last executing test programs: 14m41.041893527s ago: executing program 4 (id=1318): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m40.778305214s ago: executing program 4 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b800000000000009494782734ddd7caafc2476d61698b46026a7320912183dde7f5166546c77ede52f0df8ffea48fc5a42d3ea0a4447616a3a3a195285524e41cc09641596836ddcc542fa673e784fc3bd5140a14acc001bcf6a493a813177344f1b9ae96e554bc7471e90e6bc8d48ad3022a375785fa5fee3dc475d4753f6a763716c0c8540c5189cc25e2a5504bf08d9ff178fffee7551531a5bebed4519d8978a0983f565decc69b3f4b4597c0722335fb0d8992b0de917befb2e5dbd12b8640ce1b19166b13d2d5d3ac5e28dec22b34b0cccb668aea52a58c1c9dfb8028fe83ecba9aebc15000"/244, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddeff9be34b6dae4a93a276032b785807d48097d74bddc47527f7f0851ee059c08006e1068ea961d36", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2d, 0x7f, 0x86, 0xfffff018}]}) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r7, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1c0000004a0081144e007c05e8fe55a10a000400014002020a600e41", 0x1c}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 14m37.571979717s ago: executing program 4 (id=1326): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x10}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r2, 0x13, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r2, r2, 0x1d, 0x1c, 0x0, @void, @value=r3, @void, @void, r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r5 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)={r0, r3}) 14m36.902328795s ago: executing program 4 (id=1329): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x33, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4c, &(0x7f0000000100)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x24008043) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="8300"/17, @ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a0001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, 0x0}, 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 14m36.638358152s ago: executing program 4 (id=1333): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x10001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') socket$kcm(0x10, 0x2, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x144540f2249c4cec) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x22, &(0x7f0000000080), 0x4) r9 = getpid() sendmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20}, 0x4040800) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee50300000000000000b791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x37) 14m35.846541372s ago: executing program 4 (id=1340): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x39, 0x39, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x4}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xdd, 0xf}], "fa"}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x2e, 0x1e, 0x5f, 0x0, 0x2e, 0x10]}}, &(0x7f0000000780)=""/4096, 0x5d, 0x1000, 0x1, 0x5}, 0x28) socketpair(0x23, 0x6, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) close(r3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x39, 0x39, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x4}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xdd, 0xf}], "fa"}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x2e, 0x1e, 0x5f, 0x0, 0x2e, 0x10]}}, &(0x7f0000000780)=""/4096, 0x5d, 0x1000, 0x1, 0x5}, 0x28) (async) socketpair(0x23, 0x6, 0x8, &(0x7f0000000100)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) (async) close(r3) (async) 14m20.646450894s ago: executing program 32 (id=1340): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x39, 0x39, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x4}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xdd, 0xf}], "fa"}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x2e, 0x1e, 0x5f, 0x0, 0x2e, 0x10]}}, &(0x7f0000000780)=""/4096, 0x5d, 0x1000, 0x1, 0x5}, 0x28) socketpair(0x23, 0x6, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) close(r3) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x39, 0x39, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x4}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xdd, 0xf}], "fa"}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x2e, 0x1e, 0x5f, 0x0, 0x2e, 0x10]}}, &(0x7f0000000780)=""/4096, 0x5d, 0x1000, 0x1, 0x5}, 0x28) (async) socketpair(0x23, 0x6, 0x8, &(0x7f0000000100)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) (async) close(r3) (async) 4m20.959793932s ago: executing program 5 (id=5274): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000240)="809ef3a83992085464a9f7994345e6161463c4c5c60a9d3a45f267d3ee7f54d00c9c", 0x22}, {&(0x7f0000000380)}, {&(0x7f0000000440)="d262b40c402135fcfd3025ad22ea9f69291aaf443b0db6a6fcb6ff79a5307d7e4e299e922321883bd5782475771f85367c0486f57818d5d914cdcd848b70d48eca0f4ccd5b7dd0d1aecc69eaf11be5c1ceb418de55560b051b235edcbbc1230c5d803cd8bc72fb66342b8467d3f1064ca0f7dd3d75f07adf0db81833afc27d0c88beac90cb0f0cd76552d1bee717233f83a42fb371", 0x95}, {&(0x7f00000005c0)="66c89aeee39489650b4d13eb4524cbe217b2e3788627f7071534449f6cfed85dda7c8fedb0c3ac64146ca9325440cfa9ab55b37c870b7ce6d1c6a4de9034ec297923d916e3b3d908c4b2d393b312f63ac7e15d640e1dd28d79b48d218c03e3d062f71613b4b586097efc6b52aae8e69afd965191a6231f08475a27a068a6552d82e87637", 0x84}, {&(0x7f0000000680)="d728d82099c992c9f4de1ed694a2a67179e9b81fe9eaa9d9cf432e5bf0b8363f80271eacbe0f1e83dc459b3872433a2aa632c094d588b7320aff9456323b873695b4c1d1a2f7309a8ba40ecb986fc31688b654197f1ea2880fc9f9f04b72702c4c3f08cacbbcc9c0877b37672747bcd88b4a3c779e95c91e4f7c16035d47ad113b0254f6637aa35f53b39f15d89d91f1dc16834cae91440c117b5041d9c04c273ff1ff4a98fa0980", 0xa8}, {&(0x7f0000000740)="021d8d8f5ac9620a19341babcc080ab4c220aa44759a36322c00b5a8b840ae1d00ae40ff48cf1a027e91c1ad205cdb9808ec9237eedc611a70e12a75e151dbe81c36c20fd618f02dff68116a0ff2b52271d77e02fcf0a642", 0x58}], 0x6, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x10}}], 0x28, 0x1}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r3, 0x12) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'perf_event'}]}, 0xc) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x14) 4m20.217750092s ago: executing program 5 (id=5276): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'lo\x00', 0x1}) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0xf0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r11}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7037e707f00007f000000850000000600000018440000040000000000000000"], &(0x7f00000007c0)='GPL\x00', 0x9, 0x70, &(0x7f0000000800)=""/112, 0x41000, 0x37, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x16f9e, r1, 0x7, &(0x7f0000000c00)=[r7, r10, r7, r7, r7, r10, r7, 0xffffffffffffffff, r10], &(0x7f0000000c80)=[{0x0, 0x4, 0x4, 0xb}, {0x4, 0x1, 0x0, 0xa}, {0x2, 0x2, 0x1, 0xc}, {0x4, 0x3, 0xb}, {0x0, 0x5, 0x7, 0x4}, {0x1, 0x4, 0x2, 0x5}, {0x4, 0x2, 0x9, 0x3}]}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40002000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030003ad0000", 0x30}], 0x1}, 0x20000880) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400", 0x24}], 0x1}, 0x200488c4) 4m20.002438148s ago: executing program 5 (id=5279): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x84c0, 0x0, 0x7fffffff, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00\x00\x00\n\x00\x00\x00', @ANYRES32], 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff0000000071104e000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xaf80}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffcd5, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) r8 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000600)=r7, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@exit, @jmp={0x5, 0x1, 0x4, 0x0, 0x2, 0x40, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x2, 0x9, &(0x7f00000000c0)=""/9, 0x41000, 0x0, '\x00', r5, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xd37f, r4, 0x5, 0x0, &(0x7f0000000100)=[{0x2, 0x4, 0xd}, {0x3, 0x3, 0xf, 0x5}, {0x2, 0x2, 0x1, 0x3}, {0x1, 0x1, 0x3, 0xa}, {0x0, 0x3, 0xd, 0x7}], 0x10, 0x1ff}, 0x94) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 4m18.969068166s ago: executing program 5 (id=5283): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffff13010000841c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000000c5090000fbffffff7baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0xe8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0xe8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000001000000000000000000000000000000000000000000000027da7da135026b38617743b53e50e78b4a0917ad6938c04ad13899e3b989da64dd99eb01bd663bc49ee9e047"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 4m18.573694066s ago: executing program 5 (id=5286): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x24, 0x0, 0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) close(r10) close(r5) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffff4c9) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x81) syz_clone(0x40020100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\a\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r11}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r11, @ANYBLOB="0000ff0100000000b7080000000000007b8af8ff00000000bf451ca2c8d00000000007020000f8ffffffb703000008000000b7040000000000000a68f007104085f1950000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m3.157842296s ago: executing program 33 (id=5289): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x3, 0x0, 0x3, 0x80000003, 0x9}, 0x0, 0x0, r0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) close(r10) close(r5) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffff4c9) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x81) syz_clone(0x40020100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\a\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r11}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r11, @ANYBLOB="0000ff0100000000b7080000000000007b8af8ff00000000bf451ca2c8d00000000007020000f8ffffffb703000008000000b7040000000000000a68f007104085f1950000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.67158527s ago: executing program 3 (id=6614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000b80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x5, &(0x7f0000000780)=r6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2b, 0x3, 0x0) close(r9) socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e002f88a87e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 8.960537172s ago: executing program 0 (id=6630): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xad, '\x00', 0x0, r5, 0x4, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.705700959s ago: executing program 3 (id=6634): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x3ff, 0x2, 0xfffffffb, 0x6800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x188, 0x188, 0xb, [@union={0x10, 0x9, 0x0, 0x5, 0x0, 0x400, [{0x4, 0x4, 0x4}, {0x0, 0x0, 0x6}, {0x10}, {0xe, 0x4, 0x6}, {0xc, 0x2, 0x1}, {0x8, 0x0, 0xa}, {0x8, 0x4, 0xffffff87}, {0x0, 0x4}, {0xd, 0x4, 0x10001}]}, @typedef={0x9}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @enum64={0x5, 0x5, 0x0, 0x13, 0x1, 0x8, [{0x4, 0x4, 0x3}, {0xf, 0xffe00, 0xc}, {0xc, 0x2, 0x2}, {0xd, 0x6, 0x5}, {0x7, 0x2, 0x5}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0xe, 0xb}, {0x1, 0xfffff3b5}, {0x7, 0x401}, {0x6, 0xff}]}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0xd, 0x5}, {0x8, 0x48}, {0x5, 0x200}, {0x10, 0x9}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}, @enum64={0x2, 0x3, 0x0, 0x13, 0x0, 0x4, [{0xa, 0xfffffffb, 0x6c}, {0x1, 0x15adc506, 0x9}, {0x2, 0x7, 0x2}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x5f, 0x0, 0x61, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000a00)=""/96, 0x1ab, 0x60, 0x1, 0x3}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 8.355338348s ago: executing program 0 (id=6637): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x0, 0x801ac, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x1000, 0x14, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.265149304s ago: executing program 3 (id=6639): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000001}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x29) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b0000000000ff00000000000000ac1414aa000086dd"], 0xcfa4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 6.264615084s ago: executing program 0 (id=6640): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xad, '\x00', 0x0, r5, 0x4, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.138488067s ago: executing program 2 (id=6641): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xad, '\x00', 0x0, r5, 0x4, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.947505052s ago: executing program 0 (id=6643): socket$kcm(0x10, 0x7, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000380)="e0b9547ed387db", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) 5.697332899s ago: executing program 2 (id=6645): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x6, &(0x7f0000000040)=@raw=[@tail_call, @jmp={0x5, 0x0, 0xc, 0x4, 0xf, 0x0, 0xfffffffffffffffc}], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2007b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff17}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 5.64650511s ago: executing program 1 (id=6646): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00900000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 5.501612724s ago: executing program 0 (id=6647): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x5}, 0x0, 0x400000, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000c5000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="5becad0e0d6378000000f189d000ebd82c5c20ba46628cf9d206745279b18bfbb83017a189b813a2ed7f7872ce65348cad465f5fd0409ee2a0c1579decdf948a085cd947bf8078ca4d0fa91e50b1f170aae1474a8670a513896fcf699b2dc78eacbfa785e9e4fcd1de9a614c19ee5c6f7cf3b75c74c0aaf8cdf7bb85349d8648b70fe9bc66645efdd006642bc3030e72e23d51f78447bff9dfc99cf2d564da0fd81ec532b846069eaf1142374041debdecf04699614061930043a6bd57ea653b66e160613b5f0751f3ea28f2c5cc6ef79351bf3a5e35c6210564db487d7a914cc08e", 0x0, 0x800e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x32) 5.27954674s ago: executing program 1 (id=6648): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611028000000000063010d00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.074528505s ago: executing program 0 (id=6649): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x6, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0, 0x1}, 0x21, 0x4, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c840, 0xac61, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x87, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5aa, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000580)=""/229, 0x0, 0xe5, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) r4 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) syz_clone(0x40a00480, 0x0, 0x0, 0x0, 0x0, 0x0) 2.357107588s ago: executing program 6 (id=6658): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00b00000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 2.218478371s ago: executing program 6 (id=6659): r0 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x40000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2b, 'net_cls'}, {0x2d, 'net'}, {0x2b, 'net'}, {0x6, 'devices'}, {0x2b, 'cpuset'}, {0x2d, 'rlimit'}]}, 0x41) (async) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2d, 'hugetlb'}, {0x2d, 'perf_event'}, {0x2b, 'net_cls'}, {0x2d, 'net'}, {0x2b, 'net'}, {0x6, 'devices'}, {0x2b, 'cpuset'}, {0x2d, 'rlimit'}]}, 0x41) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg(r1, &(0x7f00000007c0)={&(0x7f0000000000)=@caif, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/12, 0xc}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000600)=""/51, 0x33}], 0x6, &(0x7f00000006c0)=""/216, 0xd8}, 0x40002120) 1.468136391s ago: executing program 1 (id=6660): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001c80)="a2", 0x1}], 0x1}, 0x1c8c4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x7}, 0x2107, 0x30, 0x4d, 0x4, 0x0, 0x4, 0x0, 0x0, 0x800}, 0x0, 0x9, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x80, 0x0}, 0x4040000) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000009000000010001000900", @ANYRES32], 0x48) r3 = socket$kcm(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100), 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xfff}, {&(0x7f00000009c0)="9d7fcf3efc6300b3b2377876021d7131b838059f96bd206d4776b444405422368ed2a92432e5af71000000000000000000000000000000008a596976dd10f3928b006bb2c2760977caf15455525ae6227e246681dcba160dde12ddcee430eacdfb6d9ec7a60ffdef417b662007c1f9ffa86530ba7ff75622b154afd53c6b4931f4be2d90ca60b1fbe6dc02aa051c9a9c05557a7fd376f174908fd1a6dc0aad663e010a10117c304eb7e40d629aa8ecd0f847fc0efe9ddab4545505105ba291410c1cb0e4d50bd63e8fa06fc4", 0xcc}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x58}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000001001000090000000500000041000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000f99000000000000000728abf30e58a0069cd162b202c1f2f481af16f49b0a6f6289ec4659ff1000e5c44466189b8296cd85e931d603bbeaa5c174f10c19788814e09c477b3c1f047f18528fb608b7b18d91ece4dd1d449c7c697e0b4d7eb5d3e5f36749767d9d72424055587e7e174f48972e6dabd6a8454c862b5dbc10979cbdf70c229f3e81a9657197bc2f599cda732"], 0x50) recvmsg$kcm(r5, &(0x7f0000000cc0)={&(0x7f0000000400)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/49, 0x31}, {&(0x7f0000000780)=""/247, 0xf7}, {&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/21, 0x15}], 0x5, &(0x7f0000000c80)=""/12, 0xc}, 0x10001) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r6}, 0x38) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="010400001c1a0000005d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 1.467701701s ago: executing program 2 (id=6661): socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x6, "090041c2"}]}}}], 0x38}, 0x20002800) 1.466177951s ago: executing program 6 (id=6662): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) 1.400977103s ago: executing program 3 (id=6663): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x0, 0x801ac, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x1000, 0x14, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.15880423s ago: executing program 2 (id=6664): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xad, '\x00', 0x0, r5, 0x4, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 950.091645ms ago: executing program 6 (id=6665): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xf, 0x3, 0x2) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) close(0x3) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) r8 = openat$cgroup_int(r4, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r8, 0x0, 0x81) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 646.837923ms ago: executing program 1 (id=6666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000ffffffb0739af0ff00000000ce09020000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000038500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 553.595166ms ago: executing program 2 (id=6667): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000010000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xad, '\x00', 0x0, r5, 0x4, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 389.61192ms ago: executing program 1 (id=6668): socket$kcm(0x10, 0x7, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) 243.683224ms ago: executing program 3 (id=6669): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000006c0)={0x2, 0x80, 0x6, 0x9f, 0xb, 0xd, 0x0, 0x1, 0x9000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000380), 0x3}, 0x1000, 0x200, 0xfffffffb, 0x4, 0x2cb, 0x3, 0x2, 0x0, 0x400, 0x0, 0x4}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40042) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 229.207434ms ago: executing program 6 (id=6670): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c485, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x79, 0x0, 0x0, 0x48}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000040)="380d8a840cd721a85216f2cc7d2d661e2a76f5ede71efc5b83be195e53e9f4dea2e2b5145a828c5b1cd6ad91af7edd0513bcc0c14a3e95e6de94d4c2f06e61fdeb45b63e04e938a51d1f4189", &(0x7f00000000c0)=""/43, &(0x7f00000001c0)="2b5a31d8ada0399f02f67c5a677fdedb898827f4d6503f750b530c8d2c1e0fb0b3379ee9b9431df04000472ec7c6cd8673b1c32af5d0984535f9b1c6870e691ed742819bbce6a60cc01f9bac49c086e43db31f5d0756f984a4a70f9527", &(0x7f00000005c0)="5f15d9aa84a499e2b1027c148cb7bda4d7a9496f239da7cbdf1abeb11b397313f57ffad0504586e713a04032fe84556b6cbdc92a078c3bb960108728fc84d5170d6e3cd11fc22d67faaa321f6b333b1d12c1e1c07f9b1b82306be8b28db362a98f9ab4079a521c3554ddcbffe1a04c5bb37f69ff03b32a", 0x400, r1, 0x4}, 0x38) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 211.267175ms ago: executing program 2 (id=6671): r0 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000500), 0xa}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x2, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000410000000000000000000000b4146cfffa3fd12f1b28164679123000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 109.510227ms ago: executing program 1 (id=6672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891a, &(0x7f0000000040)={'team_slave_1\x00', @random="0200ac7f7f00"}) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0x3, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x604, 0x0, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r4, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_pid(r6, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x4c, 0x8, 0x10, 0x1, 0x0, 0x9, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x594}, 0xd01, 0x5, 0x400, 0x1, 0x6, 0x7, 0x7, 0x0, 0x87, 0x0, 0x1}, r5, 0x3, r4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0x2000000000000039, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001004000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff0000000015040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe0000000079130000000000006f000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(r2) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) 22.53449ms ago: executing program 3 (id=6673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x1000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xd}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 0s ago: executing program 6 (id=6674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e71111"], 0xee8a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000100), 0x4a, &(0x7f0000000040), 0x3c}, 0x0) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="3b4655d69a6d5c873dab3ef4e2d87f9f955be84a7197c94d4e0fb5169abfa45c3c3c17d5e5ae7ff2e1b2b477e38aaf389dbe2d2eaeab3fb8e6", 0x39}, {&(0x7f00000003c0)="c8fff748ed570cccfdbbdcb8d54afc5441b8cd2137d384a4204cec57b4", 0x1d}], 0x2}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000200fff78500000086000000850000007d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x800, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x80000000001fe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000600)="b800000500000000c679f2945354", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a0005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0001400600000003007134cf6ee08000a0e408e8d8ef52a99fbcd7c36cc51b8c09847396e23fbb4c7a44a0bdf82637199223337488920cf280706540194791a87271ca0a97220b", 0x7c}, {&(0x7f0000000140)="a954c3c320a585dd5e19c75dd5a97935ce90a4486a6fd3", 0x17}, {&(0x7f0000000f00)="97dad187f115f9902303b8802fab035fc9f309b430bd7448313265d3f9e0244c5ce8af6a6b44ed0e96048009bf4bdf91b120126c176a7ab279049e0aa5a1c2e3378cdc1ec0", 0x45}], 0x3}, 0x8000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b000000004000000010000000000000800000000100000000500008507000000020000000100000069b000000000000005000000feffffff0200000000000006000000000700000001000000020000000f00000003000000840d0000000000000100000d0000000007001f0001000000000000000300000d0000000006000000010000000d000000000000000100000005000000040000000000000c02000000080000000000000b020000000f0000000000000700000000006f2e00"], &(0x7f0000000480)=""/48, 0xcc, 0x30, 0x0, 0x4, 0x10000, @value=r8}, 0x28) kernel console output (not intermixed with test programs): 0] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.626307][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.610451][T22899] ref_ctr_offset mismatch. inode: 0xa12 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 940.794349][T22888] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5319'. [ 940.894943][T22887] delete_channel: no stack [ 942.235013][T22922] netlink: 'syz.0.5328': attribute type 2 has an invalid length. [ 942.322271][T22922] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5328'. [ 943.087049][T22925] netlink: 'syz.1.5329': attribute type 10 has an invalid length. [ 943.129884][T22925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5329'. [ 943.392450][T22936] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 943.629729][T22935] netlink: 'syz.0.5331': attribute type 21 has an invalid length. [ 944.720889][T22951] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.5335'. [ 948.018339][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 948.030151][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 948.038651][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 948.048056][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 948.055946][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 948.063720][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 949.337507][T22987] chnl_net:caif_netlink_parms(): no params data found [ 950.012329][T23033] tun0: tun_chr_ioctl cmd 1074025681 [ 950.129935][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 950.212703][T22987] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.230539][T22987] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.238780][T22987] device bridge_slave_0 entered promiscuous mode [ 950.263589][T22987] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.293260][T22987] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.329700][T22987] device bridge_slave_1 entered promiscuous mode [ 950.517532][T22987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.575736][T22987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.886618][T22987] team0: Port device team_slave_0 added [ 950.976338][T22987] team0: Port device team_slave_1 added [ 951.168572][T22987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.258655][T22987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.452010][T22987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.493961][T23061] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5362'. [ 951.540371][T22987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.579709][T22987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.658382][T22987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.776678][T23061] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5362'. [ 951.971024][T22987] device hsr_slave_0 entered promiscuous mode [ 951.998697][T22987] device hsr_slave_1 entered promiscuous mode [ 952.209967][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 952.492072][T23074] device syzkaller0 entered promiscuous mode [ 952.550578][T23075] netlink: 'syz.3.5365': attribute type 3 has an invalid length. [ 952.577607][T23075] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.5365'. [ 953.573375][T23101] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.5371'. [ 954.299650][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 955.452293][T23099] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5371'. [ 955.905403][T10314] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.033577][T22987] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 956.172990][T10314] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.208666][T22987] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 956.236372][T22987] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 956.324883][T10314] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.358785][T22987] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 956.369827][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 956.460947][T10314] batman_adv: batadv0: Removing interface: netdevsim0 [ 956.477080][T10314] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.517241][T23117] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5376'. [ 956.668082][T22987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.712131][T23131] netlink: 'syz.1.5380': attribute type 10 has an invalid length. [ 956.729712][T23131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5380'. [ 956.776381][T22987] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.804474][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.815565][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.856224][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.871169][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.881578][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.888701][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.907950][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.940788][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 957.035748][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.042957][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.046249][T23142] netlink: 'syz.0.5384': attribute type 4 has an invalid length. [ 957.085497][T23142] netlink: 'syz.0.5384': attribute type 1 has an invalid length. [ 957.137839][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 957.170115][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 957.172972][T23142] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.5384'. [ 957.280582][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 957.350278][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 957.372324][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 957.542173][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 957.580155][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 957.628219][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 957.673329][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 957.693923][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 957.717784][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 957.758450][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 957.925288][T22987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 958.097697][T23188] netlink: 'syz.3.5392': attribute type 10 has an invalid length. [ 958.138833][T23188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5392'. [ 958.182487][T23188] device ipvlan1 entered promiscuous mode [ 958.225949][T23188] bridge0: port 3(ipvlan1) entered blocking state [ 958.258533][T23188] bridge0: port 3(ipvlan1) entered disabled state [ 958.271760][T23188] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 958.868129][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 958.877013][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 959.030981][T23228] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.5400'. [ 959.046589][T22987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.026382][T10314] bond0: (slave wlan1): Releasing backup interface [ 961.114935][T23259] tap0: tun_chr_ioctl cmd 1074025677 [ 961.127237][T23259] tap0: linktype set to 773 [ 961.197037][T23280] netlink: 'syz.1.5409': attribute type 3 has an invalid length. [ 961.205635][T23280] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5409'. [ 961.633775][T10314] device hsr_slave_0 left promiscuous mode [ 961.641548][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.649023][T10314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.660606][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.668239][T10314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.682575][T10314] bridge0: port 3(team0) entered disabled state [ 961.696488][T10314] device bridge_slave_1 left promiscuous mode [ 961.705350][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.725924][T10314] device bridge_slave_0 left promiscuous mode [ 961.738566][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.781203][T10314] device veth1_macvtap left promiscuous mode [ 961.787423][T10314] device veth0_macvtap left promiscuous mode [ 961.799813][T10314] device veth1_vlan left promiscuous mode [ 961.806573][T10314] device veth0_vlan left promiscuous mode [ 962.036510][T10314] device geneve1 left promiscuous mode [ 962.047274][T10314] team0 (unregistering): Port device geneve1 removed [ 962.098160][T10314] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 962.419912][T10314] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 962.710463][T23296] netlink: 'syz.2.5412': attribute type 2 has an invalid length. [ 962.718513][T23296] netlink: 'syz.2.5412': attribute type 1 has an invalid length. [ 962.732581][T23296] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.5412'. [ 962.941371][T10314] device team_slave_1 left promiscuous mode [ 962.950055][T10314] team0 (unregistering): Port device team_slave_1 removed [ 963.014206][T10314] device team_slave_0 left promiscuous mode [ 963.022027][T10314] team0 (unregistering): Port device team_slave_0 removed [ 963.074807][T10314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.131635][T10314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 963.527754][T10314] bond0 (unregistering): Released all slaves [ 963.633403][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.643121][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 963.655028][T23282] ¥: port 2(team0) entered blocking state [ 963.662046][T23282] ¥: port 2(team0) entered disabled state [ 963.669388][T23282] device team0 entered promiscuous mode [ 963.680487][T23282] device team_slave_0 entered promiscuous mode [ 963.687266][T23282] device team_slave_1 entered promiscuous mode [ 963.750569][T23277] device team0 left promiscuous mode [ 963.760169][T23277] device team_slave_0 left promiscuous mode [ 963.789741][T23277] device team_slave_1 left promiscuous mode [ 963.818470][T23277] ¥: port 2(team0) entered disabled state [ 963.842820][T23277] device syz_tun left promiscuous mode [ 963.853574][T23277] ¥: port 1(syz_tun) entered disabled state [ 963.974275][T23315] device veth1_macvtap left promiscuous mode [ 964.028443][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 964.044899][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 964.083661][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.107007][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.120995][T22987] device veth0_vlan entered promiscuous mode [ 964.140517][T23324] device veth1_macvtap entered promiscuous mode [ 964.146973][T23324] device macsec0 entered promiscuous mode [ 964.174347][T22987] device veth1_vlan entered promiscuous mode [ 964.246308][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 964.308404][T23333] netlink: 'syz.1.5421': attribute type 10 has an invalid length. [ 964.326904][T23333] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5421'. [ 964.373627][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 964.395763][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 964.444384][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 964.464945][T22987] device veth0_macvtap entered promiscuous mode [ 964.476984][T22987] device veth1_macvtap entered promiscuous mode [ 964.520798][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.547859][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.569020][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 964.580110][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.591963][T22987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.607746][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 964.616991][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 964.625806][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 964.642771][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 964.675057][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.695551][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.716337][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.737303][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.756679][T22987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.768770][T22987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.860497][T22987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.869266][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 