: 'syz.2.2477': attribute type 8 has an invalid length. [ 468.238942][T14060] netlink: 'syz.2.2477': attribute type 3 has an invalid length. [ 468.248254][T14060] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.2477'. [ 468.282171][T14059] netlink: 'syz.2.2477': attribute type 13 has an invalid length. [ 468.291380][T14059] netlink: 'syz.2.2477': attribute type 17 has an invalid length. [ 468.335706][T14059] sit0: left allmulticast mode [ 468.509101][T14059] 8021q: adding VLAN 0 to HW filter on device .` [ 468.571474][T14059] team0: left promiscuous mode [ 468.606072][T14059] C: left promiscuous mode [ 468.611426][T14059] team_slave_1: left promiscuous mode [ 468.617660][T14059] team0: left allmulticast mode [ 468.622745][T14059] C: left allmulticast mode [ 468.627829][T14059] team_slave_1: left allmulticast mode [ 468.641695][T14059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.228148][T14080] bpf: Bad value for 'gid' [ 469.530891][T14094] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2487'. [ 469.808915][ T5844] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 469.958339][T14101] netlink: 'syz.2.2491': attribute type 21 has an invalid length. [ 470.003668][T14101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2491'. [ 470.249273][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 470.411097][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2495'. [ 470.475009][T14117] tc_dump_action: action bad kind [ 470.689213][T14125] delete_channel: no stack [ 470.729314][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2502'. [ 471.536237][T14160] netlink: 'syz.1.2512': attribute type 21 has an invalid length. [ 471.544445][T14160] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2512'. [ 471.555065][T14160] netlink: 'syz.1.2512': attribute type 5 has an invalid length. [ 471.584395][T14160] netlink: 'syz.1.2512': attribute type 6 has an invalid length. [ 471.594471][T14160] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2512'. [ 471.784810][T14168] delete_channel: no stack [ 472.049345][T14181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2518'. [ 472.149027][T14182] netlink: 'syz.1.2520': attribute type 1 has an invalid length. [ 472.611039][T14208] delete_channel: no stack [ 473.108344][T14224] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.2535'. [ 473.126660][T14224] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.2535'. [ 473.437329][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2539'. [ 473.657279][T14251] delete_channel: no stack [ 473.813527][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.177293][T14293] netlink: 'syz.1.2556': attribute type 21 has an invalid length. [ 475.187013][T14293] netlink: 'syz.1.2556': attribute type 15 has an invalid length. [ 475.217687][T14290] delete_channel: no stack [ 475.315830][T14293] __nla_validate_parse: 1 callbacks suppressed [ 475.315862][T14293] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2556'. [ 475.402713][T14293] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.474068][T14293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.481500][T14293] IPv6: NLM_F_CREATE should be set when creating new route [ 475.489066][T14293] IPv6: NLM_F_CREATE should be set when creating new route [ 475.496522][T14293] IPv6: NLM_F_CREATE should be set when creating new route [ 475.874132][T14304] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2559'. [ 476.493412][T14335] netlink: 'syz.4.2569': attribute type 2 has an invalid length. [ 476.503121][T14335] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 476.897694][T14344] netlink: 'syz.0.2573': attribute type 13 has an invalid length. [ 476.943693][T14344] netlink: 'syz.0.2573': attribute type 17 has an invalid length. [ 477.234306][T14335] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2569'. [ 477.459012][T14344] sit0: left allmulticast mode [ 477.671137][T14344] bridge0: left promiscuous mode [ 477.676999][T14344] bridge0: left allmulticast mode [ 477.712462][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.723400][T14344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.886043][T14359] lo speed is unknown, defaulting to 1000 [ 477.971599][T14372] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 478.544278][T14387] lo speed is unknown, defaulting to 1000 [ 478.553391][T14359] wlan1 speed is unknown, defaulting to 1000 [ 479.053265][T14387] wlan1 speed is unknown, defaulting to 1000 [ 479.543855][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 479.749014][T14433] netlink: 4800 bytes leftover after parsing attributes in process `syz.3.2599'. [ 479.771178][T14433] netlink: 4800 bytes leftover after parsing attributes in process `syz.3.2599'. [ 479.922557][T14438] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 479.935763][T14438] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 479.945229][T14438] bridge0: port 3(netdevsim0) entered disabled state [ 480.072782][T14438] bridge_slave_1: left allmulticast mode [ 480.108297][T14438] bridge_slave_1: left promiscuous mode [ 480.122320][T14446] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 480.153396][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.167653][T14446] netlink: 'syz.4.2601': attribute type 2 has an invalid length. [ 480.271082][T14438] bridge_slave_0: left allmulticast mode [ 480.283362][T14438] bridge_slave_0: left promiscuous mode [ 480.293157][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.452178][T14438] bond0: (slave bridge0): Releasing backup interface [ 481.512782][T14456] lo speed is unknown, defaulting to 1000 [ 481.738618][T14456] wlan1 speed is unknown, defaulting to 1000 [ 481.893795][T14473] delete_channel: no stack [ 482.120514][T14490] netlink: 'syz.2.2614': attribute type 10 has an invalid length. [ 482.211564][T14490] mac80211_hwsim hwsim8 .3ãc¤±: left promiscuous mode [ 482.260798][T14490] mac80211_hwsim hwsim8 .3ãc¤±: left allmulticast mode [ 483.190606][T14506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2626'. [ 483.321447][T14508] lo speed is unknown, defaulting to 1000 [ 484.143893][T14523] lo speed is unknown, defaulting to 1000 [ 484.146279][T14508] wlan1 speed is unknown, defaulting to 1000 [ 484.632578][T14523] wlan1 speed is unknown, defaulting to 1000 [ 485.707639][T14570] netlink: 'syz.4.2637': attribute type 10 has an invalid length. [ 485.713855][ T30] audit: type=1107 audit(1759293145.215:2): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 485.833465][T14569] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2636'. [ 486.188000][ T5844] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 486.425136][T14582] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2641'. [ 486.571966][T14582] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 488.167148][T14624] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 488.298608][T14629] netlink: 4800 bytes leftover after parsing attributes in process `syz.2.2654'. [ 488.309521][T14629] netlink: 4800 bytes leftover after parsing attributes in process `syz.2.2654'. [ 488.336941][T14631] delete_channel: no stack [ 488.796919][T14652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 489.350451][T14666] lo speed is unknown, defaulting to 1000 [ 489.365741][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2665'. [ 489.822244][T14666] wlan1 speed is unknown, defaulting to 1000 [ 489.826762][T14673] lo speed is unknown, defaulting to 1000 [ 490.328817][T14690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2672'. [ 490.341748][T14688] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2671'. [ 491.083206][T14702] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 491.149979][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 491.182943][T14673] wlan1 speed is unknown, defaulting to 1000 [ 492.099056][T14712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2681'. [ 492.404760][T14717] lo speed is unknown, defaulting to 1000 [ 492.759036][T14717] wlan1 speed is unknown, defaulting to 1000 [ 493.924497][T14758] netlink: 'syz.2.2693': attribute type 10 has an invalid length. [ 494.189006][T14769] lo speed is unknown, defaulting to 1000 [ 494.363645][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2700'. [ 494.867231][T14795] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 494.888283][T14795] syzkaller0: Linktype set failed because interface is up [ 494.940753][T14769] wlan1 speed is unknown, defaulting to 1000 [ 495.377489][T14817] netlink: 'syz.1.2709': attribute type 10 has an invalid length. [ 495.762744][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2711'. [ 495.777801][T14826] netlink: 'syz.2.2711': attribute type 40 has an invalid length. [ 495.820435][T14826] siw: device registration error -23 [ 497.216011][T14817] bond0: (slave .3ãc¤±): Releasing backup interface [ 497.252108][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 497.265733][T14831] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2713'. [ 497.460972][T14835] delete_channel: no stack [ 498.025958][T14862] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2722'. [ 498.263183][T14864] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2723'. [ 498.271422][T14871] netlink: 'syz.0.2726': attribute type 10 has an invalid length. [ 498.771128][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'. [ 498.828798][T14877] netlink: 'syz.2.2727': attribute type 10 has an invalid length. [ 498.878501][T14885] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 498.932873][T14877] .`: (slave bond_slave_0): Releasing backup interface [ 499.424021][T14898] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2733'. [ 500.096805][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2738'. [ 500.360947][T14918] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2741'. [ 501.075178][T14936] netlink: 'syz.4.2746': attribute type 11 has an invalid length. [ 501.408769][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.415563][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.055603][ T5844] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 502.153899][T14968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2756'. [ 502.572835][T14978] lo speed is unknown, defaulting to 1000 [ 502.924673][T14989] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2762'. [ 503.091586][T14978] wlan1 speed is unknown, defaulting to 1000 [ 504.703758][T15051] veth0_vlan: left promiscuous mode [ 504.719179][T15051] veth0_vlan: entered promiscuous mode [ 505.058163][ T5160] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 506.106966][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 506.825671][T15092] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 507.021587][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'. [ 507.351982][T15103] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 508.269765][T15104] delete_channel: no stack [ 509.700773][T15142] delete_channel: no stack [ 510.203823][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2816'. [ 510.600019][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2821'. [ 510.866413][T15176] lo speed is unknown, defaulting to 1000 [ 511.390829][T15176] wlan1 speed is unknown, defaulting to 1000 [ 512.206225][T15210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2832'. [ 513.179222][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2837'. [ 513.291812][ T5160] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 513.335385][T15230] delete_channel: no stack [ 514.410693][T15247] lo speed is unknown, defaulting to 1000 [ 514.864101][T15269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2849'. [ 514.907255][T15247] wlan1 speed is unknown, defaulting to 1000 [ 514.913371][T15267] lo speed is unknown, defaulting to 1000 [ 515.110420][T15275] delete_channel: no stack [ 515.236581][T15267] wlan1 speed is unknown, defaulting to 1000 [ 515.278469][T15278] delete_channel: no stack [ 515.512682][T15287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2855'. [ 516.133061][T15298] netlink: 'syz.4.2859': attribute type 4 has an invalid length. [ 516.153934][T15298] netlink: 