last executing test programs: 4.09597593s ago: executing program 0 (id=3522): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x3586, 0x1, 0x5, 0x2000, 0xffffffffffffffff, 0x81, '\x00', 0x0, r1, 0x4, 0x2, 0x2}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)=@isdn={0x22, 0x10, 0x0, 0x3, 0x8}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1f8}, 0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x881) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35880ca7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f00000013c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0700004008000000ff0000000002000000000100bf0f8296482630a41b5c585626b11c52357d3f725aafb088827b990c02c2f7e3f2c4ec6ddd02916c6f7c1907c459f0e87a9a996ada32e90e6ded5325fe85c6376fa61fc8ca0762a44cb113f490c59e57c853335c2036c13bd01bd21752528d1c5f54f6186ec3e2372846301081688e8608d306855b7e58e66135b284b96bd1980e9f11d7117643b2df55ad5037645fa514a814a056f545f4dae4e7f8e9ff32ccc0da908399c611533b01b969de4f80126c08bf72a82eeb329d78803920214c4ccb03e5b7ae4d8c3a69c7892a39", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000100"/24, @ANYRES32=r4, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r6], 0xfe33) close(r5) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff2) ioctl$TUNGETVNETLE(r5, 0x8004745a, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 4.035625352s ago: executing program 2 (id=3523): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6", &(0x7f0000000900)=""/170, 0x0, &(0x7f0000000a40)="e748551b2d4f9b98b8077e0c7a822411abead558392df0781d1a0b6337211ab609fc68b1890406abd5588fb242ded48f22e7e91a1e23777a2dd34ff9a72c009f569bfae2d7a0d85e392318e3decd7786bb0342ddfed96fec2fbc5bde8b67ddea252fad2d0ed8c6fec4317315962e53", 0x80000001}, 0x38) mkdirat$cgroup(r0, &(0x7f0000000b80)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) r1 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00), 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0xfffffffffffffddf) (async) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0090000008684e08b04000200000000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (async) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 3.886748596s ago: executing program 3 (id=3527): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc066, 0xac5d, 0xffffffff, 0x0, 0xa, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f00000010c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000b00)=0xffffffff) (async) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000b00)=0xffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x58, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.849703988s ago: executing program 2 (id=3528): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0x1, &(0x7f0000000000)="f223fa8fe6fd1cd7306d38f9ed765bb39d58f0c18798d2e6bab1d49371382e83dd176d12e14b5371bf93bd574606c1557eff3a28ffe6391f22c4e1d01c80198ff5fef55e0c23bef205c75131138e"}, 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='rdma.max\x00', 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r2}, 0x18) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0xcb6f81313d9a046, 0x80, 0x78, 0x0, 0xb7, 0x8, 0x0, 0x9, 0x28108, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000240), 0x9}, 0x4, 0x2, 0x2, 0x3, 0x6, 0x800, 0x8, 0x0, 0x10000, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000003c0)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x160, 0x160, 0x7, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x101, [{0x10, 0x2, 0x7}, {0xc, 0x0, 0x7fff}, {0xf, 0x1, 0x5}, {0x2, 0x2, 0x9}, {0xd, 0x5}, {0xb, 0x4, 0x9}, {0x10, 0x1, 0x1}, {0x5, 0x5, 0xb}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3}, @enum={0x9, 0x5, 0x0, 0x6, 0x4, [{0x9, 0x7}, {0x10, 0x1}, {0xb, 0x5}, {0x0, 0xffff}, {0xa, 0xd2}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x1}, {0x1}, {}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}, @struct={0x5, 0x6, 0x0, 0x4, 0x0, 0x7fff, [{0xb, 0x4, 0x74f}, {0x6, 0x0, 0x3}, {0xd, 0x3, 0x5}, {0xb, 0x3, 0xf2}, {0x4, 0x2}, {0x2, 0x4, 0x7}]}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @const={0x4, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f0000001700)=""/11, 0x17f, 0xb, 0x0, 0x6, 0x10000}, 0x28) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000400)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0x0, 0x3, 0x5, 0x50, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000580)=""/4096, 0x55e2332f4bee5425, 0x10, '\x00', 0x0, 0x19, r7, 0x8, &(0x7f0000001780)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000017c0)={0x2, 0x3, 0x3, 0x8}, 0x10, 0x2ffa, r5, 0x1, &(0x7f0000001800)=[r3, r3], &(0x7f0000001840)=[{0x0, 0x4, 0x5, 0x5}], 0x10, 0xf536}, 0x94) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000001940)) r9 = openat$cgroup(r0, &(0x7f0000001980)='syz0\x00', 0x200002, 0x0) close(r9) write$cgroup_int(r4, &(0x7f00000019c0)=0x4, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001a80)=r5, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001ac0)={'bridge0\x00'}) syz_clone(0x24308280, &(0x7f0000001b00)="3189e547a394a33159965a1011b30e95411222146cb49c47d89caa19a792a438f8a00c2009ad57425e2da550563c74ef2520a5f5689dfdbafa66c3485df83c3ea2f88193a73ed6bb08ac31c1223c2c5f7a62cc2d6e148feb16e812c5f9f0ff1f9503f196ecedb5227bbf38aeedde23af60ad9afe4066300d1c9cd6ade018ffa14d8a690e3bf97ea3e96325c544a68546e5d24bb60e55cc65b09b1fcfbd4de9d94b8e1a7199733d8002", 0xa9, &(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40)="b4a2edbdbaf6d03b11252565580160870f3625844898b2f16241ff4895a35757796de5349a0ca9392da92ba80565bb5178943c926c371a4b9c9972e68f4946f0c00c3b1f5197b9116b2edba4207d33ac56b214d5aff00dd558871b2448fbfb05f3b123cb4936460cd7018f753415ecd3f95398eab277a18addfac07ee6682863b57a16c6c3e9") r12 = openat$cgroup_subtree(r0, &(0x7f0000001d00), 0x2, 0x0) recvmsg(r10, &(0x7f00000021c0)={&(0x7f0000001d40)=@alg, 0x80, &(0x7f0000002080)=[{&(0x7f0000001dc0)=""/44, 0x2c}, {&(0x7f0000001e00)=""/243, 0xf3}, {&(0x7f0000001f00)=""/90, 0x5a}, {&(0x7f0000001f80)=""/18, 0x12}, {&(0x7f0000001fc0)=""/152, 0x98}], 0x5, &(0x7f0000002100)=""/187, 0xbb}, 0x2040) openat$cgroup_type(r4, &(0x7f0000002200), 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002240)=r3, 0x4) close(r1) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000023c0)={r5, 0x0, 0xc9, 0x0, &(0x7f0000002280)="f23e5aa1ed71fcaac525a65ae4f56bb088f752030d9b4b98ac455d1ea1d13aded2b154bc8d617d3c95662837a8effd64f67ef1011526fde6f6dcfd8210dd797902a8b4714c7e7b3f1f01dcd58e03fa13d625a109e8cd9fba5fa2733d04fec068cdb5f948b94699777acc303ffc75392aaac0b51e86eee0cf7edfcc82246b4c56ef0ea6a1b02db9fcad1a29ba24db41e645f071aebc24f710b8f32fc8c3c3c05c464ba388fc6627856f6421030f40852fc67297d6a5620e666e643a084d3df76a31af624a40a13a22b4", 0x0, 0x4, 0x0, 0x2f, 0x0, &(0x7f0000002380)="6b8fbe992f8841d857ffad884de069eb527f5a9baef0a4e60facb8bf1de8892f9fd79b919ea8125df04352940ac60a", 0x0, 0x2, 0x0, 0x10001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002880)={r2, 0xe0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000002680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000026c0), &(0x7f0000002700), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000002740)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b40)={r7, 0x20, &(0x7f0000002b00)={&(0x7f0000002940)=""/136, 0x88, 0x0, &(0x7f0000002a00)=""/193, 0xc1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xa, &(0x7f0000002440)=@raw=[@generic={0x81, 0x8, 0x0, 0x0, 0x7fffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f00000024c0)='syzkaller\x00', 0x6, 0x92, &(0x7f0000002500)=""/146, 0x40f00, 0x44, '\x00', r13, @fallback, r12, 0x8, &(0x7f00000028c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002900)={0x4, 0x10, 0x401, 0x7}, 0x10, r14, r8, 0x0, &(0x7f0000002b80)=[r3], &(0x7f0000002bc0)}, 0x94) 3.738329541s ago: executing program 4 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.725802762s ago: executing program 0 (id=3531): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x2, 0x0, 0x0, 0x900}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) socket$kcm(0x29, 0x2, 0x0) 3.611166735s ago: executing program 1 (id=3532): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000f421d5cdff1c00000000009edf80ce000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0), 0x4) (async) socket$kcm(0x11, 0xa, 0x300) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f00000008c0)=@hci={0x1f, 0x300, 0x2}, 0x80, 0x0}, 0x8041) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r5) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') (async) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.610268285s ago: executing program 2 (id=3533): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, 0x0) (async) r1 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000140)) (async) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000380)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) (async) write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) 3.558834987s ago: executing program 3 (id=3534): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, 0x0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2162) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000003c0), &(0x7f0000000440)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) 3.521389648s ago: executing program 4 (id=3535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.44608054s ago: executing program 0 (id=3536): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0xb082, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(0x3) getpid() 3.401652682s ago: executing program 1 (id=3537): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000500)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) socket$kcm(0x22, 0x2, 0x21) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x106) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x2f, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa9c}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff0000}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xc, 0x7, 0x5, 0x50, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x80, 0x19, &(0x7f0000000480)=""/25, 0x40f00, 0x0, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, 0x0, 0x4, &(0x7f0000000540)=[r3, 0xffffffffffffffff, r0, r3, r3], &(0x7f0000000580)=[{0x1, 0x3, 0xb, 0x6}, {0x2, 0x3, 0x4, 0x4}, {0x2, 0x3, 0x2, 0xb}, {0x5, 0x3, 0x10, 0x9}], 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b00)={r7, r0}, 0xc) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x58}, @alu={0x7, 0x0, 0x1, 0x8, 0x8, 0x50, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xf, 0xcb, &(0x7f0000000240)=""/203, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0x7, 0x9}, {0x3, 0x2, 0xb, 0x4}, {0x3, 0x3, 0x3, 0x4}, {0x3, 0x3, 0x7, 0x6}, {0x4, 0x1, 0xc, 0x7}, {0x0, 0x5, 0x4, 0x5}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=0xffffffffffffffff, 0x8, 0x1, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback=r8, r8, 0x37, 0x2000, 0x0, @value=r11, @void, @void, @void, r10}, 0x20) openat$cgroup_devices(r9, &(0x7f0000000b40)='devices.allow\x00', 0x2, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000040)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup=r12, r7, 0x15, 0x0, r7, @void, @value=r7, @void, @void, r10}, 0x20) sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0x6, [@datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x9, 0x6}], 'S'}, @const={0x7, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x61, 0x61, 0x30]}}, &(0x7f0000000d80)=""/149, 0x46, 0x95, 0x1, 0xcbf}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b68277a58b098d1f7744a6bb3b4d8210976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1}, 0x94) 3.369824913s ago: executing program 4 (id=3538): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/239, 0xef}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000640)=""/247, 0xf7}], 0x7, &(0x7f00000007c0)=""/220, 0xdc}, 0x10060) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.15916906s ago: executing program 1 (id=3539): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x27, 0x0, 0xc) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff0000000071109300000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x81000880, 0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x4040081) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) close(0x3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r5, &(0x7f0000001bc0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/2, 0x2}], 0x4, &(0x7f0000001b00)=""/174, 0xae}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xb1, 0x5, 0x2, 0x9, 0x0, 0xfffffffffffffeff, 0x8000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x1}, 0x0, 0xffffffffffffffff, 0x9, 0x1, 0x8000000000010000, 0x1, 0x4, 0x0, 0xff, 0x0, 0xc1}, 0x0, 0xa, r2, 0x0) 2.045239125s ago: executing program 0 (id=3540): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000054000000090000000f00000000000008020000000f00000005008e7276c1facd26ad25115ad363328500020000080000000000000000100000080000000400008a400000000c00000003000000090000000a0000000200000009000000050000000300000000000000002e3e"], &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88}, 0x80, 0x0}, 0x4002) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5af) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, r5, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000500"/28, @ANYRESOCT=r0, @ANYRESDEC=r4], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a705251e6182949a", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18580000070000000008f401d06594732743000000000000010000072064250000000e00202020f056443098489c4dc17b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008e064a14c99a44e02000085000000060000d13dcea1b2f041196406930648c0c02800"/128], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x3, 0x25}, 0x10, 0x70bd, r3, 0x2, &(0x7f00000008c0)=[r6], &(0x7f0000000900)=[{0x2, 0x5, 0x3, 0x1}, {0x1, 0x4, 0x4, 0x5}], 0x10, 0x14000000}, 0x94) r7 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) 870.455442ms ago: executing program 1 (id=3541): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf648000, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 787.082545ms ago: executing program 0 (id=3542): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xd) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000fc0)="140000001c000b63d25a80648c2594e90124fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r7 = socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x8400) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f00000000c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x0) recvmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc2) 785.293075ms ago: executing program 4 (id=3543): socket$kcm(0x10, 0x2, 0x4) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x83, 0x1c, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400", 0x36}], 0x1}, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf4, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x141340, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0xa020000a, 0xfffc, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x4) (async) socket$kcm(0xa, 0x2, 0x0) (async) r2 = getpid() (async) r3 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000002d00)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x25, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xce, 0x2, &(0x7f0000000300)="88b6387315c666606390f17c6f90fa3aa3ec8747ff1757811dc9c6922db36056ddb508c79c9607b42c6b029d53a5f4dab24ae2c7f2262638f7c4a0750682cacfd6eb216f25d96fb329eb20642f45bf46d4e8ce04ad351b3cc951d3f850264b1aaed8e435f6ef465aa99c9c240a4841c730d6ffed5e0fc7370a791bfe0d3b7ecd032a02f9459bd9e14498847e2a7cf285e4b822273aef4500da46f6275219b81239712a6e35e2b6ed05827925a07eed647afdf87ae20fa42070db3c5f02012b22ba2f5680c1790d3aa0610c6cedcb", &(0x7f0000000400)=""/2, 0x3, 0x0, 0x93, 0x19, &(0x7f0000000500)="bc08a5753e735da4ba36f8449fdf481ec7f53dc013d0e9aa53388b5d18663845c365e5ddcfae3d3120fc601ce86149ce76b7caf95db2f99c9b7830de765d36b6f9f1129a0929d0b0026705bc004adf731a717dd720d5296af24d0f30eea91caa8accd795f090383d6161c8ce64910d44022689c6d9cf54810b23c1f8d39706b894efcaf8713646f17f167c5b0f81c38edb0ba1", &(0x7f00000005c0)="8f8e2a8d14ad65fbf2ca38b2c18081be141de8484e8bd00393", 0x6, 0x0, 0xc6}, 0x50) (async) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x1, 0xff, 0x4, 0x7, 0x0, 0xc81d, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x10000}, 0x4820, 0x6f6, 0x5, 0x3, 0x2800000, 0x5, 0x1, 0x0, 0x0, 0x0, 0xf31d}, r2, 0x8, r1, 0x0) (async) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000200)=r6, 0x78) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240), 0x4) (async) sendmsg(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000840)}, 0x804) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x2, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x217f, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$sock(r6, &(0x7f0000003f80)={&(0x7f00000006c0)=@l2={0x1f, 0x32c, @none, 0x8000, 0x1}, 0x80, &(0x7f0000003e40)=[{&(0x7f00000009c0)="d7d98cccc114f2ccdd9c0754e20af65ea3350bedc3b1210041b9cf6d100797bba4f0a5aa3d324f32c675ebf331085f82087b494d3037cb8f18d46a69d98f3c7a9837798e73c8ae7cd996aaa0ce7eb5416d10b035396494cf93c56215617ae13b9c8720d5106a5f8fc9266b432c7ab8f439fa7599aa499f2e455bf009604d894265e228d8b15974fcc04b548020f4b313c7693d57c9e1818fb5de18e8375bb6b2ca285827001573c7837c2c9f0ef25ed39ee6a0d01c72c393979560cc0bf4179f883926be7c4d86e1e3e39135500e734fe3087fe01916a0", 0xd7}, {0x0}, {0x0}, {&(0x7f0000001bc0)="a89ad31798398d38b4daf46227ac3631af4decb8c08bc24353968b7673c2c3b4a5d9fa27c4c7fd53b9cc3a69026963b0defd11207e8f562bfc8d7a372a821b12f93824ac009abf7a30b05faf0ecab620cb1e4aa56428c1b37d867a957d46b48081fad78ddd6c", 0x66}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003e00)='\\', 0x1}], 0x8, &(0x7f0000003ec0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xd49}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x90}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}, @var={0xf, 0x0, 0x0, 0x11, 0xffffffff}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x44}, 0x28) 784.716815ms ago: executing program 2 (id=3544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 756.887006ms ago: executing program 3 (id=3545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 714.505418ms ago: executing program 4 (id=3546): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r2, 0x0, 0x2000) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 599.158331ms ago: executing program 1 (id=3547): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001240)=r1, 0x12) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x420, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x10c002, 