964.930963][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 964.976432][T22987] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.030014][T22987] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.038783][T22987] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.090979][T22987] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.504969][T10331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.521977][T10331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.633793][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 965.695789][T10322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.722114][T10322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.797907][T10322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 965.972285][T23367] device batadv0 entered promiscuous mode [ 966.090403][T23369] tap0: tun_chr_ioctl cmd 1074025677 [ 966.119384][T23369] tap0: linktype set to 773 [ 966.522358][T23396] netlink: 'syz.3.5433': attribute type 10 has an invalid length. [ 966.540472][T23396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5433'. [ 966.602946][T23396] bridge0: port 3(ipvlan1) entered blocking state [ 966.641659][T23396] bridge0: port 3(ipvlan1) entered disabled state [ 966.682654][T23396] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 968.690738][T23472] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5448'. [ 968.741255][T23472] netlink: zone id is out of range [ 968.746893][T23472] netlink: zone id is out of range [ 968.860614][T23472] netlink: zone id is out of range [ 968.901148][T23472] netlink: zone id is out of range [ 968.920352][T23472] netlink: zone id is out of range [ 968.943348][T23472] netlink: zone id is out of range [ 968.994256][T23472] netlink: zone id is out of range [ 969.040303][T23472] netlink: zone id is out of range [ 969.096822][T23472] netlink: zone id is out of range [ 969.160507][T23481] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5446'. [ 969.829840][T23502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5453'. [ 969.895307][T23502] device dummy0 entered promiscuous mode [ 969.921496][T23504] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.5454'. [ 971.413594][T23545] device batadv0 entered promiscuous mode [ 972.150215][T23564] netlink: 'syz.6.5471': attribute type 10 has an invalid length. [ 972.161179][T23564] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5471'. [ 972.230199][T23564] device ipvlan1 entered promiscuous mode [ 972.269146][T23564] bridge0: port 3(ipvlan1) entered blocking state [ 972.280197][T23564] bridge0: port 3(ipvlan1) entered disabled state [ 972.314926][T23564] net_ratelimit: 155 callbacks suppressed [ 972.314965][T23564] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 972.381327][T23568] netlink: 'syz.1.5473': attribute type 10 has an invalid length. [ 972.397432][T23568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5473'. [ 973.280616][T23601] netlink: 'syz.1.5481': attribute type 2 has an invalid length. [ 973.506836][T23608] netlink: 'syz.1.5481': attribute type 10 has an invalid length. [ 973.657463][T23608] device hsr_slave_0 entered promiscuous mode [ 973.712585][T23608] team0: Port device hsr_slave_0 added [ 975.236043][T23634] netlink: 'syz.0.5487': attribute type 10 has an invalid length. [ 975.284398][T23634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5487'. [ 975.376113][T23634] device ipvlan1 entered promiscuous mode [ 975.494313][T23634] bridge0: port 4(ipvlan1) entered blocking state [ 975.584498][T23634] bridge0: port 4(ipvlan1) entered disabled state [ 975.617622][T23634] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 975.695225][T23644] netlink: 'syz.3.5489': attribute type 10 has an invalid length. [ 976.173266][T23662] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5493'. [ 976.183429][T23659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5494'. [ 976.199894][T23659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5494'. [ 976.256210][T23658] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5493'. [ 976.280301][T23658] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 976.412361][T23667] netlink: 'syz.3.5495': attribute type 10 has an invalid length. [ 976.430315][T23667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5495'. [ 976.477077][T23667] bridge0: port 3(ipvlan1) entered blocking state [ 976.497717][T23667] bridge0: port 3(ipvlan1) entered disabled state [ 976.548327][T23667] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 976.637351][T23678] netlink: 56863 bytes leftover after parsing attributes in process `syz.6.5498'. [ 976.738204][T23678] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5498'. [ 978.547156][T23747] netlink: 'syz.0.5511': attribute type 10 has an invalid length. [ 978.569392][T23741] delete_channel: no stack [ 978.682020][T23752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5513'. [ 978.789682][T23753] netlink: 'syz.0.5511': attribute type 13 has an invalid length. [ 978.797572][T23753] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5511'. [ 978.901354][T23760] device vcan0 entered promiscuous mode [ 978.924856][T23760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 979.380368][T23776] netlink: 'syz.0.5516': attribute type 29 has an invalid length. [ 979.425718][T23776] netlink: 'syz.0.5516': attribute type 29 has an invalid length. [ 979.494369][T23776] netlink: 'syz.0.5516': attribute type 29 has an invalid length. [ 980.229203][T23803] netlink: 'syz.0.5524': attribute type 21 has an invalid length. [ 980.382590][T23803] netlink: 'syz.0.5524': attribute type 10 has an invalid length. [ 980.423366][T23803] team0: Device hsr_slave_0 failed to register rx_handler [ 981.097640][T23813] netlink: 'syz.3.5525': attribute type 10 has an invalid length. [ 981.231430][T23813] team0: Device wg1 is of different type [ 981.878915][T23837] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 981.922743][T23837] __nla_validate_parse: 2 callbacks suppressed [ 981.922759][T23837] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.5530'. [ 981.986367][T23846] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 982.071112][T23846] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.5530'. [ 983.424270][T23875] team0: Device hsr_slave_0 failed to register rx_handler [ 984.422539][T23898] validate_nla: 1 callbacks suppressed [ 984.422650][T23898] netlink: 'syz.0.5550': attribute type 10 has an invalid length. [ 984.543176][T23898] team0: Device wg1 is of different type [ 984.778204][T23919] device syzkaller0 entered promiscuous mode [ 985.212177][T23926] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5558'. [ 985.249837][T23930] netlink: 'syz.3.5558': attribute type 10 has an invalid length. [ 985.482353][T23930] team0 (unregistering): Port device team_slave_0 removed [ 985.527761][T23930] team0 (unregistering): Port device team_slave_1 removed [ 985.779561][T23950] IPv6: Can't replace route, no match found [ 986.594725][T23970] netlink: 'syz.0.5576': attribute type 10 has an invalid length. [ 986.786312][T23970] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 987.053815][T23984] netlink: 'syz.1.5566': attribute type 10 has an invalid length. [ 987.619245][T23984] device wg1 entered promiscuous mode [ 987.681745][T23984] team0: Device wg1 is of different type [ 988.210433][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5573'. [ 988.416820][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5573'. [ 988.550399][T24002] netlink: 33 bytes leftover after parsing attributes in process `syz.1.5573'. [ 988.679958][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5573'. [ 988.881676][T24002] netlink: 33 bytes leftover after parsing attributes in process `syz.1.5573'. [ 988.994755][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5573'. [ 989.109994][T24002] netlink: 33 bytes leftover after parsing attributes in process `syz.1.5573'. [ 991.657762][T24053] netlink: 12002 bytes leftover after parsing attributes in process `syz.2.5582'. [ 995.005265][T24087] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.5588'. [ 995.813894][T24111] netlink: 105 bytes leftover after parsing attributes in process `syz.0.5593'. [ 1000.111251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1000.117744][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.139911][T24250] netlink: 'syz.6.5624': attribute type 1 has an invalid length. [ 1003.148038][T24250] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5624'. [ 1003.445927][T24253] netlink: 12002 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1003.919057][T24270] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5629'. [ 1004.017404][T24270] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1004.513700][T24289] netlink: 'syz.0.5633': attribute type 1 has an invalid length. [ 1004.546058][T24289] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1005.186626][T24295] netlink: 'syz.1.5634': attribute type 2 has an invalid length. [ 1005.229096][T24295] netlink: 'syz.1.5634': attribute type 3 has an invalid length. [ 1005.286223][T24295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1005.692849][T24315] netlink: 'syz.6.5638': attribute type 3 has an invalid length. [ 1005.939000][T24315] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5638'. [ 1006.571161][T24333] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5644'. [ 1006.612243][T24333] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1006.704195][T24333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.091849][T24358] netlink: 'syz.2.5651': attribute type 21 has an invalid length. [ 1007.128083][T24358] netlink: 'syz.2.5651': attribute type 6 has an invalid length. [ 1007.176028][T24358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5651'. [ 1007.361266][T24367] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1007.870740][T24385] netlink: 'syz.3.5658': attribute type 10 has an invalid length. [ 1007.933841][T24385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1007.966806][T24385] bridge0: port 3(ipvlan1) entered blocking state [ 1007.995757][T24385] bridge0: port 3(ipvlan1) entered disabled state [ 1008.038371][T24385] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1009.033352][T24414] netlink: 'syz.0.5665': attribute type 2 has an invalid length. [ 1009.126881][T24414] netlink: 'syz.0.5665': attribute type 3 has an invalid length. [ 1009.184879][T24414] __nla_validate_parse: 1 callbacks suppressed [ 1009.184965][T24414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5665'. [ 1009.495678][T24445] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1009.693856][T24444] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1009.823170][T24449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1010.185971][T24464] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5681'. [ 1010.301558][T24464] netlink: 'syz.0.5681': attribute type 10 has an invalid length. [ 1010.336597][T24464] bridge0: port 3(bond0) entered disabled state [ 1010.357217][T24464] device bond0 left promiscuous mode [ 1010.371825][T24464] device bond_slave_0 left promiscuous mode [ 1010.384183][T24464] device bond_slave_1 left promiscuous mode [ 1010.404932][T24464] device wlan1 left promiscuous mode [ 1010.426639][T24464] device batadv_slave_0 left promiscuous mode [ 1010.462903][T24464] bridge0: port 3(bond0) entered disabled state [ 1010.804512][T24484] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.5687'. [ 1010.868391][T24487] netlink: 'syz.0.5688': attribute type 10 has an invalid length. [ 1011.446976][T24498] device sit0 entered promiscuous mode [ 1012.823579][T24541] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1013.483751][T24563] netlink: 'syz.2.5711': attribute type 21 has an invalid length. [ 1013.570684][T24563] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5711'. [ 1013.610571][T24567] netlink: 'syz.1.5708': attribute type 10 has an invalid length. [ 1015.129134][T24611] netlink: 'syz.3.5725': attribute type 2 has an invalid length. [ 1015.164105][T24611] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1015.188149][T24613] netlink: 'syz.0.5724': attribute type 10 has an invalid length. [ 1015.208657][T24613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5724'. [ 1015.253271][T24613] bridge0: port 3(ipvlan1) entered blocking state [ 1015.278887][T24613] bridge0: port 3(ipvlan1) entered disabled state [ 1015.369403][T24613] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1016.346472][T24647] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.5737'. [ 1016.430911][T24651] netlink: 'syz.1.5739': attribute type 14 has an invalid length. [ 1016.439197][T24651] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5739'. [ 1016.565823][T24658] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.5741'. [ 1016.842848][T24668] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1016.853623][T24668] sctp: [Deprecated]: syz.2.5743 (pid 24668) Use of int in max_burst socket option deprecated. [ 1016.853623][T24668] Use struct sctp_assoc_value instead [ 1017.090015][T24677] netlink: 'syz.2.5744': attribute type 10 has an invalid length. [ 1017.175583][T24677] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1017.196372][T24680] netlink: 'syz.0.5754': attribute type 10 has an invalid length. [ 1017.217906][T24680] team0: Device vxcan1 is of different type [ 1017.625495][T24688] netlink: 'syz.6.5747': attribute type 29 has an invalid length. [ 1017.674829][T24691] netlink: 'syz.6.5747': attribute type 29 has an invalid length. [ 1017.685290][T24688] netlink: 'syz.6.5747': attribute type 29 has an invalid length. [ 1017.748900][T24691] netlink: 'syz.6.5747': attribute type 29 has an invalid length. [ 1017.863418][T24688] netlink: 'syz.6.5747': attribute type 29 has an invalid length. [ 1019.224019][T24739] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1020.559471][T24760] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1020.859372][T24763] validate_nla: 4 callbacks suppressed [ 1020.859392][T24763] netlink: 'syz.6.5773': attribute type 27 has an invalid length. [ 1021.167868][T24763] bond0: (slave bond_slave_0): Releasing backup interface [ 1021.233942][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1021.244096][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1021.253170][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1021.263286][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1021.271431][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1021.278791][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1021.364617][T24771] netlink: 'syz.0.5774': attribute type 39 has an invalid length. [ 1022.074427][T10330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.824692][T10330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.329735][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 1025.409744][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 1026.263650][T24827] netlink: 'syz.6.5788': attribute type 4 has an invalid length. [ 1026.285476][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5788'. [ 1026.297384][T24825] netlink: 'syz.2.5789': attribute type 10 has an invalid length. [ 1026.390728][T24825] team0: Port device netdevsim0 added [ 1026.445886][T10330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.483849][T24829] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5787'. [ 1026.608069][T24773] chnl_net:caif_netlink_parms(): no params data found [ 1026.871893][T10330] bond0: (slave netdevsim0): Releasing backup interface [ 1026.909003][T10330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.133583][T24834] netlink: 'syz.2.5792': attribute type 2 has an invalid length. [ 1027.156593][T24834] netlink: 'syz.2.5792': attribute type 4 has an invalid length. [ 1027.189108][T24834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5792'. [ 1027.885567][T24843] device syzkaller0 entered promiscuous mode [ 1027.942525][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 1029.977151][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 1030.755277][T24853] netlink: 'syz.2.5795': attribute type 39 has an invalid length. [ 1030.805803][T24858] netlink: 'syz.3.5797': attribute type 10 has an invalid length. [ 1030.813762][T24858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1030.823509][T24858] bridge0: port 3(ipvlan1) entered blocking state [ 1030.849837][T24858] bridge0: port 3(ipvlan1) entered disabled state [ 1030.857884][T24858] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1030.948758][T24867] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1031.100415][T24773] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.130606][T24773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.138821][T24773] device bridge_slave_0 entered promiscuous mode [ 1031.183494][T10330] tipc: Left network mode [ 1031.188431][T24879] netlink: 'syz.3.5801': attribute type 27 has an invalid length. [ 1031.221852][T24773] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.229002][T24773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.240927][T24878] delete_channel: no stack [ 1031.301017][T24773] device bridge_slave_1 entered promiscuous mode [ 1032.528311][T24773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.600838][T24773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.226373][T24918] netlink: 'syz.2.5810': attribute type 10 has an invalid length. [ 1033.250077][T24918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5810'. [ 1033.671735][T24773] team0: Port device team_slave_0 added [ 1033.734603][T24773] team0: Port device team_slave_1 added [ 1034.018580][T24934] netlink: 'syz.2.5814': attribute type 21 has an invalid length. [ 1034.054519][T24934] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1034.271527][T24773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.278615][T24773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.346373][T24773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.407835][T24773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.427422][T24773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.551763][T24773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.744434][T24951] netlink: 