182632 bytes leftover after parsing attributes in process `syz.4.2859'. [ 516.926735][T15319] delete_channel: no stack [ 517.348632][T15330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2868'. [ 517.391276][T15313] lo speed is unknown, defaulting to 1000 [ 517.589040][T15334] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2870'. [ 518.120774][T15313] wlan1 speed is unknown, defaulting to 1000 [ 518.320121][T15348] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2875'. [ 518.379211][T15352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2874'. [ 518.801802][T15358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'. [ 518.848553][T15359] delete_channel: no stack [ 519.194807][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2879'. [ 520.597887][T15388] veth0_vlan: left promiscuous mode [ 520.652487][T15388] veth0_vlan: entered promiscuous mode [ 521.037564][ T5160] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13 [ 521.283280][T15423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2890'. [ 521.715759][T15432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2896'. [ 521.764976][T15428] lo speed is unknown, defaulting to 1000 [ 522.144879][T15428] wlan1 speed is unknown, defaulting to 1000 [ 522.256867][T15444] sit0: entered allmulticast mode [ 522.313797][T15444] sit0: entered promiscuous mode [ 523.025797][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 523.103223][T15455] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 523.141425][T15455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.299479][T15464] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2907'. [ 524.059382][T15486] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2913'. [ 524.211351][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2915'. [ 524.475480][ T5160] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 524.527821][T15494] lo speed is unknown, defaulting to 1000 [ 524.808581][T15504] netlink: 'syz.1.2918': attribute type 10 has an invalid length. [ 525.985040][T15513] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 526.037774][T15513] netlink: 4412 bytes leftover after parsing attributes in process `syz.3.2920'. [ 526.108902][T15494] wlan1 speed is unknown, defaulting to 1000 [ 526.302319][T15530] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 526.322024][T15528] bridge0: port 3(ip6gretap0) entered disabled state [ 526.329594][T15528] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.352194][T15528] bridge0: entered allmulticast mode [ 526.413188][T15528] bridge0: port 3(ip6gretap0) entered blocking state [ 526.420560][T15528] bridge0: port 3(ip6gretap0) entered forwarding state [ 526.428669][T15528] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.436351][T15528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.447512][T15528] bridge0: entered promiscuous mode [ 526.538953][T15534] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2927'. [ 527.811355][T15570] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2940'. [ 528.020413][T15573] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.118709][T15614] lo speed is unknown, defaulting to 1000 [ 529.144773][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 529.162118][T15622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 529.480058][T15614] wlan1 speed is unknown, defaulting to 1000 [ 530.372721][T15656] lo speed is unknown, defaulting to 1000 [ 530.481865][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'. [ 530.892762][T15671] delete_channel: no stack [ 531.522950][T15656] wlan1 speed is unknown, defaulting to 1000 [ 532.694555][T15708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2982'. [ 532.707301][T15708] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 532.922653][T15715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2985'. [ 533.144328][T15721] netlink: 'syz.0.2987': attribute type 21 has an invalid length. [ 533.153007][T15721] netlink: 'syz.0.2987': attribute type 6 has an invalid length. [ 533.191582][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2987'. [ 533.933119][T15750] netlink: 'syz.3.2995': attribute type 10 has an invalid length. [ 533.984163][T15750] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 534.068799][T15756] netlink: 'syz.3.2995': attribute type 3 has an invalid length. [ 534.076798][T15756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2995'. [ 534.143821][T15752] lo speed is unknown, defaulting to 1000 [ 534.377130][T15762] netlink: 'syz.3.2998': attribute type 29 has an invalid length. [ 534.413637][T15762] netlink: 'syz.3.2998': attribute type 10 has an invalid length. [ 534.641740][T15752] wlan1 speed is unknown, defaulting to 1000 [ 534.761064][T15770] netlink: 'syz.1.3000': attribute type 10 has an invalid length. [ 534.769309][T15770] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3000'. [ 537.083661][T15827] netlink: 'syz.2.3019': attribute type 11 has an invalid length. [ 537.133651][T15829] lo speed is unknown, defaulting to 1000 [ 537.875144][T15856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3026'. [ 538.020905][T15829] wlan1 speed is unknown, defaulting to 1000 [ 538.179911][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 539.065564][T15886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3037'. [ 539.133540][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3037'. [ 539.480944][T15899] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 541.506128][T15946] netlink: 'syz.1.3056': attribute type 2 has an invalid length. [ 541.514422][T15946] netlink: 130532 bytes leftover after parsing attributes in process `syz.1.3056'. [ 541.852120][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3054'. [ 542.155116][T15960] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 542.166318][T15960] netlink: 'syz.0.3061': attribute type 4 has an invalid length. [ 542.180494][T15960] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3061'. [ 542.654570][T15975] lo speed is unknown, defaulting to 1000 [ 543.280246][T16002] delete_channel: no stack [ 543.437849][T15975] wlan1 speed is unknown, defaulting to 1000 [ 543.723841][T16011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3075'. [ 543.748143][T16011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3075'. [ 543.911095][T16019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3076'. [ 543.921501][T16017] netlink: 'syz.3.3078': attribute type 10 has an invalid length. [ 544.082914][T16024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3078'. [ 544.326482][T16017] team0 (unregistering): Port device team_slave_0 removed [ 544.347445][T16017] team0 (unregistering): Port device team_slave_1 removed [ 544.358868][T16017] team0 (unregistering): Port device bond0 removed [ 544.378673][T16017] team0 (unregistering): Port device wlan1 removed [ 544.414049][ T5902] syz1: Port: 1 Link DOWN [ 545.609631][T16050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3087'. [ 545.619076][T16050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3087'. [ 545.648465][T16050] netlink: 'syz.1.3087': attribute type 1 has an invalid length. [ 545.675804][T16050] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3087'. [ 546.180842][T16069] lo speed is unknown, defaulting to 1000 [ 546.286109][T16074] netlink: 'syz.1.3091': attribute type 39 has an invalid length. [ 546.766081][T16069] wlan1 speed is unknown, defaulting to 1000 [ 547.480132][T16100] delete_channel: no stack [ 547.757402][T16113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3101'. [ 547.766866][T16113] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3101'. [ 549.578829][T16146] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3109'. [ 549.788789][T16157] syz.3.3113: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 549.820980][T16157] CPU: 0 UID: 0 PID: 16157 Comm: syz.3.3113 Not tainted syzkaller #0 PREEMPT(full) [ 549.821007][T16157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.821024][T16157] Call Trace: [ 549.821034][T16157] [ 549.821043][T16157] dump_stack_lvl+0x189/0x250 [ 549.821083][T16157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.821106][T16157] ? __pfx__printk+0x10/0x10 [ 549.821123][T16157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 549.821147][T16157] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 549.821170][T16157] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 549.821192][T16157] warn_alloc+0x214/0x310 [ 549.821211][T16157] ? stack_depot_save_flags+0x41b/0x860 [ 549.821233][T16157] ? __pfx_warn_alloc+0x10/0x10 [ 549.821253][T16157] ? kasan_save_track+0x4f/0x80 [ 549.821268][T16157] ? xskq_create+0x56/0x170 [ 549.821280][T16157] ? xsk_init_queue+0xb0/0x110 [ 549.821289][T16157] ? xsk_setsockopt+0x57b/0x8d0 [ 549.821307][T16157] ? do_sock_setsockopt+0x179/0x1b0 [ 549.821320][T16157] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 549.821332][T16157] ? do_syscall_64+0xfa/0x3b0 [ 549.821345][T16157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.821365][T16157] __vmalloc_node_range_noprof+0x125/0x12f0 [ 549.821406][T16157] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 549.821428][T16157] ? __kasan_kmalloc+0x93/0xb0 [ 549.821446][T16157] vmalloc_user_noprof+0xad/0xf0 [ 549.821466][T16157] ? xskq_create+0xbf/0x170 [ 549.821482][T16157] xskq_create+0xbf/0x170 [ 549.821499][T16157] xsk_init_queue+0xb0/0x110 [ 549.821516][T16157] xsk_setsockopt+0x57b/0x8d0 [ 549.821538][T16157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 549.821557][T16157] ? __pfx_aa_sk_perm+0x10/0x10 [ 549.821579][T16157] ? __fget_files+0x2a/0x420 [ 549.821595][T16157] ? aa_sock_opt_perm+0xff/0x1b0 [ 549.821616][T16157] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 549.821628][T16157] ? __pfx_xsk_setsockopt+0x10/0x10 [ 549.821648][T16157] do_sock_setsockopt+0x179/0x1b0 [ 549.821676][T16157] __x64_sys_setsockopt+0x13f/0x1b0 [ 549.821697][T16157] do_syscall_64+0xfa/0x3b0 [ 549.821710][T16157] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.821724][T16157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.821737][T16157] ? clear_bhb_loop+0x60/0xb0 [ 549.821754][T16157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.821767][T16157] RIP: 0033:0x7f7a53f8eec9 [ 549.821786][T16157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.821799][T16157] RSP: 002b:00007f7a54d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.821814][T16157] RAX: ffffffffffffffda RBX: 00007f7a541e6090 RCX: 00007f7a53f8eec9 [ 549.821824][T16157] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 549.821837][T16157] RBP: 00007f7a54011f91 R08: 0000000000000004 R09: 0000000000000000 [ 549.821845][T16157] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 549.821854][T16157] R13: 00007f7a541e6128 R14: 00007f7a541e6090 R15: 00007ffc0444fe28 [ 549.821877][T16157] [ 549.821892][T16157] Mem-Info: [ 550.124037][T16157] active_anon:6084 inactive_anon:0 isolated_anon:0 [ 550.124037][T16157] active_file:21765 inactive_file:40076 isolated_file:0 [ 550.124037][T16157] unevictable:768 dirty:386 writeback:0 [ 550.124037][T16157] slab_reclaimable:13816 slab_unreclaimable:191636 [ 550.124037][T16157] mapped:31143 shmem:1380 pagetables:1015 [ 550.124037][T16157] sec_pagetables:0 bounce:0 [ 550.124037][T16157] kernel_misc_reclaimable:0 [ 550.124037][T16157] free:1206992 free_pcp:19427 free_cma:0 [ 550.172509][T16157] Node 0 active_anon:24336kB inactive_anon:0kB active_file:87060kB inactive_file:160100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125572kB dirty:1544kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11204kB pagetables:3924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 550.208529][T16157] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 550.241312][T16157] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.271150][T16157] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 550.277222][T16157] Node 0 DMA32 free:920880kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24492kB inactive_anon:0kB active_file:87060kB inactive_file:159780kB unevictable:1536kB writepending:1544kB present:3129332kB