0x6f5f}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fbfffffefff, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b7, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1200000002000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000978aaba585718fb665fe03e91def7b06b94ce97171a7a92d71decb129dd67b6c86ad464e4c8617014f85e84a451e9a8308eca3e55b6ea12d7b587927201ae3c6b3747d9d737cc3ee914bd4472fc5f6120eeabdf032a52d84404dabc49e7d4cb124489e72248d3d4c7772daaca2551efc40cf62cf4b8f6c6f492c64467866b82fbb0add863334d40e1a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) 596.862421ms ago: executing program 2 (id=3548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000880), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 551.338953ms ago: executing program 0 (id=3549): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'veth0_to_batadv\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x10, 0x6d2, 0x8, 0x8, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002000)={r4, 0x0, 0x0}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002040)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x80000000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000022c0)={0x11, 0x12, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x10001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0xa37, 0x68, &(0x7f00000006c0)=""/104, 0x41000, 0x41, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002080)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0xffffffffffffffff, r3, r5, r5, r5, r7, r5, r8], &(0x7f0000002200)=[{0x3, 0x2, 0xe, 0xc}, {0x4, 0x5, 0x6, 0xb}, {0x5, 0x1, 0x4, 0xb}, {0x0, 0x5, 0x8, 0x7}, {0x4, 0x5, 0xe, 0x1}, {0x4, 0x5, 0xa, 0x1}, {0x1, 0x3, 0xd, 0x6}, {0x2, 0x4, 0xa, 0x4}], 0x10, 0x4c}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000c80)={&(0x7f0000000380)="4a0eb92d983ffb55fb30f1dc2c1ccb29bddbbe5f24d6e9db24618734b6c431c81dfcc6af31f5b72ad7806e88ef885ac08482cdb8571f43ba1b9ba650052c32a0efa94a821161e9c4a9cc8a67e02e2c025eb0f7ebd32943c7d12f80737feec3a3d970cac1e29108e966c9c58432e7e7b08eb81105158d38794d22692eaa888730bee0d21e44675621a1426cefc72df67acea839c1a61cf89513d7eb74bc503b5036693f09d38667781825c1a600303073a03c2a3e24402ea5ce3910291068fe194fba7c2577f3344682403251cc30bc343ad06f536ca78ee37105fed5886e3f4d3482f03731c0d2e1a2f3e72ca1d327", &(0x7f0000000740)=""/172, &(0x7f0000000800)="e2686c2d88a9fcd2fcbe13c100a6873f2142f4f3adb624cbca89c12d9dfa326e1cde6e78371d1d3fb0fe9026590c0dfe03e209032091cb1bc45b9d0b436b7405f6f5fc009d074c99e25d8b05c9ca52ae4419e3ca2d45223e30798c20751fdc4ff8fcfa6757c6129fcef7462cae9c69f1d27594b138294ed11080932f8b7bd23edb6c9a057ed0812b98757da220189b704e711ff00e29c6a9b853841b0b9bc071dc32d0eb7a6a268d3e0eb158446c944f82392d19e4fe1fbcd0544a2d56c3727b1c3ff1dd6517516a780562d00ccfe5fce9f04122", &(0x7f0000000bc0)="742234dbb171b94637c4e80aabc99cda4583716fab92ecebf82c33b3b0d807d540b8de4b0727672a3c620b012e313ee5abe2c2ab2eff77890ed45eac58c6e75e9b77ba18d2bb80ee92ca407c5f8ab3ed9d2ad3f1b118b7b6144caed103de5cb1d0648bb5dc8004428a199a522ac0cd6ec6c61d7b52ced41e41d851411afb69472d6fb3f6a14c297c6232277cdd181f95d6591fc49bdaa2b71c4b4ef72a5934f32f6af7b522eb0dc1", 0x4, r7}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\b\x00'/18, @ANYRES32=r9, @ANYRES32, @ANYBLOB="00000000000000003500800000f5000000f9ffffffffff39bde3e7d6e39600ea075b76077449654255de0da302d5d14107000000000400004442ea9af0ffe1d3379e0000525249e6a6014ff88d8353fd91820f467569a8ec2c9df4cb"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 542.172923ms ago: executing program 3 (id=3550): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1c, &(0x7f0000000100), 0x120) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000200), 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94a24fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r5 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdaa}, 0xffffffffffffffff, 0x5, r7, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 402.058387ms ago: executing program 1 (id=3551): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00[\x00'/19], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000000120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1}, 0xb082, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000340), 0x4) recvmsg$unix(r4, 0x0, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000002cc0), 0x0, 0x0, 0xfffffffffffffd4a}, 0x20040091) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8004) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f4, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r6, 0x9, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="850f8f90c1ec2207fa930374c6c469bd37b2cb3f481e22c0fd9fda074ef8bff1a9f0679848ff6c41f65cf2bd01c7474e90cc970d2eb2d016c35ab09568ff331eb5181983659b21d6313f5159656b2e4e28696bc0265d0e792e6dce3545c3bb5ca8abb10900000000000000612786588de30c594b6f7044f37e775ef69f1bdc7585573369d3b74800fa256ffd7dc3bb8b8eb976785190690ddc4e94a700faa04d7cde717ea46ed21ca19aaba271d528de8663139bc415aec44b05", @ANYRES32=r12, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="b86a6cf5eb71cdef00000000", @ANYRES32=r12, @ANYRES64=r11], 0x20) 400.130477ms ago: executing program 2 (id=3552): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000900)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/66, 0x42}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f1398ff0000000018150000", @ANYRES32, @ANYBLOB="000000f6b300000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000004000000"], &(0x7f0000000140)='syzkaller\x00', 0xffff, 0x58, &(0x7f0000000180)=""/88, 0x41000, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xb, 0x96, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x1, 0x4, 0x6}, {0x2, 0x5, 0x2}, {0x0, 0x4, 0x7, 0x2}, {0x5, 0x4, 0x0, 0x4}, {0x5, 0x3, 0x8, 0x1}, {0x1, 0x3, 0x9, 0x5}, {0x2, 0x3, 0xa, 0xa}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240440c1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800000000000fffb, 0x81}, 0x1312c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x8, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) 291.136801ms ago: executing program 4 (id=3553): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xc29a, 0x2, 0x40000000000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_clone(0xa43c7506, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r3, 0x4000, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x24, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) (async) r7 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8916, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r3, &(0x7f00000009c0)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f0000000740)=""/1, 0x1}], 0x4, &(0x7f0000000980)=""/31, 0x1f}, 0x102) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r11, &(0x7f0000000000), 0x2a979d) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) kernel console output (not intermixed with test programs): nk: 132 bytes leftover after parsing attributes in process `syz.1.2279'. [ 477.793038][T11652] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2285'. [ 479.629398][T11643] netlink: 'syz.2.2282': attribute type 39 has an invalid length. [ 480.107678][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2293'. [ 480.858636][T11696] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2298'. [ 481.190976][T11700] device syzkaller0 entered promiscuous mode [ 482.561895][T11744] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2311'. [ 484.678765][T11744] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 484.687785][T11744] CPU: 1 PID: 11744 Comm: syz.0.2311 Not tainted syzkaller #0 [ 484.695279][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.705351][T11744] Call Trace: [ 484.708634][T11744] [ 484.711570][T11744] dump_stack_lvl+0x188/0x24e [ 484.716274][T11744] ? show_regs_print_info+0x12/0x12 [ 484.721494][T11744] ? load_image+0x400/0x400 [ 484.726041][T11744] sysfs_warn_dup+0x8a/0xa0 [ 484.730572][T11744] sysfs_do_create_link_sd+0xc0/0x110 [ 484.735976][T11744] device_add+0x7f6/0x1000 [ 484.740429][T11744] wiphy_register+0x1d9f/0x2ac0 [ 484.745325][T11744] ? cfg80211_event_work+0x40/0x40 [ 484.750457][T11744] ? minstrel_ht_alloc+0x894/0xa20 [ 484.755606][T11744] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 484.761706][T11744] ieee80211_register_hw+0x2d00/0x39f0 [ 484.767189][T11744] ? ieee80211_register_hw+0xec1/0x39f0 [ 484.772739][T11744] ? ieee80211_register_hw+0xec1/0x39f0 [ 484.778314][T11744] ? ieee80211_tasklet_handler+0x20/0x20 [ 484.783981][T11744] ? memset+0x1e/0x40 [ 484.787980][T11744] ? __hrtimer_init+0x186/0x270 [ 484.792861][T11744] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 484.797049][T11754] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 484.798600][T11744] hwsim_new_radio_nl+0xafa/0xce0 [ 484.806523][T11754] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2313'. [ 484.811343][T11744] genl_family_rcv_msg_doit+0x22a/0x330 [ 484.811372][T11744] ? end_current_label_crit_section+0x170/0x170 [ 484.811398][T11744] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 484.811426][T11744] ? bpf_lsm_capable+0x5/0x10 [ 484.811448][T11744] ? security_capable+0x85/0xb0 [ 484.811485][T11744] genl_rcv_msg+0x604/0x790 [ 484.811515][T11744] ? genl_bind+0x360/0x360 [ 484.811534][T11744] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 484.811571][T11744] netlink_rcv_skb+0x1fb/0x450 [ 484.811591][T11744] ? genl_bind+0x360/0x360 [ 484.811614][T11744] ? netlink_ack+0x1170/0x1170 [ 484.811645][T11744] ? down_read+0x1a8/0x2d0 [ 484.811668][T11744] genl_rcv+0x24/0x40 [ 484.811685][T11744] netlink_unicast+0x74d/0x8d0 [ 484.811711][T11744] netlink_sendmsg+0x8ad/0xbd0 [ 484.811737][T11744] ? netlink_getsockopt+0x550/0x550 [ 484.811758][T11744] ? aa_sock_msg_perm+0x94/0x150 [ 484.827249][T11754] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2313'. [ 484.832696][T11744] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 484.832721][T11744] ? security_socket_sendmsg+0x7c/0xa0 [ 484.832741][T11744] ? netlink_getsockopt+0x550/0x550 [ 484.832759][T11744] ____sys_sendmsg+0x5be/0x970 [ 484.935185][T11744] ? __sys_sendmsg_sock+0x30/0x30 [ 484.940225][T11744] ? __import_iovec+0x315/0x500 [ 484.945076][T11744] ? import_iovec+0x6f/0xa0 [ 484.949570][T11744] ___sys_sendmsg+0x2a2/0x360 [ 484.954247][T11744] ? try_to_wake_up+0x67c/0x1080 [ 484.959274][T11744] ? __sys_sendmsg+0x290/0x290 [ 484.964056][T11744] __se_sys_sendmsg+0x1bb/0x2a0 [ 484.968895][T11744] ? __x64_sys_sendmsg+0x80/0x80 [ 484.973831][T11744] ? lockdep_hardirqs_on+0x94/0x140 [ 484.979022][T11744] do_syscall_64+0x4c/0xa0 [ 484.983425][T11744] ? clear_bhb_loop+0x60/0xb0 [ 484.988102][T11744] ? clear_bhb_loop+0x60/0xb0 [ 484.992794][T11744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.998682][T11744] RIP: 0033:0x7f9a5579ce59 [ 485.003084][T11744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.022681][T11744] RSP: 002b:00007f9a56610028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.031085][T11744] RAX: ffffffffffffffda RBX: 00007f9a55a16360 RCX: 00007f9a5579ce59 [ 485.039045][T11744] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 485.047005][T11744] RBP: 00007f9a55832d6f R08: 0000000000000000 R09: 0000000000000000 [ 485.054974][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.063106][T11744] R13: 00007f9a55a163f8 R14: 00007f9a55a16360 R15: 00007ffc89b5a9b8 [ 485.071075][T11744] [ 485.082243][T11756] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 485.090064][T11756] netlink: 'syz.2.2314': attribute type 8 has an invalid length. [ 485.099807][T11756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2314'. [ 485.390105][T11765] netlink: 'syz.4.2315': attribute type 10 has an invalid length. [ 485.412312][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.419607][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.441396][T11765] team0: Port device bridge0 removed [ 485.448654][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.455849][T11765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.463362][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.470456][T11765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.500007][T11765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 485.548534][T11775] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2320'. [ 485.568808][T11775] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 485.686340][T11780] device syzkaller0 entered promiscuous mode [ 485.800370][T11783] netlink: 64787 bytes leftover after parsing attributes in process `syz.2.2324'. [ 488.817679][T11827] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2338'. [ 488.896844][T11826] netlink: 'syz.0.2336': attribute type 10 has an invalid length. [ 488.911999][T11826] bridge0: port 4(bond0) entered disabled state [ 488.918973][T11826] bridge0: port 3(team0) entered disabled state [ 488.925960][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.933519][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.970564][T11826] bridge0: port 4(bond0) entered blocking state [ 488.977227][T11826] bridge0: port 4(bond0) entered forwarding state [ 488.984449][T11826] bridge0: port 3(team0) entered blocking state [ 488.991082][T11826] bridge0: port 3(team0) entered forwarding state [ 488.998219][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.005682][T11826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.013558][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.021020][T11826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.036848][T11832] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.2341'. [ 489.094511][T11826] bridge0: port 4(bond0) entered disabled state [ 489.101572][T11826] bridge0: port 3(team0) entered disabled state [ 489.108205][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.115910][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.177824][T11840] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2342'. [ 489.377153][T11849] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2345'. [ 489.667689][T11861] device syzkaller0 entered promiscuous mode [ 490.850244][T11885] netlink: 64787 bytes leftover after parsing attributes in process `syz.0.2355'. [ 492.817864][T11892] netlink: 'syz.1.2357': attribute type 10 has an invalid length. [ 492.967193][T11897] netlink: 'syz.4.2358': attribute type 2 has an invalid length. [ 492.986758][T11897] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 493.017252][T11897] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2358'. [ 493.017720][T11909] netlink: 'syz.3.2362': attribute type 21 has an invalid length. [ 493.454008][T11921] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2366'. [ 493.537794][T11921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.563863][T11924] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 493.581711][T11924] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2366'. [ 493.662182][T11928] device syzkaller0 entered promiscuous mode [ 494.176532][T11937] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2373'. [ 494.208913][T11941] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2374'. [ 497.232172][T11952] pimreg: tun_chr_ioctl cmd 2147767520 [ 497.367052][T11986] netlink: 64851 bytes leftover after parsing attributes in process `syz.4.2386'. [ 497.603411][T11993] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2389'. [ 498.032540][T12012] device syzkaller0 entered promiscuous mode [ 498.971857][T12035] netlink: 64851 bytes leftover after parsing attributes in process `syz.4.2402'. [ 500.408006][T12027] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2400'. [ 500.422476][T12027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.255600][T12060] netlink: 64851 bytes leftover after parsing attributes in process `syz.2.2413'. [ 501.314808][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.321257][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.354902][T12066] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2415'. [ 501.388058][T12069] netlink: 'syz.0.2416': attribute type 19 has an invalid length. [ 501.396873][T12069] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.2416'. [ 501.430575][T12069] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2416'. [ 501.866611][T12072] device syzkaller0 entered promiscuous mode [ 504.626790][T12096] netlink: 'syz.4.2422': attribute type 27 has an invalid length. [ 504.644784][T12113] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2428'. [ 504.969572][T12124] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2433'. [ 505.602883][T12141] netlink: 'syz.3.2440': attribute type 19 has an invalid length. [ 505.654477][T12141] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2440'. [ 505.709700][T12143] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2440'. [ 506.876039][T12166] netlink: 'syz.3.2447': attribute type 3 has an invalid length. [ 506.884992][T12166] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2447'. [ 511.643811][T12207] netlink: 'syz.3.2459': attribute type 10 has an invalid length. [ 511.655254][T12207] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2459'. [ 511.664487][T12207] device hsr0 entered promiscuous mode [ 511.670164][T12207] bridge0: port 3(hsr0) entered blocking state [ 511.691752][T12207] bridge0: port 3(hsr0) entered disabled state [ 511.994349][T12222] device syzkaller0 entered promiscuous mode [ 512.134228][T12233] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 512.154720][T12233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2468'. [ 512.175479][T12233] device ipvlan1 entered promiscuous mode [ 512.206816][T12233] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 515.587932][T12238] netlink: 'syz.4.2470': attribute type 10 has an invalid length. [ 515.609869][T12238] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.617816][T12238] device bridge_slave_1 left promiscuous mode [ 515.626280][T12238] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.649522][T12238] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 515.663140][T12236] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 515.707977][T12236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.718326][T12236] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 515.776929][T12253] netlink: 'syz.2.2475': attribute type 29 has an invalid length. [ 515.788804][T12253] netlink: 'syz.2.2475': attribute type 29 has an invalid length. [ 515.900841][T12253] netlink: 'syz.2.2475': attribute type 29 has an invalid length. [ 516.572035][T12276] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2483'. [ 516.636018][T12276] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 516.649969][T12281] netlink: 64787 bytes leftover