'syz.0.5818': attribute type 2 has an invalid length. [ 1034.790464][T24951] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.5818'. [ 1035.047011][T24773] device hsr_slave_0 entered promiscuous mode [ 1036.210902][T24773] device hsr_slave_1 entered promiscuous mode [ 1036.483984][T24773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1036.513243][T24773] Cannot create hsr debugfs directory [ 1036.519016][T24955] netlink: 'syz.6.5819': attribute type 10 has an invalid length. [ 1036.558327][T24955] netlink: 'syz.6.5819': attribute type 19 has an invalid length. [ 1036.578750][T24955] netlink: 6344 bytes leftover after parsing attributes in process `syz.6.5819'. [ 1037.757221][T24980] netlink: 'syz.6.5824': attribute type 6 has an invalid length. [ 1037.830309][T24980] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.5824'. [ 1041.632342][T10330] device geneve1 left promiscuous mode [ 1041.697273][T10330] team0 (unregistering): Port device geneve1 removed [ 1043.050467][T10330] device hsr_slave_0 left promiscuous mode [ 1043.070416][T10330] team0 (unregistering): Port device hsr_slave_0 removed [ 1043.734315][T10330] device team_slave_1 left promiscuous mode [ 1043.744515][T10330] team0 (unregistering): Port device team_slave_1 removed [ 1044.031106][T10330] device C left promiscuous mode [ 1044.059240][T10330] team0 (unregistering): Port device C removed [ 1044.232782][T10330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.252106][T25050] sctp: [Deprecated]: syz.6.5844 (pid 25050) Use of int in maxseg socket option. [ 1044.252106][T25050] Use struct sctp_assoc_value instead [ 1044.461553][T10330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.573512][T10330] bond0 (unregistering): Released all slaves [ 1045.705819][T25049] netlink: 'syz.2.5845': attribute type 10 has an invalid length. [ 1045.759664][T25049] device netdevsim0 entered promiscuous mode [ 1045.892747][T25049] team0: Port device netdevsim0 removed [ 1046.149049][T24773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1046.215420][T24773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1046.304283][T24773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1046.454615][T24773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1047.124051][T24773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.263441][T25076] netlink: 'syz.2.5850': attribute type 3 has an invalid length. [ 1047.369715][T25076] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1047.555954][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1047.573378][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1047.634778][T24773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.698699][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1047.736592][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1047.750091][T25085] sctp: [Deprecated]: syz.3.5849 (pid 25085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1047.750091][T25085] Use struct sctp_sack_info instead [ 1047.783381][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.790711][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.847163][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1047.897082][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1047.920485][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1047.975859][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.983225][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.103097][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1048.128438][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1048.238419][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1048.296129][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1048.433970][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1048.462276][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1048.494959][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1048.532203][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1048.561629][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1048.834959][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1048.880660][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1048.933957][T24773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1049.181823][T25104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1049.269705][T25104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.462035][T25104] device bridge_slave_0 left promiscuous mode [ 1049.544770][T25104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.326310][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.344654][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.450227][T24773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.547308][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.570427][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.814122][T24773] device veth0_vlan entered promiscuous mode [ 1050.840013][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.872520][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.897133][T24773] device veth1_vlan entered promiscuous mode [ 1050.918666][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.931351][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.960794][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1051.037714][T25134] netlink: 'syz.6.5860': attribute type 10 has an invalid length. [ 1051.096271][T25134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5860'. [ 1051.142600][T25134] bridge0: port 3(ipvlan1) entered blocking state [ 1051.169365][T25134] bridge0: port 3(ipvlan1) entered disabled state [ 1051.213560][T25134] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1051.299430][T24773] device veth0_macvtap entered promiscuous mode [ 1051.378949][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.410829][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.432328][T24773] device veth1_macvtap entered promiscuous mode [ 1051.491148][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.519733][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.585830][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.617295][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.671778][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.683108][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.695343][T24773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.705170][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.721398][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.740137][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.760220][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.774189][T25149] netlink: 'syz.0.5863': attribute type 4 has an invalid length. [ 1051.806492][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.830934][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.844172][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.855252][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.865660][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.876910][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.887374][T24773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.898437][T24773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.916217][T24773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.928201][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1051.970871][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1052.006785][T24773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.036572][T24773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.077991][T24773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.106102][T24773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.251996][T25165] netlink: 'syz.0.5868': attribute type 12 has an invalid length. [ 1052.313068][T25165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5868'. [ 1052.501350][T25170] netlink: 'syz.0.5868': attribute type 21 has an invalid length. [ 1052.538899][T25170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5868'. [ 1052.673528][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.690116][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.716462][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.801407][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.809291][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.844650][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1053.059157][T25193] netlink: 'syz.3.5876': attribute type 10 has an invalid length. [ 1053.100137][T25193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1053.144541][T25193] bridge0: port 3(ipvlan1) entered blocking state [ 1053.199955][T25193] bridge0: port 3(ipvlan1) entered disabled state [ 1053.294572][T25193] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1053.340592][T25202] €Â0: renamed from pim6reg1 [ 1053.800811][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5879'. [ 1054.459626][T25235] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1054.528371][T25233] netlink: 'syz.3.5886': attribute type 10 has an invalid length. [ 1054.565146][T25233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.590209][T25233] device bridge_slave_1 left promiscuous mode [ 1054.596619][T25233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.627923][T25233] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1054.960232][T25245] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5889'. [ 1055.089381][T25248] netlink: 'syz.0.5892': attribute type 10 has an invalid length. [ 1055.129285][T25248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5892'. [ 1055.190025][T25248] bridge0: port 1(ipvlan1) entered blocking state [ 1055.271790][T25248] bridge0: port 1(ipvlan1) entered disabled state [ 1055.325521][T25248] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1055.987085][T25267] netlink: 'syz.6.5897': attribute type 3 has an invalid length. [ 1056.033119][T25267] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5897'. [ 1056.495342][T25273] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5900'. [ 1056.604792][T25273] netlink: zone id is out of range [ 1056.800031][T25273] netlink: zone id is out of range [ 1056.805803][T25273] netlink: zone id is out of range [ 1057.023261][T25273] netlink: zone id is out of range [ 1058.102122][T25297] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5908'. [ 1058.195402][T25298] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5908'. [ 1058.332706][T25300] netlink: 'syz.0.5909': attribute type 10 has an invalid length. [ 1058.398154][T25300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1058.539916][T25300] bridge0: port 1(ipvlan1) entered blocking state [ 1058.598428][T25300] bridge0: port 1(ipvlan1) entered disabled state [ 1058.676662][T25300] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1061.244021][T25347] netlink: 'syz.2.5926': attribute type 10 has an invalid length. [ 1061.275767][T25347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1061.324007][T25350] netlink: 'syz.0.5927': attribute type 10 has an invalid length. [ 1061.373752][T25350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1061.415979][T25350] bridge0: port 1(ipvlan1) entered blocking state [ 1061.477958][T25350] bridge0: port 1(ipvlan1) entered disabled state [ 1061.492316][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.498716][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.546139][T25350] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1061.651896][T25358] tap0: tun_chr_ioctl cmd 1074025681 [ 1061.665316][T25367] syz.6.5929[25367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1061.682348][T25360] netlink: 'syz.6.5929': attribute type 10 has an invalid length. [ 1061.719843][T25360] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5929'. [ 1061.765174][T25361] netlink: 'syz.6.5929': attribute type 17 has an invalid length. [ 1061.815508][T25361] netlink: 'syz.6.5929': attribute type 16 has an invalid length. [ 1061.836593][T25361] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5929'. [ 1061.978887][T25369] netlink: 'syz.1.5932': attribute type 10 has an invalid length. [ 1062.075591][T25369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.083088][T25369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.152207][T25369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.159374][T25369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.166921][T25369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.174171][T25369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.279637][T25369] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1062.575715][T25392] netlink: 'syz.1.5940': attribute type 10 has an invalid length. [ 1062.609887][T25392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5940'. [ 1062.642005][T25392] device ipvlan1 entered promiscuous mode [ 1062.697934][T25392] bridge0: port 3(ipvlan1) entered blocking state [ 1062.717690][T25392] bridge0: port 3(ipvlan1) entered disabled state [ 1062.757631][T25392] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1062.842852][T25395] netlink: 'syz.0.5941': attribute type 5 has an invalid length. [ 1062.938375][T25401] netlink: 'syz.2.5944': attribute type 10 has an invalid length. [ 1062.960152][T25401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5944'. [ 1063.007460][T25404] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5943'. [ 1063.060475][T25404] netlink: zone id is out of range [ 1063.149369][T25404] netlink: zone id is out of range [ 1063.168885][T25404] netlink: zone id is out of range [ 1063.175397][T25404] netlink: zone id is out of range [ 1064.908448][T25428] netlink: 'syz.2.5950': attribute type 10 has an invalid length. [ 1064.939365][T25428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5950'. [ 1065.396417][T25441] netlink: 'syz.3.5956': attribute type 10 has an invalid length. [ 1065.454291][T25441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1065.542825][T25451] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5958'. [ 1065.553808][T25451] netlink: zone id is out of range [ 1065.557282][T25441] bridge0: port 2(ipvlan1) entered blocking state [ 1065.559896][T25451] netlink: zone id is out of range [ 1065.571482][T25441] bridge0: port 2(ipvlan1) entered disabled state [ 1065.591149][T25441] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1065.620748][T25451] netlink: zone id is out of range [ 1065.649910][T25451] netlink: zone id is out of range [ 1065.868931][T25462] netlink: 'syz.1.5959': attribute type 10 has an invalid length. [ 1065.885625][T25462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1065.913200][T25462] bridge0: port 3(ipvlan1) entered blocking state [ 1065.950221][T25462] bridge0: port 3(ipvlan1) entered disabled state [ 1066.020033][T25461] netlink: 'syz.0.5961': attribute type 12 has an invalid length. [ 1066.054845][T25461] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.5961'. [ 1066.594850][T25488] netlink: 'syz.0.5971': attribute type 29 has an invalid length. [ 1066.633096][T25488] netlink: 'syz.0.5971': attribute type 29 has an invalid length. [ 1066.659479][T25488] netlink: 'syz.0.5971': attribute type 29 has an invalid length. [ 1066.683930][T25488] netlink: 'syz.0.5971': attribute type 29 has an invalid length. [ 1066.718028][T25492] netlink: 'syz.6.5973': attribute type 21 has an invalid length. [ 1066.739625][T25492] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5973'. [ 1066.759100][T25492] netlink: 'syz.6.5973': attribute type 4 has an invalid length. [ 1066.801689][T25492] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5973'. [ 1066.834946][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1066.849278][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1066.857983][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1066.868867][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1066.877676][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1066.886213][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1067.366931][ T4325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.630097][ T4325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.887971][ T4325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.127913][ T4325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.683553][T25495] chnl_net:caif_netlink_parms(): no params data found [ 1068.739744][T25545] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1068.749278][T25545] net_ratelimit: 1 callbacks suppressed [ 1068.749291][T25545] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1068.811775][T25538] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5984'. [ 1068.929897][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 1069.179979][T25538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.199410][T25538] bond0 (unregistering): Released all slaves [ 1069.218657][T25547] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1069.257702][T25547] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1070.017116][T25495] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.062985][T25495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.114917][T25495] device bridge_slave_0 entered promiscuous mode [ 1070.267836][T25495] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.276543][T25495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.297315][T25495] device bridge_slave_1 entered promiscuous mode [ 1070.486940][T25495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.536837][T25495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.815716][T25495] team0: Port device team_slave_0 added [ 1070.903922][T25495] team0: Port device team_slave_1 added [ 1071.009837][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 1071.099680][T25495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.111347][T25495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.208663][T25495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.278672][T25495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.293166][T25495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.331747][T25495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.363924][T25609] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1071.377884][T25609] pim6reg0: linktype set to 780 [ 1071.417293][T25614] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 1071.506223][T25609] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 1071.599066][T25495] device hsr_slave_0 entered promiscuous mode [ 1071.616979][T25495] device hsr_slave_1 entered promiscuous mode [ 1071.624565][T25495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1071.639497][T25495] Cannot create hsr debugfs directory [ 1072.140794][T25624] validate_nla: 1 callbacks suppressed [ 1072.140831][T25624] netlink: 'syz.1.6007': attribute type 10 has an invalid length. [ 1072.321632][T25624] device veth0_vlan left promiscuous mode [ 1072.372467][T25624] device veth0_vlan entered promiscuous mode [ 1072.400596][T25624] team0: Device veth0_vlan failed to register rx_handler [ 1072.574624][T25630] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6008'. [ 1072.965100][ T4325] device hsr_slave_0 left promiscuous mode [ 1072.990338][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.997812][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.037813][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.065968][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.080594][ T4325] device bridge_slave_0 left promiscuous mode [ 1073.086919][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.094800][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 1073.195782][ T4325] device veth1_vlan left promiscuous mode [ 1073.235716][ T4325] device veth0_vlan left promiscuous mode [ 1073.650414][T25671] netlink: 'syz.6.6015': attribute type 3 has an invalid length. [ 1073.674426][T25671] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6015'. [ 1073.820109][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 1074.511871][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.607305][ T4325] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1074.881285][ T4325] bond0 (unregistering): Released all slaves [ 1075.017502][T25681] netlink: 'syz.6.6019': attribute type 10 has an invalid length. [ 1075.027406][T25681] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6019'. [ 1075.058853][T25681] bridge0: port 3(ipvlan1) entered blocking state [ 1075.072199][T25681] bridge0: port 3(ipvlan1) entered disabled state [ 1075.083395][T25681] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1075.102479][T25684] netlink: 'syz.2.6020': attribute type 10 has an invalid length. [ 1075.132527][T25684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6020'. [ 1075.169870][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 1075.467131][T25701] netlink: 'syz.6.6023': attribute type 28 has an invalid length. [ 1075.496655][T25701] netlink: 'syz.6.6023': attribute type 4 has an invalid length. [ 1075.521520][T25701] netlink: 136 bytes leftover after parsing attributes in process `syz.6.6023'. [ 1076.685716][T25722] netlink: 'syz.2.6030': attribute type 39 has an invalid length. [ 1076.779149][T25495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1076.941097][T25495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1076.968421][T25726] netlink: 'syz.6.6031': attribute type 10 has an invalid length. [ 1076.998344][T25726] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6031'. [ 1077.054226][T25726] bridge0: port 3(ipvlan1) entered blocking state [ 1077.097082][T25726] bridge0: port 3(ipvlan1) entered disabled state [ 1077.168172][T25726] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1077.223089][T25495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.279327][T25731] netlink: 'syz.1.6032': attribute type 10 has an invalid length. [ 1077.304224][T25731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6032'. [ 1077.357006][T25731] bridge0: port 3(ipvlan1) entered blocking state [ 1077.395350][T25731] bridge0: port 3(ipvlan1) entered disabled state [ 1077.425355][T25731] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1077.474921][T25495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1077.803315][T25495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.870774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.888550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.931116][T25495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.985561][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1078.045571][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1078.102070][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.109245][T10326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.205764][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1078.260444][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1078.300587][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1078.339961][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.347163][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.401516][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1078.467435][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1078.517108][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1078.579629][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1078.602950][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1078.655682][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1078.715636][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1078.771625][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1078.803446][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1078.826027][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1078.890437][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1078.942520][T25495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1079.166606][T25787] netlink: 'syz.2.6044': attribute type 10 has an invalid length. [ 1079.185633][T25787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6044'. [ 1079.196623][T25786] netlink: 'syz.1.6045': attribute type 39 has an invalid length. [ 1080.133911][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1080.152083][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1080.175906][T25495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.320085][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1080.351999][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1080.422241][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1080.464219][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1080.501087][T25495] device veth0_vlan entered promiscuous mode [ 1080.510958][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1080.552391][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1080.575706][T25495] device veth1_vlan entered promiscuous mode [ 1080.737980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1080.753075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1080.800622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.837023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.859777][T25495] device veth0_macvtap entered promiscuous mode [ 1080.879453][T25495] device veth1_macvtap entered promiscuous mode [ 1080.950365][T25830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.971563][T25830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.025901][T25830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.048918][T25830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.325309][T25833] netlink: 'syz.2.6057': attribute type 10 has an invalid length. [ 1081.357427][T25833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6057'. [ 1081.377540][T25495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.440508][T25495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.485516][T25495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.524737][T25495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.576117][T25495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.605978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.634628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1081.701078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1081.728953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1081.788552][T25495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.811791][T25495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.866400][T25495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.904499][T25495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.936055][T25495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.990305][T25495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.070167][T25495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.078165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1082.117673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1082.170162][T25495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.178922][T25495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.235876][T25495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.261702][T25495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.544473][T25856] netlink: 'syz.0.6060': attribute type 20 has an invalid length. [ 1082.595488][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.630407][T25866] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1082.649281][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.749003][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1082.859797][T25866] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1082.917388][T10341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.966830][T10341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.990046][T25858] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1083.088794][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1083.465193][T25890] netlink: 'syz.6.6067': attribute type 10 has an invalid length. [ 1083.514759][T25890] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6067'. [ 1083.581802][T25890] bridge0: port 3(ipvlan1) entered blocking state [ 1083.620308][T25890] bridge0: port 3(ipvlan1) entered disabled state [ 1083.671672][T25890] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1084.101624][T25905] netlink: 'syz.6.6073': attribute type 39 has an invalid length. [ 1084.945847][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1084.966053][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1084.972113][T25926] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6078'. [ 1084.990016][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1085.010608][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1085.020561][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1085.028306][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1085.921514][ T4326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.233853][T25941] netlink: 10879 bytes leftover after parsing attributes in process `syz.1.6080'. [ 1087.097475][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 1088.995269][ T4326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.155588][ T4326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.169811][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 1089.318599][ T4326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.390000][T25953] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6087'. [ 1089.457986][T25961] netlink: 'syz.0.6086': attribute type 10 has an invalid length. [ 1089.468953][T25953] netlink: zone id is out of range [ 1089.502162][T25953] netlink: zone id is out of range [ 1089.530662][T25953] netlink: zone id is out of range [ 1089.595577][T25953] netlink: zone id is out of range [ 1089.607722][T25953] netlink: zone id is out of range [ 1089.614327][T25961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1089.663365][T25953] netlink: zone id is out of range [ 1089.685508][T25925] chnl_net:caif_netlink_parms(): no params data found [ 1089.695205][T25953] netlink: zone id is out of range [ 1089.750496][T25953] netlink: zone id is out of range [ 1089.790337][T25953] netlink: zone id is out of range [ 1089.797072][T25953] netlink: zone id is out of range [ 1090.105870][T25925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.165276][T25925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.215458][T25925] device bridge_slave_0 entered promiscuous mode [ 1090.260457][T25925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.269259][T25925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.299255][T25925] device bridge_slave_1 entered promiscuous mode [ 1090.413245][T25925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.650366][ T4326] device ip6gretap0 left promiscuous mode [ 1090.656236][ T4326] : port 1(ip6gretap0) entered disabled state [ 1091.252269][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 1093.329942][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 1093.614780][T25925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.716793][T26014] netlink: 'syz.0.6099': attribute type 21 has an invalid length. [ 1093.733740][T26014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1093.848854][T25925] team0: Port device team_slave_0 added [ 1093.989259][T26029] netlink: 'syz.6.6101': attribute type 21 has an invalid length. [ 1094.049901][T26029] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6101'. [ 1094.131168][T25925] team0: Port device team_slave_1 added [ 1096.627342][T25925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.635242][T25925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.695424][T25925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.825923][T26066] netlink: 'syz.1.6112': attribute type 11 has an invalid length. [ 1096.906807][T26066] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1097.087810][T25925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.105268][T25925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.261873][T25925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.383429][T26085] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6114'. [ 1097.403935][T26083] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6114'. [ 1097.775335][T25925] device hsr_slave_0 entered promiscuous mode [ 1097.831072][T25925] device hsr_slave_1 entered promiscuous mode [ 1097.952345][T25925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1097.966914][T25925] Cannot create hsr debugfs directory [ 1098.100354][T26116] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6122'. [ 1098.264830][T26124] netlink: 'syz.1.6125': attribute type 10 has an invalid length. [ 1098.276091][T26124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.314388][T26124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.352385][T26124] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1100.788895][T26169] tun0: tun_chr_ioctl cmd 2148553947 [ 1100.815406][ T4326] device hsr_slave_0 left promiscuous mode [ 1100.822984][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.830554][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.855358][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.863193][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.871569][ T4326] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1100.883372][ T4326] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1100.906657][ T4326] device bridge_slave_1 left promiscuous mode [ 1100.913844][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.923493][ T4326] device bridge_slave_0 left promiscuous mode [ 1100.930069][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.488232][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 1101.549733][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 1102.008482][T26175] IPv6: Can't replace route, no match found [ 1102.316575][T26198] netlink: 'syz.6.6144': attribute type 1 has an invalid length. [ 1102.346269][T26198] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6144'. [ 1102.390883][T25925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1102.424014][T25925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1102.453064][T26198] netlink: 'syz.6.6144': attribute type 33 has an invalid length. [ 1102.529798][T26198] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6144'. [ 1102.540130][T26198] net_ratelimit: 726 callbacks suppressed [ 1102.540146][T26198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1102.564653][T25925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1102.612297][T25925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1102.865088][T26210] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6148'. [ 1103.106080][T25925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.214367][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.242019][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.298529][T25925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.362785][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.412280][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.460939][T10316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.468141][T10316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.530763][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.574675][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.610223][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.650327][T10316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.657489][T10316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.744685][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.813254][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1103.833933][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1103.872024][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.900697][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.948838][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.968175][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1104.012385][T26247] netlink: 16154 bytes leftover after parsing attributes in process `syz.6.6156'. [ 1104.053311][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.077614][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.145639][T25925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.186398][T25925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1104.226830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.241813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.311262][T26266] netlink: 