managed:2565784kB mlocked:0kB bounce:0kB free_pcp:61448kB local_pcp:25288kB free_cma:0kB [ 550.282863][T16162] netlink: 'syz.0.3115': attribute type 10 has an invalid length. [ 550.320294][T16157] lowmem_reserve[]: 0 0 0 0 0 [ 550.345937][T16157] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 550.377666][T16162] team0: Port device wlan1 added [ 550.423737][T16157] lowmem_reserve[]: 0 0 0 0 0 [ 550.438545][T16157] Node 1 Normal free:3891728kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16288kB local_pcp:6240kB free_cma:0kB [ 550.483522][T16157] lowmem_reserve[]: 0 0 0 0 0 [ 550.488632][T16157] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 550.502359][T16157] Node 0 DMA32: 2350*4kB (UME) 1331*8kB (UME) 841*16kB (UME) 712*32kB (UME) 308*64kB (UME) 71*128kB (UME) 65*256kB (UM) 30*512kB (UME) 9*1024kB (ME) 4*2048kB (UM) 192*4096kB (UM) = 920928kB [ 550.526692][T16162] netlink: 'syz.0.3115': attribute type 11 has an invalid length. [ 550.567800][T16157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 550.581672][T16157] Node 1 Normal: 184*4kB (UME) 46*8kB (UME) 38*16kB (UME) 149*32kB (UME) 39*64kB (UME) 14*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3891728kB [ 550.601254][T16162] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3115'. [ 550.602622][T16157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.620326][T16157] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.629710][T16157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.639802][T16157] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 550.649449][T16157] 63218 total pagecache pages [ 550.654358][T16157] 0 pages in swap cache [ 550.658997][T16157] Free swap = 124996kB [ 550.668740][T16157] Total swap = 124996kB [ 550.675888][T16157] 2097051 pages RAM [ 550.681279][T16157] 0 pages HighMem/MovableOnly [ 550.688170][T16157] 423899 pages reserved [ 550.692498][T16157] 0 pages cma reserved [ 550.774955][T16161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.831181][T16182] delete_channel: no stack [ 550.873706][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 550.997020][T16181] netlink: del zone limit has 4 unknown bytes [ 551.180938][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 551.329043][T16204] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 551.341041][T16204] netlink: 'syz.0.3128': attribute type 3 has an invalid length. [ 551.349281][T16204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3128'. [ 551.412678][T16205] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 551.570244][T16212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3129'. [ 551.614816][T16212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3129'. [ 551.818348][T16221] delete_channel: no stack [ 552.401600][T16233] netlink: 'syz.3.3137': attribute type 29 has an invalid length. [ 552.413640][T16233] netlink: 'syz.3.3137': attribute type 10 has an invalid length. [ 552.458257][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 552.506122][T16227] lo speed is unknown, defaulting to 1000 [ 552.668554][T16240] netlink: del zone limit has 4 unknown bytes [ 552.957686][T16227] wlan1 speed is unknown, defaulting to 1000 [ 553.206811][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 554.082987][T16269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3146'. [ 554.096436][T16270] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3145'. [ 554.152401][T16270] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 556.063541][T16320] netlink: 'syz.3.3163': attribute type 21 has an invalid length. [ 556.072035][T16320] netlink: 'syz.3.3163': attribute type 6 has an invalid length. [ 556.082283][T16320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3163'. [ 556.094074][T16323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3164'. [ 557.496814][T16363] lo speed is unknown, defaulting to 1000 [ 557.752623][T16366] lo speed is unknown, defaulting to 1000 [ 557.770209][T16363] wlan1 speed is unknown, defaulting to 1000 [ 557.992541][T16366] wlan1 speed is unknown, defaulting to 1000 [ 558.338080][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3182'. [ 558.738513][T16398] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3186'. [ 558.762301][T16398] netlink: 'syz.3.3186': attribute type 10 has an invalid length. [ 558.774244][T16398] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 558.782406][T16398] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 560.336037][T16421] netlink: 'syz.2.3193': attribute type 21 has an invalid length. [ 560.346661][T16421] netlink: 'syz.2.3193': attribute type 6 has an invalid length. [ 560.368853][T16421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3193'. [ 561.560202][T16458] netlink: 'syz.0.3202': attribute type 39 has an invalid length. [ 562.665702][ T30] audit: type=1107 audit(1759293222.205:3): pid=16490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 562.843514][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.849996][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.868633][T16498] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.3211'. [ 562.878721][T16498] openvswitch: netlink: Message has 6 unknown bytes. [ 563.711027][T16514] netlink: 'syz.1.3216': attribute type 39 has an invalid length. [ 564.394485][T16549] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3226'. [ 564.423181][T16550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.412911][T16580] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3235'. [ 565.914792][T16605] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 565.932263][T16605] netlink: 'syz.3.3243': attribute type 11 has an invalid length. [ 565.941594][T16605] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3243'. [ 566.623865][T16600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.861812][T16620] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3248'. [ 567.052345][T16638] netlink: 'syz.1.3252': attribute type 21 has an invalid length. [ 567.065521][T16638] netlink: 'syz.1.3252': attribute type 6 has an invalid length. [ 567.096122][T16628] netlink: 'syz.2.3251': attribute type 13 has an invalid length. [ 567.099642][T16638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3252'. [ 567.104083][T16628] netlink: 'syz.2.3251': attribute type 17 has an invalid length. [ 567.130257][T16628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.346804][T16649] @ÿ: renamed from bond_slave_0 [ 567.379283][T16649] netlink: 'syz.4.3255': attribute type 21 has an invalid length. [ 567.387538][T16649] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3255'. [ 567.398278][T16649] netlink: 'syz.4.3255': attribute type 4 has an invalid length. [ 567.469255][T16652] syzkaller0: entered promiscuous mode [ 567.474856][T16652] syzkaller0: entered allmulticast mode [ 568.268253][T16662] delete_channel: no stack [ 569.589929][T16667] lo speed is unknown, defaulting to 1000 [ 569.671786][T16684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3265'. [ 570.017532][T16667] wlan1 speed is unknown, defaulting to 1000 [ 570.228817][T16702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.340993][T16702] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 570.839851][T16714] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 570.864732][T16714] netlink: 'syz.2.3274': attribute type 10 has an invalid length. [ 570.932477][T16714] 8021q: adding VLAN 0 to HW filter on device .` [ 570.956391][T16714] team0: Port device .` added [ 571.293210][T16734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3281'. [ 571.891097][T16748] netlink: 'syz.2.3285': attribute type 10 has an invalid length. [ 572.308403][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3288'. [ 572.454231][T16754] lo speed is unknown, defaulting to 1000 [ 572.549683][T16770] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3289'. [ 572.567989][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3289'. [ 572.782101][T16754] wlan1 speed is unknown, defaulting to 1000 [ 574.219133][T16813] option changes via remount are deprecated (pid=16809 comm=syz.1.3304) [ 574.329742][T16814] delete_channel: no stack [ 574.527042][T16821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3307'. [ 574.731310][ T30] audit: type=1107 audit(1759293234.265:4): pid=16826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 575.074302][T16838] netlink: 'syz.0.3312': attribute type 3 has an invalid length. [ 575.208365][T16838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3312'. [ 575.532341][T16843] lo speed is unknown, defaulting to 1000 [ 575.998832][T16867] netlink: 'syz.3.3321': attribute type 2 has an invalid length. [ 576.148845][T16843] wlan1 speed is unknown, defaulting to 1000 [ 578.261221][T16903] netlink: 'syz.3.3331': attribute type 13 has an invalid length. [ 578.269457][T16903] netlink: 'syz.3.3331': attribute type 17 has an invalid length. [ 578.317103][T16903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.410455][T16903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.623237][T16920] netlink: 'syz.0.3336': attribute type 10 has an invalid length. [ 578.645605][T16920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3336'. [ 578.852586][T16920] team0: entered promiscuous mode [ 578.892552][T16920] team_slave_0: entered promiscuous mode [ 578.954835][T16920] team_slave_1: entered promiscuous mode [ 578.973067][T16920] bond0: entered promiscuous mode [ 578.979716][T16920] bond_slave_0: entered promiscuous mode [ 579.009677][T16920] bond_slave_1: entered promiscuous mode [ 579.038461][T16920] macvlan0: entered promiscuous mode [ 579.060448][T16920] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 579.081363][T16920] team0: entered allmulticast mode [ 579.102608][T16920] team_slave_0: entered allmulticast mode [ 579.124750][T16920] team_slave_1: entered allmulticast mode [ 579.145457][T16920] bond0: entered allmulticast mode [ 579.158137][T16920] bond_slave_0: entered allmulticast mode [ 579.175423][T16920] bond_slave_1: entered allmulticast mode [ 579.181212][T16920] geneve0: entered allmulticast mode [ 579.235513][T16920] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 579.256681][T16920] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 580.596743][T16963] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3348'. [ 580.633978][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'. [ 582.091900][T17004] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3361'. [ 582.226455][T17004] netlink: 'syz.4.3361': attribute type 10 has an invalid length. [ 582.234661][T17004] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3361'. [ 583.640900][T17012] netlink: 'syz.2.3363': attribute type 3 has an invalid length. [ 583.665436][T17013] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3363'. [ 583.883883][T17034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3370'. [ 584.613199][T17049] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 584.633350][T17049] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 585.140975][T17062] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3378'. [ 585.213345][T17062] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 585.221699][T17062] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3378'. [ 585.700184][T17081] lo speed is unknown, defaulting to 1000 [ 586.198482][T17081] wlan1 speed is unknown, defaulting to 1000 [ 586.329804][T17097] delete_channel: no stack [ 586.637291][T17105] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 586.645549][T17105] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 586.951614][T17113] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3394'. [ 587.828142][T17129] delete_channel: no stack [ 588.478036][T17160] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 588.493870][T17160] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 588.611980][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3408'. [ 589.130827][T17177] delete_channel: no stack [ 589.140749][T17180] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3416'. [ 589.373102][T17191] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3418'. [ 