after parsing attributes in process `syz.3.2484'. [ 516.672839][T12276] CPU: 0 PID: 12276 Comm: syz.0.2483 Not tainted syzkaller #0 [ 516.680358][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.690440][T12276] Call Trace: [ 516.693741][T12276] [ 516.696679][T12276] dump_stack_lvl+0x188/0x24e [ 516.701382][T12276] ? show_regs_print_info+0x12/0x12 [ 516.706626][T12276] ? load_image+0x400/0x400 [ 516.711163][T12276] sysfs_warn_dup+0x8a/0xa0 [ 516.715699][T12276] sysfs_do_create_link_sd+0xc0/0x110 [ 516.721110][T12276] device_add+0x7f6/0x1000 [ 516.725565][T12276] wiphy_register+0x1d9f/0x2ac0 [ 516.730467][T12276] ? cfg80211_event_work+0x40/0x40 [ 516.735609][T12276] ? minstrel_ht_alloc+0x894/0xa20 [ 516.740755][T12276] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 516.746857][T12276] ieee80211_register_hw+0x2d00/0x39f0 [ 516.752351][T12276] ? ieee80211_register_hw+0xec1/0x39f0 [ 516.757914][T12276] ? ieee80211_register_hw+0xec1/0x39f0 [ 516.763492][T12276] ? ieee80211_tasklet_handler+0x20/0x20 [ 516.769162][T12276] ? memset+0x1e/0x40 [ 516.773170][T12276] ? __hrtimer_init+0x186/0x270 [ 516.778036][T12276] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 516.783779][T12276] hwsim_new_radio_nl+0xafa/0xce0 [ 516.788815][T12276] genl_family_rcv_msg_doit+0x22a/0x330 [ 516.794368][T12276] ? end_current_label_crit_section+0x170/0x170 [ 516.800610][T12276] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 516.806508][T12276] ? bpf_lsm_capable+0x5/0x10 [ 516.811180][T12276] ? security_capable+0x85/0xb0 [ 516.816043][T12276] genl_rcv_msg+0x604/0x790 [ 516.820550][T12276] ? genl_bind+0x360/0x360 [ 516.824961][T12276] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 516.831301][T12276] netlink_rcv_skb+0x1fb/0x450 [ 516.836061][T12276] ? genl_bind+0x360/0x360 [ 516.840471][T12276] ? netlink_ack+0x1170/0x1170 [ 516.845238][T12276] ? down_read+0x1a8/0x2d0 [ 516.849651][T12276] genl_rcv+0x24/0x40 [ 516.853629][T12276] netlink_unicast+0x74d/0x8d0 [ 516.858395][T12276] netlink_sendmsg+0x8ad/0xbd0 [ 516.863162][T12276] ? netlink_getsockopt+0x550/0x550 [ 516.868358][T12276] ? aa_sock_msg_perm+0x94/0x150 [ 516.873294][T12276] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 516.878569][T12276] ? security_socket_sendmsg+0x7c/0xa0 [ 516.884024][T12276] ? netlink_getsockopt+0x550/0x550 [ 516.889218][T12276] ____sys_sendmsg+0x5be/0x970 [ 516.893981][T12276] ? __sys_sendmsg_sock+0x30/0x30 [ 516.898997][T12276] ? __import_iovec+0x315/0x500 [ 516.903848][T12276] ? import_iovec+0x6f/0xa0 [ 516.908347][T12276] ___sys_sendmsg+0x2a2/0x360 [ 516.913019][T12276] ? try_to_wake_up+0x67c/0x1080 [ 516.917954][T12276] ? __sys_sendmsg+0x290/0x290 [ 516.922749][T12276] __se_sys_sendmsg+0x1bb/0x2a0 [ 516.927593][T12276] ? __x64_sys_sendmsg+0x80/0x80 [ 516.932538][T12276] ? lockdep_hardirqs_on+0x94/0x140 [ 516.937733][T12276] do_syscall_64+0x4c/0xa0 [ 516.942141][T12276] ? clear_bhb_loop+0x60/0xb0 [ 516.946818][T12276] ? clear_bhb_loop+0x60/0xb0 [ 516.951493][T12276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.957380][T12276] RIP: 0033:0x7f9a5579ce59 [ 516.961787][T12276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.981401][T12276] RSP: 002b:00007f9a56694028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.989813][T12276] RAX: ffffffffffffffda RBX: 00007f9a55a15fa0 RCX: 00007f9a5579ce59 [ 516.997780][T12276] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 517.005743][T12276] RBP: 00007f9a55832d6f R08: 0000000000000000 R09: 0000000000000000 [ 517.013729][T12276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.021709][T12276] R13: 00007f9a55a16038 R14: 00007f9a55a15fa0 R15: 00007ffc89b5a9b8 [ 517.029703][T12276] [ 517.146413][T12282] device syzkaller0 entered promiscuous mode [ 517.393627][T12301] netlink: 64787 bytes leftover after parsing attributes in process `syz.2.2490'. [ 520.933060][T12337] netlink: 'syz.3.2500': attribute type 29 has an invalid length. [ 520.961496][T12337] netlink: 'syz.3.2500': attribute type 29 has an invalid length. [ 521.046775][T12337] netlink: 'syz.3.2500': attribute type 29 has an invalid length. [ 521.090262][T12344] netlink: 64787 bytes leftover after parsing attributes in process `syz.0.2504'. [ 521.106023][T12345] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2503'. [ 521.227956][T12347] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2501'. [ 521.768138][T12352] netlink: 'syz.3.2505': attribute type 10 has an invalid length. [ 521.794637][T12352] device bridge_slave_1 left promiscuous mode [ 521.800904][T12352] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.817215][T12352] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 522.118216][T12356] netlink: 'syz.1.2507': attribute type 4 has an invalid length. [ 522.135685][T12356] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2507'. [ 522.178425][T12356] batadv0: mtu greater than device maximum [ 522.198317][T12356] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 522.231395][T12357] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2507'. [ 522.503747][T12383] device syzkaller0 entered promiscuous mode [ 522.556044][T12385] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.665923][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'. [ 522.873517][T12400] netlink: 64787 bytes leftover after parsing attributes in process `syz.4.2518'. [ 523.611317][T12416] netlink: 'syz.3.2522': attribute type 2 has an invalid length. [ 523.619979][T12416] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 523.631357][T12416] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.2522'. [ 523.655075][T12416] netlink: 'syz.3.2522': attribute type 2 has an invalid length. [ 523.667028][T12416] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2522'. [ 525.588054][T12409] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2520'. [ 525.708247][T12420] netlink: 'syz.3.2524': attribute type 10 has an invalid length. [ 525.738290][T12420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2524'. [ 525.758395][T12420] device ipvlan1 entered promiscuous mode [ 525.788727][T12420] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 525.826050][T12429] netlink: 'syz.0.2527': attribute type 10 has an invalid length. [ 525.882343][T12429] device batadv_slave_0 entered promiscuous mode [ 525.922543][T12429] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 526.002977][T12434] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2529'. [ 526.348855][T12447] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2534'. [ 528.832028][T12495] netlink: 'syz.0.2544': attribute type 2 has an invalid length. [ 528.876538][T12495] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2544'. [ 528.946211][T12489] netlink: 'syz.0.2544': attribute type 21 has an invalid length. [ 529.009072][T12500] netlink: 'syz.3.2543': attribute type 2 has an invalid length. [ 529.031698][T12500] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2543'. [ 529.374136][T12519] netlink: 'syz.1.2550': attribute type 21 has an invalid length. [ 529.442909][T12519] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2550'. [ 531.725286][T12599] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2574'. [ 531.927588][T12599] netlink: 'syz.2.2574': attribute type 11 has an invalid length. [ 532.011076][T12599] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2574'. [ 532.093920][T12598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.688496][T12637] netlink: 'syz.1.2588': attribute type 21 has an invalid length. [ 533.700858][T12637] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2588'. [ 534.255821][T12650] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2593'. [ 534.564863][T12663] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 534.581520][T12663] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2597'. [ 535.233092][T12677] ÿÿÿÿÿÿÿ: port 1(team0) entered blocking state [ 535.259934][T12677] ÿÿÿÿÿÿÿ: port 1(team0) entered disabled state [ 535.280761][T12677] device team0 entered promiscuous mode [ 535.302283][T12677] device team_slave_0 entered promiscuous mode [ 535.309041][T12677] device team_slave_1 entered promiscuous mode [ 535.336453][T12677] device wlan1 entered promiscuous mode [ 537.229009][T12729] IPv6: Can't replace route, no match found [ 537.372112][T12738] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2621'. [ 541.161541][T12789] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2635'. [ 541.200270][T12791] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2635'. [ 541.691485][T12808] sock: sock_set_timeout: `syz.2.2640' (pid 12808) tries to set negative timeout [ 541.723697][T12811] sctp: [Deprecated]: syz.0.2641 (pid 12811) Use of int in maxseg socket option. [ 541.723697][T12811] Use struct sctp_assoc_value instead [ 541.785203][T12811] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.2641'. [ 545.998054][T12874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2661'. [ 546.120274][T12877] netlink: 'syz.0.2662': attribute type 10 has an invalid length. [ 546.335885][T12877] device geneve1 entered promiscuous mode [ 546.435008][T12877] team0: Port device geneve1 added [ 547.003492][T12902] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2666'. [ 547.166022][T12902] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 547.271408][T12902] CPU: 1 PID: 12902 Comm: syz.1.2666 Not tainted syzkaller #0 [ 547.278928][T12902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.289007][T12902] Call Trace: [ 547.292303][T12902] [ 547.295243][T12902] dump_stack_lvl+0x188/0x24e [ 547.299943][T12902] ? show_regs_print_info+0x12/0x12 [ 547.305161][T12902] ? load_image+0x400/0x400 [ 547.309712][T12902] sysfs_warn_dup+0x8a/0xa0 [ 547.314264][T12902] sysfs_do_create_link_sd+0xc0/0x110 [ 547.319672][T12902] device_add+0x7f6/0x1000 [ 547.324134][T12902] wiphy_register+0x1d9f/0x2ac0 [ 547.329026][T12902] ? cfg80211_event_work+0x40/0x40 [ 547.334161][T12902] ? minstrel_ht_alloc+0x894/0xa20 [ 547.339302][T12902] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 547.345398][T12902] ieee80211_register_hw+0x2d00/0x39f0 [ 547.350883][T12902] ? ieee80211_register_hw+0xec1/0x39f0 [ 547.356448][T12902] ? ieee80211_register_hw+0xec1/0x39f0 [ 547.362027][T12902] ? ieee80211_tasklet_handler+0x20/0x20 [ 547.367692][T12902] ? memset+0x1e/0x40 [ 547.371695][T12902] ? __hrtimer_init+0x186/0x270 [ 547.376579][T12902] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 547.382432][T12902] hwsim_new_radio_nl+0xafa/0xce0 [ 547.387486][T12902] genl_family_rcv_msg_doit+0x22a/0x330 [ 547.393055][T12902] ? end_current_label_crit_section+0x170/0x170 [ 547.399323][T12902] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 547.405249][T12902] ? bpf_lsm_capable+0x5/0x10 [ 547.409940][T12902] ? security_capable+0x85/0xb0 [ 547.414815][T12902] genl_rcv_msg+0x604/0x790 [ 547.419347][T12902] ? genl_bind+0x360/0x360 [ 547.423783][T12902] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 547.430150][T12902] netlink_rcv_skb+0x1fb/0x450 [ 547.434946][T12902] ? genl_bind+0x360/0x360 [ 547.439404][T12902] ? netlink_ack+0x1170/0x1170 [ 547.444219][T12902] ? down_read+0x1a8/0x2d0 [ 547.448669][T12902] genl_rcv+0x24/0x40 [ 547.452673][T12902] netlink_unicast+0x74d/0x8d0 [ 547.457475][T12902] netlink_sendmsg+0x8ad/0xbd0 [ 547.462275][T12902] ? netlink_getsockopt+0x550/0x550 [ 547.467499][T12902] ? aa_sock_msg_perm+0x94/0x150 [ 547.472473][T12902] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 547.477783][T12902] ? security_socket_sendmsg+0x7c/0xa0 [ 547.483270][T12902] ? netlink_getsockopt+0x550/0x550 [ 547.488493][T12902] ____sys_sendmsg+0x5be/0x970 [ 547.493289][T12902] ? __sys_sendmsg_sock+0x30/0x30 [ 547.498325][T12902] ? __import_iovec+0x315/0x500 [ 547.503207][T12902] ? import_iovec+0x6f/0xa0 [ 547.507737][T12902] ___sys_sendmsg+0x2a2/0x360 [ 547.512443][T12902] ? __sys_sendmsg+0x290/0x290 [ 547.517278][T12902] __se_sys_sendmsg+0x1bb/0x2a0 [ 547.522154][T12902] ? __x64_sys_sendmsg+0x80/0x80 [ 547.527129][T12902] ? lockdep_hardirqs_on+0x94/0x140 [ 547.532354][T12902] do_syscall_64+0x4c/0xa0 [ 547.536787][T12902] ? clear_bhb_loop+0x60/0xb0 [ 547.541492][T12902] ? clear_bhb_loop+0x60/0xb0 [ 547.546195][T12902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.552119][T12902] RIP: 0033:0x7fa4e119ce59 [ 547.556604][T12902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.576242][T12902] RSP: 002b:00007fa4e208f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.584686][T12902] RAX: ffffffffffffffda RBX: 00007fa4e1416090 RCX: 00007fa4e119ce59 [ 547.592685][T12902] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 547.600676][T12902] RBP: 00007fa4e1232d6f R08: 0000000000000000 R09: 0000000000000000 [ 547.608665][T12902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.616655][T12902] R13: 00007fa4e1416128 R14: 00007fa4e1416090 R15: 00007fff2f1c4578 [ 547.624662][T12902] [ 551.801486][T13016] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 553.193886][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 553.356948][T13048] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2717'. [ 553.639760][T13054] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2721'. [ 554.056024][T13074] device syzkaller0 entered promiscuous mode [ 554.667103][T13081] netlink: 64787 bytes leftover after parsing attributes in process `syz.3.2730'. [ 557.292253][T13077] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 557.413414][T13098] device syzkaller0 entered promiscuous mode [ 557.736491][T13128] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2742'. [ 559.658607][T13162] device syzkaller0 entered promiscuous mode [ 559.767588][T13165] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2757'. [ 562.632451][T13201] tap0: tun_chr_ioctl cmd 1074025677 [ 562.645834][T13201] tap0: linktype set to 1 [ 562.753979][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.760546][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.776869][T13198] device syzkaller0 entered promiscuous mode [ 563.249189][T13229] netlink: 'syz.0.2775': attribute type 29 has an invalid length. [ 566.160852][T13229] netlink: 'syz.0.2775': attribute type 29 has an invalid length. [ 566.179608][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.200293][T13235] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.323379][T13235] bond0: (slave bridge0): Releasing backup interface [ 566.491364][T13256] netlink: 'syz.2.2781': attribute type 10 has an invalid length. [ 566.499423][T13256] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2781'. [ 566.598299][T13263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2785'. [ 566.695612][T13269] netlink: 'syz.3.2787': attribute type 11 has an invalid length. [ 566.718366][T13269] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2787'. [ 567.097840][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.153240][T13287] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2792'. [ 567.340381][T13291] FAULT_INJECTION: forcing a failure. [ 567.340381][T13291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 567.363721][T13291] CPU: 1 PID: 13291 Comm: syz.2.2795 Not tainted syzkaller #0 [ 567.371223][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.381296][T13291] Call Trace: [ 567.384590][T13291] [ 567.387533][T13291] dump_stack_lvl+0x188/0x24e [ 567.392228][T13291] ? show_regs_print_info+0x12/0x12 [ 567.397443][T13291] ? load_image+0x400/0x400 [ 567.401974][T13291] ? __lock_acquire+0x7d10/0x7d10 [ 567.407124][T13291] should_fail_ex+0x399/0x4d0 [ 567.411885][T13291] _copy_from_user+0x2c/0x170 [ 567.416649][T13291] __sys_bpf+0x2ea/0x780 [ 567.420335][T13297] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 567.420964][T13291] ? bpf_link_show_fdinfo+0x380/0x380 [ 567.421002][T13291] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 567.440229][T13291] __x64_sys_bpf+0x78/0x90 [ 567.444657][T13291] do_syscall_64+0x4c/0xa0 [ 567.449074][T13291] ? clear_bhb_loop+0x60/0xb0 [ 567.453754][T13291] ? clear_bhb_loop+0x60/0xb0 [ 567.458442][T13291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.464329][T13291] RIP: 0033:0x7f29e859ce59 [ 567.468733][T13291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.488331][T13291] RSP: 002b:00007f29e9449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.496735][T13291] RAX: ffffffffffffffda RBX: 00007f29e8815fa0 RCX: 00007f29e859ce59 [ 567.504712][T13291] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 567.512688][T13291] RBP: 00007f29e9449090 R08: 0000000000000000 R09: 0000000000000000 [ 567.520651][T13291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.528611][T13291] R13: 00007f29e8816038 R14: 00007f29e8815fa0 R15: 00007ffd1f783438 [ 567.536586][T13291] [ 567.820993][T13307] TCP: TCP_TX_DELAY enabled [ 568.233720][T13323] netlink: 'syz.3.2808': attribute type 4 has an invalid length. [ 568.262260][T13323] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2808'. [ 568.516473][T13333] FAULT_INJECTION: forcing a failure. [ 568.516473][T13333] name failslab, interval 1, probability 0, space 0, times 1 [ 568.549943][T13333] CPU: 0 PID: 13333 Comm: syz.1.2811 Not tainted syzkaller #0 [ 568.557463][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.567533][T13333] Call Trace: [ 568.570822][T13333] [ 568.573792][T13333] dump_stack_lvl+0x188/0x24e [ 568.578496][T13333] ? show_regs_print_info+0x12/0x12 [ 568.583720][T13333] ? load_image+0x400/0x400 [ 568.588260][T13333] ? ___ratelimit+0x1/0x5f0 [ 568.592813][T13333] should_fail_ex+0x399/0x4d0 [ 568.597512][T13333] should_failslab+0x5/0x20 [ 568.602100][T13333] slab_pre_alloc_hook+0x59/0x310 [ 568.607136][T13333] ? lock_chain_count+0x20/0x20 [ 568.612005][T13333] ? bpf_test_init+0x9f/0x140 [ 568.616704][T13333] __kmem_cache_alloc_node+0x4f/0x260 [ 568.622097][T13333] ? bpf_test_init+0x9f/0x140 [ 568.626797][T13333] __kmalloc+0xa0/0x240 [ 568.631057][T13333] bpf_test_init+0x9f/0x140 [ 568.635580][T13333] bpf_prog_test_run_xdp+0x484/0xf10 [ 568.640967][T13333] ? dev_put+0x80/0x80 [ 568.645071][T13333] ? dev_put+0x80/0x80 [ 568.649160][T13333] bpf_prog_test_run+0x31e/0x390 [ 568.654122][T13333] __sys_bpf+0x62b/0x780 [ 568.658387][T13333] ? bpf_link_show_fdinfo+0x380/0x380 [ 568.663796][T13333] ? lock_chain_count+0x20/0x20 [ 568.668667][T13333] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 568.674677][T13333] __x64_sys_bpf+0x78/0x90 [ 568.679112][T13333] do_syscall_64+0x4c/0xa0 [ 568.683624][T13333] ? clear_bhb_loop+0x60/0xb0 [ 568.688320][T13333] ? clear_bhb_loop+0x60/0xb0 [ 568.693016][T13333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.698935][T13333] RIP: 0033:0x7fa4e119ce59 [ 