last executing test programs: 30.868479707s ago: executing program 3 (id=2624): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x20, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x6) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1808, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000600), 0xb}, 0x0, 0x8001, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000880)='GPL\x00', 0x2, 0x51, &(0x7f00000008c0)=""/81, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x0, 0x6}, 0x10, 0x6328, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r1, r2, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1a}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a00"/158], 0xf}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x3, 0x1, 0x5, 0x0, 0x2, 0x400, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x2}, 0x101000, 0x1, 0x5, 0x3, 0x5, 0x8d70, 0xf001, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) 29.824093978s ago: executing program 3 (id=2628): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000980), &(0x7f0000000a00), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x17, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fe3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6e6ca420fa9a8025}}}, &(0x7f0000000800)='syzkaller\x00', 0x101, 0x0, 0x0, 0x40f00, 0x20, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000bc0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x1, 0x1ff, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000c40)=[r4, r2], &(0x7f0000000c80)=[{0x3, 0x2, 0x0, 0xa}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0x70}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x628200, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711835000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000003a00)={&(0x7f0000000600)=@x25={0x9, @remote}, 0x80, &(0x7f0000000dc0), 0x0, &(0x7f0000002a00)=""/4096, 0x1000}, 0x82b96aeb907d533c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.770689824s ago: executing program 3 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000008000000c408000000000000180000000000000000000000000000009500"/80], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x10, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 23.240095584s ago: executing program 3 (id=2643): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000017c0)={&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001540)="f993d3a96b34abd8980dd9428b2b345effc4507daa7f450d0aa7a70ac7fd79a057f382a916c1b0b8695ed66278121a35fed2a892e337225d575f22e679b2a8a5e948aac06344f99541de60f08742da1a875eb6188857c34d24ebe3faac46749d57128b2691f4dc7322e25f4eaca03fd5461a54eb4db465d510e8b00c2676d457be431cc4902340ad893a9da413d8881858d313e82be61cfb286a701cdc6f05fc3e5d5f4c833c5a990ef57f6faf8c06cf1d7a44dc36624fbbc5b27622db96b76b193332e017e7b8d557", 0xc9}, {&(0x7f0000001640)="150debd7ed6d51e4f04408d00fa3ff55dde3e8ad2c9b6ecc7c1f5bec80cdfd6b912d5d6226cfa4c04188b9aceffcf024eb389fcdb9969e9e6071d31b60fcd91db1cdd58b6d9c1150fa5e8bf5b6a6dc61739ce96e82bd26feecd9147a15918e8ece69d31d5d2c7317189560a4b40ff5c4266b3d453c3d8581575216c421ce8cc51bd598700da575ea5a32eccc4d39d284bf8f76ba5b3600f77f4d76a4ee67e777ff614ce0da397eca22495e4c558e76b9783b97d00abf74bc8000c367d63697c128fcd71978622eadf1dcdd983c7e4a0cffc06f5df400dfa33f", 0xd9}], 0x2, 0x0, 0x0, 0x5}, 0x20000000) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x55, 0x1, 0x0, 0x4, 0x0, 0x7ff2, 0xaa90, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x2, @perf_bp={0x0, 0xf}, 0x18105, 0x32, 0xfffffbff, 0x6, 0x2, 0x6, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001b00000014d5362866bbbcaf39ad89459e3aafc03676c3cc03724b5bcaeb27835f7b5fbedb9b856d033e0f7e293a4f9bdf9ca6f4811df533e16a837710f691c9cd24fc14a635036028b62639ad3262a32df38b51ae5d973c2adc5c20"], 0x48) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r11) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e027692a81ad420530871592888e", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x98, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000040), 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1b, 0x0}, 0x4000080) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0xc, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f0000000100)='GPL\x00', 0x2, 0x91, &(0x7f00000011c0)=""/145, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x8, &(0x7f0000001280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x2, 0x6, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000001300)=[r12], 0x0, 0x10, 0x8}, 0x94) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) 22.621812891s ago: executing program 0 (id=2646): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x4040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x4011) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x82, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x250a, 0x0, 0x102, 0x3, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c0b4f00cd81fd110f9542a4a60dc355fec1018722c19f97d268c2bb3987e2f278366fc54c05d733f13a4e5cf344e8e2a824b2967d2850b2b252178817d1df0a77566c750b563c2c69791a2f9eaccd9e47b2fa0e2854a6a6140c03677b3542a29406de190efd907010bb3", @ANYRESHEX=r2, @ANYRESDEC=r0], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) r3 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/221}, 0x20) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="f4000000000000007911a800000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f0000000580)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[], 0x12) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180)) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x3e8) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9) (async) sendmsg$kcm(r1, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.067519347s ago: executing program 0 (id=2647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000079100e000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r3}, 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}], 0x1}, 0x0) 21.936884169s ago: executing program 3 (id=2648): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000100), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8080) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="450a0000000000006111a00000a128cc917acff314000000180000000000000000000000000000009500160000000007"], &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)=r4}, 0x20) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}], 0x18}, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/25, 0x19}], 0x1}, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20045080) close(r2) 21.935557629s ago: executing program 1 (id=2649): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8992, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5r2, 0x6, 0x0, 0xb6d, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="040000001420000975bb25e3", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r4], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}}, 0x0, 0xffeffbfffffffffe, r5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) close(r6) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/111, 0x6f}], 0x1}, 0x40012040) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104880, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67e, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2d40, 0x0) close(r9) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'vlan0\x00', @random="000600"}) 21.898599179s ago: executing program 2 (id=2650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10202, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)=0x1) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x6, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10040000000000002900000039000000de24272741ae1755e6d2083e3337834d47197810dd0711dbb34aae62e603ff46d3e834f32fc298f77d31ff561845b0074fe92c055f98d62b49fe72158aba650ee14d86565660dd43de197cba752ad887b072974e96120b512aa3902293b7599bf2d43579e782980351b35d5c542f2e4e0e5baae68d72b851ee0ee4ac433fd238f37d9ecd33bca5bbe38e564f26280fc8"], 0x10}, 0x4004010) perf_event_open(&(0x7f0000000040)={0x4, 0xfffffffffffffd69, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86911, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x13, &(0x7f0000000040)=r6, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x8, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0x7, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xf3, &(0x7f00000002c0)=""/243, 0x41100, 0x40, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x5, 0x4f094025, 0x80000000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0x8, 0x6}, {0x2, 0x3, 0x3, 0xc}, {0x4, 0x4, 0x7, 0x4}], 0x10, 0xfffffffd}, 0x94) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r4, 0x13, 0x0, 0xee, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4018, r3}, 0x18) 21.84569449s ago: executing program 0 (id=2651): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x6}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r1}, 0x38) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0x2405, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000a36a3e530805c6d747fa426795fb48c5902fcd51efc59ef0b489854ca72c4bd7649b1f99104e32b17b5963a9b31838d17b03a0f0678a07aa402cea87c5235ec6e8942b4c8adc3a27f7cdd6d004f042e3c98fffb39bb081c11f2516cea9a4353798cbc9b814450189ce799e83d8418a79d170c6e85ec948c41c59fc9fc0b5e29887"]) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x8004745a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB=' \x00\x00\x00', @ANYRES32, @ANYBLOB], 