589.400754][T17191] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 589.606665][T17189] netlink: 'syz.4.3419': attribute type 6 has an invalid length. [ 589.628719][T17189] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3419'. [ 590.361697][T17218] delete_channel: no stack [ 590.660554][T17222] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 591.356521][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3433'. [ 591.960945][T17254] netlink: 'syz.1.3435': attribute type 13 has an invalid length. [ 591.973787][T17254] netlink: 'syz.1.3435': attribute type 17 has an invalid length. [ 592.141485][T17254] bridge0: left promiscuous mode [ 592.147684][T17254] bridge0: left allmulticast mode [ 592.173030][T17254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.237745][T17254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.310534][T17265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3448'. [ 594.264064][T17306] : entered promiscuous mode [ 594.630402][T17321] netlink: 'syz.4.3455': attribute type 13 has an invalid length. [ 594.638593][T17321] netlink: 'syz.4.3455': attribute type 17 has an invalid length. [ 595.202089][T17321] sit0: left promiscuous mode [ 595.215453][T17321] sit0: left allmulticast mode [ 595.354912][T17321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.477444][T17337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3460'. [ 595.560329][T17339] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 595.566765][T17339] syzkaller0: linktype set to 801 [ 595.751118][ T30] audit: type=1107 audit(1759293255.285:5): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 596.207853][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3468'. [ 596.242152][T17357] netlink: 130016 bytes leftover after parsing attributes in process `syz.3.3468'. [ 596.272493][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3468'. [ 596.330687][T17358] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3468'. [ 597.298686][T17386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3478'. [ 597.317903][T17382] lo speed is unknown, defaulting to 1000 [ 597.348474][T17388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3476'. [ 597.369391][T17386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3478'. [ 597.569961][T17397] warn_alloc: 4 callbacks suppressed [ 597.569981][T17397] syz.0.3480: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 597.619398][T17397] CPU: 1 UID: 0 PID: 17397 Comm: syz.0.3480 Not tainted syzkaller #0 PREEMPT(full) [ 597.619424][T17397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 597.619435][T17397] Call Trace: [ 597.619443][T17397] [ 597.619451][T17397] dump_stack_lvl+0x189/0x250 [ 597.619480][T17397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.619503][T17397] ? __pfx__printk+0x10/0x10 [ 597.619520][T17397] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 597.619545][T17397] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 597.619572][T17397] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 597.619596][T17397] warn_alloc+0x214/0x310 [ 597.619621][T17397] ? stack_depot_save_flags+0x40/0x860 [ 597.619650][T17397] ? __pfx_warn_alloc+0x10/0x10 [ 597.619676][T17397] ? kasan_save_track+0x4f/0x80 [ 597.619697][T17397] ? xskq_create+0x56/0x170 [ 597.619712][T17397] ? xsk_init_queue+0xb0/0x110 [ 597.619726][T17397] ? xsk_setsockopt+0x57b/0x8d0 [ 597.619748][T17397] ? do_sock_setsockopt+0x179/0x1b0 [ 597.619775][T17397] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 597.619794][T17397] ? do_syscall_64+0xfa/0x3b0 [ 597.619811][T17397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.619837][T17397] __vmalloc_node_range_noprof+0x125/0x12f0 [ 597.619895][T17397] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 597.619925][T17397] ? __kasan_kmalloc+0x93/0xb0 [ 597.619949][T17397] vmalloc_user_noprof+0xad/0xf0 [ 597.619975][T17397] ? xskq_create+0xbf/0x170 [ 597.619990][T17397] xskq_create+0xbf/0x170 [ 597.620010][T17397] xsk_init_queue+0xb0/0x110 [ 597.620029][T17397] xsk_setsockopt+0x57b/0x8d0 [ 597.620054][T17397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.620079][T17397] ? __pfx_aa_sk_perm+0x10/0x10 [ 597.620105][T17397] ? __fget_files+0x2a/0x420 [ 597.620126][T17397] ? aa_sock_opt_perm+0xff/0x1b0 [ 597.620153][T17397] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 597.620168][T17397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 597.620193][T17397] do_sock_setsockopt+0x179/0x1b0 [ 597.620216][T17397] __x64_sys_setsockopt+0x13f/0x1b0 [ 597.620240][T17397] do_syscall_64+0xfa/0x3b0 [ 597.620254][T17397] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.620269][T17397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.620286][T17397] ? clear_bhb_loop+0x60/0xb0 [ 597.620305][T17397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.620321][T17397] RIP: 0033:0x7fac0458eec9 [ 597.620337][T17397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.620352][T17397] RSP: 002b:00007fac05453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 597.620371][T17397] RAX: ffffffffffffffda RBX: 00007fac047e5fa0 RCX: 00007fac0458eec9 [ 597.620384][T17397] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 597.620395][T17397] RBP: 00007fac04611f91 R08: 0000000000000004 R09: 0000000000000000 [ 597.620406][T17397] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 597.620417][T17397] R13: 00007fac047e6038 R14: 00007fac047e5fa0 R15: 00007fffcccb0508 [ 597.620449][T17397] [ 597.620605][T17397] Mem-Info: [ 597.784665][T17382] wlan1 speed is unknown, defaulting to 1000 [ 597.797318][T17397] active_anon:6140 inactive_anon:0 isolated_anon:0 [ 597.797318][T17397] active_file:21765 inactive_file:40094 isolated_file:0 [ 597.797318][T17397] unevictable:768 dirty:378 writeback:0 [ 597.797318][T17397] slab_reclaimable:13818 slab_unreclaimable:206330 [ 597.797318][T17397] mapped:29104 shmem:1356 pagetables:1030 [ 597.797318][T17397] sec_pagetables:0 bounce:0 [ 597.797318][T17397] kernel_misc_reclaimable:0 [ 597.797318][T17397] free:1196506 free_pcp:15014 free_cma:0 [ 598.014233][T17397] Node 0 active_anon:24332kB inactive_anon:0kB active_file:87060kB inactive_file:160172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116284kB dirty:1536kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10808kB pagetables:3964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.048127][T17397] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.090871][T17397] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.120716][T17397] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 598.126965][T17397] Node 0 DMA32 free:878172kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24388kB inactive_anon:0kB active_file:87060kB inactive_file:159852kB unevictable:1536kB writepending:1536kB present:3129332kB managed:2565784kB mlocked:0kB bounce:0kB free_pcp:43616kB local_pcp:24676kB free_cma:0kB [ 598.160274][T17397] lowmem_reserve[]: 0 0 0 0 0 [ 598.165065][T17397] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.179222][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 598.194101][T17397] lowmem_reserve[]: 0 0 0 0 0 [ 598.209017][T17403] netlink: 130016 bytes leftover after parsing attributes in process `syz.4.3482'. [ 598.218777][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 598.229897][T17397] Node 1 Normal free:3892268kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15744kB local_pcp:5984kB free_cma:0kB [ 598.327244][T17397] lowmem_reserve[]: 0 0 0 0 0 [ 598.356520][T17397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 598.417741][T17408] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3482'. [ 598.497169][T17397] Node 0 DMA32: 759*4kB (UME) 1266*8kB (UME) 741*16kB (UM) 855*32kB (UME) 269*64kB (UM) 67*128kB (UME) 52*256kB (UM) 18*512kB (UME) 11*1024kB (UME) 6*2048kB (UM) 184*4096kB (M) = 877916kB [ 598.602382][T17397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 598.622039][T17397] Node 1 Normal: 183*4kB (UME) 46*8kB (UME) 38*16kB (UME) 156*32kB (UME) 42*64kB (UME) 15*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3892268kB [ 598.642481][T17397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.673721][T17397] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.688161][T17397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.698466][T17397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.709802][T17397] 63212 total pagecache pages [ 598.714493][T17397] 0 pages in swap cache [ 598.721976][T17397] Free swap = 124996kB [ 598.749345][T17397] Total swap = 124996kB [ 598.791998][T17397] 2097051 pages RAM [ 598.793770][T17412] lo speed is unknown, defaulting to 1000 [ 598.796702][T17397] 0 pages HighMem/MovableOnly [ 598.806978][T17397] 423899 pages reserved [ 598.811800][T17397] 0 pages cma reserved [ 598.999332][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 599.027661][T17418] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3486'. [ 599.448491][T17412] wlan1 speed is unknown, defaulting to 1000 [ 599.619863][T17434] netlink: 'syz.2.3491': attribute type 21 has an invalid length. [ 599.741200][T17434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3491'. [ 599.773795][T17431] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 600.543439][T17438] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 600.562816][T17446] netlink: 'syz.3.3489': attribute type 2 has an invalid length. [ 600.583826][T17446] netlink: 'syz.3.3489': attribute type 9 has an invalid length. [ 600.593551][T17446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3489'. [ 600.638982][T17431] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 600.699392][T17444] netlink: 'syz.3.3489': attribute type 29 has an invalid length. [ 601.534355][T17474] netlink: 'syz.1.3500': attribute type 3 has an invalid length. [ 601.706418][T17472] netlink: 'syz.0.3501': attribute type 22 has an invalid length. [ 602.707808][T17512] tun0: tun_chr_ioctl cmd 1074025677 [ 602.713287][T17512] tun0: linktype set to 270 [ 604.073905][T17523] netlink: 'syz.3.3515': attribute type 3 has an invalid length. [ 604.094365][T17524] __nla_validate_parse: 3 callbacks suppressed [ 604.094383][T17524] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3515'. [ 604.349557][T17533] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 604.372545][T17533] syzkaller1: linktype set to 823 [ 605.491723][T17569] netlink: 'syz.1.3533': attribute type 3 has an invalid length. [ 605.503203][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3533'. [ 605.607078][T17567] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3533'. [ 605.680141][T17572] netlink: 'syz.3.3534': attribute type 39 has an invalid length. [ 605.703098][T17570] netlink: 'syz.0.3532': attribute type 10 has an invalid length. [ 605.934893][T17582] siw: device registration error -23 [ 605.966810][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3537'. [ 606.290296][T17589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3540'. [ 607.254551][T17615] netlink: 'syz.4.3546': attribute type 10 has an invalid length. [ 607.275544][T17615] bridge0: port 1(macsec0) entered blocking state [ 607.282801][T17615] bridge0: port 1(macsec0) entered disabled state [ 607.299656][T17615] macsec0: entered allmulticast mode [ 607.315809][T17615] veth1_macvtap: entered allmulticast mode [ 607.346653][T17615] macsec0: entered promiscuous mode [ 607.661319][T17622] netlink: 'syz.3.3548': attribute type 3 has an invalid length. [ 607.756701][ T5160] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 607.758332][T17617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3548'. [ 608.731166][T17650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3557'. [ 608.824738][T17651] delete_channel: no stack [ 608.998736][T17658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3563'. [ 609.004431][T17660] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 609.054402][T17658] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3563'. [ 609.123127][T17662] lo speed is unknown, defaulting to 1000 [ 