568.703363][T13333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.722986][T13333] RSP: 002b:00007fa4e20b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.731420][T13333] RAX: ffffffffffffffda RBX: 00007fa4e1415fa0 RCX: 00007fa4e119ce59 [ 568.739414][T13333] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 568.747418][T13333] RBP: 00007fa4e20b0090 R08: 0000000000000000 R09: 0000000000000000 [ 568.755406][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.763398][T13333] R13: 00007fa4e1416038 R14: 00007fa4e1415fa0 R15: 00007fff2f1c4578 [ 568.771393][T13333] [ 569.331760][T13346] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2814'. [ 569.465873][T13351] netlink: 'syz.1.2815': attribute type 4 has an invalid length. [ 569.493034][T13351] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2815'. [ 570.343647][T13386] FAULT_INJECTION: forcing a failure. [ 570.343647][T13386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.385473][T13386] CPU: 1 PID: 13386 Comm: syz.2.2825 Not tainted syzkaller #0 [ 570.392984][T13386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 570.403049][T13386] Call Trace: [ 570.406331][T13386] [ 570.409267][T13386] dump_stack_lvl+0x188/0x24e [ 570.413978][T13386] ? show_regs_print_info+0x12/0x12 [ 570.419201][T13386] ? load_image+0x400/0x400 [ 570.423727][T13386] ? __lock_acquire+0x7d10/0x7d10 [ 570.428773][T13386] ? __virt_addr_valid+0x188/0x540 [ 570.433983][T13386] should_fail_ex+0x399/0x4d0 [ 570.438674][T13386] _copy_from_user+0x2c/0x170 [ 570.443364][T13386] bpf_test_init+0xde/0x140 [ 570.447905][T13386] bpf_prog_test_run_xdp+0x484/0xf10 [ 570.453241][T13386] ? dev_put+0x80/0x80 [ 570.457350][T13386] ? dev_put+0x80/0x80 [ 570.461436][T13386] bpf_prog_test_run+0x31e/0x390 [ 570.466394][T13386] __sys_bpf+0x62b/0x780 [ 570.470669][T13386] ? bpf_link_show_fdinfo+0x380/0x380 [ 570.476085][T13386] ? lock_chain_count+0x20/0x20 [ 570.480965][T13386] __x64_sys_bpf+0x78/0x90 [ 570.485398][T13386] do_syscall_64+0x4c/0xa0 [ 570.489822][T13386] ? clear_bhb_loop+0x60/0xb0 [ 570.494513][T13386] ? clear_bhb_loop+0x60/0xb0 [ 570.499211][T13386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.505118][T13386] RIP: 0033:0x7f29e859ce59 [ 570.509542][T13386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.529163][T13386] RSP: 002b:00007f29e9428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 570.537592][T13386] RAX: ffffffffffffffda RBX: 00007f29e8816090 RCX: 00007f29e859ce59 [ 570.545572][T13386] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 570.553550][T13386] RBP: 00007f29e9428090 R08: 0000000000000000 R09: 0000000000000000 [ 570.561524][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.569496][T13386] R13: 00007f29e8816128 R14: 00007f29e8816090 R15: 00007ffd1f783438 [ 570.577490][T13386] [ 571.905743][T13429] FAULT_INJECTION: forcing a failure. [ 571.905743][T13429] name failslab, interval 1, probability 0, space 0, times 0 [ 571.941374][T13429] CPU: 0 PID: 13429 Comm: syz.1.2839 Not tainted syzkaller #0 [ 571.948893][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 571.958971][T13429] Call Trace: [ 571.962265][T13429] [ 571.965209][T13429] dump_stack_lvl+0x188/0x24e [ 571.969904][T13429] ? show_regs_print_info+0x12/0x12 [ 571.975114][T13429] ? load_image+0x400/0x400 [ 571.979649][T13429] ? __might_sleep+0xd0/0xd0 [ 571.984344][T13429] ? __lock_acquire+0x7d10/0x7d10 [ 571.989393][T13429] should_fail_ex+0x399/0x4d0 [ 571.994086][T13429] should_failslab+0x5/0x20 [ 571.998583][T13429] slab_pre_alloc_hook+0x59/0x310 [ 572.003614][T13429] ? __lock_acquire+0x7d10/0x7d10 [ 572.008646][T13429] ? kvmalloc_node+0x6c/0x180 [ 572.013329][T13429] __kmem_cache_alloc_node+0x4f/0x260 [ 572.018709][T13429] ? schedule_delayed_monitor_work+0x160/0x160 [ 572.024958][T13429] ? kvmalloc_node+0x6c/0x180 [ 572.029636][T13429] __kmalloc_node+0xa0/0x240 [ 572.034224][T13429] kvmalloc_node+0x6c/0x180 [ 572.038724][T13429] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 572.044107][T13429] ? 0xffffffffa0004440 [ 572.048249][T13429] ? text_poke_copy+0x79/0x90 [ 572.052990][T13429] ? 0xffffffffa0004440 [ 572.057136][T13429] ? 0xffffffffa0004440 [ 572.061284][T13429] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 572.067235][T13429] ? 0xffffffffa0004440 [ 572.071380][T13429] ? xdp_convert_md_to_buff+0x330/0x330 [ 572.076941][T13429] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 572.083172][T13429] ? copy_user_enhanced_fast_string+0xa/0x40 [ 572.089143][T13429] ? bpf_test_init+0x119/0x140 [ 572.093899][T13429] ? xdp_convert_md_to_buff+0x5b/0x330 [ 572.099352][T13429] bpf_prog_test_run_xdp+0x736/0xf10 [ 572.104639][T13429] ? dev_put+0x80/0x80 [ 572.108706][T13429] ? dev_put+0x80/0x80 [ 572.112763][T13429] bpf_prog_test_run+0x31e/0x390 [ 572.117693][T13429] __sys_bpf+0x62b/0x780 [ 572.121926][T13429] ? bpf_link_show_fdinfo+0x380/0x380 [ 572.127304][T13429] __x64_sys_bpf+0x78/0x90 [ 572.131800][T13429] do_syscall_64+0x4c/0xa0 [ 572.136209][T13429] ? clear_bhb_loop+0x60/0xb0 [ 572.140879][T13429] ? clear_bhb_loop+0x60/0xb0 [ 572.145547][T13429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.151430][T13429] RIP: 0033:0x7fa4e119ce59 [ 572.155832][T13429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.175425][T13429] RSP: 002b:00007fa4e20b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.183830][T13429] RAX: ffffffffffffffda RBX: 00007fa4e1415fa0 RCX: 00007fa4e119ce59 [ 572.191790][T13429] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 572.199748][T13429] RBP: 00007fa4e20b0090 R08: 0000000000000000 R09: 0000000000000000 [ 572.207704][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.215668][T13429] R13: 00007fa4e1416038 R14: 00007fa4e1415fa0 R15: 00007fff2f1c4578 [ 572.223641][T13429] [ 572.422134][T13443] netlink: 'syz.3.2844': attribute type 2 has an invalid length. [ 572.429921][T13443] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2844'. [ 572.715766][T13453] netlink: 'syz.4.2847': attribute type 2 has an invalid length. [ 573.434588][T13460] netlink: 'syz.1.2850': attribute type 27 has an invalid length. [ 573.600028][T13460] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2850'. [ 574.221334][T13474] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2853'. [ 574.377969][T13486] FAULT_INJECTION: forcing a failure. [ 574.377969][T13486] name failslab, interval 1, probability 0, space 0, times 0 [ 574.433456][T13486] CPU: 0 PID: 13486 Comm: syz.0.2856 Not tainted syzkaller #0 [ 574.440967][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.451042][T13486] Call Trace: [ 574.454339][T13486] [ 574.457279][T13486] dump_stack_lvl+0x188/0x24e [ 574.461979][T13486] ? show_regs_print_info+0x12/0x12 [ 574.467205][T13486] ? load_image+0x400/0x400 [ 574.471733][T13486] ? __might_sleep+0xd0/0xd0 [ 574.476333][T13486] ? __lock_acquire+0x7d10/0x7d10 [ 574.481370][T13486] should_fail_ex+0x399/0x4d0 [ 574.486056][T13486] should_failslab+0x5/0x20 [ 574.490566][T13486] slab_pre_alloc_hook+0x59/0x310 [ 574.495601][T13486] ? kvmalloc_node+0x6c/0x180 [ 574.500291][T13486] __kmem_cache_alloc_node+0x4f/0x260 [ 574.505672][T13486] ? kvmalloc_node+0x6c/0x180 [ 574.510364][T13486] __kmalloc_node+0xa0/0x240 [ 574.514975][T13486] kvmalloc_node+0x6c/0x180 [ 574.519498][T13486] bpf_test_run_xdp_live+0x209/0x1a90 [ 574.524880][T13486] ? 0xffffffffa0004440 [ 574.529040][T13486] ? text_poke_copy+0x79/0x90 [ 574.533721][T13486] ? 0xffffffffa0004440 [ 574.537876][T13486] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 574.543776][T13486] ? 0xffffffffa0004440 [ 574.547936][T13486] ? xdp_convert_md_to_buff+0x330/0x330 [ 574.553519][T13486] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 574.559771][T13486] ? bpf_prog_test_run_xdp+0x6ac/0xf10 [ 574.565238][T13486] bpf_prog_test_run_xdp+0x736/0xf10 [ 574.570540][T13486] ? dev_put+0x80/0x80 [ 574.574625][T13486] ? dev_put+0x80/0x80 [ 574.578696][T13486] bpf_prog_test_run+0x31e/0x390 [ 574.583639][T13486] __sys_bpf+0x62b/0x780 [ 574.587887][T13486] ? bpf_link_show_fdinfo+0x380/0x380 [ 574.593277][T13486] ? lock_chain_count+0x20/0x20 [ 574.598132][T13486] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 574.604130][T13486] __x64_sys_bpf+0x78/0x90 [ 574.608550][T13486] do_syscall_64+0x4c/0xa0 [ 574.612966][T13486] ? clear_bhb_loop+0x60/0xb0 [ 574.617652][T13486] ? clear_bhb_loop+0x60/0xb0 [ 574.622337][T13486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.628239][T13486] RIP: 0033:0x7f9a5579ce59 [ 574.632655][T13486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.652260][T13486] RSP: 002b:00007f9a56694028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 574.660675][T13486] RAX: ffffffffffffffda RBX: 00007f9a55a15fa0 RCX: 00007f9a5579ce59 [ 574.668644][T13486] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 574.676615][T13486] RBP: 00007f9a56694090 R08: 0000000000000000 R09: 0000000000000000 [ 574.684583][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.692580][T13486] R13: 00007f9a55a16038 R14: 00007f9a55a15fa0 R15: 00007ffc89b5a9b8 [ 574.700564][T13486] [ 574.756774][T13492] tipc: Started in network mode [ 574.782230][T13492] tipc: Node identity 9215a268, cluster identity 4711 [ 574.799185][T13492] tipc: Node number set to 2450891368 [ 575.054571][T13509] delete_channel: no stack [ 575.110561][T13509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2863'. [ 575.200226][T13515] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 575.287765][T13516] netlink: 'syz.4.2865': attribute type 3 has an invalid length. [ 575.312181][T13516] netlink: 'syz.4.2865': attribute type 1 has an invalid length. [ 575.351732][T13516] netlink: 21959 bytes leftover after parsing attributes in process `syz.4.2865'. [ 575.406747][T13515] team0 (unregistering): Port device team_slave_0 removed [ 575.448098][T13515] team0 (unregistering): Port device team_slave_1 removed [ 575.521001][T13516] mac80211_hwsim hwsim7 ªªªªªª: renamed from wlan0 [ 576.235490][T13532] FAULT_INJECTION: forcing a failure. [ 576.235490][T13532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.350889][T13532] CPU: 1 PID: 13532 Comm: syz.4.2869 Not tainted syzkaller #0 [ 576.358425][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.368520][T13532] Call Trace: [ 576.371829][T13532] [ 576.374787][T13532] dump_stack_lvl+0x188/0x24e [ 576.379493][T13532] ? show_regs_print_info+0x12/0x12 [ 576.384704][T13532] ? load_image+0x400/0x400 [ 576.389235][T13532] ? __lock_acquire+0x7d10/0x7d10 [ 576.394271][T13532] ? __virt_addr_valid+0x188/0x540 [ 576.399397][T13532] should_fail_ex+0x399/0x4d0 [ 576.404090][T13532] _copy_from_user+0x2c/0x170 [ 576.408775][T13532] bpf_prog_test_run_skb+0x268/0x1890 [ 576.414160][T13532] ? __fget_files+0x28/0x4b0 [ 576.418801][T13532] ? __fget_files+0x28/0x4b0 [ 576.423402][T13532] ? __fget_files+0x43d/0x4b0 [ 576.428136][T13532] ? cpu_online+0xa0/0xa0 [ 576.432515][T13532] bpf_prog_test_run+0x31e/0x390 [ 576.437486][T13532] __sys_bpf+0x62b/0x780 [ 576.441747][T13532] ? bpf_link_show_fdinfo+0x380/0x380 [ 576.447160][T13532] ? lock_chain_count+0x20/0x20 [ 576.452037][T13532] __x64_sys_bpf+0x78/0x90 [ 576.456468][T13532] do_syscall_64+0x4c/0xa0 [ 576.460886][T13532] ? clear_bhb_loop+0x60/0xb0 [ 576.465572][T13532] ? clear_bhb_loop+0x60/0xb0 [ 576.470258][T13532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.476161][T13532] RIP: 0033:0x7fb9ba59ce59 [ 576.480580][T13532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.500189][T13532] RSP: 002b:00007fb9bb530028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.508609][T13532] RAX: ffffffffffffffda RBX: 00007fb9ba815fa0 RCX: 00007fb9ba59ce59 [ 576.516584][T13532] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 576.524556][T13532] RBP: 00007fb9bb530090 R08: 0000000000000000 R09: 0000000000000000 [ 576.532529][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.540500][T13532] R13: 00007fb9ba816038 R14: 00007fb9ba815fa0 R15: 00007ffdec9ba0b8 [ 576.548507][T13532] [ 577.204461][T13541] FAULT_INJECTION: forcing a failure. [ 577.204461][T13541] name failslab, interval 1, probability 0, space 0, times 0 [ 577.241731][T13541] CPU: 0 PID: 13541 Comm: syz.2.2871 Not tainted syzkaller #0 [ 577.249241][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.259308][T13541] Call Trace: [ 577.262607][T13541] [ 577.265542][T13541] dump_stack_lvl+0x188/0x24e [ 577.270240][T13541] ? show_regs_print_info+0x12/0x12 [ 577.275459][T13541] ? load_image+0x400/0x400 [ 577.279990][T13541] ? __might_sleep+0xd0/0xd0 [ 577.284602][T13541] ? __lock_acquire+0x7d10/0x7d10 [ 577.289651][T13541] should_fail_ex+0x399/0x4d0 [ 577.294347][T13541] should_failslab+0x5/0x20 [ 577.298853][T13541] slab_pre_alloc_hook+0x59/0x310 [ 577.303871][T13541] ? page_pool_create+0x6d/0x5c0 [ 577.308877][T13541] __kmem_cache_alloc_node+0x4f/0x260 [ 577.314243][T13541] ? page_pool_create+0x6d/0x5c0 [ 577.319168][T13541] kmalloc_node_trace+0x22/0xe0 [ 577.324033][T13541] page_pool_create+0x6d/0x5c0 [ 577.328802][T13541] bpf_test_run_xdp_live+0x223/0x1a90 [ 577.334182][T13541] ? 0xffffffffa0004440 [ 577.338333][T13541] ? text_poke_copy+0x79/0x90 [ 577.343010][T13541] ? 0xffffffffa0004440 [ 577.347155][T13541] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 577.353134][T13541] ? 0xffffffffa0004440 [ 577.357280][T13541] ? xdp_convert_md_to_buff+0x330/0x330 [ 577.362839][T13541] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 577.369069][T13541] ? copy_user_enhanced_fast_string+0xa/0x40 [ 577.375039][T13541] ? bpf_test_init+0x119/0x140 [ 577.379796][T13541] ? xdp_convert_md_to_buff+0x5b/0x330 [ 577.385251][T13541] bpf_prog_test_run_xdp+0x736/0xf10 [ 577.390541][T13541] ? dev_put+0x80/0x80 [ 577.394614][T13541] ? dev_put+0x80/0x80 [ 577.398678][T13541] bpf_prog_test_run+0x31e/0x390 [ 577.403633][T13541] __sys_bpf+0x62b/0x780 [ 577.407870][T13541] ? bpf_link_show_fdinfo+0x380/0x380 [ 577.413241][T13541] ? lock_chain_count+0x20/0x20 [ 577.418082][T13541] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 577.424060][T13541] __x64_sys_bpf+0x78/0x90 [ 577.428468][T13541] do_syscall_64+0x4c/0xa0 [ 577.432874][T13541] ? clear_bhb_loop+0x60/0xb0 [ 577.437544][T13541] ? clear_bhb_loop+0x60/0xb0 [ 577.442219][T13541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.448102][T13541] RIP: 0033:0x7f29e859ce59 [ 577.452505][T13541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.472105][T13541] RSP: 002b:00007f29e9449028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.480519][T13541] RAX: ffffffffffffffda RBX: 00007f29e8815fa0 RCX: 00007f29e859ce59 [ 577.488478][T13541] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 577.496441][T13541] RBP: 00007f29e9449090 R08: 0000000000000000 R09: 0000000000000000 [ 577.504399][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.512360][T13541] R13: 00007f29e8816038 R14: 00007f29e8815fa0 R15: 00007ffd1f783438 [ 577.520335][T13541] [ 577.702353][T13554] netlink: 'syz.3.2874': attribute type 10 has an invalid length. [ 577.723349][T13554] device netdevsim0 entered promiscuous mode [ 577.744272][T13556] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 577.770540][T13556] netlink: 'syz.4.2872': attribute type 4 has an invalid length. [ 577.894541][T13556] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2872'. [ 578.512871][T13571] netlink: 'syz.1.2879': attribute type 40 has an invalid length. [ 579.249801][T13599] netlink: 64787 bytes leftover after parsing attributes in process `syz.0.2889'. [ 579.444046][T13602] device syzkaller0 entered promiscuous mode [ 579.717048][T13615] delete_channel: no stack [ 579.862004][T13615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2893'. [ 579.905958][T13619] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2894'. [ 582.495235][T13649] netlink: 64787 bytes leftover after parsing attributes in process `syz.4.2901'. [ 584.346044][T13638] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 584.371756][T13659] netlink: 'syz.4.2905': attribute type 10 has an invalid length. [ 584.540143][T13668] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2908'. [ 584.644685][T13668] netlink: 'syz.0.2908': attribute type 3 has an invalid length. [ 584.702746][T13668] netlink: 143044 bytes leftover after parsing attributes in process `syz.0.2908'. [ 584.889579][T13682] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2912'. [ 586.092022][T13700] device syzkaller0 entered promiscuous mode [ 586.127919][T13705] netlink: 'syz.4.2919': attribute type 39 has an invalid length. [ 586.306773][T13728] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2924'. [ 586.325747][T13730] netlink: 64787 bytes leftover after parsing attributes in process `syz.1.2925'. [ 586.447136][T13732] netlink: 3850 bytes leftover after parsing attributes in process `syz.4.2926'. [ 588.756683][T13737] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2927'. [ 589.377140][T13783] netlink: 64787 bytes leftover after parsing attributes in process `syz.3.2938'. [ 591.444096][T13784] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.2939'. [ 591.454580][T13782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2939'. [ 591.463692][T13787] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2939'. [ 591.536290][T13803] device syzkaller0 entered promiscuous mode [ 592.066064][T13828] netlink: 64787 bytes leftover after parsing attributes in process `syz.2.2950'. [ 592.225844][T13834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.244862][T13834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.253679][T13834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.268717][T13834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.278066][T13834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 592.287308][T13834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 594.285574][T13872] netlink: 64787 bytes leftover after parsing attributes in process `syz.3.2962'. [ 594.318432][T13832] chnl_net:caif_netlink_parms(): no params data found [ 594.351540][T13834] Bluetooth: hci3: command 0x0409 tx timeout [ 594.490444][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.497921][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.506468][T13832] device bridge_slave_0 entered promiscuous mode [ 594.530925][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.539012][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.547658][T13832] device bridge_slave_1 entered promiscuous mode [ 594.619539][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.638531][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.706155][T13832] team0: Port device team_slave_0 added [ 594.724978][T13832] team0: Port device team_slave_1 added [ 