0x48) unlink(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus/file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f40, 0x4, @perf_config_ext={0x7, 0xda}, 0x828, 0x7, 0x2000, 0x3, 0x0, 0x800800, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000063f9fffe000000000000000085000000bc000000b7080000000000007b8af8ff00000000b7080000000000007b8aef9a25270000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.760669721s ago: executing program 1 (id=2652): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffc, 0x0, 0x1, 0x8}, {0x10000002}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1000005580, 0x40}, 0x1c052, 0x1000000e, 0x7, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000100) setsockopt$sock_attach_bpf(r5, 0x84, 0x25, &(0x7f0000000000)=r8, 0x20000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000395080080a04636d7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r0, 0x0, 0x101d0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)="e31101254203f79d847020e055f7d0130cfa0d083d8da7731f161e29873283e99269501851d8125e859b2b9da6b998d169c36eaa794696a11888fe0000000000000001d82d9d3b066652f9eb6a074ce26be9afabe215adfd14415fdfcb4efbfdc638537c2f", &(0x7f0000000140), 0xf4c, r9}, 0x38) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000900)=ANY=[@ANYBLOB="05000000800000021e45e52ec2b97929c6001a09000000000000000000", @ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES8, @ANYRES32, @ANYRESDEC=r0], 0x50) 21.668720012s ago: executing program 2 (id=2653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000008000000c408000000000000180000000000000000000000000000009500"/80], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x10, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) 21.660468142s ago: executing program 1 (id=2654): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000340)}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000001080)=""/4042, 0xfca}, {&(0x7f0000000f80)=""/222, 0xde}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000b00)=""/172, 0xac}, {&(0x7f0000000240)=""/165, 0xa5}, {0x0}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000005c0)=""/146, 0x92}], 0xa}, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0a8100bae53dca2b007ea23e163ec40028e82fccdc09da157ef6a608649e7531765f0ef82e3c0073a705259a3651f607004b000000000098cae3ac8afd030047345ac6be8037e70e4509c5bb0c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000004) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) r4 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfe33) r6 = perf_event_open$cgroup(&(0x7f0000004e40)={0x4, 0x80, 0x0, 0x9, 0x40, 0x5, 0x0, 0x5, 0x888, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0xfffffffffffffff9}, 0x0, 0xfffffffffffffff7, 0x5, 0x5, 0x4, 0x8, 0x5190, 0x0, 0xe26, 0x0, 0xffffffffffffff01}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x7, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000140)='syzkaller\x00') r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b86600"/14, 0xe}], 0x1}, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d2", 0xe}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180f42ff40703006266f76ba7179406ca6332e00188488bb93e966f0e2f749ddd16d5119b4cf223332a6c2036a9508a", 0x56}], 0x1, 0x0, 0x0, 0x35}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 21.532684434s ago: executing program 3 (id=2655): r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r0, 0x6, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0xb}, r2, 0x5, 0xffffffffffffffff, 0x2) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r4, 0x9, 0x18}, 0xc) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000740)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.458796118s ago: executing program 1 (id=2656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffa}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x8001, 0x2c, &(0x7f00000000c0)=""/44, 0x40f00, 0x5e, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x8, 0x8000, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x5, 0xa, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x1d, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r3, r0, 0x37, 0x2000, 0xffffffffffffffff, @value=r4, @void, @void, @void, r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x8, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000640), 0x2, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000680)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x7, 0x0, 0x4, 0x5, 0x3, 