609.416208][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3566'. [ 609.662384][T17685] netlink: 'syz.1.3565': attribute type 6 has an invalid length. [ 609.681115][T17685] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3565'. [ 609.765130][T17662] wlan1 speed is unknown, defaulting to 1000 [ 610.699469][T17698] delete_channel: no stack [ 612.121895][T17739] delete_channel: no stack [ 612.358270][T17747] netlink: 'syz.3.3587': attribute type 22 has an invalid length. [ 612.389824][T17746] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 612.398215][T17746] syzkaller1: linktype set to 823 [ 612.415616][T17747] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.3587'. [ 613.664900][T17774] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 613.719485][T17774] syzkaller1: linktype set to 823 [ 614.245473][T17784] netlink: 'syz.1.3597': attribute type 64 has an invalid length. [ 614.429402][T17792] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 614.450811][T17792] syzkaller1: linktype set to 823 [ 615.000925][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'. [ 615.254319][T17816] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3607'. [ 615.514368][T17822] lo speed is unknown, defaulting to 1000 [ 615.576591][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3611'. [ 615.989798][T17833] netlink: 'syz.3.3613': attribute type 6 has an invalid length. [ 616.025443][T17833] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3613'. [ 616.173638][T17843] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 616.247266][T17843] syzkaller1: linktype set to 823 [ 616.280464][T17822] wlan1 speed is unknown, defaulting to 1000 [ 616.949342][T17863] netlink: 'syz.2.3619': attribute type 22 has an invalid length. [ 616.957961][T17863] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.3619'. [ 617.856096][T17889] netlink: 'syz.4.3626': attribute type 6 has an invalid length. [ 617.863881][T17889] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3626'. [ 618.714035][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 618.729815][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3632'. [ 618.807144][T17905] netlink: 'syz.4.3632': attribute type 10 has an invalid length. [ 618.849808][T17905] bond0: (slave 5@ÿ): Releasing backup interface [ 619.067133][T17910] netlink: 'syz.3.3631': attribute type 64 has an invalid length. [ 619.118744][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 619.190643][T17923] netlink: 'syz.2.3639': attribute type 9 has an invalid length. [ 619.329450][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 620.169667][T17950] netlink: 'syz.3.3648': attribute type 1 has an invalid length. [ 620.193601][T17950] __nla_validate_parse: 2 callbacks suppressed [ 620.193633][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 620.535655][T17954] delete_channel: no stack [ 621.152383][T17970] syzkaller0: entered promiscuous mode [ 621.158996][T17970] syzkaller0: entered allmulticast mode [ 621.488540][T17989] delete_channel: no stack [ 621.630112][T17999] netlink: 'syz.1.3660': attribute type 28 has an invalid length. [ 621.640471][T17999] netlink: 'syz.1.3660': attribute type 29 has an invalid length. [ 621.648960][T17999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3660'. [ 622.975042][T18009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3666'. [ 623.003801][T17988] lo speed is unknown, defaulting to 1000 [ 623.334387][T17988] wlan1 speed is unknown, defaulting to 1000 [ 623.567735][T18022] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.3671'. [ 624.283789][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.290260][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.670538][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 624.869597][T18057] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3684'. [ 625.121544][T18062] lo speed is unknown, defaulting to 1000 [ 625.213185][T18070] netlink: 'syz.2.3685': attribute type 64 has an invalid length. [ 625.937223][T18062] wlan1 speed is unknown, defaulting to 1000 [ 626.498387][T18099] netlink: 'syz.2.3695': attribute type 3 has an invalid length. [ 626.509300][T18099] netlink: 'syz.2.3695': attribute type 1 has an invalid length. [ 626.518468][T18099] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3695'. [ 627.108432][T18116] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 627.142997][T18116] syzkaller1: linktype set to 823 [ 628.222595][T18141] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3709'. [ 628.269011][T18143] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3708'. [ 628.581624][T18159] lo speed is unknown, defaulting to 1000 [ 628.656439][T18147] netlink: 'syz.2.3711': attribute type 6 has an invalid length. [ 628.664327][T18147] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3711'. [ 628.878706][T18159] wlan1 speed is unknown, defaulting to 1000 [ 629.073699][T18173] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 629.157810][T18174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3715'. [ 630.980842][T18195] lo speed is unknown, defaulting to 1000 [ 631.596441][T18195] wlan1 speed is unknown, defaulting to 1000 [ 632.824040][T18261] netlink: 'syz.2.3739': attribute type 3 has an invalid length. [ 632.836504][T18261] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 632.874976][T18261] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3739'. [ 632.891406][T18262] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3738'. [ 633.097452][T18266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3740'. [ 633.475197][T18272] lo speed is unknown, defaulting to 1000 [ 633.707988][T18276] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3742'. [ 634.039171][T18282] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3745'. [ 634.048700][T18282] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3745'. [ 634.082444][T18287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 634.089941][T18287] IPv6: NLM_F_CREATE should be set when creating new route [ 634.097568][T18287] IPv6: NLM_F_CREATE should be set when creating new route [ 634.414479][T18272] wlan1 speed is unknown, defaulting to 1000 [ 635.436061][T18302] netlink: 'syz.4.3750': attribute type 2 has an invalid length. [ 635.444186][T18302] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.3750'. [ 635.598298][T18305] netlink: 'syz.3.3751': attribute type 2 has an invalid length. [ 635.637401][T18305] netlink: 'syz.3.3751': attribute type 8 has an invalid length. [ 635.688611][T18305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3751'. [ 635.780346][T18309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3752'. [ 635.984133][T18305] lo speed is unknown, defaulting to 1000 [ 636.515062][T18305] wlan1 speed is unknown, defaulting to 1000 [ 638.437110][T18352] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 638.443790][T18352] syzkaller1: linktype set to 823 [ 638.673790][T18356] lo speed is unknown, defaulting to 1000 [ 638.797584][T18361] netlink: 116572 bytes leftover after parsing attributes in process `syz.1.3767'. [ 638.988511][T18366] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3769'. [ 639.186459][T18376] netlink: 'syz.4.3769': attribute type 11 has an invalid length. [ 639.205625][T18376] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3769'. [ 639.251106][T18365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.613692][T18385] netlink: 'syz.4.3774': attribute type 1 has an invalid length. [ 639.677861][T18385] netlink: 'syz.4.3774': attribute type 2 has an invalid length. [ 639.828300][T18368] lo speed is unknown, defaulting to 1000 [ 639.855073][T18356] wlan1 speed is unknown, defaulting to 1000 [ 642.556922][T18368] wlan1 speed is unknown, defaulting to 1000 [ 643.098705][ T5160] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 643.963368][T18410] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 643.988936][T18408] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3781'. [ 644.022736][T18410] syzkaller1: linktype set to 823 [ 644.761534][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3790'. [ 644.795629][T18441] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3790'. [ 645.730593][T18462] lo speed is unknown, defaulting to 1000 [ 646.039027][T18470] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 646.049817][T18470] syzkaller1: linktype set to 823 [ 646.454947][T18462] wlan1 speed is unknown, defaulting to 1000 [ 647.022699][T18503] netlink: 'syz.1.3807': attribute type 13 has an invalid length. [ 647.051956][T18503] netlink: 'syz.1.3807': attribute type 17 has an invalid length. [ 647.114238][T18503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.947803][T18523] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3815'. [ 647.975109][T18523] netlink: zone id is out of range [ 647.982644][T18523] netlink: zone id is out of range [ 647.990825][T18523] netlink: zone id is out of range [ 648.013286][T18523] netlink: zone id is out of range [ 648.049847][T18523] netlink: zone id is out of range [ 648.057276][T18523] netlink: zone id is out of range [ 648.062657][T18523] netlink: zone id is out of range [ 648.125425][T18523] netlink: zone id is out of range [ 648.142045][T18523] netlink: zone id is out of range [ 648.252827][T18528] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 648.283879][T18523] syz.0.3815 (18523) used obsolete PPPIOCDETACH ioctl [ 648.343057][T18531] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 648.403061][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 648.484191][T18538] lo speed is unknown, defaulting to 1000 [ 648.780843][T18536] netlink: 116572 bytes leftover after parsing attributes in process `syz.2.3819'. [ 648.953448][T18538] wlan1 speed is unknown, defaulting to 1000 [ 649.060775][T18556] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3823'. [ 649.093360][T18556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3823'. [ 649.122997][T18556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3823'. [ 649.208917][T18561] lo speed is unknown, defaulting to 1000 [ 649.699792][T18561] wlan1 speed is unknown, defaulting to 1000 [ 649.775217][T18582] netlink: 'syz.1.3832': attribute type 10 has an invalid length. [ 649.809188][T18582] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3832'. [ 651.863883][T18642] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3850'. [ 652.036324][T18644] lo speed is unknown, defaulting to 1000 [ 652.343874][T18644] wlan1 speed is unknown, defaulting to 1000 [ 652.935516][T18678] delete_channel: no stack [ 655.016861][T18726] netlink: 'syz.2.3874': attribute type 13 has an invalid length. [ 655.031488][T18723] delete_channel: no stack [ 655.039245][T18726] netlink: 'syz.2.3874': attribute type 17 has an invalid length. [ 655.080066][T18726] net_ratelimit: 76 callbacks suppressed [ 655.080077][T18726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.447251][T18744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3880'. [ 655.972473][T18758] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 656.735845][T18766] lo speed is unknown, defaulting to 1000 [ 657.188121][T18766] wlan1 speed is unknown, defaulting to 1000 [ 657.681154][T18802] delete_channel: no stack [ 659.037048][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3900'. [ 659.099610][T18824] lo speed is unknown, defaulting to 1000 [ 659.624965][T18835] lo speed is unknown, defaulting to 1000 [ 659.625107][T18824] wlan1 speed is unknown, defaulting to 1000 [ 660.151319][T18850] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3907'. [ 660.168531][T18850] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3907'. [ 660.190404][T18835] wlan1 speed is unknown, defaulting to 1000 [ 660.227503][T18855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.234877][T18855] IPv6: NLM_F_CREATE should be set when creating new route [ 660.242314][T18855] IPv6: NLM_F_CREATE should be set when creating new route [ 663.197552][T18865] netlink: 'syz.3.3913': attribute type 28 has an invalid length. [ 663.215993][T18865] netlink: 'syz.3.3913': attribute type 3 has an invalid length. [ 