594.770458][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.783260][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.815020][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.853932][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.860913][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.937100][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.987417][T13899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2970'. [ 595.003920][T11133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.018531][T13899] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.2970'. [ 595.069851][T13894] device syzkaller0 entered promiscuous mode [ 595.108290][T13899] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.2970'. [ 595.141115][T11133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.199329][T13832] device hsr_slave_0 entered promiscuous mode [ 595.206398][T13832] device hsr_slave_1 entered promiscuous mode [ 595.214555][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.222332][T13832] Cannot create hsr debugfs directory [ 595.242719][T11133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.894150][T13915] netlink: 64787 bytes leftover after parsing attributes in process `syz.0.2975'. [ 596.442614][T13834] Bluetooth: hci3: command 0x041b tx timeout [ 597.806873][T11133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.977154][T13951] can: request_module (can-proto-0) failed. [ 598.296369][T11133] tipc: Left network mode [ 598.364120][T13968] netlink: 64787 bytes leftover after parsing attributes in process `syz.0.2988'. [ 598.511535][T13834] Bluetooth: hci3: command 0x040f tx timeout [ 599.205145][T13994] sctp: [Deprecated]: syz.0.2994 (pid 13994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.205145][T13994] Use struct sctp_sack_info instead [ 599.227913][T13998] netlink: 'syz.1.2992': attribute type 21 has an invalid length. [ 599.247713][T13998] netlink: 'syz.1.2992': attribute type 15 has an invalid length. [ 599.330794][T13832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.367534][T13832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 599.630788][T13832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 599.692915][T13832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.036111][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.136253][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.160177][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.207491][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.264202][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.292116][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.310946][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.318129][T11137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.342444][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.529386][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.553289][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.591545][T13834] Bluetooth: hci3: command 0x0419 tx timeout [ 600.610556][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.617730][T11137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.663580][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.690267][T14047] Ÿë: port 1(gretap0) entered blocking state [ 600.709625][T14047] Ÿë: port 1(gretap0) entered disabled state [ 600.746968][T14047] device gretap0 entered promiscuous mode [ 600.771068][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.897323][T14055] netlink: 'syz.1.3007': attribute type 9 has an invalid length. [ 600.973441][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.022963][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.063559][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.077529][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.108157][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.139271][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.188472][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.234188][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.268887][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.352390][T11133] device hsr_slave_0 left promiscuous mode [ 601.359702][T11133] device hsr_slave_1 left promiscuous mode [ 601.951052][T11133] team0 (unregistering): Port device team_slave_1 removed [ 602.002966][T11133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.055742][T11133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.164036][T11133] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 602.414078][T11133] bond0 (unregistering): (slave team0): Releasing backup interface [ 602.452046][T11133] bond0 (unregistering): Released all slaves [ 602.507096][T14068] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3010'. [ 602.516992][T14075] netlink: 'syz.0.3012': attribute type 21 has an invalid length. [ 602.536445][T14075] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3012'. [ 602.710457][T14083] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.3013'. [ 602.735102][T14084] netlink: 'syz.0.3015': attribute type 29 has an invalid length. [ 602.767712][T14084] netlink: 'syz.0.3015': attribute type 29 has an invalid length. [ 602.853315][T14086] netlink: 'syz.0.3015': attribute type 29 has an invalid length. [ 602.921294][T14087] netlink: 'syz.0.3015': attribute type 29 has an invalid length. [ 603.114719][T14097] device syzkaller0 entered promiscuous mode [ 603.238915][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.246744][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.278353][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.020403][T14118] netlink: 'syz.0.3023': attribute type 7 has an invalid length. [ 605.034195][T14123] netlink: 'syz.2.3025': attribute type 39 has an invalid length. [ 605.053929][T14124] netlink: 'syz.2.3025': attribute type 39 has an invalid length. [ 605.196230][T14131] netlink: 'syz.0.3027': attribute type 2 has an invalid length. [ 606.116937][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 606.134329][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 606.155368][T14146] netlink: 'syz.3.3030': attribute type 10 has an invalid length. [ 606.197506][T13832] device veth0_vlan entered promiscuous mode [ 606.243924][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 606.264285][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.301009][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.345380][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.365881][T13832] device veth1_vlan entered promiscuous mode [ 606.436010][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 606.459286][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 606.505033][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.527866][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.550422][T14170] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3039'. [ 606.565907][T13832] device veth0_macvtap entered promiscuous mode [ 606.595507][T13832] device veth1_macvtap entered promiscuous mode [ 606.673874][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.693355][T14176] netlink: 'syz.1.3040': attribute type 3 has an invalid length. [ 606.699084][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.748443][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.751848][T14176] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3040'. [ 606.769481][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 606.780827][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 606.800844][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.876005][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.918658][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.940969][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.956989][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.019069][T14172] device syzkaller0 entered promiscuous mode [ 607.053519][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.069753][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.183188][T13832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.212640][T13832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.253650][T13832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.294528][T13832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.119071][T14196] netlink: 'syz.3.3046': attribute type 10 has an invalid length. [ 610.296565][T14204] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3048'. [ 610.356535][T14204] netlink: 'syz.1.3048': attribute type 1 has an invalid length. [ 610.381383][T14204] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3048'. [ 610.393706][T14212] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3050'. [ 610.395700][T11137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.438339][T11137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.461877][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.484580][T14215] netlink: 'syz.2.3051': attribute type 3 has an invalid length. [ 610.498794][T11137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.511889][T11137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.519488][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.521395][T14215] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3051'. [ 611.590362][T14241] device syzkaller0 entered promiscuous mode [ 611.622841][T14245] bridge0: port 5(ip6gretap0) entered blocking state [ 611.631376][T14245] bridge0: port 5(ip6gretap0) entered disabled state [ 611.655423][T14245] device ip6gretap0 entered promiscuous mode [ 611.748700][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 611.767394][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.776309][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.786401][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 611.796159][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 611.803605][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 613.871728][T13834] Bluetooth: hci1: command 0x0409 tx timeout [ 615.954853][T13834] Bluetooth: hci1: command 0x041b tx timeout [ 617.324648][T11115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.460464][T11115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.861828][T11115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.897611][T14300] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 617.962377][T11115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.031291][T13834] Bluetooth: hci1: command 0x040f tx timeout [ 618.383041][T14250] chnl_net:caif_netlink_parms(): no params data found [ 618.653847][T14337] device syzkaller0 entered promiscuous mode [ 619.375409][T14359] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3084'. [ 620.117976][T13834] Bluetooth: hci1: command 0x0419 tx timeout [ 623.563351][T14359] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 623.571109][T14359] CPU: 0 PID: 14359 Comm: syz.3.3084 Not tainted syzkaller #0 [ 623.578559][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.588609][T14359] Call Trace: [ 623.591879][T14359] [ 623.594794][T14359] dump_stack_lvl+0x188/0x24e [ 623.599472][T14359] ? show_regs_print_info+0x12/0x12 [ 623.604657][T14359] ? load_image+0x400/0x400 [ 623.609158][T14359] sysfs_warn_dup+0x8a/0xa0 [ 623.613665][T14359] sysfs_do_create_link_sd+0xc0/0x110 [ 623.619046][T14359] device_add+0x7f6/0x1000 [ 623.623468][T14359] wiphy_register+0x1d9f/0x2ac0 [ 623.628329][T14359] ? cfg80211_event_work+0x40/0x40 [ 623.633433][T14359] ? minstrel_ht_alloc+0x894/0xa20 [ 623.638546][T14359] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 623.644613][T14359] ieee80211_register_hw+0x2d00/0x39f0 [ 623.650099][T14359] ? ieee80211_register_hw+0xec1/0x39f0 [ 623.655638][T14359] ? ieee80211_register_hw+0xec1/0x39f0 [ 623.661270][T14359] ? ieee80211_tasklet_handler+0x20/0x20 [ 623.666913][T14359] ? memset+0x1e/0x40 [ 623.670891][T14359] ? __hrtimer_init+0x186/0x270 [ 623.675742][T14359] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 623.681471][T14359] hwsim_new_radio_nl+0xafa/0xce0 [ 623.686498][T14359] genl_family_rcv_msg_doit+0x22a/0x330 [ 623.692040][T14359] ? end_current_label_crit_section+0x170/0x170 [ 623.698281][T14359] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 623.704176][T14359] ? bpf_lsm_capable+0x5/0x10 [ 623.708847][T14359] ? security_capable+0x85/0xb0 [ 623.713697][T14359] genl_rcv_msg+0x604/0x790 [ 623.718200][T14359] ? genl_bind+0x360/0x360 [ 623.722606][T14359] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 623.728939][T14359] netlink_rcv_skb+0x1fb/0x450 [ 623.733697][T14359] ? genl_bind+0x360/0x360 [ 623.738109][T14359] ? netlink_ack+0x1170/0x1170 [ 623.742872][T14359] ? down_read+0x1a8/0x2d0 [ 623.747282][T14359] genl_rcv+0x24/0x40 [ 623.751259][T14359] netlink_unicast+0x74d/0x8d0 [ 623.756020][T14359] netlink_sendmsg+0x8ad/0xbd0 [ 623.760780][T14359] ? netlink_getsockopt+0x550/0x550 [ 623.765978][T14359] ? aa_sock_msg_perm+0x94/0x150 [ 623.770905][T14359] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 623.776182][T14359] ? security_socket_sendmsg+0x7c/0xa0 [ 623.781630][T14359] ? netlink_getsockopt+0x550/0x550 [ 623.786819][T14359] ____sys_sendmsg+0x5be/0x970 [ 623.791591][T14359] ? __sys_sendmsg_sock+0x30/0x30 [ 623.796605][T14359] ? __import_iovec+0x315/0x500 [ 623.801458][T14359] ? import_iovec+0x6f/0xa0 [ 623.805951][T14359] ___sys_sendmsg+0x2a2/0x360 [ 623.810620][T14359] ? try_to_wake_up+0x6ae/0x1080 [ 623.815554][T14359] ? __sys_sendmsg+0x290/0x290 [ 623.820345][T14359] __se_sys_sendmsg+0x1bb/0x2a0 [ 623.825191][T14359] ? __x64_sys_sendmsg+0x80/0x80 [ 623.830129][T14359] ? lockdep_hardirqs_on+0x94/0x140 [ 623.835325][T14359] do_syscall_64+0x4c/0xa0 [ 623.839744][T14359] ? clear_bhb_loop+0x60/0xb0 [ 623.844424][T14359] ? clear_bhb_loop+0x60/0xb0 [ 623.849104][T14359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.854998][T14359] RIP: 0033:0x7fb5e2d9ce59 [ 623.860161][T14359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.879785][T14359] RSP: 002b:00007fb5e3caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.888209][T14359] RAX: ffffffffffffffda RBX: 00007fb5e3015fa0 RCX: 00007fb5e2d9ce59 [ 623.896192][T14359] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 623.904167][T14359] RBP: 00007fb5e2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 623.912131][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.920097][T14359] R13: 00007fb5e3016038 R14: 00007fb5e3015fa0 R15: 00007ffc7f87e908 [ 623.928118][T14359] [ 623.944430][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.969124][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.004444][T14250] device bridge_slave_0 entered promiscuous mode [ 624.033590][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.040734][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.062408][T14250] device bridge_slave_1 entered promiscuous mode [ 624.196195][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.205742][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.212190][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.239260][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.428836][T14250] team0: Port device team_slave_0 added [ 624.457580][T14250] team0: Port device team_slave_1 added [ 624.640485][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.658218][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.770286][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.831050][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.881329][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.982746][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.224730][T11115] device wlan1 left promiscuous mode [ 625.248056][T11115] team0: Port device wlan1 removed [ 625.358239][T14412] device syzkaller0 entered promiscuous mode [ 625.545783][T14250] device hsr_slave_0 entered promiscuous mode [ 625.572575][T14250] device hsr_slave_1 entered promiscuous mode [ 625.656554][T14437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3104'. [ 629.529541][T11115] device team0 left promiscuous mode [ 629.535006][T11115] device team_slave_0 left promiscuous mode [ 629.551435][T11115] device team_slave_1 left promiscuous mode [ 629.568301][T11115] ÿÿÿÿÿÿÿ: port 1(team0) entered disabled state [ 629.621989][T11115] device bridge_slave_1 left promiscuous mode [ 629.631560][T11115] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.691735][T11115] device bridge_slave_0 left promiscuous mode [ 629.697958][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.343976][T11115] team0 (unregistering): Port device team_slave_1 removed [ 630.384089][T11115] team0 (unregistering): Port device team_slave_0 removed [ 630.420288][T11115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.458127][T11115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.713671][T11115] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 630.722641][T11115] bond0 (unregistering): Released all slaves [ 630.846237][T14473] netlink: 'syz.0.3113': attribute type 3 has an invalid length. [ 630.854353][T14473] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3113'. [ 632.047033][T14524] device syzkaller0 entered promiscuous mode [ 632.508871][T14564] netlink: 64787 bytes leftover after parsing attributes in process `syz.3.3134'. [ 635.020151][T14588] netlink: 'syz.3.3141': attribute type 21 has an invalid length. [ 635.609754][T14250] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 635.688829][T14611] netlink: 'syz.0.3148': attribute type 10 has an invalid length. [ 635.734971][T14611] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3148'. [ 635.761947][T14614] netlink: 64787 bytes leftover after parsing attributes in process `syz.4.3147'. [ 635.965332][T14621] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3159'. [ 636.216760][T14634] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3150'. [ 636.534579][T14250] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 636.547934][T14250] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 636.593877][T14639] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3151'. [ 636.660302][T14250] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 636.781348][T14647] device syzkaller0 entered promiscuous mode [ 639.014515][T14675] netlink: 'syz.4.3157': attribute type 11 has an invalid length. [ 639.028296][T14675] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3157'. [ 640.850241][T14674] netlink: 'syz.4.3157': attribute type 10 has an invalid length. [ 640.858422][T14674] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3157'. [ 640.922224][T14250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.957380][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 641.014608][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 