0xc, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000780)='syzkaller\x00', 0x8, 0x3a, &(0x7f00000007c0)=""/58, 0x41100, 0x0, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xd, 0x9, 0x300}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000880)=[r6, r5, r5, r5, 0xffffffffffffffff, r5, r6, r5], &(0x7f00000008c0)=[{0x5, 0x4, 0xd, 0x7}, {0x4, 0x5, 0xe, 0x9}, {0x1, 0x1, 0x10, 0x8}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r8, 0x0, 0xf7, 0x9d, &(0x7f00000009c0)="a1db51b22fb77b9c7d7515bbaaa9d5d299388dcd28c751a6e313df50af5453a3cb7f6bf3cf93b684f70dd4696f17f1e01679e0b362028f5ace33c598e7c2aab72169938b8f6b2f8215ed54ed5f28131a2f1c885b9c5e40b46975d8935c32549402142f50272cccc540bf77e6ec977dc18050c21c49b9ca089a0069eb246b7297335d0d67a104b04c99d000cd2ebecdd80ab31c17622396eb7897051c3b31163506b3ba0df1167a9af99ed96be7bda176f54e8eccf738f3e2b980b1779233ac6c4f06f8c0891e7f5d85d52d6acc957230e50743516408bf908d89b85b72d1264147b542abe212233eac9afd0d86d9b9687f2379e4f68be0", &(0x7f0000000ac0)=""/157, 0xffb5, 0x0, 0x1a, 0x1000, &(0x7f0000000b80)="d75fd3abd8a822f04c883e0e7f7a2ea095e92b4f246c37b64707", &(0x7f0000000bc0)="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", 0x0, 0x0, 0x5}, 0x50) openat$cgroup_procs(r0, &(0x7f0000001c40)='cgroup.procs\x00', 0x2, 0x0) r9 = syz_clone(0x114000, &(0x7f0000001d00)="0d2c4c91ca53d3066bf61c80624e91611fb2adf60e5b5b2c3ef7ded2797a1029840efbabb7b070b720a24bd33bfdbd5b478dcb62b61703ac5877e8ea2e1b6f39e233f54730e1cc61aa1103f0bfb76d268d0b7094f3396165d3b5e3241eb8e5be8f", 0x61, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)="8b7bbe11808175096d340227fe4db2b1259929a12c0c2e4a999b0d8f27a80d643e4640280ff1de00064be9b6cf64b2e6238d95b4fa2b6aab55acf7e997b93e123bb8409a85624700b0ecf0fd511d6d8832515d080188371dc2dd269cb47c7f00ed96255d8bb48a00ce9e9be33e69c61f8380a74808d6b8f5780aecd1739e9a32b1ec3412f53df90d96059f44d4c3bc422a337e637e7e11411cc18445a82d4b616bb079b4055601167abab6fd4908f148c0fb256c1c9d99a543d86f5e964723dc9036e92bfd15ef7c0bae69") r10 = perf_event_open$cgroup(&(0x7f0000001f40)={0x3, 0x80, 0x9, 0x1, 0x0, 0xc2, 0x0, 0x8000000000000001, 0x200, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000001f00), 0xa}, 0x20, 0x5, 0x5, 0x9, 0x100, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, r7, 0x6, r4, 0x4) perf_event_open(&(0x7f0000001c80)={0x2, 0x80, 0x1, 0xd9, 0xc3, 0x7, 0x0, 0x610f, 0x40002, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x838, 0x1, @perf_config_ext={0x9, 0x1}, 0x0, 0xffffffffffffffff, 0x3d29, 0x3, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x3, 0x0, 0x6}, r9, 0xe, r10, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002000)={r4, &(0x7f0000001fc0)="a06404c6f8ab26b372504fa5714802678aee3bbfb2b03aaae3f386873f3b506f9b955960b434de787b11f88061cc3abd6a0dc26f12deeb710a2b6bf146"}, 0x20) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000002040)=r4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x5, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000020c0)='GPL\x00', 0x638920be, 0xa6, &(0x7f0000002100)=""/166, 0x40f00, 0x2, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000021c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[r4, r4, r1, r5, r1], 0x0, 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002300)={r11, r4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002340)={r4, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x15, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @generic={0x7, 0x6, 0x1, 0x9, 0xfffffffe}, @ldst={0x0, 0x3, 0x0, 0x0, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x1, 0xc, 0x1, 0x24d6, 0x6a}]}, &(0x7f0000002440)='syzkaller\x00', 0x10, 0x70, &(0x7f0000002480)=""/112, 0x41000, 0x14, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002540)={0x2, 0xd, 0x5de, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000002580)=[{0x5, 0x3, 0x3, 0x9}, {0x3, 0x4, 0xd, 0x6}, {0x0, 0x3, 0x4, 0xa}, {0x5, 0x3, 0xf, 0x9}, {0x4, 0x4, 0xc, 0x4}], 0x10, 0x5}, 0x94) close(r12) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000026c0), 0x4) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000002700)) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000002740), 0x8) openat$cgroup_devices(r14, &(0x7f0000002780)='devices.allow\x00', 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002800)={0xee2f306c, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000027c0)={@map=r4, r13, 0x33, 0x203c, 0x0, @void, @void, @value=r15, @void, r2}, 0x20) mkdirat$cgroup(r4, &(0x7f0000002840)='syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002880)) 18.34071661s ago: executing program 1 (id=2657): r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x16, 