663.223818][T18865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3913'. [ 664.163271][T18889] lo speed is unknown, defaulting to 1000 [ 664.334253][T18893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3920'. [ 664.503837][T18889] wlan1 speed is unknown, defaulting to 1000 [ 664.532331][T18903] netlink: 'syz.0.3931': attribute type 13 has an invalid length. [ 664.554059][T18903] netlink: 'syz.0.3931': attribute type 17 has an invalid length. [ 664.579994][T18903] team0: left promiscuous mode [ 664.584927][T18903] team_slave_0: left promiscuous mode [ 664.592114][T18903] team_slave_1: left promiscuous mode [ 664.598012][T18903] bond0: left promiscuous mode [ 664.602948][T18903] bond_slave_0: left promiscuous mode [ 664.611091][T18903] bond_slave_1: left promiscuous mode [ 664.617631][T18903] macvlan0: left promiscuous mode [ 664.624395][T18903] team0: left allmulticast mode [ 664.630452][T18903] team_slave_0: left allmulticast mode [ 664.636060][T18903] team_slave_1: left allmulticast mode [ 664.641721][T18903] bond0: left allmulticast mode [ 664.647842][T18903] bond_slave_0: left allmulticast mode [ 664.653347][T18903] bond_slave_1: left allmulticast mode [ 664.658929][T18903] geneve0: left allmulticast mode [ 664.666050][T18903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.395730][T18921] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3926'. [ 665.435160][T18921] sock: sock_timestamping_bind_phc: sock not bind to device [ 665.657345][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 665.674133][T18925] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3928'. [ 665.823275][T18935] netlink: 'syz.2.3930': attribute type 9 has an invalid length. [ 665.831581][T18935] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3930'. [ 666.072407][T18939] lo speed is unknown, defaulting to 1000 [ 666.824973][T18964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3937'. [ 666.862416][T18939] wlan1 speed is unknown, defaulting to 1000 [ 667.610126][T18979] netlink: 'syz.1.3941': attribute type 3 has an invalid length. [ 667.618520][T18979] netlink: 'syz.1.3941': attribute type 1 has an invalid length. [ 667.627934][T18982] À: port 1(vlan0) entered blocking state [ 667.655472][T18979] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3941'. [ 667.675492][T18982] À: port 1(vlan0) entered disabled state [ 667.681461][T18982] vlan0: entered allmulticast mode [ 667.699421][T18982] vlan0: entered promiscuous mode [ 667.734183][T18976] À: port 1(vlan0) entered blocking state [ 667.740625][T18976] À: port 1(vlan0) entered forwarding state [ 668.433211][T19000] netlink: 'syz.1.3947': attribute type 2 has an invalid length. [ 668.441585][T19000] netlink: 'syz.1.3947': attribute type 8 has an invalid length. [ 668.451086][T19000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3947'. [ 668.747777][T19000] lo speed is unknown, defaulting to 1000 [ 669.321991][T19005] netlink: 'syz.3.3949': attribute type 1 has an invalid length. [ 669.340042][T19005] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3949'. [ 669.625104][T19000] wlan1 speed is unknown, defaulting to 1000 [ 669.693262][T19016] lo speed is unknown, defaulting to 1000 [ 670.071208][T19033] netlink: 'syz.4.3956': attribute type 1 has an invalid length. [ 670.079432][T19033] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3956'. [ 670.098095][T19016] wlan1 speed is unknown, defaulting to 1000 [ 670.622126][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3958'. [ 673.162243][T19077] netlink: 'syz.0.3964': attribute type 1 has an invalid length. [ 673.216701][T19081] netlink: 'syz.2.3968': attribute type 2 has an invalid length. [ 673.234727][T19081] netlink: 'syz.2.3968': attribute type 8 has an invalid length. [ 673.274379][T19084] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3966'. [ 673.292784][T19081] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3968'. [ 673.559419][T19092] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 673.577337][T19092] syzkaller1: linktype set to 823 [ 673.673060][T19081] lo speed is unknown, defaulting to 1000 [ 673.691961][T19095] bpf: Bad value for 'gid' [ 674.100687][T19100] netlink: 'syz.4.3976': attribute type 10 has an invalid length. [ 674.188291][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 674.377327][T19100] veth1_macvtap (unregistering): left allmulticast mode [ 674.412484][T19100] bridge0: port 1(macsec0) entered disabled state [ 674.531675][T19100] macsec0 (unregistering): left allmulticast mode [ 674.553339][T19100] macsec0 (unregistering): left promiscuous mode [ 674.576531][T19100] bridge0: port 1(macsec0) entered disabled state [ 674.968578][T19081] wlan1 speed is unknown, defaulting to 1000 [ 675.276782][T19122] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3980'. [ 675.290793][T19122] netlink: 'syz.3.3980': attribute type 10 has an invalid length. [ 675.301084][T19122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3980'. [ 675.610852][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3983'. [ 676.514195][T19151] netlink: 'syz.4.3992': attribute type 29 has an invalid length. [ 676.670315][T19151] netlink: 'syz.4.3992': attribute type 29 has an invalid length. [ 676.698659][T19155] netlink: 'syz.4.3992': attribute type 29 has an invalid length. [ 676.837113][T19151] netlink: 'syz.4.3992': attribute type 29 has an invalid length. [ 677.117305][T19171] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3995'. [ 677.144458][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3997'. [ 677.183091][T19171] bond_slave_1: entered promiscuous mode [ 677.189157][T19171] bridge0: entered promiscuous mode [ 678.324514][T19192] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 678.380621][T19205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4002'. [ 678.450409][T19206] netlink: 'syz.0.4001': attribute type 3 has an invalid length. [ 678.461477][T19206] netlink: 'syz.0.4001': attribute type 1 has an invalid length. [ 678.484647][T19206] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4001'. [ 678.638432][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4007'. [ 678.879687][T19218] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4008'. [ 679.178511][T19231] netlink: 'syz.3.4012': attribute type 39 has an invalid length. [ 679.697704][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4017'. [ 679.907375][T19256] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4019'. [ 679.930157][T19256] netlink: zone id is out of range [ 679.935967][T19256] netlink: zone id is out of range [ 679.941187][T19256] netlink: zone id is out of range [ 679.946975][T19256] netlink: zone id is out of range [ 679.952166][T19256] netlink: zone id is out of range [ 679.958914][T19256] netlink: zone id is out of range [ 679.964112][T19256] netlink: zone id is out of range [ 679.971570][T19256] netlink: zone id is out of range [ 679.977241][T19256] netlink: zone id is out of range [ 679.982434][T19256] netlink: zone id is out of range [ 680.271801][T19264] bpf: Bad value for 'gid' [ 681.502358][T19295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4028'. [ 681.854371][T19303] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4032'. [ 682.129257][T19311] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.4034'. [ 682.130251][T19306] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4033'. [ 682.162537][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4033'. [ 682.173647][T19306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4033'. [ 682.207203][T19314] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4034'. [ 682.282064][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4033'. [ 682.441610][T19318] lo speed is unknown, defaulting to 1000 [ 682.807066][T19318] wlan1 speed is unknown, defaulting to 1000 [ 684.356331][T19370] netlink: 'syz.4.4051': attribute type 2 has an invalid length. [ 684.382342][T19370] netlink: 'syz.4.4051': attribute type 8 has an invalid length. [ 684.608175][T19370] lo speed is unknown, defaulting to 1000 [ 684.669712][T19383] netlink: 'syz.1.4054': attribute type 10 has an invalid length. [ 684.913937][T19389] netlink: 'syz.0.4056': attribute type 21 has an invalid length. [ 684.925214][T19389] __nla_validate_parse: 3 callbacks suppressed [ 684.925243][T19389] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4056'. [ 685.498861][T19389] netlink: 'syz.0.4056': attribute type 6 has an invalid length. [ 685.525609][T19389] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4056'. [ 685.629780][T19370] wlan1 speed is unknown, defaulting to 1000 [ 685.725064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.731713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.368091][T19416] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4062'. [ 686.384246][T19416] netlink: 'syz.2.4062': attribute type 10 has an invalid length. [ 686.401400][T19416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4062'. [ 686.419729][T19416] team0: entered promiscuous mode [ 686.424939][T19416] C: entered promiscuous mode [ 686.431489][T19416] team_slave_1: entered promiscuous mode [ 686.449619][T19416] .`: entered promiscuous mode [ 686.467379][T19416] bond_slave_1: entered promiscuous mode [ 686.482616][T19416] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered promiscuous mode [ 686.517857][T19416] team0: entered allmulticast mode [ 686.523623][T19416] C: entered allmulticast mode [ 686.552144][T19416] team_slave_1: entered allmulticast mode [ 686.634435][T19416] .`: entered allmulticast mode [ 686.642239][T19416] bond_slave_1: entered allmulticast mode [ 686.649898][T19416] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered allmulticast mode [ 686.719749][T19416] net_ratelimit: 76 callbacks suppressed [ 686.719803][T19416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 686.752642][T19428] netlink: 'syz.4.4064': attribute type 3 has an invalid length. [ 686.775789][T19428] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 686.789801][T19428] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.4064'. [ 686.930505][T19434] netlink: 'syz.0.4067': attribute type 2 has an invalid length. [ 686.941678][T19434] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4067'. [ 686.987795][T19439] netlink: 'syz.0.4067': attribute type 2 has an invalid length. [ 687.005833][T19439] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4067'. [ 687.254715][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4069'. [ 688.436459][T19480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4082'. [ 688.788343][T19486] lo speed is unknown, defaulting to 1000 [ 689.020743][T19486] wlan1 speed is unknown, defaulting to 1000 [ 689.412046][T19506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4094'. [ 689.591270][T19507] validate_nla: 1 callbacks suppressed [ 689.591301][T19507] netlink: 'syz.3.4084': attribute type 3 has an invalid length. [ 689.647664][T19507] netlink: 'syz.3.4084': attribute type 1 has an invalid length. [ 690.537992][T19525] netlink: 'syz.0.4092': attribute type 10 has an invalid length. [ 690.598182][T19525] bond0: (slave bond_slave_0): Releasing backup interface [ 690.972837][T19538] __nla_validate_parse: 1 callbacks suppressed [ 690.972857][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4095'. [ 691.154792][T19536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4096'. [ 693.240067][T19600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4113'. [ 693.391843][T19596] lo speed is unknown, defaulting to 1000 [ 693.654143][T19596] wlan1 speed is unknown, defaulting to 1000 [ 694.024745][T19619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4117'. [ 694.337656][T19625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4119'. [ 694.853859][T19637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'. [ 695.057361][T19644] netlink: 'syz.2.4123': attribute type 10 has an invalid length. [ 695.529727][T19661] lo speed is unknown, defaulting to 1000 [ 695.635080][T19667] netlink: 'syz.0.4140': attribute type 2 has an invalid length. [ 695.653871][T19667] netlink: 