641.043819][T14682] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3161'. [ 641.080463][T14250] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.098362][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 641.125788][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 641.154617][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.161852][T10080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.219277][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.296546][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 641.339086][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.362382][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.369541][T10080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.480598][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 641.549978][T14691] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3165'. [ 641.571002][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 641.624861][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.684108][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.724306][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 641.753319][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 641.785686][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 641.809249][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 641.838577][T14250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 641.873555][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 641.892047][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 641.900858][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 641.930275][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 642.020756][T14719] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 642.188182][T14722] device syzkaller0 entered promiscuous mode [ 642.316102][T14733] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3174'. [ 643.678356][T14775] netlink: 'syz.3.3182': attribute type 2 has an invalid length. [ 645.534901][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 645.630898][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 645.688406][T14250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.724530][T14787] device syzkaller0 entered promiscuous mode [ 645.738770][T14790] netlink: 'syz.0.3187': attribute type 10 has an invalid length. [ 645.761345][T14790] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3187'. [ 645.811857][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 645.847475][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 645.956117][T14797] IPv6: Can't replace route, no match found [ 646.000553][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 646.012586][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.032966][T14250] device veth0_vlan entered promiscuous mode [ 646.052779][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.066466][T11133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.080493][T14800] netlink: 'syz.3.3189': attribute type 6 has an invalid length. [ 646.099752][T14250] device veth1_vlan entered promiscuous mode [ 646.116709][T14805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3188'. [ 646.251646][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 646.268732][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 646.292821][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 646.331991][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.359335][T14250] device veth0_macvtap entered promiscuous mode [ 646.385142][T14250] device veth1_macvtap entered promiscuous mode [ 646.415876][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.446913][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.471570][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.504625][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.528991][T14250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.564500][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 646.587347][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 646.602863][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.632713][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.691690][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.721410][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.741377][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.766864][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.798822][T14250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.824522][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.850318][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 646.877073][T14250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.886834][T14250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.896585][T14250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.905957][T14250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.927235][T14855] netlink: 'syz.3.3199': attribute type 22 has an invalid length. [ 647.006541][T14836] device syzkaller0 entered promiscuous mode [ 649.870229][T14893] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.3205'. [ 649.889320][T14895] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3205'. [ 649.915340][T14906] netlink: 'syz.3.3208': attribute type 21 has an invalid length. [ 650.007984][T11133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.008004][T11133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.054192][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 650.106627][T10080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.160923][T10080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.183577][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.237616][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3211'. [ 650.282992][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3211'. [ 650.318336][T14917] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3212'. [ 650.362406][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3211'. [ 650.393145][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3211'. [ 650.419461][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3211'. [ 650.447144][T14919] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3211'. [ 650.618541][T14928] netlink: 'syz.2.3054': attribute type 16 has an invalid length. [ 650.736116][T14929] netlink: 'syz.2.3054': attribute type 16 has an invalid length. [ 651.345006][T14938] device syzkaller0 entered promiscuous mode [ 651.570499][T14952] netlink: 'syz.2.3221': attribute type 2 has an invalid length. [ 652.278012][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.288959][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 652.297567][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 652.303984][T14963] netlink: 'syz.3.3224': attribute type 2 has an invalid length. [ 652.312681][T14963] __nla_validate_parse: 61 callbacks suppressed [ 652.312695][T14963] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3224'. [ 652.336291][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 652.355964][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 652.364709][T14964] netlink: 'syz.3.3224': attribute type 2 has an invalid length. [ 652.372738][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.380980][T14964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3224'. [ 654.299071][T14971] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.3226'. [ 654.425811][T14975] netlink: 'syz.4.3227': attribute type 10 has an invalid length. [ 654.433896][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 654.509867][T14975] team0: Device wg1 is of different type [ 654.585031][T14982] netlink: 'syz.1.3228': attribute type 3 has an invalid length. [ 654.610209][T14982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3228'. [ 654.675197][T10080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.823674][T10080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.898835][T14987] netlink: 'syz.4.3232': attribute type 11 has an invalid length. [ 654.938109][T14960] chnl_net:caif_netlink_parms(): no params data found [ 654.967331][T10080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.076884][T10080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.153823][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.178817][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.208064][T14960] device bridge_slave_0 entered promiscuous mode [ 655.219863][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.232124][T14960] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.240507][T14960] device bridge_slave_1 entered promiscuous mode [ 655.373784][T15009] netlink: 'syz.4.3237': attribute type 3 has an invalid length. [ 655.378034][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.415718][T15009] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3237'. [ 655.440044][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.571853][T15014] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3239'. [ 655.618052][T15014] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 655.651770][T15014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.696572][T14960] team0: Port device team_slave_0 added [ 655.797252][T15006] device syzkaller0 entered promiscuous mode [ 655.843304][T15023] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3241'. [ 655.868727][T14960] team0: Port device team_slave_1 added [ 656.150726][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.161907][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.208790][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.282202][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.289225][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.431309][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.511437][T13834] Bluetooth: hci0: command 0x041b tx timeout [ 658.486707][T15052] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3247'. [ 658.601473][T13834] Bluetooth: hci0: command 0x040f tx timeout [ 659.547293][T15072] netlink: 'syz.4.3253': attribute type 30 has an invalid length. [ 659.932466][T15074] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3254'. [ 660.671643][T13834] Bluetooth: hci0: command 0x0419 tx timeout [ 661.583613][T10080] device ip6gretap0 left promiscuous mode [ 661.590365][T10080] bridge0: port 5(ip6gretap0) entered disabled state [ 661.773215][T14960] device hsr_slave_0 entered promiscuous mode [ 661.820954][T14960] device hsr_slave_1 entered promiscuous mode [ 661.833834][T15092] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3260'. [ 661.850495][T14960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.865300][T14960] Cannot create hsr debugfs directory [ 662.210613][T15114] netlink: 'syz.1.3266': attribute type 4 has an invalid length. [ 662.233686][T15114] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3266'. [ 662.448235][T15114] .`: renamed from bond0 [ 663.710643][T15133] device syzkaller0 entered promiscuous mode [ 663.769808][T10080] device gretap0 left promiscuous mode [ 663.776134][T10080] Ÿë: port 1(gretap0) entered disabled state [ 663.957230][T15152] netlink: 'syz.4.3271': attribute type 10 has an invalid length. [ 663.965875][T15152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3271'. [ 664.055956][T15149] netlink: 'syz.2.3272': attribute type 10 has an invalid length. [ 664.211052][T15149] team0: Port device wlan1 added [ 664.411526][T15170] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3275'. [ 665.884304][T15152] netlink: 'syz.4.3271': attribute type 10 has an invalid length. [ 665.897036][T15152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3271'. [ 665.909614][T15147] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3271'. [ 665.988689][T15147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.008115][T15147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.029613][T15147] bond0 (unregistering): Released all slaves [ 666.876999][T15208] netlink: 'syz.1.3284': attribute type 10 has an invalid length. [ 666.934221][T14960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.243432][T14960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.288664][T14960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.308480][T15226] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3285'. [ 667.346990][T14960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 667.380772][T10080] device hsr_slave_0 left promiscuous mode [ 667.390043][T10080] device hsr_slave_1 left promiscuous mode [ 667.430335][T10080] bridge0: port 4(bond0) entered disabled state [ 667.447806][T10080] device team0 left promiscuous mode [ 667.467470][T10080] device team_slave_0 left promiscuous mode [ 667.494497][T10080] device team_slave_1 left promiscuous mode [ 667.521031][T10080] device geneve1 left promiscuous mode [ 667.547833][T10080] bridge0: port 3(team0) entered disabled state [ 667.587435][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.622537][T10080] device bridge_slave_0 left promiscuous mode [ 667.649382][T10080] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.719233][T10080] device veth0_macvtap left promiscuous mode [ 668.152470][T10080] team0 (unregistering): Port device geneve1 removed [ 669.740643][T10080] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 669.750647][T10080] device batadv_slave_0 left promiscuous mode [ 669.790852][T10080] team0 (unregistering): Port device team_slave_1 removed [ 669.831077][T10080] team0 (unregistering): Port device team_slave_0 removed [ 669.870626][T10080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.879652][T10080] device bond_slave_1 left promiscuous mode [ 669.918524][T10080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.927996][T10080] device bond_slave_0 left promiscuous mode [ 670.168997][T10080] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 670.177712][T10080] device dummy0 left promiscuous mode [ 670.224528][T10080] bond0 (unregistering): Released all slaves [ 670.321079][T15233] netlink: 'syz.2.3287': attribute type 4 has an invalid length. [ 670.332735][T15233] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3287'. [ 670.373387][T15233] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 670.407787][T15221] device syzkaller0 entered promiscuous mode [ 672.040042][T15253] netlink: 'syz.4.3296': attribute type 33 has an invalid length. [ 672.049819][T15253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3296'. [ 672.186263][T14960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.275994][T15264] netlink: 'syz.3.3297': attribute type 11 has an invalid length. [ 672.291011][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 672.307861][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.319948][T15264] netlink: 184220 bytes leftover after parsing attributes in process `syz.3.3297'. [ 672.339880][T14960] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.358795][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 672.368595][T15263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.403009][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 672.433825][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.437044][T15274] netlink: 'syz.4.3300': attribute type 1 has an invalid length. [ 672.440995][T11131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.470180][T15274] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3300'. [ 672.491129][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 672.557042][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 672.576336][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 672.611879][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.619064][T11131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.636002][T15283] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3301'. [ 672.667621][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 672.716733][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 672.783503][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 672.811014][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 672.856098][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 672.894389][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 672.928955][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.030914][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.073533][T11139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.136489][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.154544][T11131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.193257][T14960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.567780][T15307] device syzkaller0 entered promiscuous mode [ 673.875658][T15326] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 675.991286][T15326] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 676.024086][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.041878][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.050227][T15343] netlink: 'syz.3.3314': attribute type 10 has an invalid length. [ 676.084113][T14960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.179117][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.189954][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 676.220054][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 676.334221][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 676.352701][T14960] device veth0_vlan entered promiscuous mode [ 676.362617][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 676.388274][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 676.409427][T14960] device veth1_vlan entered promiscuous mode [ 676.459486][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 676.474689][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 676.522881][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 676.538503][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 676.577368][T14960] device veth0_macvtap entered promiscuous mode [ 676.623670][T14960] device veth1_macvtap entered promiscuous mode [ 676.638783][T15378] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3319'. [ 676.659907][T15379] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3319'. [ 676.677067][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.696157][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.710769][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.726322][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.737708][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.768134][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.799264][T14960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.811360][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 676.829449][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 676.841006][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 