0x6, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x61, 0x0, 0x0, 0xa00}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x12, 0x0, 0x44) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 18.236719031s ago: executing program 0 (id=2658): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000088000000b0000000010"], 0x50) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) (async, rerun: 32) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdb, 0xdb, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xa, 0x4}, {0xd, 0x1}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xf, 0xe, 0x5}, {0x2, 0x6, 0x1000}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x2, 0xff3}, {0x1, 0x8, 0xa9}, {0x3, 0x2c00, 0x4b}, {0x1, 0x2, 0x4}, {0x1, 0x7, 0x2}, {0x4, 0x8d, 0x10}], "b00ef3"}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3e, [{0x2, 0x4, 0x11}, {0x8, 0x3, 0x1}]}, @const={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0xfa, 0x1000, 0x1, 0x7}, 0x28) close(0xffffffffffffffff) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8953, &(0x7f0000000040)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = socket$kcm(0x28, 0x5, 0x0) close(r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x36}, 0x28) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 18.224678272s ago: executing program 2 (id=2659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20040830) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu==0||!') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}, [@ldst={0x6, 0x0, 0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) 18.106995003s ago: executing program 1 (id=2660): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000009c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000deff000000000000006eb1b364b436b7d2860d0659c7491b2dabe1a835e455d48f359ef21464193fdb76ebdacdecafdc6b66b4c34993452588e104e8c5e5e84f35c3df12be26b67ea870f68316327816a6460166077b387920f2ee646d3b62da850072a2a3d221091b5df72c775b50a01488716550dd2774e640c16c1658e492b2ed1538557561f60aa31be65812c130886a3f59da1bafb69191f866df3e49df79e95595ec02ec609605d1ea64f18082792c3e8ee492d49f28b4261680c7e4b04891edb56897ee9c220488f266684559f977de69ba09ce3277c209519fafee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x3, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="e85e3071000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x21, 0x81, 0xa4e0, 0xdd47, 0x428, r6, 0xdf, '\x00', 0x0, r8, 0x2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x32, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) 17.892784725s ago: executing program 0 (id=2661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10202, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000480)=0x1) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x6, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10040000000000002900000039000000de24272741ae1755e6d2083e3337834d47197810dd0711dbb34aae62e603ff46d3e834f32fc298f77d31ff561845b0074fe92c055f98d62b49fe72158aba650ee14d86565660dd43de197cba752ad887b072974e96120b512aa3902293b7599bf2d43579e782980351b35d5c542f2e4e0e5baae68d72b851ee0ee4ac433fd238f37d9ecd33bca5bbe38e564f26280fc8"], 0x10}, 0x4004010) perf_event_open(&(0x7f0000000040)={0x4, 0xfffffffffffffd69, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86911, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x13, &(0x7f0000000040)=r6, 0x4) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x8, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0x7, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xf3, &(0x7f00000002c0)=""/243, 0x41100, 0x40, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x5, 0x4f094025, 0x80000000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0x8, 0x6}, {0x2, 0x3, 0x3, 0xc}, {0x4, 0x4, 0x7, 0x4}], 0x10, 0xfffffffd}, 0x94) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r4, 0x13, 0x0, 0xee, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4018, r3}, 0x18) 17.765207757s ago: executing program 2 (id=2662): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 17.761789587s ago: executing program 0 (id=2663): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff2a) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xfffffffffffffffb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xca, '\x00', 0x0, @fallback=0x1f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000007000000890704ac14427014fd86a3c7c65a02878dac1494aae01b64335a16140000010035f42c1621bb58b325d108895f143366153f0000000000b5fed800000000000027e2389f25b0a0d5cb46a1280cbc91d4def5b9a4e3b4a9590865bc", @ANYRES16=r3], 