'syz.0.4140': attribute type 8 has an invalid length. [ 695.670106][T19667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4140'. [ 696.065871][T19667] lo speed is unknown, defaulting to 1000 [ 696.244567][T19661] wlan1 speed is unknown, defaulting to 1000 [ 697.020838][T19667] wlan1 speed is unknown, defaulting to 1000 [ 697.983649][T19698] netlink: 'syz.1.4136': attribute type 10 has an invalid length. [ 698.218491][T19708] netlink: 'syz.3.4138': attribute type 10 has an invalid length. [ 698.538171][T19719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4141'. [ 699.272662][T19736] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4148'. [ 699.479858][T19740] delete_channel: no stack [ 699.984440][T19750] netlink: 'syz.0.4151': attribute type 10 has an invalid length. [ 700.189728][T19757] netlink: 'syz.0.4155': attribute type 10 has an invalid length. [ 700.762323][T19772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4158'. [ 700.806378][T19774] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4160'. [ 701.043401][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4161'. [ 701.149868][T19787] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4164'. [ 701.190873][T19787] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4164'. [ 701.232650][T19787] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4164'. [ 701.304665][T19791] netlink: 'syz.2.4166': attribute type 2 has an invalid length. [ 701.384672][T19791] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4166'. [ 701.987885][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'. [ 702.288533][T19813] netlink: 'syz.3.4172': attribute type 2 has an invalid length. [ 702.297545][T19813] netlink: 'syz.3.4172': attribute type 8 has an invalid length. [ 702.713120][T19813] lo speed is unknown, defaulting to 1000 [ 703.514770][T19813] wlan1 speed is unknown, defaulting to 1000 [ 704.173018][T19861] __nla_validate_parse: 5 callbacks suppressed [ 704.173039][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4185'. [ 706.001459][T19899] netlink: 'syz.3.4198': attribute type 10 has an invalid length. [ 706.052912][T19905] netlink: 'syz.3.4198': attribute type 11 has an invalid length. [ 706.075721][T19905] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4198'. [ 706.540091][T19894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.674320][T19899] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 707.858285][T19936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'. [ 709.523089][T19973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4217'. [ 710.176130][T19992] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 710.187953][T19992] syzkaller1: linktype set to 780 [ 710.201598][T19995] netlink: 'syz.1.4224': attribute type 29 has an invalid length. [ 710.232055][T19992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4223'. [ 710.253139][T19995] netlink: 'syz.1.4224': attribute type 29 has an invalid length. [ 710.264888][T19992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4223'. [ 710.280654][T19995] netlink: 'syz.1.4224': attribute type 29 has an invalid length. [ 710.334585][T19995] netlink: 'syz.1.4224': attribute type 29 has an invalid length. [ 710.356716][T20000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4226'. [ 710.428423][T20003] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4227'. [ 710.444564][T20003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4227'. [ 710.850366][T20014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4228'. [ 711.331176][T20022] netlink: 'syz.1.4232': attribute type 10 has an invalid length. [ 712.044272][T20025] netlink: 'syz.4.4233': attribute type 10 has an invalid length. [ 712.276529][T20032] netlink: 'syz.3.4234': attribute type 4 has an invalid length. [ 712.330213][T20032] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4234'. [ 712.591070][T20032] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4234'. [ 712.669182][T20032] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 714.222866][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4244'. [ 714.545875][T20077] netlink: 'syz.2.4245': attribute type 10 has an invalid length. [ 714.776775][T20083] netlink: 'syz.3.4249': attribute type 10 has an invalid length. [ 715.390917][T20092] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4251'. [ 715.759638][T20101] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 715.767414][T20101] syzkaller1: linktype set to 823 [ 716.523408][T20116] netlink: 'syz.4.4260': attribute type 10 has an invalid length. [ 716.733687][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4262'. [ 716.846192][T20126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4262'. [ 717.335203][T20129] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4263'. [ 719.110923][T20139] netlink: 'syz.1.4267': attribute type 2 has an invalid length. [ 719.371284][T20152] netlink: 'syz.4.4271': attribute type 27 has an invalid length. [ 719.394889][T20152] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4271'. [ 719.924105][T20163] netlink: 'syz.3.4273': attribute type 29 has an invalid length. [ 719.936366][T20163] netlink: 'syz.3.4273': attribute type 29 has an invalid length. [ 719.950992][T20163] netlink: 'syz.3.4273': attribute type 29 has an invalid length. [ 719.969135][T20163] netlink: 'syz.3.4273': attribute type 29 has an invalid length. [ 720.110736][T20170] lo speed is unknown, defaulting to 1000 [ 720.340382][T20175] netlink: 'syz.4.4277': attribute type 10 has an invalid length. [ 721.260911][T20170] wlan1 speed is unknown, defaulting to 1000 [ 721.336173][T20188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4289'. [ 721.766635][T20194] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4280'. [ 721.832042][T20196] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4279'. [ 722.576000][T20212] netlink: 'syz.1.4285': attribute type 9 has an invalid length. [ 723.228769][T20218] delete_channel: no stack [ 723.894070][T20238] netlink: 'syz.3.4290': attribute type 10 has an invalid length. [ 724.028198][T20231] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 724.051986][T20231] syzkaller1: linktype set to 823 [ 724.421456][T20249] netlink: 182 bytes leftover after parsing attributes in process `syz.2.4294'. [ 724.451985][T20249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4294'. [ 724.599717][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 724.633251][T20252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4298'. [ 724.713495][T20252] netlink: 'syz.4.4298': attribute type 10 has an invalid length. [ 724.974105][T20257] lo speed is unknown, defaulting to 1000 [ 725.929995][T20282] netlink: 'syz.1.4306': attribute type 10 has an invalid length. [ 726.443415][T20257] wlan1 speed is unknown, defaulting to 1000 [ 726.904243][T20312] sit0: entered allmulticast mode [ 727.233968][T20315] sit0: entered promiscuous mode [ 727.778734][T20318] syzkaller0: entered promiscuous mode [ 727.784246][T20318] syzkaller0: entered allmulticast mode [ 729.448953][T20344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4320'. [ 729.469062][T20342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4320'. [ 729.481052][T20344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4320'. [ 729.546594][T20351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4323'. [ 729.777265][T20344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.016330][T20351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4323'. [ 730.638103][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'. [ 730.649965][ T30] audit: type=1107 audit(1759293390.175:6): pid=20360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 731.128346][T20381] netlink: 'syz.2.4331': attribute type 27 has an invalid length. [ 731.151881][T20381] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4331'. [ 731.928360][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4338'. [ 731.939831][T20395] netlink: 'syz.1.4337': attribute type 10 has an invalid length. [ 731.970126][T20399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4338'. [ 733.492916][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4342'. [ 733.815152][T20433] sit0: entered allmulticast mode [ 735.894337][T20475] __nla_validate_parse: 1 callbacks suppressed [ 735.894371][T20475] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4358'. [ 736.516236][T20494] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4363'. [ 737.185709][T20522] netlink: 'syz.3.4369': attribute type 49 has an invalid length. [ 737.240609][T20501] delete_channel: no stack [ 737.408142][T20530] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4373'. [ 737.440906][T20530] netlink: 'syz.3.4373': attribute type 10 has an invalid length. [ 737.452072][T20532] netlink: 'syz.2.4371': attribute type 21 has an invalid length. [ 737.530171][T20531] -1: renamed from syzkaller0 [ 737.760049][T20540] netlink: 'syz.4.4376': attribute type 10 has an invalid length. [ 737.770833][T20526] netlink: 'syz.2.4371': attribute type 4 has an invalid length. [ 737.779179][T20526] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4371'. [ 737.790981][T20526] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 737.859748][T20526] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4371'. [ 738.352252][T20547] lo speed is unknown, defaulting to 1000 [ 738.813101][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 738.848647][T20564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4381'. [ 738.985213][T20560] team0: Port device team_slave_0 removed [ 738.998274][T20560] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 739.213835][T20547] wlan1 speed is unknown, defaulting to 1000 [ 739.223070][T20574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4385'. [ 740.054712][T20591] netlink: 'syz.4.4389': attribute type 10 has an invalid length. [ 740.476663][T20605] netlink: 'syz.1.4395': attribute type 12 has an invalid length. [ 740.502926][T20605] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4395'. [ 740.930046][T20613] syzkaller0: entered promiscuous mode [ 740.935876][T20613] syzkaller0: entered allmulticast mode [ 741.115519][T20626] netlink: 'syz.0.4401': attribute type 10 has an invalid length. [ 741.649041][T20641] bridge_slave_0: entered promiscuous mode [ 741.656574][T20641] bridge_slave_0: entered allmulticast mode [ 741.693825][T20648] sit0: entered promiscuous mode [ 741.700718][T20648] sit0: left allmulticast mode [ 742.341723][T20675] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4414'. [ 742.374027][T20675] netlink: 'syz.3.4414': attribute type 4 has an invalid length. [ 742.514586][T20682] -1: renamed from syzkaller0 [ 742.636241][T20684] netlink: 'syz.3.4414': attribute type 10 has an invalid length. [ 742.674789][T20684] bond0: (slave dummy0): Releasing backup interface [ 743.911271][T20719] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4425'. [ 744.423828][T20733] sit0: entered allmulticast mode [ 744.544665][T20736] sit0: entered promiscuous mode [ 744.829996][T20743] netlink: 'syz.2.4434': attribute type 9 has an invalid length. [ 745.281746][T20755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4436'. [ 746.124431][T20778] netlink: 'syz.1.4443': attribute type 29 has an invalid length. [ 746.326472][T20796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4447'. [ 746.597782][T20804] syzkaller0: entered promiscuous mode [ 746.629356][T20804] syzkaller0: entered allmulticast mode [ 747.050407][T20819] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4453'. [ 747.063874][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4453'. [ 747.172087][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.178651][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.517153][T20833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4456'. [ 747.770134][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 749.621610][T20869] mac80211_hwsim hwsim20 .3ãc¤±: renamed from wlan1 (while UP) [ 749.688130][T20866] delete_channel: no stack [ 750.343163][T20896] netlink: 'syz.2.4471': attribute