676.861547][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 676.872796][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.887665][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.927145][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.954675][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.977678][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.000685][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.030900][T14960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.054930][T14960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.079806][T14960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.105452][T14960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.125970][T14960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.141279][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 677.150687][T10080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 677.455224][T11137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.503364][T11137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.538775][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 677.572531][T11141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.580383][T11141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.653904][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 677.950773][T15404] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3324'. [ 678.074379][T15406] device syzkaller0 entered promiscuous mode [ 678.316382][T15418] FAULT_INJECTION: forcing a failure. [ 678.316382][T15418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.391485][T15418] CPU: 0 PID: 15418 Comm: syz.3.3327 Not tainted syzkaller #0 [ 678.399014][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 678.409106][T15418] Call Trace: [ 678.412416][T15418] [ 678.415370][T15418] dump_stack_lvl+0x188/0x24e [ 678.420096][T15418] ? show_regs_print_info+0x12/0x12 [ 678.425339][T15418] ? load_image+0x400/0x400 [ 678.429904][T15418] ? __lock_acquire+0x7d10/0x7d10 [ 678.435002][T15418] should_fail_ex+0x399/0x4d0 [ 678.439736][T15418] _copy_from_user+0x2c/0x170 [ 678.444568][T15418] __sys_bpf+0x2ea/0x780 [ 678.448955][T15418] ? bpf_link_show_fdinfo+0x380/0x380 [ 678.454421][T15418] ? lock_chain_count+0x20/0x20 [ 678.459346][T15418] __x64_sys_bpf+0x78/0x90 [ 678.463814][T15418] do_syscall_64+0x4c/0xa0 [ 678.468265][T15418] ? clear_bhb_loop+0x60/0xb0 [ 678.472981][T15418] ? clear_bhb_loop+0x60/0xb0 [ 678.477698][T15418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.483615][T15418] RIP: 0033:0x7fb5e2d9ce59 [ 678.488042][T15418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.507654][T15418] RSP: 002b:00007fb5e3caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.516079][T15418] RAX: ffffffffffffffda RBX: 00007fb5e3015fa0 RCX: 00007fb5e2d9ce59 [ 678.524056][T15418] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 678.532032][T15418] RBP: 00007fb5e3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 678.540003][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.547985][T15418] R13: 00007fb5e3016038 R14: 00007fb5e3015fa0 R15: 00007ffc7f87e908 [ 678.556008][T15418] [ 679.236580][T13834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 679.254022][T13834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 679.280135][T13834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 679.317401][T13834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 679.333890][T13834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 679.341642][T13834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 681.107521][T15467] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3336'. [ 681.305853][T10080] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.392803][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 681.502532][T10080] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.639889][T10080] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.856735][T10080] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.035115][T15432] chnl_net:caif_netlink_parms(): no params data found [ 682.816695][T15518] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3346'. [ 682.917621][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.930514][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.949213][T15432] device bridge_slave_0 entered promiscuous mode [ 682.965543][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.981564][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.000182][T15432] device bridge_slave_1 entered promiscuous mode [ 683.039493][T15524] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3348'. [ 683.073533][T10080] device 0 left promiscuous mode [ 683.166482][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.191071][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.405224][T15534] FAULT_INJECTION: forcing a failure. [ 683.405224][T15534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.450513][T15534] CPU: 1 PID: 15534 Comm: syz.0.3351 Not tainted syzkaller #0 [ 683.458047][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 683.468142][T15534] Call Trace: [ 683.471458][T15534] [ 683.474414][T15534] dump_stack_lvl+0x188/0x24e [ 683.479142][T15534] ? show_regs_print_info+0x12/0x12 [ 683.484386][T15534] ? load_image+0x400/0x400 [ 683.488957][T15534] ? __lock_acquire+0x7d10/0x7d10 [ 683.494022][T15534] ? __kmem_cache_alloc_node+0x140/0x260 [ 683.499708][T15534] should_fail_ex+0x399/0x4d0 [ 683.503502][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 683.504406][T15534] _copy_from_user+0x2c/0x170 [ 683.515085][T15534] ___bpf_copy_key+0xb0/0x100 [ 683.519817][T15534] map_delete_elem+0x1f8/0x570 [ 683.524616][T15534] ? bpf_lsm_bpf+0x5/0x10 [ 683.528991][T15534] __sys_bpf+0x51e/0x780 [ 683.533283][T15534] ? bpf_link_show_fdinfo+0x380/0x380 [ 683.538741][T15534] ? lock_chain_count+0x20/0x20 [ 683.543671][T15534] __x64_sys_bpf+0x78/0x90 [ 683.548137][T15534] do_syscall_64+0x4c/0xa0 [ 683.552587][T15534] ? clear_bhb_loop+0x60/0xb0 [ 683.557305][T15534] ? clear_bhb_loop+0x60/0xb0 [ 683.562026][T15534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.567956][T15534] RIP: 0033:0x7f00e499ce59 [ 683.572405][T15534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.589118][T15512] device syzkaller0 entered promiscuous mode [ 683.592018][T15534] RSP: 002b:00007f00e58e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 683.592049][T15534] RAX: ffffffffffffffda RBX: 00007f00e4c15fa0 RCX: 00007f00e499ce59 [ 683.592065][T15534] RDX: 0000000000000020 RSI: 00002000000007c0 RDI: 0000000000000003 [ 683.592079][T15534] RBP: 00007f00e58e9090 R08: 0000000000000000 R09: 0000000000000000 [ 683.592092][T15534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.592105][T15534] R13: 00007f00e4c16038 R14: 00007f00e4c15fa0 R15: 00007ffe71fa29b8 [ 683.646330][T15534] [ 683.785986][T15432] team0: Port device team_slave_0 added [ 683.908399][T15432] team0: Port device team_slave_1 added [ 685.553153][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 685.633807][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.640121][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.238272][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.282806][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.327099][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.443882][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.450872][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.511591][T15579] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.3361'. [ 686.521140][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.656581][T15432] device hsr_slave_0 entered promiscuous mode [ 686.666743][T15432] device hsr_slave_1 entered promiscuous mode [ 686.679390][T15432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.687394][T15432] Cannot create hsr debugfs directory [ 687.272746][T15595] FAULT_INJECTION: forcing a failure. [ 687.272746][T15595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.311939][T15595] CPU: 1 PID: 15595 Comm: syz.3.3363 Not tainted syzkaller #0 [ 687.319463][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 687.329557][T15595] Call Trace: [ 687.332873][T15595] [ 687.335834][T15595] dump_stack_lvl+0x188/0x24e [ 687.340553][T15595] ? show_regs_print_info+0x12/0x12 [ 687.345792][T15595] ? load_image+0x400/0x400 [ 687.350348][T15595] ? __lock_acquire+0x7d10/0x7d10 [ 687.355412][T15595] ? snprintf+0xe5/0x140 [ 687.359699][T15595] should_fail_ex+0x399/0x4d0 [ 687.364422][T15595] _copy_to_user+0x2c/0x130 [ 687.368971][T15595] simple_read_from_buffer+0xe3/0x150 [ 687.374469][T15595] proc_fail_nth_read+0x1a6/0x220 [ 687.379543][T15595] ? proc_fault_inject_write+0x310/0x310 [ 687.385218][T15595] ? fsnotify_perm+0x248/0x550 [ 687.390041][T15595] ? proc_fault_inject_write+0x310/0x310 [ 687.395735][T15595] vfs_read+0x2de/0xa00 [ 687.400112][T15595] ? kernel_read+0x1e0/0x1e0 [ 687.404741][T15595] ? __fget_files+0x28/0x4b0 [ 687.409359][T15595] ? __fget_files+0x28/0x4b0 [ 687.413988][T15595] ? __fget_files+0x43d/0x4b0 [ 687.418725][T15595] ? __fdget_pos+0x2ae/0x360 [ 687.423344][T15595] ? ksys_read+0x71/0x250 [ 687.427716][T15595] ksys_read+0x14c/0x250 [ 687.431998][T15595] ? vfs_write+0xa30/0xa30 [ 687.436466][T15595] ? lockdep_hardirqs_on+0x94/0x140 [ 687.441705][T15595] do_syscall_64+0x4c/0xa0 [ 687.446146][T15595] ? clear_bhb_loop+0x60/0xb0 [ 687.450852][T15595] ? clear_bhb_loop+0x60/0xb0 [ 687.455566][T15595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.461490][T15595] RIP: 0033:0x7fb5e2d5d68e [ 687.465932][T15595] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 687.485566][T15595] RSP: 002b:00007fb5e3caefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 687.493988][T15595] RAX: ffffffffffffffda RBX: 00007fb5e3caf6c0 RCX: 00007fb5e2d5d68e [ 687.501963][T15595] RDX: 000000000000000f RSI: 00007fb5e3caf0a0 RDI: 0000000000000007 [ 687.509935][T15595] RBP: 00007fb5e3caf090 R08: 0000000000000000 R09: 0000000000000000 [ 687.517908][T15595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.525878][T15595] R13: 00007fb5e3016038 R14: 00007fb5e3015fa0 R15: 00007ffc7f87e908 [ 687.533885][T15595] [ 687.641547][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 687.732574][T10080] device hsr_slave_0 left promiscuous mode [ 687.759704][T10080] device hsr_slave_1 left promiscuous mode [ 687.771943][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.789629][T10080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.810611][T10080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.830133][T10080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.233832][T10080] device veth1_macvtap left promiscuous mode [ 688.259338][T10080] device veth1_vlan left promiscuous mode [ 688.279011][T10080] device veth0_vlan left promiscuous mode [ 689.365427][T10080] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.433647][T10080] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.733222][T10080] .` (unregistering): (slave batadv0): Releasing backup interface [ 689.832570][T10080] .` (unregistering): Released all slaves [ 689.964519][T15612] device syzkaller0 entered promiscuous mode [ 689.980904][T15632] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3369'. [ 690.010861][T15643] tipc: Started in network mode [ 690.021030][T15643] tipc: Node identity 9215a268, cluster identity 4711 [ 690.048802][T15643] tipc: Node number set to 2450891368 [ 693.092349][T15650] netlink: 'syz.3.3373': attribute type 21 has an invalid length. [ 693.100200][T15650] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3373'. [ 693.260171][T15432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 693.302312][T15432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 693.364600][T15432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 693.629786][T15432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 694.522390][T15432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.555022][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.586583][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 694.626179][T15432] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.643929][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.675033][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.699251][T15450] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.706449][T15450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.745046][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.769280][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.790204][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.812574][T15450] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.819744][T15450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.850612][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.907078][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 694.961420][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.970722][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 695.008819][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.035682][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 695.064098][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.074630][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.099538][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.119634][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.152942][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.205464][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.216149][T15450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.229860][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.248176][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.256732][T15432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 695.294161][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.301064][T15432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.309141][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.332488][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.349672][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.361990][T11141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.381579][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.425349][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.451453][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.495279][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.524670][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 695.573981][T15694] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 695.582596][T15699] device syzkaller0 entered promiscuous mode [ 695.594362][T15694] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.3387'. [ 697.998406][T15704] netlink: 'syz.2.3389': attribute type 10 has an invalid length. [ 698.006651][T15704] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3389'. [ 698.342440][T15432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.365788][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.375721][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.448746][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 698.457999][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 698.489321][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 698.503761][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 698.518747][T15432] device veth0_vlan entered promiscuous mode [ 698.535977][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 698.545849][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 698.565238][T15432] device veth1_vlan entered promiscuous mode [ 698.829916][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 698.843391][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 698.863149][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 698.892374][T11125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 698.924382][T15432] device veth0_macvtap entered promiscuous mode [ 698.940132][T15432] device veth1_macvtap entered promiscuous mode [ 699.026663][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.043107][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.061335][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.075291][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.104888][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.133890][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.178479][T15432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.221649][T15451] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 699.231826][T15451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 699.248973][T15451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 699.283576][T15451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 699.324822][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.360119][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.391410][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.428674][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.440157][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.450880][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.476015][T15432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.536833][T15451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 699.563161][T15451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 699.606588][T15432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.638470][T15432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.658791][T15432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.668144][T15432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.711176][T15787] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3411'. [ 699.736529][T15787] openvswitch: netlink: Flow key attr not present in new flow. [ 699.780522][T15773] device syzkaller0 entered promiscuous mode [ 699.794844][T15777] netlink: 'syz.4.3409': attribute type 2 has an invalid length. [ 699.811418][T15777] netlink: 'syz.4.3409': attribute type 9 has an invalid length. [ 699.839789][T15777] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 699.875684][T15777] netlink: 'syz.4.3409': attribute type 11 has an invalid length. [ 702.039633][T11141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.077593][T11141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.096564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 702.145613][T11141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.163479][T11141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.172409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 702.306983][ T4284] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 702.933748][T15815] netlink: 'syz.4.3422': attribute type 4 has an invalid length. [ 703.757539][T15834] netlink: 