0x28}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="00eb010018000c0000000200000000000000002512cef4d2e800000d"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x20001}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x30040, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x5, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, r0, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg(0xffffffffffffffff, 0x0, 0x40001) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=0xffffffffffffffff, 0x6, 0x0, 0xf14, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000006c0), 0x0}, 0x40) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r4, @ANYRES16=r5], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000000cf01822e75de13af000000000020090100000000000000010000050000000000e9000002"], 0x0, 0x4a}, 0x28) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0xfffffffffffffe5f, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="04007c9ad2098863da12000022f4126294a4c87b683cf728a0629734738fcc201f8dd882406e3d64fe5a423481a602000bf31a8f479f544da66f7ca81b90d61d55c33c2b559f26efcda2254e5402479d13fca6e443d0d9ff5ba68e8dad057b1eb8ab678fb934889e45f781296dcd69ee14ab9bcff1d9c4fb95036d459786b85c0c9f171f3cc30bda508a288f6594a68b00ff878d4d790b654dd44165461e493424e915cce857dbd96af6e29e45160d722ebac29348d0e1355c44e5e94dd2364518300bee136d06b774903cdab04fd8", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0010000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x17, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000090000000000000002000000181100002404d0b4a757ffbf0e8385dbdbe15d30d9c69eefad45e6bd8538538a80e05b927409e794eb2e9066573aa7293eb2cd15b406a28c3f915c6aa5670046972f34f77ec9d7c5d3d5b864fb24db2113a6e5cc435be4048cb5fcf2fcb67caa8f6a1a02c8c19d00000000000000002c9a6f7243c4a57f5d7240111e25f57f34bf5a294c08b94d88d250d379a47948f45bdee545af68b11d9f", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000097168d28850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000000000018610000070000000000000000020000a593f4ff1000000018670000060000000000000000100000591108000c0000009500000000000000"], &(0x7f0000001a00)='syzkaller\x00', 0x6, 0x54, &(0x7f0000001a40)=""/84, 0x41000, 0x1, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001ac0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001b40)=[r1, r1, r1], &(0x7f0000001b80)=[{0x1, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x7, 0xb}, {0x0, 0x4, 0x4}, {0x5, 0x3, 0x3, 0x1}, {0x4, 0x2, 0x9, 0x7}, {0x5, 0x8003, 0xfffffffe, 0x4}]}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) 17.675755118s ago: executing program 2 (id=2664): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) 17.592742439s ago: executing program 2 (id=2665): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x2, &(0x7f00000000c0), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) (async, rerun: 64) r7 = socket$kcm(0x2c, 0x3, 0x0) (rerun: 64) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890b, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) 2.68701859s ago: executing program 32 (id=2655): r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r0, 0x6, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) (async) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0xb}, r2, 0x5, 0xffffffffffffffff, 0x2) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r4, 0x9, 0x18}, 0xc) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000000740)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.108140877s ago: executing program 33 (id=2663): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff2a) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xfffffffffffffffb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xca, '\x00', 0x0, @fallback=0x1f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000007000000890704ac14427014fd86a3c7c65a02878dac1494aae01b64335a16140000010035f42c1621bb58b325d108895f143366153f0000000000b5fed800000000000027e2389f25b0a0d5cb46a1280cbc91d4def5b9a4e3b4a9590865bc", @ANYRES16=r3], 0x28}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="00eb010018000c0000000200000000000000002512cef4d2e800000d"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x20001}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x30040, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x5, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, r0, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) sendmsg(0xffffffffffffffff, 0x0, 0x40001) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=0xffffffffffffffff, 0x6, 0x0, 0xf14, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000006c0), 0x0}, 0x40) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r4, @ANYRES16=r5], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000000cf01822e75de13af000000000020090100000000000000010000050000000000e9000002"], 