'syz.0.6158': attribute type 11 has an invalid length. [ 1104.343504][T26266] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6158'. [ 1104.976562][T26278] netlink: 'syz.6.6160': attribute type 21 has an invalid length. [ 1105.333355][T26273] delete_channel: no stack [ 1105.378994][T25925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.404139][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.413634][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.450581][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.480843][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1105.577786][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1105.596521][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1105.652547][T25925] device veth0_vlan entered promiscuous mode [ 1105.744312][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1105.782050][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1105.834136][T25925] device veth1_vlan entered promiscuous mode [ 1106.000833][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1106.034780][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1106.061844][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1106.125314][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1106.162992][T25925] device veth0_macvtap entered promiscuous mode [ 1106.200218][T25925] device veth1_macvtap entered promiscuous mode [ 1106.259324][T25925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.300697][T25925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.315938][T25925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.329692][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1106.340032][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1106.348610][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1106.364025][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1106.382871][T26302] netlink: 'syz.1.6165': attribute type 21 has an invalid length. [ 1106.406331][T25925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.436218][T25925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.447047][T25925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.458977][T25925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.470752][T25925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.488177][T25925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.519500][T25925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.529371][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1106.551885][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1106.613416][T25925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.657198][T25925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.720294][T25925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.735608][T25925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.958464][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.973447][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.006983][T26322] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1107.023526][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1107.088221][T10320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.114238][T10320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.143433][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1107.463307][T26336] netlink: 'syz.1.6173': attribute type 2 has an invalid length. [ 1107.657851][T26345] netlink: 'syz.1.6173': attribute type 10 has an invalid length. [ 1107.788558][T26345] team0: Device hsr_slave_0 failed to register rx_handler [ 1108.944061][T26362] netlink: 'syz.2.6177': attribute type 10 has an invalid length. [ 1109.032205][T26362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1109.136339][T26362] device ipvlan1 entered promiscuous mode [ 1109.293695][T26362] bridge0: port 3(ipvlan1) entered blocking state [ 1109.311814][T26362] bridge0: port 3(ipvlan1) entered disabled state [ 1109.335966][T26362] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1109.623192][T26370] netlink: 'syz.6.6180': attribute type 10 has an invalid length. [ 1109.663316][T26377] sock: sock_set_timeout: `syz.0.6179' (pid 26377) tries to set negative timeout [ 1109.667033][T26370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.732643][T26370] device bridge_slave_1 left promiscuous mode [ 1109.760396][T26370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.798145][T26377] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1109.830703][T26377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1109.891610][T26377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1111.510122][T26426] netlink: 'syz.3.6198': attribute type 1 has an invalid length. [ 1111.531257][T26426] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1111.705423][T26436] netlink: 'syz.0.6201': attribute type 39 has an invalid length. [ 1113.193103][T26477] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6215'. [ 1113.253093][T26480] netlink: 'syz.6.6215': attribute type 10 has an invalid length. [ 1114.490411][T26510] netlink: 'syz.6.6224': attribute type 21 has an invalid length. [ 1114.525076][T26510] IPv6: NLM_F_CREATE should be specified when creating new route [ 1114.569787][T26510] IPv6: Can't replace route, no match found [ 1114.718303][T26517] netlink: 'syz.1.6226': attribute type 29 has an invalid length. [ 1114.754022][T26517] netlink: 'syz.1.6226': attribute type 29 has an invalid length. [ 1115.183192][T26531] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6230'. [ 1115.239350][T26541] netlink: 'syz.2.6232': attribute type 13 has an invalid length. [ 1115.273937][T26541] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1115.313334][T26541] syz_tun: refused to change device tx_queue_len [ 1115.359825][T26541] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1116.084782][T26563] netlink: 'syz.3.6239': attribute type 2 has an invalid length. [ 1116.109691][T26563] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6239'. [ 1117.182843][T26580] netlink: 'syz.6.6245': attribute type 10 has an invalid length. [ 1117.269932][T26580] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6245'. [ 1117.327916][T26580] bridge0: port 2(ipvlan1) entered blocking state [ 1117.359781][T26580] bridge0: port 2(ipvlan1) entered disabled state [ 1117.385133][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1117.385490][T26580] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1117.421203][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1117.429465][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1117.438368][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1117.446693][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1117.454156][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1118.050108][T26586] chnl_net:caif_netlink_parms(): no params data found [ 1118.160017][T26586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.167395][T26586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.233463][T26586] device bridge_slave_0 entered promiscuous mode [ 1118.379310][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.431041][T26586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.469130][T26586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.498490][T26586] device bridge_slave_1 entered promiscuous mode [ 1118.585199][T26612] netlink: 'syz.1.6252': attribute type 25 has an invalid length. [ 1118.599937][T26612] netlink: 'syz.1.6252': attribute type 28 has an invalid length. [ 1118.644567][T26620] sock: sock_set_timeout: `syz.3.6255' (pid 26620) tries to set negative timeout [ 1118.697358][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.741507][T26586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.760118][T26617] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1118.879399][T26586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.015420][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.107702][T26586] team0: Port device team_slave_0 added [ 1119.236771][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.300708][T26586] team0: Port device team_slave_1 added [ 1119.349496][T26632] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1119.383870][T26586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.404729][T26586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.483651][T26586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.495250][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 1119.622386][T26586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.629416][T26586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.709753][T26586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.953335][T26586] device hsr_slave_0 entered promiscuous mode [ 1120.076328][T26586] device hsr_slave_1 entered promiscuous mode [ 1120.100436][T26586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.149108][T26586] Cannot create hsr debugfs directory [ 1120.269020][T26646] netlink: 'syz.2.6263': attribute type 10 has an invalid length. [ 1120.317067][T26646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6263'. [ 1120.344715][T26646] bridge0: port 3(ipvlan1) entered blocking state [ 1120.361610][T26646] bridge0: port 3(ipvlan1) entered disabled state [ 1120.419063][T26646] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1121.097909][T26662] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6269'. [ 1121.225126][T26662] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1121.569677][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 1121.639720][T26673] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6274'. [ 1122.080728][T26684] netlink: 'syz.2.6278': attribute type 10 has an invalid length. [ 1122.088843][T26684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6278'. [ 1122.119066][T26684] bridge0: port 3(ipvlan1) entered blocking state [ 1122.174456][T26684] bridge0: port 3(ipvlan1) entered disabled state [ 1122.214617][T26684] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1122.284658][ T4289] Bluetooth: hci5: unexpected subevent 0x04 length: 150 > 11 [ 1122.578948][T26693] netlink: 'syz.1.6280': attribute type 13 has an invalid length. [ 1122.603751][T26693] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6280'. [ 1122.631213][T26693] syz_tun: refused to change device tx_queue_len [ 1122.655800][T26693] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1122.863309][T26708] netlink: 'syz.3.6283': attribute type 1 has an invalid length. [ 1122.936697][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.943526][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.032430][T26714] netlink: 'syz.1.6285': attribute type 29 has an invalid length. [ 1123.114221][T26714] netlink: 'syz.1.6285': attribute type 29 has an invalid length. [ 1123.197363][T26716] netlink: 'syz.1.6285': attribute type 29 has an invalid length. [ 1123.418322][T26714] netlink: 'syz.1.6285': attribute type 29 has an invalid length. [ 1123.521964][T26586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1123.562149][T26586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1123.594893][T26586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1123.617720][T26586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1123.649981][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 1123.789993][T26736] validate_nla: 1 callbacks suppressed [ 1123.790035][T26736] netlink: 'syz.1.6291': attribute type 10 has an invalid length. [ 1123.814787][T26736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1123.853243][T26736] bridge0: port 3(ipvlan1) entered blocking state [ 1123.867408][T26736] bridge0: port 3(ipvlan1) entered disabled state [ 1123.930828][T26736] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1124.297066][ T9] bond0: (slave wlan1): Releasing backup interface [ 1124.531589][T26586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.577799][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1124.590418][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1124.633296][T26586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.848063][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1124.871182][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1124.946047][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.953290][T10341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.011296][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1125.163243][ T9] device hsr_slave_1 left promiscuous mode [ 1125.172625][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.184039][T26769] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.6301'. [ 1125.216297][T26769] netlink: 'syz.1.6301': attribute type 2 has an invalid length. [ 1125.219846][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.228080][T26769] netlink: 'syz.1.6301': attribute type 1 has an invalid length. [ 1125.239513][T26769] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6301'. [ 1125.281925][ T9] device bridge_slave_1 left promiscuous mode [ 1125.288546][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.377851][ T9] device veth1_macvtap left promiscuous mode [ 1125.406224][ T9] device veth0_macvtap left promiscuous mode [ 1125.436716][ T9] device veth1_vlan left promiscuous mode [ 1125.460088][ T9] device veth0_vlan left promiscuous mode [ 1125.540958][T26778] FAULT_INJECTION: forcing a failure. [ 1125.540958][T26778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.582803][T26778] CPU: 0 PID: 26778 Comm: syz.1.6304 Not tainted syzkaller #0 [ 1125.590348][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1125.600434][T26778] Call Trace: [ 1125.603735][T26778] [ 1125.606695][T26778] dump_stack_lvl+0x188/0x24e [ 1125.611413][T26778] ? show_regs_print_info+0x12/0x12 [ 1125.616650][T26778] ? load_image+0x410/0x410 [ 1125.621186][T26778] ? __lock_acquire+0x7c40/0x7c40 [ 1125.626249][T26778] should_fail_ex+0x390/0x4c0 [ 1125.630970][T26778] _copy_from_user+0x2c/0x170 [ 1125.635681][T26778] __sys_bpf+0x2ea/0x780 [ 1125.639962][T26778] ? bpf_link_show_fdinfo+0x380/0x380 [ 1125.645384][T26778] ? lock_chain_count+0x20/0x20 [ 1125.650288][T26778] __x64_sys_bpf+0x78/0x90 [ 1125.654711][T26778] do_syscall_64+0x4c/0xa0 [ 1125.659129][T26778] ? clear_bhb_loop+0x60/0xb0 [ 1125.663804][T26778] ? clear_bhb_loop+0x60/0xb0 [ 1125.668476][T26778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1125.674368][T26778] RIP: 0033:0x7f7eedb9e0d9 [ 1125.678778][T26778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.698380][T26778] RSP: 002b:00007f7eee9fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1125.706794][T26778] RAX: ffffffffffffffda RBX: 00007f7eede25fa0 RCX: 00007f7eedb9e0d9 [ 1125.714761][T26778] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1125.722732][T26778] RBP: 00007f7eee9fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1125.730696][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.738665][T26778] R13: 00007f7eede26038 R14: 00007f7eede25fa0 R15: 00007ffc4cb5fd08 [ 1125.746645][T26778] [ 1125.769919][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 1126.103573][T26788] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1126.548793][ T9] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1126.980873][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1127.034494][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1127.082406][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1127.130527][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.179772][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.385846][ T9] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1127.442728][ T9] bond0 (unregistering): Released all slaves [ 1127.540173][T26782] netlink: 'syz.3.6305': attribute type 10 has an invalid length. [ 1127.548425][T26782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6305'. [ 1127.557675][T26782] device ipvlan1 entered promiscuous mode [ 1127.565633][T26782] bridge0: port 3(ipvlan1) entered blocking state [ 1127.572567][T26782] bridge0: port 3(ipvlan1) entered disabled state [ 1127.588852][T26782] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1127.604760][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1127.614292][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1127.636682][T10316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.643920][T10316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.665550][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1127.675129][T26786] netlink: 'syz.2.6307': attribute type 13 has an invalid length. [ 1127.683482][T26786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6307'. [ 1127.696134][T26786] syz_tun: refused to change device tx_queue_len [ 1127.703143][T26786] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1127.741474][T26793] IPv6: Can't replace route, no match found [ 1127.764958][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1127.780608][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1127.803922][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1127.838861][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1127.859928][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1127.945720][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1127.961650][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1128.003387][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1128.016659][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1128.049038][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1128.129039][T26809] FAULT_INJECTION: forcing a failure. [ 1128.129039][T26809] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.135610][T26586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1128.142117][T26809] CPU: 1 PID: 26809 Comm: syz.3.6316 Not tainted syzkaller #0 [ 1128.142170][T26809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1128.142181][T26809] Call Trace: [ 1128.170102][T26809] [ 1128.173042][T26809] dump_stack_lvl+0x188/0x24e [ 1128.177751][T26809] ? show_regs_print_info+0x12/0x12 [ 1128.182981][T26809] ? load_image+0x410/0x410 [ 1128.187535][T26809] should_fail_ex+0x390/0x4c0 [ 1128.192242][T26809] should_failslab+0x5/0x20 [ 1128.196768][T26809] slab_pre_alloc_hook+0x59/0x300 [ 