'syz.0.3425': attribute type 2 has an invalid length. [ 703.781419][T15834] __nla_validate_parse: 1 callbacks suppressed [ 703.781436][T15834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3425'. [ 703.816164][T15835] netlink: 'syz.0.3425': attribute type 2 has an invalid length. [ 703.861634][T15835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3425'. [ 704.026723][T15842] device syzkaller0 entered promiscuous mode [ 704.042229][T15844] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3427'. [ 705.057346][T15863] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.3431'. [ 707.999691][T15869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.007007][T15869] IPv6: NLM_F_CREATE should be set when creating new route [ 708.014352][T15869] IPv6: NLM_F_CREATE should be set when creating new route [ 708.021628][T15869] IPv6: NLM_F_CREATE should be set when creating new route [ 708.048435][T15876] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 708.071580][T15876] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3436'. [ 708.219996][T15888] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 708.439915][T15897] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.3445'. [ 708.754935][T15902] netlink: 'syz.2.3448': attribute type 10 has an invalid length. [ 709.498997][T15902] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.507791][T15902] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.606059][T15902] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.613551][T15902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.621643][T15902] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.629031][T15902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.658884][T15902] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 709.716646][T15916] device syzkaller0 entered promiscuous mode [ 711.413573][T15928] delete_channel: no stack [ 715.260676][T15953] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3461'. [ 715.276263][T15953] netlink: 'syz.0.3461': attribute type 1 has an invalid length. [ 715.294407][T15953] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3461'. [ 715.305564][T15951] netlink: 64787 bytes leftover after parsing attributes in process `syz.3.3460'. [ 717.100110][T15988] device syzkaller0 entered promiscuous mode [ 718.435779][T13834] Bluetooth: hci3: command 0x0406 tx timeout [ 720.740252][T16025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.747511][T16025] IPv6: NLM_F_CREATE should be set when creating new route [ 720.754795][T16025] IPv6: NLM_F_CREATE should be set when creating new route [ 720.762035][T16025] IPv6: NLM_F_CREATE should be set when creating new route [ 722.078711][T16063] netlink: 'syz.2.3485': attribute type 27 has an invalid length. [ 722.949124][T16080] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3496'. [ 722.958354][T16080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.139690][T16083] device syzkaller0 entered promiscuous mode [ 724.458262][T16092] nr0: port 1(hsr0) entered blocking state [ 724.477075][T16092] nr0: port 1(hsr0) entered disabled state [ 724.498060][T16092] device hsr0 entered promiscuous mode [ 726.057904][T16129] netlink: 'syz.3.3509': attribute type 3 has an invalid length. [ 726.085692][T16129] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3509'. [ 726.909868][T16124] netlink: 'syz.4.3508': attribute type 11 has an invalid length. [ 727.255960][T16139] netlink: 'syz.1.3514': attribute type 25 has an invalid length. [ 727.295516][T16139] netlink: 'syz.1.3514': attribute type 29 has an invalid length. [ 727.361500][T16150] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3514'. [ 727.662555][T16161] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.3521'. [ 728.094728][T16166] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.3522'. [ 728.677324][T16196] device syzkaller0 entered promiscuous mode [ 728.780549][T16210] delete_channel: no stack [ 731.149889][T16215] netlink: 'syz.4.3538': attribute type 10 has an invalid length. [ 731.569789][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 732.827805][T16283] ================================================================== [ 732.835979][T16283] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 732.843805][T16283] Write of size 80 at addr ffff888075032590 by task syz.3.3555/16283 [ 732.851943][T16283] [ 732.854269][T16283] CPU: 1 PID: 16283 Comm: syz.3.3555 Not tainted syzkaller #0 [ 732.861731][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 732.871790][T16283] Call Trace: [ 732.875070][T16283] [ 732.878004][T16283] dump_stack_lvl+0x188/0x24e [ 732.882697][T16283] ? __lock_acquire+0x7d10/0x7d10 [ 732.887744][T16283] ? show_regs_print_info+0x12/0x12 [ 732.892951][T16283] ? load_image+0x400/0x400 [ 732.897469][T16283] ? __virt_addr_valid+0x465/0x540 [ 732.902590][T16283] ? __bpf_get_stackid+0x6c9/0x920 [ 732.907712][T16283] print_report+0xa8/0x210 [ 732.912142][T16283] kasan_report+0x10b/0x140 [ 732.916658][T16283] ? __bpf_get_stackid+0x6c9/0x920 [ 732.921785][T16283] kasan_check_range+0x235/0x290 [ 732.926739][T16283] ? __bpf_get_stackid+0x6c9/0x920 [ 732.931864][T16283] memcpy+0x3c/0x60 [ 732.935680][T16283] __bpf_get_stackid+0x6c9/0x920 [ 732.940636][T16283] bpf_get_stackid_pe+0x33f/0x400 [ 732.945674][T16283] bpf_prog_a448e89f4c9ad9d1+0x28/0x42 [ 732.951143][T16283] bpf_overflow_handler+0x6e8/0x7c0 [ 732.956349][T16283] ? bpf_overflow_handler+0xd9/0x7c0 [ 732.961637][T16283] ? perf_swevent_overflow+0x230/0x230 [ 732.967103][T16283] ? ct_irq_exit_irqson+0x113/0x170 [ 732.972378][T16283] ? __perf_event_account_interrupt+0x187/0x280 [ 732.978633][T16283] __perf_event_overflow+0x448/0x610 [ 732.983938][T16283] perf_swevent_event+0x315/0x570 [ 732.988977][T16283] ? perf_tp_event+0xc30/0xc30 [ 732.993759][T16283] ___perf_sw_event+0x49e/0x6e0 [ 732.998625][T16283] ? ___perf_sw_event+0x180/0x6e0 [ 733.003657][T16283] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 733.010110][T16283] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 733.016108][T16283] ? lock_chain_count+0x20/0x20 [ 733.020971][T16283] __perf_sw_event+0x135/0x260 [ 733.025753][T16283] do_user_addr_fault+0xaea/0xb10 [ 733.030786][T16283] ? _raw_spin_unlock_irq+0x1f/0x40 [ 733.036005][T16283] ? trace_hardirqs_off_finish+0x86/0x180 [ 733.041843][T16283] exc_page_fault+0x60/0x100 [ 733.046443][T16283] asm_exc_page_fault+0x22/0x30 [ 733.051305][T16283] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 733.057101][T16283] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 733.076719][T16283] RSP: 0018:ffffc90003887ab0 EFLAGS: 00050287 [ 733.082797][T16283] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 733.090778][T16283] RDX: ffffc90014d62000 RSI: 0000000000056f21 RDI: 0000000000056f22 [ 733.098753][T16283] RBP: 0000000000000000 R08: ffff888026bebc00 R09: 0000000000000002 [ 733.106732][T16283] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000222000 [ 733.114716][T16283] R13: 0000000000000000 R14: 0000200000221000 R15: 0000200000221000 [ 733.122707][T16283] ? fault_in_readable+0x139/0x1f0 [ 733.127840][T16283] fault_in_iov_iter_readable+0xbb/0x2e0 [ 733.133563][T16283] generic_perform_write+0x1f1/0x5c0 [ 733.138870][T16283] ? generic_file_direct_write+0x330/0x330 [ 733.144696][T16283] ? __file_remove_privs+0x5f0/0x5f0 [ 733.149987][T16283] ? rwsem_write_trylock+0x135/0x1c0 [ 733.155280][T16283] ? clear_nonspinnable+0x60/0x60 [ 733.160310][T16283] ? generic_write_checks_count+0x3d9/0x4c0 [ 733.166210][T16283] __generic_file_write_iter+0x148/0x2a0 [ 733.171857][T16283] generic_file_write_iter+0xab/0x2e0 [ 733.177246][T16283] vfs_write+0x4b1/0xa30 [ 733.181499][T16283] ? file_end_write+0x250/0x250 [ 733.186360][T16283] ? __fget_files+0x43d/0x4b0 [ 733.191054][T16283] ? __fdget_pos+0x2ae/0x360 [ 733.195650][T16283] ? ksys_write+0x71/0x250 [ 733.200083][T16283] ksys_write+0x14c/0x250 [ 733.204424][T16283] ? __ia32_sys_read+0x80/0x80 [ 733.209201][T16283] ? lockdep_hardirqs_on+0x94/0x140 [ 733.214409][T16283] do_syscall_64+0x4c/0xa0 [ 733.218834][T16283] ? clear_bhb_loop+0x60/0xb0 [ 733.223521][T16283] ? clear_bhb_loop+0x60/0xb0 [ 733.228207][T16283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.234110][T16283] RIP: 0033:0x7fb5e2d9ce59 [ 733.238534][T16283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.258146][T16283] RSP: 002b:00007fb5e3c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.266566][T16283] RAX: ffffffffffffffda RBX: 00007fb5e3016450 RCX: 00007fb5e2d9ce59 [ 733.274550][T16283] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000010 [ 733.282538][T16283] RBP: 00007fb5e2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 733.290518][T16283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.298496][T16283] R13: 00007fb5e30164e8 R14: 00007fb5e3016450 R15: 00007ffc7f87e908 [ 733.306490][T16283] [ 733.309508][T16283] [ 733.311844][T16283] Allocated by task 16281: [ 733.316254][T16283] kasan_set_track+0x4b/0x70 [ 733.320853][T16283] __kasan_kmalloc+0x8e/0xa0 [ 733.325450][T16283] __kmalloc_node+0xb0/0x240 [ 733.330047][T16283] bpf_map_area_alloc+0x47/0xe0 [ 733.334907][T16283] prealloc_elems_and_freelist+0x86/0x1c0 [ 733.340638][T16283] stack_map_alloc+0x390/0x520 [ 733.345411][T16283] map_create+0x534/0x1000 [ 733.349834][T16283] __sys_bpf+0x38b/0x780 [ 733.354079][T16283] __x64_sys_bpf+0x78/0x90 [ 733.358508][T16283] do_syscall_64+0x4c/0xa0 [ 733.362927][T16283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.368827][T16283] [ 733.371154][T16283] Last potentially related work creation: [ 733.376861][T16283] kasan_save_stack+0x3a/0x60 [ 733.381550][T16283] __kasan_record_aux_stack+0xb2/0xc0 [ 733.386922][T16283] call_rcu+0x14f/0x990 [ 733.391084][T16283] nf_unregister_net_hooks+0xc7/0x130 [ 733.396462][T16283] nf_defrag_ipv6_disable+0x91/0xe0 [ 733.401771][T16283] nf_ct_netns_put+0x371/0x510 [ 733.406629][T16283] nf_conncount_destroy+0x3d/0x150 [ 733.411839][T16283] ovs_ct_exit+0x98/0x200 [ 733.416246][T16283] ovs_exit_net+0xe9/0x7a0 [ 733.420718][T16283] cleanup_net+0x706/0xba0 [ 733.425158][T16283] process_one_work+0x8a2/0x1160 [ 733.430151][T16283] worker_thread+0xaa2/0x1270 [ 733.434836][T16283] kthread+0x29d/0x330 [ 733.438978][T16283] ret_from_fork+0x1f/0x30 [ 733.443453][T16283] [ 733.445783][T16283] Second to last potentially related work creation: [ 733.452364][T16283] kasan_save_stack+0x3a/0x60 [ 733.457049][T16283] __kasan_record_aux_stack+0xb2/0xc0 [ 733.462429][T16283] call_rcu+0x14f/0x990 [ 733.466600][T16283] nf_unregister_net_hooks+0xc7/0x130 [ 733.471980][T16283] cleanup_net+0x706/0xba0 [ 733.476404][T16283] process_one_work+0x8a2/0x1160 [ 733.481343][T16283] worker_thread+0xaa2/0x1270 [ 733.486025][T16283] kthread+0x29d/0x330 [ 733.490093][T16283] ret_from_fork+0x1f/0x30 [ 733.494520][T16283] [ 733.496841][T16283] The buggy address belongs to the object at ffff888075032580 [ 733.496841][T16283] which belongs to the cache kmalloc-cg-64 of size 64 [ 733.510987][T16283] The buggy address is located 16 bytes inside of [ 733.510987][T16283] 64-byte region [ffff888075032580, ffff8880750325c0) [ 733.524096][T16283] [ 733.526417][T16283] The buggy address belongs to the physical page: [ 733.532908][T16283] page:ffffea0001d40c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75032 [ 733.543062][T16283] memcg:ffff88807913be01 [ 733.547297][T16283] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 733.554866][T16283] raw: 00fff00000000200 ffffea0001ea3040 dead000000000004 ffff888017442780 [ 733.563457][T16283] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807913be01 [ 733.572039][T16283] page dumped because: kasan: bad access detected [ 733.578464][T16283] page_owner tracks the page as allocated [ 733.584178][T16283] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4446, tgid 4445 (syz.3.4), ts 76059802035, free_ts 74735545972 [ 733.601992][T16283] post_alloc_hook+0x173/0x1a0 [ 733.606856][T16283] get_page_from_freelist+0x1a1e/0x1ab0 [ 733.612414][T16283] __alloc_pages+0x1ec/0x4f0 [ 733.617012][T16283] alloc_slab_page+0x5d/0x160 [ 733.621698][T16283] new_slab+0x87/0x2c0 [ 733.625770][T16283] ___slab_alloc+0xbc6/0x1240 [ 733.630448][T16283] __kmem_cache_alloc_node+0x1a0/0x260 [ 733.635917][T16283] __kmalloc_node+0xa0/0x240 [ 733.640515][T16283] kvmalloc_node+0x6c/0x180 [ 733.645027][T16283] nf_hook_entries_grow+0x309/0x730 [ 733.650237][T16283] __nf_register_net_hook+0x2c9/0x910 [ 733.655622][T16283] nf_register_net_hook+0xae/0x190 [ 733.660743][T16283] nf_register_net_hooks+0x40/0x1a0 [ 733.665951][T16283] ops_init+0x355/0x5f0 [ 733.670113][T16283] setup_net+0x4f2/0xbd0 [ 733.674361][T16283] copy_net_ns+0x348/0x5b0 [ 733.678785][T16283] page last free stack trace: [ 733.683453][T16283] free_unref_page_prepare+0x8b4/0x9a0 [ 733.688908][T16283] free_unref_page+0x2e/0x3f0 [ 733.693576][T16283] __vunmap+0x856/0xa00 [ 733.697724][T16283] map_create+0xbaa/0x1000 [ 733.702132][T16283] __sys_bpf+0x38b/0x780 [ 733.706363][T16283] __x64_sys_bpf+0x78/0x90 [ 733.710771][T16283] do_syscall_64+0x4c/0xa0 [ 733.715175][T16283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.721060][T16283] [ 733.723368][T16283] Memory state around the buggy address: [ 733.728984][T16283] ffff888075032480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 733.737030][T16283] ffff888075032500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 733.745079][T16283] >ffff888075032580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 733.753121][T16283] ^ [ 733.758472][T16283] ffff888075032600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 733.766517][T16283] ffff888075032680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 733.774558][T16283] ================================================================== [ 733.782613][T16283] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 733.789787][T16283] CPU: 1 PID: 16283 Comm: syz.3.3555 Not tainted syzkaller #0 [ 733.797228][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.807268][T16283] Call Trace: [ 733.810542][T16283] [ 733.813460][T16283] dump_stack_lvl+0x188/0x24e [ 733.818127][T16283] ? memcpy+0x3c/0x60 [ 733.822099][T16283] ? show_regs_print_info+0x12/0x12 [ 733.827282][T16283] ? load_image+0x400/0x400 [ 733.831784][T16283] panic+0x2e5/0x730 [ 733.835677][T16283] ? bpf_jit_dump+0xd0/0xd0 [ 733.840171][T16283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 733.846057][T16283] ? _raw_spin_unlock+0x40/0x40 [ 733.850895][T16283] ? print_memory_metadata+0x314/0x400 [ 733.856349][T16283] check_panic_on_warn+0x80/0xa0 [ 733.861347][T16283] ? __bpf_get_stackid+0x6c9/0x920 [ 733.866453][T16283] end_report+0x66/0x110 [ 733.870688][T16283] kasan_report+0x118/0x140 [ 733.875183][T16283] ? __bpf_get_stackid+0x6c9/0x920 [ 733.880285][T16283] kasan_check_range+0x235/0x290 [ 733.885212][T16283] ? __bpf_get_stackid+0x6c9/0x920 [ 733.890308][T16283] memcpy+0x3c/0x60 [ 733.894103][T16283] __bpf_get_stackid+0x6c9/0x920 [ 733.899029][T16283] bpf_get_stackid_pe+0x33f/0x400 [ 733.904046][T16283] bpf_prog_a448e89f4c9ad9d1+0x28/0x42 [ 733.909492][T16283] bpf_overflow_handler+0x6e8/0x7c0 [ 733.914687][T16283] ? bpf_overflow_handler+0xd9/0x7c0 [ 733.919961][T16283] ? perf_swevent_overflow+0x230/0x230 [ 733.925404][T16283] ? ct_irq_exit_irqson+0x113/0x170 [ 733.930591][T16283] ? __perf_event_account_interrupt+0x187/0x280 [ 733.936824][T16283] __perf_event_overflow+0x448/0x610 [ 733.942106][T16283] perf_swevent_event+0x315/0x570 [ 733.947125][T16283] ? perf_tp_event+0xc30/0xc30 [ 733.951886][T16283] ___perf_sw_event+0x49e/0x6e0 [ 733.956729][T16283] ? ___perf_sw_event+0x180/0x6e0 [ 733.961747][T16283] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 733.968165][T16283] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 733.974135][T16283] ? lock_chain_count+0x20/0x20 [ 733.978981][T16283] __perf_sw_event+0x135/0x260 [ 733.983738][T16283] do_user_addr_fault+0xaea/0xb10 [ 733.988755][T16283] ? _raw_spin_unlock_irq+0x1f/0x40 [ 733.993946][T16283] ? trace_hardirqs_off_finish+0x86/0x180 [ 733.999660][T16283] exc_page_fault+0x60/0x100 [ 734.004243][T16283] asm_exc_page_fault+0x22/0x30 [ 734.009083][T16283] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 734.014795][T16283] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 734.034389][T16283] RSP: 0018:ffffc90003887ab0 EFLAGS: 00050287 [ 734.040445][T16283] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 734.048421][T16283] RDX: ffffc90014d62000 RSI: 0000000000056f21 RDI: 0000000000056f22 [ 734.056403][T16283] RBP: 0000000000000000 R08: ffff888026bebc00 R09: 0000000000000002 [ 734.064366][T16283] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000222000 [ 734.072325][T16283] R13: 0000000000000000 R14: 0000200000221000 R15: 0000200000221000 [ 734.080288][T16283] ? fault_in_readable+0x139/0x1f0 [ 734.085404][T16283] fault_in_iov_iter_readable+0xbb/0x2e0 [ 734.091034][T16283] generic_perform_write+0x1f1/0x5c0 [ 734.096320][T16283] ? generic_file_direct_write+0x330/0x330 [ 734.102130][T16283] ? __file_remove_privs+0x5f0/0x5f0 [ 734.107421][T16283] ? rwsem_write_trylock+0x135/0x1c0 [ 734.112717][T16283] ? clear_nonspinnable+0x60/0x60 [ 734.117742][T16283] ? generic_write_checks_count+0x3d9/0x4c0 [ 734.123635][T16283] __generic_file_write_iter+0x148/0x2a0 [ 734.129263][T16283] generic_file_write_iter+0xab/0x2e0 [ 734.134625][T16283] vfs_write+0x4b1/0xa30 [ 734.138860][T16283] ? file_end_write+0x250/0x250 [ 734.143703][T16283] ? __fget_files+0x43d/0x4b0 [ 734.148372][T16283] ? __fdget_pos+0x2ae/0x360 [ 734.152951][T16283] ? ksys_write+0x71/0x250 [ 734.157356][T16283] ksys_write+0x14c/0x250 [ 734.161678][T16283] ? __ia32_sys_read+0x80/0x80 [ 734.166431][T16283] ? lockdep_hardirqs_on+0x94/0x140 [ 734.171618][T16283] do_syscall_64+0x4c/0xa0 [ 734.176018][T16283] ? clear_bhb_loop+0x60/0xb0 [ 734.180684][T16283] ? clear_bhb_loop+0x60/0xb0 [ 734.185351][T16283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.191234][T16283] RIP: 0033:0x7fb5e2d9ce59 [ 734.195637][T16283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.215232][T16283] RSP: 002b:00007fb5e3c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 734.223632][T16283] RAX: ffffffffffffffda RBX: 00007fb5e3016450 RCX: 00007fb5e2d9ce59 [ 734.231589][T16283] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000010 [ 734.239547][T16283] RBP: 00007fb5e2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 734.247518][T16283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.255476][T16283] R13: 00007fb5e30164e8 R14: 00007fb5e3016450 R15: 00007ffc7f87e908 [ 734.263443][T16283] [ 734.266697][T16283] Kernel Offset: disabled [ 734.271009][T16283] Rebooting in 86400 seconds..