type 6 has an invalid length. [ 750.437238][T20896] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4471'. [ 750.454790][T20894] syzkaller0: entered promiscuous mode [ 750.463514][T20892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.471122][T20892] IPv6: NLM_F_CREATE should be set when creating new route [ 750.478745][T20892] IPv6: NLM_F_CREATE should be set when creating new route [ 750.488011][T20894] syzkaller0: entered allmulticast mode [ 750.665018][T20895] lo speed is unknown, defaulting to 1000 [ 752.213762][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4480'. [ 752.237692][T20895] wlan1 speed is unknown, defaulting to 1000 [ 752.369063][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4480'. [ 752.603501][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4480'. [ 752.825845][T20916] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 752.850124][T20935] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 753.096066][T20939] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 753.102101][T20939] syzkaller1: linktype set to 823 [ 753.171172][T20955] netlink: 'syz.3.4487': attribute type 10 has an invalid length. [ 753.616693][T20961] netlink: 'syz.2.4498': attribute type 27 has an invalid length. [ 753.631494][T20961] netlink: 'syz.2.4498': attribute type 4 has an invalid length. [ 753.641862][T20961] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4498'. [ 753.723434][T20973] netlink: 'syz.0.4490': attribute type 39 has an invalid length. [ 754.207137][T20984] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.4493'. [ 754.257793][T20984] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.4493'. [ 754.369875][T20987] netlink: 'syz.0.4494': attribute type 12 has an invalid length. [ 754.380991][T20987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4494'. [ 754.769077][T21012] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4500'. [ 754.938803][T21015] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4503'. [ 755.249605][T21011] delete_channel: no stack [ 756.336492][T18249] bridge_slave_1: left allmulticast mode [ 756.342179][T18249] bridge_slave_1: left promiscuous mode [ 756.349898][T18249] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.722399][T18249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.733216][T18249] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 756.757337][T18249] bond0 (unregistering): Released all slaves [ 756.769203][ T1215] wlan1 speed is unknown, defaulting to 1000 [ 756.769229][T12283] wlan1 speed is unknown, defaulting to 1000 [ 756.818714][T18249] ¶: left promiscuous mode [ 757.369952][T18249] ------------[ cut here ]------------ [ 757.375683][T18249] ida_free called for id=956 which is not allocated. [ 757.382788][T18249] WARNING: CPU: 0 PID: 18249 at lib/idr.c:592 ida_free+0x280/0x310 [ 757.390751][T18249] Modules linked in: [ 757.394838][T18249] CPU: 0 UID: 0 PID: 18249 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 757.405145][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.415309][T18249] Workqueue: netns cleanup_net [ 757.420094][T18249] RIP: 0010:ida_free+0x280/0x310 [ 757.425035][T18249] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 a0 7b 76 8c 44 89 fe e8 41 11 54 f6 90 <0f> 0b 90 90 eb 34 e8 85 a2 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 757.445141][T18249] RSP: 0018:ffffc9000c117000 EFLAGS: 00010246 [ 757.451354][T18249] RAX: f4b3a9277f2c5800 RBX: 0000000000000a02 RCX: ffff88807af09e40 [ 757.459419][T18249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 757.467524][T18249] RBP: ffffc9000c1170f8 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 757.475544][T18249] R10: dffffc0000000000 R11: ffffed1017104853 R12: 1ffff92001822e04 [ 757.483515][T18249] R13: dffffc0000000000 R14: ffff88801dede000 R15: 00000000000003bc [ 757.491620][T18249] FS: 0000000000000000(0000) GS:ffff888126373000(0000) knlGS:0000000000000000 [ 757.500592][T18249] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.507216][T18249] CR2: 0000555d8b609000 CR3: 000000000db36000 CR4: 00000000003526f0 [ 757.515190][T18249] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000082 [ 757.523329][T18249] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 757.531354][T18249] Call Trace: [ 757.534633][T18249] [ 757.537639][T18249] ? __pfx_ida_free+0x10/0x10 [ 757.542347][T18249] pde_put+0x7e/0x1b0 [ 757.546379][T18249] remove_proc_subtree+0x3e8/0x530 [ 757.551505][T18249] snmp6_unregister_dev+0xae/0xf0 [ 757.556620][T18249] addrconf_ifdown+0x240/0x1880 [ 757.561493][T18249] ? tls_dev_event+0x717/0xec0 [ 757.566306][T18249] ? __pfx_addrconf_ifdown+0x10/0x10 [ 757.571625][T18249] addrconf_notify+0x1bc/0x1010 [ 757.576547][T18249] notifier_call_chain+0x1b6/0x3e0 [ 757.581675][T18249] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 757.588173][T18249] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 757.594950][T18249] ? __pfx_call_rcu+0x10/0x10 [ 757.599718][T18249] unregister_netdevice_queue+0x33c/0x380 [ 757.605486][T18249] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 757.611754][T18249] _cfg80211_unregister_wdev+0x165/0x590 [ 757.617476][T18249] ieee80211_remove_interfaces+0x49a/0x6e0 [ 757.623292][T18249] ? __pfx_synchronize_rcu+0x10/0x10 [ 757.628676][T18249] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 757.635011][T18249] ? rcu_is_watching+0x15/0xb0 [ 757.639863][T18249] ieee80211_unregister_hw+0x5d/0x2c0 [ 757.645246][T18249] mac80211_hwsim_del_radio+0x275/0x460 [ 757.650864][T18249] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 757.657051][T18249] hwsim_exit_net+0x584/0x640 [ 757.661756][T18249] ? __pfx_hwsim_exit_net+0x10/0x10 [ 757.667043][T18249] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 757.672861][T18249] ops_undo_list+0x49a/0x990 [ 757.677536][T18249] ? __pfx_ops_undo_list+0x10/0x10 [ 757.682659][T18249] ? do_raw_spin_unlock+0x122/0x240 [ 757.687930][T18249] cleanup_net+0x4d8/0x820 [ 757.692360][T18249] ? __pfx_cleanup_net+0x10/0x10 [ 757.697373][T18249] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.702597][T18249] ? process_scheduled_works+0x9ef/0x17b0 [ 757.708393][T18249] ? process_scheduled_works+0x9ef/0x17b0 [ 757.714131][T18249] process_scheduled_works+0xade/0x17b0 [ 757.719825][T18249] ? __pfx_process_scheduled_works+0x10/0x10 [ 757.725861][T18249] worker_thread+0x8a0/0xda0 [ 757.730467][T18249] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 757.736874][T18249] ? __kthread_parkme+0x7b/0x200 [ 757.741831][T18249] kthread+0x711/0x8a0 [ 757.746009][T18249] ? __pfx_worker_thread+0x10/0x10 [ 757.751129][T18249] ? __pfx_kthread+0x10/0x10 [ 757.755772][T18249] ? _raw_spin_unlock_irq+0x23/0x50 [ 757.760976][T18249] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.766206][T18249] ? __pfx_kthread+0x10/0x10 [ 757.770804][T18249] ret_from_fork+0x436/0x7d0 [ 757.775436][T18249] ? __pfx_ret_from_fork+0x10/0x10 [ 757.780557][T18249] ? __switch_to_asm+0x39/0x70 [ 757.785350][T18249] ? __switch_to_asm+0x33/0x70 [ 757.790127][T18249] ? __pfx_kthread+0x10/0x10 [ 757.794733][T18249] ret_from_fork_asm+0x1a/0x30 [ 757.799691][T18249] [ 757.802721][T18249] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 757.809981][T18249] CPU: 0 UID: 0 PID: 18249 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 757.819502][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.829550][T18249] Workqueue: netns cleanup_net [ 757.834303][T18249] Call Trace: [ 757.837567][T18249] [ 757.840484][T18249] dump_stack_lvl+0x99/0x250 [ 757.845067][T18249] ? __asan_memcpy+0x40/0x70 [ 757.849644][T18249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.854831][T18249] ? __pfx__printk+0x10/0x10 [ 757.859415][T18249] vpanic+0x281/0x750 [ 757.863385][T18249] ? __pfx__printk+0x10/0x10 [ 757.867958][T18249] ? __pfx_vpanic+0x10/0x10 [ 757.872447][T18249] ? is_bpf_text_address+0x26/0x2b0 [ 757.877640][T18249] panic+0xb9/0xc0 [ 757.881348][T18249] ? __pfx_panic+0x10/0x10 [ 757.885765][T18249] __warn+0x31b/0x4b0 [ 757.889734][T18249] ? ida_free+0x280/0x310 [ 757.894048][T18249] ? ida_free+0x280/0x310 [ 757.898380][T18249] report_bug+0x2be/0x4f0 [ 757.902694][T18249] ? ida_free+0x280/0x310 [ 757.907006][T18249] ? ida_free+0x280/0x310 [ 757.911319][T18249] ? ida_free+0x282/0x310 [ 757.915631][T18249] handle_bug+0x84/0x160 [ 757.919864][T18249] exc_invalid_op+0x1a/0x50 [ 757.924352][T18249] asm_exc_invalid_op+0x1a/0x20 [ 757.929187][T18249] RIP: 0010:ida_free+0x280/0x310 [ 757.934109][T18249] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 71 2c 0c 00 90 48 c7 c7 a0 7b 76 8c 44 89 fe e8 41 11 54 f6 90 <0f> 0b 90 90 eb 34 e8 85 a2 90 f6 49 bd 00 00 00 00 00 fc ff df eb [ 757.953700][T18249] RSP: 0018:ffffc9000c117000 EFLAGS: 00010246 [ 757.959757][T18249] RAX: f4b3a9277f2c5800 RBX: 0000000000000a02 RCX: ffff88807af09e40 [ 757.967718][T18249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 757.975681][T18249] RBP: ffffc9000c1170f8 R08: ffff8880b8824293 R09: 1ffff11017104852 [ 757.983637][T18249] R10: dffffc0000000000 R11: ffffed1017104853 R12: 1ffff92001822e04 [ 757.991597][T18249] R13: dffffc0000000000 R14: ffff88801dede000 R15: 00000000000003bc [ 757.999575][T18249] ? __pfx_ida_free+0x10/0x10 [ 758.004254][T18249] pde_put+0x7e/0x1b0 [ 758.008226][T18249] remove_proc_subtree+0x3e8/0x530 [ 758.013336][T18249] snmp6_unregister_dev+0xae/0xf0 [ 758.018352][T18249] addrconf_ifdown+0x240/0x1880 [ 758.023199][T18249] ? tls_dev_event+0x717/0xec0 [ 758.027952][T18249] ? __pfx_addrconf_ifdown+0x10/0x10 [ 758.033242][T18249] addrconf_notify+0x1bc/0x1010 [ 758.038088][T18249] notifier_call_chain+0x1b6/0x3e0 [ 758.043193][T18249] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 758.049606][T18249] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 758.056363][T18249] ? __pfx_call_rcu+0x10/0x10 [ 758.061034][T18249] unregister_netdevice_queue+0x33c/0x380 [ 758.066743][T18249] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 758.072981][T18249] _cfg80211_unregister_wdev+0x165/0x590 [ 758.078616][T18249] ieee80211_remove_interfaces+0x49a/0x6e0 [ 758.084407][T18249] ? __pfx_synchronize_rcu+0x10/0x10 [ 758.089683][T18249] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 758.095996][T18249] ? rcu_is_watching+0x15/0xb0 [ 758.100751][T18249] ieee80211_unregister_hw+0x5d/0x2c0 [ 758.106114][T18249] mac80211_hwsim_del_radio+0x275/0x460 [ 758.111659][T18249] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 758.117722][T18249] hwsim_exit_net+0x584/0x640 [ 758.122389][T18249] ? __pfx_hwsim_exit_net+0x10/0x10 [ 758.127575][T18249] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 758.133373][T18249] ops_undo_list+0x49a/0x990 [ 758.137956][T18249] ? __pfx_ops_undo_list+0x10/0x10 [ 758.143056][T18249] ? do_raw_spin_unlock+0x122/0x240 [ 758.148248][T18249] cleanup_net+0x4d8/0x820 [ 758.152651][T18249] ? __pfx_cleanup_net+0x10/0x10 [ 758.157575][T18249] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.162762][T18249] ? process_scheduled_works+0x9ef/0x17b0 [ 758.168465][T18249] ? process_scheduled_works+0x9ef/0x17b0 [ 758.174172][T18249] process_scheduled_works+0xade/0x17b0 [ 758.179726][T18249] ? __pfx_process_scheduled_works+0x10/0x10 [ 758.185705][T18249] worker_thread+0x8a0/0xda0 [ 758.190285][T18249] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 758.196607][T18249] ? __kthread_parkme+0x7b/0x200 [ 758.201541][T18249] kthread+0x711/0x8a0 [ 758.205602][T18249] ? __pfx_worker_thread+0x10/0x10 [ 758.210698][T18249] ? __pfx_kthread+0x10/0x10 [ 758.215292][T18249] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.220505][T18249] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.225696][T18249] ? __pfx_kthread+0x10/0x10 [ 758.230284][T18249] ret_from_fork+0x436/0x7d0 [ 758.234863][T18249] ? __pfx_ret_from_fork+0x10/0x10 [ 758.239966][T18249] ? __switch_to_asm+0x39/0x70 [ 758.244718][T18249] ? __switch_to_asm+0x33/0x70 [ 758.249464][T18249] ? __pfx_kthread+0x10/0x10 [ 758.254041][T18249] ret_from_fork_asm+0x1a/0x30 [ 758.258804][T18249] [ 758.262088][T18249] Kernel Offset: disabled [ 758.266396][T18249] Rebooting in 86400 seconds..