1128.201826][T26809] ? __lock_task_sighand+0x25/0x2d0 [ 1128.207169][T26809] kmem_cache_alloc+0x56/0x2f0 [ 1128.211962][T26809] ? __sigqueue_alloc+0x40c/0x520 [ 1128.217023][T26809] ? __sigqueue_alloc+0x32/0x520 [ 1128.221990][T26809] __sigqueue_alloc+0x40c/0x520 [ 1128.226864][T26809] __send_signal_locked+0x22f/0xde0 [ 1128.232070][T26809] ? group_send_sig_info+0x3a/0x250 [ 1128.237272][T26809] group_send_sig_info+0x1f6/0x250 [ 1128.242391][T26809] bpf_send_signal_common+0x2e8/0x420 [ 1128.247762][T26809] ? __set_printk_clr_event+0x70/0x70 [ 1128.253131][T26809] ? __cant_sleep+0x220/0x220 [ 1128.257806][T26809] ? read_lock_is_recursive+0x10/0x10 [ 1128.263182][T26809] ? __lock_acquire+0x7c40/0x7c40 [ 1128.268221][T26809] bpf_send_signal_thread+0x12/0x20 [ 1128.273426][T26809] bpf_prog_ccb44d0431eab910+0x40/0x44 [ 1128.278886][T26809] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1128.284307][T26809] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 1128.289944][T26809] ? sock_gen_cookie+0x60/0x60 [ 1128.294714][T26809] ? sock_gen_cookie+0x60/0x60 [ 1128.299475][T26809] bpf_prog_test_run+0x31c/0x390 [ 1128.304419][T26809] __sys_bpf+0x62b/0x780 [ 1128.308663][T26809] ? bpf_link_show_fdinfo+0x380/0x380 [ 1128.314046][T26809] ? lock_chain_count+0x20/0x20 [ 1128.318907][T26809] __x64_sys_bpf+0x78/0x90 [ 1128.323326][T26809] do_syscall_64+0x4c/0xa0 [ 1128.327742][T26809] ? clear_bhb_loop+0x60/0xb0 [ 1128.332420][T26809] ? clear_bhb_loop+0x60/0xb0 [ 1128.337097][T26809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1128.342991][T26809] RIP: 0033:0x7f9d0af9e0d9 [ 1128.347400][T26809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.367002][T26809] RSP: 002b:00007f9d0bea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1128.375415][T26809] RAX: ffffffffffffffda RBX: 00007f9d0b225fa0 RCX: 00007f9d0af9e0d9 [ 1128.383387][T26809] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1128.391354][T26809] RBP: 00007f9d0bea3090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.399323][T26809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.407292][T26809] R13: 00007f9d0b226038 R14: 00007f9d0b225fa0 R15: 00007ffd9426a7b8 [ 1128.415269][T26809] [ 1128.426304][T26810] netlink: 'syz.6.6312': attribute type 10 has an invalid length. [ 1128.778682][T26819] netlink: 'syz.1.6317': attribute type 3 has an invalid length. [ 1129.251400][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1129.266118][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1129.293218][T26586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.404379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1129.424340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1129.512865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1129.548135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1129.570973][T26586] device veth0_vlan entered promiscuous mode [ 1129.586305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1129.595925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1129.630714][T26586] device veth1_vlan entered promiscuous mode [ 1129.826518][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1129.841718][T10330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1129.892639][T26586] device veth0_macvtap entered promiscuous mode [ 1129.914255][T26586] device veth1_macvtap entered promiscuous mode [ 1130.011435][T26586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.052927][T26586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.094322][T26586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1130.149658][T26586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.177546][T26586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1130.204918][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1130.214967][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1130.235167][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1130.244826][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1130.260007][T26860] netlink: 'syz.6.6331': attribute type 10 has an invalid length. [ 1130.275517][T26860] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6331'. [ 1130.286796][T26860] bridge0: port 2(ipvlan1) entered blocking state [ 1130.303041][T26860] bridge0: port 2(ipvlan1) entered disabled state [ 1130.328142][T26860] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1130.365818][T26586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.385451][T26586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.396089][T26586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.412333][T26586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.426155][T26586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1130.441152][T26586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1130.463420][T26586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1130.482665][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1130.497072][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1130.511122][T26586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.527103][T26586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.538159][T26586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.555345][T26586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.873819][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.894225][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.944076][T10341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1130.975658][ T5496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.985200][ T5496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.027370][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1131.231095][T26886] netlink: 'syz.3.6339': attribute type 3 has an invalid length. [ 1131.239586][T26881] netlink: 'syz.0.6250': attribute type 5 has an invalid length. [ 1131.250547][T26886] netlink: 'syz.3.6339': attribute type 8 has an invalid length. [ 1131.258327][T26886] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.6339'. [ 1131.604495][T26903] device syzkaller0 entered promiscuous mode [ 1131.780396][T10316] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1132.518745][T26908] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1132.717911][T26929] netlink: 'syz.1.6350': attribute type 1 has an invalid length. [ 1132.772820][T26929] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6350'. [ 1133.362306][T26944] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.6353'. [ 1134.227107][T26954] : port 1(ip6gretap0) entered blocking state [ 1134.257940][T26954] : port 1(ip6gretap0) entered disabled state [ 1134.781189][T26954] device ip6gretap0 entered promiscuous mode [ 1134.813773][T26966] netlink: 'syz.2.6361': attribute type 10 has an invalid length. [ 1134.939272][T26966] team0: Device vxcan1 is of different type [ 1137.001179][T27019] FAULT_INJECTION: forcing a failure. [ 1137.001179][T27019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.052060][T27019] CPU: 1 PID: 27019 Comm: syz.2.6379 Not tainted syzkaller #0 [ 1137.059591][T27019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1137.069668][T27019] Call Trace: [ 1137.072961][T27019] [ 1137.075907][T27019] dump_stack_lvl+0x188/0x24e [ 1137.080614][T27019] ? show_regs_print_info+0x12/0x12 [ 1137.085832][T27019] ? load_image+0x410/0x410 [ 1137.090361][T27019] ? __lock_acquire+0x7c40/0x7c40 [ 1137.095415][T27019] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1137.101432][T27019] ? __lock_acquire+0x7c40/0x7c40 [ 1137.106501][T27019] should_fail_ex+0x390/0x4c0 [ 1137.111206][T27019] _copy_from_user+0x2c/0x170 [ 1137.115907][T27019] __ia32_sys_rt_sigreturn+0x21c/0x750 [ 1137.121521][T27019] ? load_gs_index+0x130/0x130 [ 1137.126338][T27019] ? lock_chain_count+0x20/0x20 [ 1137.131219][T27019] ? exit_to_user_mode_loop+0xdc/0x110 [ 1137.136791][T27019] ? lockdep_hardirqs_on+0x94/0x140 [ 1137.142013][T27019] do_syscall_64+0x4c/0xa0 [ 1137.146449][T27019] ? clear_bhb_loop+0x60/0xb0 [ 1137.151140][T27019] ? clear_bhb_loop+0x60/0xb0 [ 1137.155835][T27019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1137.161747][T27019] RIP: 0033:0x7fa68d93f459 [ 1137.166179][T27019] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1137.185810][T27019] RSP: 002b:00007fa68e862a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 1137.194255][T27019] RAX: ffffffffffffffda RBX: 00007fa68dc26090 RCX: 00007fa68d93f459 [ 1137.202249][T27019] RDX: 00007fa68e862a80 RSI: 00007fa68e862bb0 RDI: 0000000000000011 [ 1137.210239][T27019] RBP: 00007fa68e863090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.218226][T27019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.226221][T27019] R13: 00007fa68dc26128 R14: 00007fa68dc26090 R15: 00007ffd8f24deb8 [ 1137.234234][T27019] [ 1139.286701][T27054] netlink: 'syz.0.6389': attribute type 10 has an invalid length. [ 1139.359955][T27054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6389'. [ 1139.441684][T27054] device ipvlan1 entered promiscuous mode [ 1139.553427][T27054] bridge0: port 3(ipvlan1) entered blocking state [ 1139.585168][T27067] FAULT_INJECTION: forcing a failure. [ 1139.585168][T27067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.642231][T27067] CPU: 0 PID: 27067 Comm: syz.2.6393 Not tainted syzkaller #0 [ 1139.645064][T27054] bridge0: port 3(ipvlan1) entered disabled state [ 1139.649738][T27067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1139.649754][T27067] Call Trace: [ 1139.649762][T27067] [ 1139.649769][T27067] dump_stack_lvl+0x188/0x24e [ 1139.649800][T27067] ? show_regs_print_info+0x12/0x12 [ 1139.649821][T27067] ? load_image+0x410/0x410 [ 1139.649841][T27067] ? __lock_acquire+0x7c40/0x7c40 [ 1139.649868][T27067] should_fail_ex+0x390/0x4c0 [ 1139.649894][T27067] fpu__restore_sig+0x257/0x12d0 [ 1139.649954][T27067] ? copy_fpstate_to_sigframe+0xd70/0xd70 [ 1139.649980][T27067] ? __lock_acquire+0x7c40/0x7c40 [ 1139.650014][T27067] ? __might_fault+0xc2/0x120 [ 1139.650030][T27067] ? __might_fault+0xa6/0x120 [ 1139.650052][T27067] __ia32_sys_rt_sigreturn+0x5ef/0x750 [ 1139.650082][T27067] ? load_gs_index+0x130/0x130 [ 1139.650120][T27067] ? lock_chain_count+0x20/0x20 [ 1139.650141][T27067] ? exit_to_user_mode_loop+0xdc/0x110 [ 1139.650170][T27067] ? lockdep_hardirqs_on+0x94/0x140 [ 1139.650192][T27067] do_syscall_64+0x4c/0xa0 [ 1139.650212][T27067] ? clear_bhb_loop+0x60/0xb0 [ 1139.650233][T27067] ? clear_bhb_loop+0x60/0xb0 [ 1139.650254][T27067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.650274][T27067] RIP: 0033:0x7fa68d99e0d9 [ 1139.650291][T27067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.650306][T27067] RSP: 002b:00007fa68e884028 EFLAGS: 00000246 [ 1139.650324][T27067] RAX: 0000000000000000 RBX: 00007fa68dc25fa0 RCX: 00007fa68d99e0d9 [ 1139.650337][T27067] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1139.650349][T27067] RBP: 00007fa68e884090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.650360][T27067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.650371][T27067] R13: 00007fa68dc26038 R14: 00007fa68dc25fa0 R15: 00007ffd8f24deb8 [ 1139.650397][T27067] [ 1140.067219][T27054] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1140.117318][T27069] netlink: 'syz.3.6394': attribute type 21 has an invalid length. [ 1140.146367][T27069] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6394'. [ 1142.248633][T27127] netlink: 'syz.6.6411': attribute type 10 has an invalid length. [ 1142.295831][T27127] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6411'. [ 1142.320988][T27127] bridge0: port 2(ipvlan1) entered blocking state [ 1142.338262][T27127] bridge0: port 2(ipvlan1) entered disabled state [ 1142.376627][T27127] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1143.146966][T27163] netlink: 'syz.2.6422': attribute type 4 has an invalid length. [ 1143.172459][T27163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6422'. [ 1143.837491][T27173] netlink: 'syz.0.6427': attribute type 10 has an invalid length. [ 1143.867609][T27173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1143.910178][T27173] bridge0: port 3(ipvlan1) entered blocking state [ 1143.941359][T27173] bridge0: port 3(ipvlan1) entered disabled state [ 1144.086328][T27173] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1145.730124][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 1146.468191][T27218] netlink: 'syz.6.6441': attribute type 10 has an invalid length. [ 1146.487080][T27218] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6441'. [ 1146.509393][T27218] bridge0: port 2(ipvlan1) entered blocking state [ 1146.549831][T27218] bridge0: port 2(ipvlan1) entered disabled state [ 1146.661720][T27218] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1146.773118][T27216] netlink: 'syz.0.6440': attribute type 1 has an invalid length. [ 1146.832695][T27216] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6440'. [ 1147.930184][T27233] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.6445'. [ 1147.945142][T27234] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.6445'. [ 1148.162727][T27238] netlink: 'syz.2.6446': attribute type 29 has an invalid length. [ 1148.176127][T27238] netlink: 'syz.2.6446': attribute type 29 has an invalid length. [ 1148.185144][T27238] netlink: 'syz.2.6446': attribute type 29 has an invalid length. [ 1148.199005][T27238] netlink: 'syz.2.6446': attribute type 29 has an invalid length. [ 1149.050223][T27243] netlink: 'syz.1.6449': attribute type 13 has an invalid length. [ 1149.509137][T27254] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.6450'. [ 1149.602188][T27254] netlink: zone id is out of range [ 1149.607408][T27254] netlink: zone id is out of range [ 1149.687449][T27254] netlink: zone id is out of range [ 1149.788791][T27254] netlink: zone id is out of range [ 1149.866441][T27254] netlink: zone id is out of range [ 1149.925930][T27254] netlink: zone id is out of range [ 1150.037271][T27254] netlink: zone id is out of range [ 1150.182962][T27254] netlink: zone id is out of range [ 1150.269678][T27254] netlink: zone id is out of range [ 1151.962162][T27280] netlink: 822 bytes leftover after parsing attributes in process `syz.2.6458'. [ 1151.980843][T27281] netlink: 'syz.1.6459': attribute type 10 has an invalid length. [ 1151.989272][T27281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6459'. [ 1152.004602][T27281] bridge0: port 3(ipvlan1) entered blocking state [ 1152.012487][T27281] bridge0: port 3(ipvlan1) entered disabled state [ 1152.028320][T27281] net_ratelimit: 3614 callbacks suppressed [ 1152.028355][T27281] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1152.050017][T27268] delete_channel: no stack [ 1153.973214][T27325] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1153.995241][T27325] netlink: zone id is out of range [ 1154.000502][T27325] netlink: zone id is out of range [ 1154.018028][T27325] netlink: zone id is out of range [ 1154.045965][T27325] netlink: zone id is out of range [ 1154.082595][T27325] netlink: zone id is out of range [ 1154.087790][T27325] netlink: zone id is out of range [ 1154.112539][T27325] netlink: zone id is out of range [ 1154.130413][T27325] netlink: zone id is out of range [ 1154.135754][T27325] netlink: zone id is out of range [ 1154.985283][T27336] netlink: 'syz.2.6474': attribute type 2 has an invalid length. [ 1154.995353][T27336] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.6474'. [ 1156.926914][T27312] €Â0: renamed from pim6reg1 [ 1156.981411][T27336] netlink: 'syz.2.6474': attribute type 21 has an invalid length. [ 1157.463851][T27345] device vcan0 entered promiscuous mode [ 1157.484431][T27345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1159.137931][T27361] netlink: 'syz.2.6482': attribute type 10 has an invalid length. [ 1159.164254][T27361] team0: Device vxcan1 is of different type [ 1159.341437][T27364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6481'. [ 1159.793281][T27386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1159.830197][T27386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1159.849833][T27385] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1160.226076][T27394] netlink: 22 bytes leftover after parsing attributes in process `syz.6.6493'. [ 1160.705686][T27405] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1160.740269][T27405] net_ratelimit: 3614 callbacks suppressed [ 1160.740287][T27405] netlink: zone id is out of range [ 1160.782992][T27405] netlink: zone id is out of range [ 1160.820376][T27405] netlink: zone id is out of range [ 1160.850407][T27405] netlink: zone id is out of range [ 1160.855759][T27405] netlink: zone id is out of range [ 1160.910895][T27405] netlink: zone id is out of range [ 1160.951880][T27405] netlink: zone id is out of range [ 1160.995397][T27405] netlink: zone id is out of range [ 1161.087925][T27405] netlink: zone id is out of range [ 1161.119676][T27405] netlink: zone id is out of range [ 1165.024271][T27450] netlink: 'syz.2.6512': attribute type 3 has an invalid length. [ 1165.036931][T27450] netlink: 'syz.2.6512': attribute type 1 has an invalid length. [ 1165.046204][T27450] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6512'. [ 1165.158612][T27446] device syzkaller0 entered promiscuous mode [ 1165.168243][T27457] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1167.591877][T27468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6526'. [ 1168.372291][T27503] netlink: 'syz.6.6529': attribute type 29 has an invalid length. [ 1168.372920][T27504] netlink: 'syz.6.6529': attribute type 29 has an invalid length. [ 1168.419957][T27503] netlink: 'syz.6.6529': attribute type 29 has an invalid length. [ 1168.446233][T27500] netlink: 'syz.6.6529': attribute type 29 has an invalid length. [ 1169.946492][T27538] netlink: 'syz.2.6541': attribute type 1 has an invalid length. [ 1169.985249][T27538] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.6541'. [ 1170.081264][T27549] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1170.104203][T27548] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1170.140353][T27549] netlink: 'syz.0.6543': attribute type 10 has an invalid length. [ 1170.534758][T27549] team0 (unregistering): Port device team_slave_0 removed [ 1170.686772][T27549] team0 (unregistering): Port device team_slave_1 removed [ 1170.854035][T27555] netlink: 'syz.0.6543': attribute type 25 has an invalid length. [ 1170.900680][T27555] netlink: 'syz.0.6543': attribute type 25 has an invalid length. [ 1170.938120][T27579] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.6553'. [ 1170.962541][T27548] netlink: 'syz.0.6543': attribute type 25 has an invalid length. [ 1170.980847][T27548] netlink: 'syz.0.6543': attribute type 25 has an invalid length. [ 1171.166861][T27584] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6554'. [ 1171.645857][T27597] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1172.162667][T27620] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.6566'. [ 1172.502936][T27627] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6570'. [ 1172.657656][T27637] netlink: 'syz.1.6573': attribute type 41 has an invalid length. [ 1172.685037][T27641] net_ratelimit: 3613 callbacks suppressed [ 1172.685076][T27641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1172.697854][T27641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1173.513776][T27665] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6584'. [ 1175.273967][T27715] netlink: 'syz.0.6600': attribute type 2 has an invalid length. [ 1175.292537][T27715] netlink: 'syz.0.6600': attribute type 8 has an invalid length. [ 1175.363521][T27715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6600'. [ 1177.403504][T27761] netlink: 'syz.2.6616': attribute type 2 has an invalid length. [ 1177.467417][T27761] device 0 entered promiscuous mode [ 1177.688089][T27775] ¥: port 1(team0) entered blocking state [ 1177.710950][T27775] ¥: port 1(team0) entered disabled state [ 1177.761541][T27775] device team0 entered promiscuous mode [ 1177.783444][T27775] device team_slave_0 entered promiscuous mode [ 1177.807200][T27775] device team_slave_1 entered promiscuous mode [ 1179.101787][T27793] netlink: 'syz.2.6623': attribute type 10 has an invalid length. [ 1179.149632][T27793] netlink: 'syz.2.6623': attribute type 19 has an invalid length. [ 1179.242839][T27793] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1180.201880][T27817] sock: sock_set_timeout: `syz.2.6631' (pid 27817) tries to set negative timeout [ 1180.440508][T27827] device veth1_macvtap left promiscuous mode [ 1180.491983][T27828] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1180.575365][T27829] device veth1_macvtap entered promiscuous mode [ 1180.620271][T27829] device macsec0 entered promiscuous mode [ 1180.644422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1183.457126][T27844] device syzkaller0 entered promiscuous mode [ 1183.498369][T27857] netlink: 'syz.6.6644': attribute type 10 has an invalid length. [ 1183.529663][T27857] netlink: 'syz.6.6644': attribute type 19 has an invalid length. [ 1183.537707][T27857] netlink: 14536 bytes leftover after parsing attributes in process `syz.6.6644'. [ 1184.395417][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.401817][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.401089][T27868] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1187.416909][T27871] netlink: 'syz.1.6648': attribute type 10 has an invalid length. [ 1187.434180][T27871] bond0: (slave wlan1): Opening slave failed [ 1187.573210][T27904] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1187.618208][T27904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1187.654662][T27907] netlink: 'syz.1.6660': attribute type 10 has an invalid length. [ 1187.713552][T27907] netlink: 'syz.1.6660': attribute type 19 has an invalid length. [ 1187.746528][T27907] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.6660'. [ 1189.107712][T27943] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1189.167652][T27947] device syzkaller0 entered promiscuous mode [ 1189.235842][T27937] ================================================================== [ 1189.243993][T27937] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1189.251841][T27937] Write of size 56 at addr ffff888045b27c90 by task syz.2.6671/27937 [ 1189.259922][T27937] [ 1189.262258][T27937] CPU: 0 PID: 27937 Comm: syz.2.6671 Not tainted syzkaller #0 [ 1189.269739][T27937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1189.279817][T27937] Call Trace: [ 1189.283122][T27937] [ 1189.286075][T27937] dump_stack_lvl+0x188/0x24e [ 1189.290784][T27937] ? __lock_acquire+0x7c40/0x7c40 [ 1189.295837][T27937] ? show_regs_print_info+0x12/0x12 [ 1189.301071][T27937] ? load_image+0x410/0x410 [ 1189.305596][T27937] ? __virt_addr_valid+0x467/0x540 [ 1189.310728][T27937] ? __bpf_get_stackid+0x6c9/0x920 [ 1189.315859][T27937] print_report+0xa8/0x210 [ 1189.320298][T27937] kasan_report+0x10b/0x140 [ 1189.324827][T27937] ? __bpf_get_stackid+0x6c9/0x920 [ 1189.329956][T27937] kasan_check_range+0x235/0x290 [ 1189.334917][T27937] ? __bpf_get_stackid+0x6c9/0x920 [ 1189.340050][T27937] memcpy+0x3c/0x60 [ 1189.343871][T27937] __bpf_get_stackid+0x6c9/0x920 [ 1189.348828][T27937] bpf_get_stackid_pe+0x33f/0x400 [ 1189.353869][T27937] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1189.359343][T27937] bpf_overflow_handler+0x50b/0x790 [ 1189.364558][T27937] ? bpf_overflow_handler+0xd9/0x790 [ 1189.369859][T27937] ? perf_swevent_overflow+0x230/0x230 [ 1189.375327][T27937] ? ct_irq_exit_irqson+0x113/0x170 [ 1189.380546][T27937] ? perf_trace_buf_update+0xa8/0x230 [ 1189.385928][T27937] ? perf_tp_event+0xc10/0xc10 [ 1189.390710][T27937] ? __perf_event_account_interrupt+0x187/0x280 [ 1189.396964][T27937] __perf_event_overflow+0x457/0x630 [ 1189.402272][T27937] perf_swevent_event+0x315/0x570 [ 1189.407316][T27937] ? perf_tp_event+0xc10/0xc10 [ 1189.412103][T27937] ? perf_tp_event+0xa8e/0xc10 [ 1189.416889][T27937] ___perf_sw_event+0x498/0x6d0 [ 1189.421758][T27937] ? ___perf_sw_event+0x184/0x6d0 [ 1189.426801][T27937] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1189.433250][T27937] ? ct_nmi_exit+0x145/0x1c0 [ 1189.437849][T27937] ? ct_irq_exit_irqson+0x113/0x170 [ 1189.443057][T27937] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1189.449053][T27937] ? lock_chain_count+0x20/0x20 [ 1189.453921][T27937] __perf_sw_event+0x135/0x260 [ 1189.458703][T27937] do_user_addr_fault+0x497/0xb20 [ 1189.463748][T27937] ? trace_hardirqs_off_finish+0x86/0x180 [ 1189.469481][T27937] exc_page_fault+0x60/0x100 [ 1189.474083][T27937] asm_exc_page_fault+0x22/0x30 [ 1189.478944][T27937] RIP: 0010:copy_user_short_string+0xa/0x40 [ 1189.484852][T27937] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 1189.504472][T27937] RSP: 0018:ffffc90004fd7b28 EFLAGS: 00050202 [ 1189.510546][T27937] RAX: ffffffff8415c301 RBX: 0000000000000038 RCX: 0000000000000007 [ 1189.518527][T27937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004fd7bc0 [ 1189.526509][T27937] RBP: 0000000000000000 R08: ffffc90004fd7bf7 R09: 1ffff920009faf7e [ 1189.534493][T27937] R10: dffffc0000000000 R11: fffff520009faf7f R12: 00007fffffffefc8 [ 1189.542476][T27937] R13: 1ffff920009faf74 R14: ffffc90004fd7bc0 R15: 0000000000000000 [ 1189.550458][T27937] ? _copy_from_user+0x21/0x170 [ 1189.555333][T27937] _copy_from_user+0xf4/0x170 [ 1189.560020][T27937] ___sys_sendmsg+0x1c3/0x360 [ 1189.564716][T27937] ? __sys_sendmsg+0x2a0/0x2a0 [ 1189.569522][T27937] __se_sys_sendmsg+0x1c3/0x2b0 [ 1189.574384][T27937] ? ct_nmi_exit+0x145/0x1c0 [ 1189.578987][T27937] ? __x64_sys_sendmsg+0x80/0x80 [ 1189.583952][T27937] ? lockdep_hardirqs_on+0x94/0x140 [ 1189.589160][T27937] do_syscall_64+0x4c/0xa0 [ 1189.593591][T27937] ? clear_bhb_loop+0x60/0xb0 [ 1189.598278][T27937] ? clear_bhb_loop+0x60/0xb0 [ 1189.602970][T27937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.608872][T27937] RIP: 0033:0x7fa68d99e0d9 [ 1189.613293][T27937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.632916][T27937] RSP: 002b:00007fa68e884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.641344][T27937] RAX: ffffffffffffffda RBX: 00007fa68dc25fa0 RCX: 00007fa68d99e0d9 [ 1189.649324][T27937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 1189.657300][T27937] RBP: 00007fa68da35024 R08: 0000000000000000 R09: 0000000000000000 [ 1189.665285][T27937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.673269][T27937] R13: 00007fa68dc26038 R14: 00007fa68dc25fa0 R15: 00007ffd8f24deb8 [ 1189.681265][T27937] [ 1189.684288][T27937] [ 1189.686613][T27937] Allocated by task 27937: [ 1189.691025][T27937] kasan_set_track+0x4b/0x70 [ 1189.695625][T27937] __kasan_kmalloc+0x8e/0xa0 [ 1189.700225][T27937] __kmalloc_node+0xb2/0x240 [ 1189.704832][T27937] bpf_map_area_alloc+0x47/0xe0 [ 1189.709692][T27937] prealloc_elems_and_freelist+0x86/0x1c0 [ 1189.715418][T27937] stack_map_alloc+0x386/0x510 [ 1189.720187][T27937] map_create+0x524/0xff0 [ 1189.724522][T27937] __sys_bpf+0x38b/0x780 [ 1189.728776][T27937] __x64_sys_bpf+0x78/0x90 [ 1189.733201][T27937] do_syscall_64+0x4c/0xa0 [ 1189.737623][T27937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.743524][T27937] [ 1189.745848][T27937] Last potentially related work creation: [ 1189.751559][T27937] kasan_save_stack+0x3a/0x60 [ 1189.756243][T27937] __kasan_record_aux_stack+0xb2/0xc0 [ 1189.761618][T27937] call_rcu+0x14f/0x950 [ 1189.765785][T27937] nf_unregister_net_hooks+0xc7/0x130 [ 1189.771259][T27937] nf_defrag_ipv6_disable+0x91/0xe0 [ 1189.776550][T27937] nf_ct_netns_put+0x371/0x510 [ 1189.781355][T27937] nf_conncount_destroy+0x3d/0x150 [ 1189.786520][T27937] ovs_ct_exit+0x98/0x200 [ 1189.790943][T27937] ovs_exit_net+0xe9/0x7a0 [ 1189.795359][T27937] cleanup_net+0x703/0xba0 [ 1189.799785][T27937] process_one_work+0x8ab/0x1160 [ 1189.804810][T27937] worker_thread+0xaf5/0x12a0 [ 1189.809493][T27937] kthread+0x29d/0x330 [ 1189.813563][T27937] ret_from_fork+0x1f/0x30 [ 1189.818009][T27937] [ 1189.820331][T27937] Second to last potentially related work creation: [ 1189.826913][T27937] kasan_save_stack+0x3a/0x60 [ 1189.831601][T27937] __kasan_record_aux_stack+0xb2/0xc0 [ 1189.836973][T27937] call_rcu+0x14f/0x950 [ 1189.841142][T27937] nf_unregister_net_hooks+0xc7/0x130 [ 1189.846519][T27937] setup_net+0x91b/0xbd0 [ 1189.850787][T27937] copy_net_ns+0x33e/0x5b0 [ 1189.855224][T27937] create_new_namespaces+0x3ce/0x700 [ 1189.860525][T27937] copy_namespaces+0x3ae/0x410 [ 1189.865297][T27937] copy_process+0x19ef/0x40c0 [ 1189.870060][T27937] kernel_clone+0x24b/0x900 [ 1189.874564][T27937] __x64_sys_clone+0x1a7/0x220 [ 1189.879331][T27937] do_syscall_64+0x4c/0xa0 [ 1189.883758][T27937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1189.889662][T27937] [ 1189.891988][T27937] The buggy address belongs to the object at ffff888045b27c80 [ 1189.891988][T27937] which belongs to the cache kmalloc-cg-64 of size 64 [ 1189.906133][T27937] The buggy address is located 16 bytes inside of [ 1189.906133][T27937] 64-byte region [ffff888045b27c80, ffff888045b27cc0) [ 1189.919242][T27937] [ 1189.921577][T27937] The buggy address belongs to the physical page: [ 1189.928005][T27937] page:ffffea000116c9c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45b27 [ 1189.938162][T27937] memcg:ffff88807a11ac01 [ 1189.942406][T27937] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1189.949964][T27937] raw: 00fff00000000200 ffffea0001f60980 dead000000000003 ffff888017442780 [ 1189.958555][T27937] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807a11ac01 [ 1189.967140][T27937] page dumped because: kasan: bad access detected [ 1189.973567][T27937] page_owner tracks the page as allocated [ 1189.979285][T27937] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4279, tgid 4279 (syz-executor), ts 506884263100, free_ts 506883808170 [ 1189.997701][T27937] post_alloc_hook+0x173/0x1a0 [ 1190.002480][T27937] get_page_from_freelist+0x206b/0x2180 [ 1190.008038][T27937] __alloc_pages+0x1ec/0x4f0 [ 1190.012638][T27937] alloc_slab_page+0x5d/0x180 [ 1190.017320][T27937] new_slab+0x87/0x2d0 [ 1190.021398][T27937] ___slab_alloc+0xbc5/0x1240 [ 1190.026079][T27937] __kmem_cache_alloc_node+0x126/0x270 [ 1190.031546][T27937] kmalloc_trace+0x26/0xe0 [ 1190.035974][T27937] alloc_fdtable+0xca/0x2c0 [ 1190.040485][T27937] dup_fd+0x743/0xa20 [ 1190.044473][T27937] copy_files+0x72/0xe0 [ 1190.048634][T27937] copy_process+0x1862/0x40c0 [ 1190.053581][T27937] kernel_clone+0x24b/0x900 [ 1190.058087][T27937] __x64_sys_clone+0x1a7/0x220 [ 1190.062860][T27937] do_syscall_64+0x4c/0xa0 [ 1190.067288][T27937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.073190][T27937] page last free stack trace: [ 1190.077868][T27937] free_unref_page_prepare+0x8e5/0x9e0 [ 1190.083348][T27937] free_unref_page+0x2e/0x3f0 [ 1190.088038][T27937] __vunmap+0x874/0xa40 [ 1190.092203][T27937] __do_replace+0x86d/0x980 [ 1190.096716][T27937] do_ip6t_set_ctl+0xb3d/0xe10 [ 1190.101492][T27937] nf_setsockopt+0x25f/0x280 [ 1190.106091][T27937] __sys_setsockopt+0x2bf/0x3d0 [ 1190.110953][T27937] __x64_sys_setsockopt+0xb1/0xc0 [ 1190.115987][T27937] do_syscall_64+0x4c/0xa0 [ 1190.120411][T27937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.126327][T27937] [ 1190.128652][T27937] Memory state around the buggy address: [ 1190.134284][T27937] ffff888045b27b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1190.142352][T27937] ffff888045b27c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1190.150446][T27937] >ffff888045b27c80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1190.158510][T27937] ^ [ 1190.163886][T27937] ffff888045b27d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1190.171952][T27937] ffff888045b27d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1190.180021][T27937] ================================================================== [ 1190.188099][T27937] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1190.195293][T27937] CPU: 0 PID: 27937 Comm: syz.2.6671 Not tainted syzkaller #0 [ 1190.202758][T27937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1190.212818][T27937] Call Trace: [ 1190.216114][T27937] [ 1190.219052][T27937] dump_stack_lvl+0x188/0x24e [ 1190.223840][T27937] ? memcpy+0x3c/0x60 [ 1190.227839][T27937] ? show_regs_print_info+0x12/0x12 [ 1190.233047][T27937] ? load_image+0x410/0x410 [ 1190.237566][T27937] panic+0x2d3/0x710 [ 1190.241473][T27937] ? bpf_jit_dump+0xd0/0xd0 [ 1190.245981][T27937] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1190.251884][T27937] ? _raw_spin_unlock+0x40/0x40 [ 1190.256741][T27937] ? print_memory_metadata+0x314/0x400 [ 1190.262211][T27937] check_panic_on_warn+0x80/0xa0 [ 1190.267158][T27937] ? __bpf_get_stackid+0x6c9/0x920 [ 1190.272276][T27937] end_report+0x66/0x110 [ 1190.276532][T27937] kasan_report+0x118/0x140 [ 1190.281049][T27937] ? __bpf_get_stackid+0x6c9/0x920 [ 1190.286172][T27937] kasan_check_range+0x235/0x290 [ 1190.291122][T27937] ? __bpf_get_stackid+0x6c9/0x920 [ 1190.296241][T27937] memcpy+0x3c/0x60 [ 1190.300063][T27937] __bpf_get_stackid+0x6c9/0x920 [ 1190.305017][T27937] bpf_get_stackid_pe+0x33f/0x400 [ 1190.310049][T27937] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1190.315520][T27937] bpf_overflow_handler+0x50b/0x790 [ 1190.320730][T27937] ? bpf_overflow_handler+0xd9/0x790 [ 1190.326024][T27937] ? perf_swevent_overflow+0x230/0x230 [ 1190.331485][T27937] ? ct_irq_exit_irqson+0x113/0x170 [ 1190.336688][T27937] ? perf_trace_buf_update+0xa8/0x230 [ 1190.342065][T27937] ? perf_tp_event+0xc10/0xc10 [ 1190.346847][T27937] ? __perf_event_account_interrupt+0x187/0x280 [ 1190.353100][T27937] __perf_event_overflow+0x457/0x630 [ 1190.358402][T27937] perf_swevent_event+0x315/0x570 [ 1190.363530][T27937] ? perf_tp_event+0xc10/0xc10 [ 1190.368304][T27937] ? perf_tp_event+0xa8e/0xc10 [ 1190.373087][T27937] ___perf_sw_event+0x498/0x6d0 [ 1190.377954][T27937] ? ___perf_sw_event+0x184/0x6d0 [ 1190.382990][T27937] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1190.389435][T27937] ? ct_nmi_exit+0x145/0x1c0 [ 1190.394028][T27937] ? ct_irq_exit_irqson+0x113/0x170 [ 1190.399231][T27937] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1190.405223][T27937] ? lock_chain_count+0x20/0x20 [ 1190.410086][T27937] __perf_sw_event+0x135/0x260 [ 1190.414869][T27937] do_user_addr_fault+0x497/0xb20 [ 1190.419907][T27937] ? trace_hardirqs_off_finish+0x86/0x180 [ 1190.425640][T27937] exc_page_fault+0x60/0x100 [ 1190.430236][T27937] asm_exc_page_fault+0x22/0x30 [ 1190.435096][T27937] RIP: 0010:copy_user_short_string+0xa/0x40 [ 1190.440998][T27937] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 1190.460610][T27937] RSP: 0018:ffffc90004fd7b28 EFLAGS: 00050202 [ 1190.466684][T27937] RAX: ffffffff8415c301 RBX: 0000000000000038 RCX: 0000000000000007 [ 1190.474657][T27937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004fd7bc0 [ 1190.482640][T27937] RBP: 0000000000000000 R08: ffffc90004fd7bf7 R09: 1ffff920009faf7e [ 1190.490618][T27937] R10: dffffc0000000000 R11: fffff520009faf7f R12: 00007fffffffefc8 [ 1190.498598][T27937] R13: 1ffff920009faf74 R14: ffffc90004fd7bc0 R15: 0000000000000000 [ 1190.506581][T27937] ? _copy_from_user+0x21/0x170 [ 1190.511449][T27937] _copy_from_user+0xf4/0x170 [ 1190.516133][T27937] ___sys_sendmsg+0x1c3/0x360 [ 1190.520833][T27937] ? __sys_sendmsg+0x2a0/0x2a0 [ 1190.525638][T27937] __se_sys_sendmsg+0x1c3/0x2b0 [ 1190.530499][T27937] ? ct_nmi_exit+0x145/0x1c0 [ 1190.535099][T27937] ? __x64_sys_sendmsg+0x80/0x80 [ 1190.540062][T27937] ? lockdep_hardirqs_on+0x94/0x140 [ 1190.545266][T27937] do_syscall_64+0x4c/0xa0 [ 1190.549725][T27937] ? clear_bhb_loop+0x60/0xb0 [ 1190.554415][T27937] ? clear_bhb_loop+0x60/0xb0 [ 1190.559106][T27937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1190.565014][T27937] RIP: 0033:0x7fa68d99e0d9 [ 1190.569434][T27937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.589051][T27937] RSP: 002b:00007fa68e884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.597472][T27937] RAX: ffffffffffffffda RBX: 00007fa68dc25fa0 RCX: 00007fa68d99e0d9 [ 1190.605450][T27937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 1190.613424][T27937] RBP: 00007fa68da35024 R08: 0000000000000000 R09: 0000000000000000 [ 1190.621402][T27937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1190.629378][T27937] R13: 00007fa68dc26038 R14: 00007fa68dc25fa0 R15: 00007ffd8f24deb8 [ 1190.637363][T27937] [ 1190.640651][T27937] Kernel Offset: disabled [ 1190.644973][T27937] Rebooting in 86400 seconds..