0x0, 0x4a}, 0x28) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0xfffffffffffffe5f, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r10, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="04007c9ad2098863da12000022f4126294a4c87b683cf728a0629734738fcc201f8dd882406e3d64fe5a423481a602000bf31a8f479f544da66f7ca81b90d61d55c33c2b559f26efcda2254e5402479d13fca6e443d0d9ff5ba68e8dad057b1eb8ab678fb934889e45f781296dcd69ee14ab9bcff1d9c4fb95036d459786b85c0c9f171f3cc30bda508a288f6594a68b00ff878d4d790b654dd44165461e493424e915cce857dbd96af6e29e45160d722ebac29348d0e1355c44e5e94dd2364518300bee136d06b774903cdab04fd8", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0e0010000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x17, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000090000000000000002000000181100002404d0b4a757ffbf0e8385dbdbe15d30d9c69eefad45e6bd8538538a80e05b927409e794eb2e9066573aa7293eb2cd15b406a28c3f915c6aa5670046972f34f77ec9d7c5d3d5b864fb24db2113a6e5cc435be4048cb5fcf2fcb67caa8f6a1a02c8c19d00000000000000002c9a6f7243c4a57f5d7240111e25f57f34bf5a294c08b94d88d250d379a47948f45bdee545af68b11d9f", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000097168d28850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000000000018610000070000000000000000020000a593f4ff1000000018670000060000000000000000100000591108000c0000009500000000000000"], &(0x7f0000001a00)='syzkaller\x00', 0x6, 0x54, &(0x7f0000001a40)=""/84, 0x41000, 0x1, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001ac0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001b40)=[r1, r1, r1], &(0x7f0000001b80)=[{0x1, 0x3, 0x1, 0x4}, {0x1, 0x2, 0x7, 0xb}, {0x0, 0x4, 0x4}, {0x5, 0x3, 0x3, 0x1}, {0x4, 0x2, 0x9, 0x7}, {0x5, 0x8003, 0xfffffffe, 0x4}]}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) 573.411454ms ago: executing program 34 (id=2660): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000009c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x5, 0xff, 0x7, 0x0, 0x7fffffff, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x20a, 0x1, 0x7, 0x2, 0x81, 0x7, 0x8, 0x0, 0x58, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000deff000000000000006eb1b364b436b7d2860d0659c7491b2dabe1a835e455d48f359ef21464193fdb76ebdacdecafdc6b66b4c34993452588e104e8c5e5e84f35c3df12be26b67ea870f68316327816a6460166077b387920f2ee646d3b62da850072a2a3d221091b5df72c775b50a01488716550dd2774e640c16c1658e492b2ed1538557561f60aa31be65812c130886a3f59da1bafb69191f866df3e49df79e95595ec02ec609605d1ea64f18082792c3e8ee492d49f28b4261680c7e4b04891edb56897ee9c220488f266684559f977de69ba09ce3277c209519fafee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x3, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="e85e3071000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x21, 0x81, 0xa4e0, 0xdd47, 0x428, r6, 0xdf, '\x00', 0x0, r8, 0x2, 0x1, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x32, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) 0s ago: executing program 35 (id=2665): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x2, &(0x7f00000000c0), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) (async, rerun: 64) r7 = socket$kcm(0x2c, 0x3, 0x0) (rerun: 64) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890b, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): 10208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.042377][T10208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.055958][T10208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.073291][T10208] 57456 total pagecache pages [ 265.078295][T10208] 0 pages in swap cache [ 265.082589][T10208] Free swap = 124996kB [ 265.095984][T10208] Total swap = 124996kB [ 265.100471][T10208] 2097051 pages RAM [ 265.112122][T10208] 0 pages HighMem/MovableOnly [ 265.117211][T10208] 416927 pages reserved [ 265.121751][T10208] 0 pages cma reserved [ 265.310407][T10237] netlink: 'syz.0.1290': attribute type 29 has an invalid length. [ 265.326719][T10237] netlink: 'syz.0.1290': attribute type 29 has an invalid length. [ 265.338552][T10237] netlink: 'syz.0.1290': attribute type 29 has an invalid length. [ 265.352309][T10237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1290'. [ 265.464210][T10239] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 265.482393][T10239] syz_tun: entered promiscuous mode [ 265.505490][T10239] syz_tun: entered allmulticast mode [ 265.511351][T10239] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 265.551847][T10241] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1292'. [ 265.638272][T10245] tap0: tun_chr_ioctl cmd 35111 [ 265.831468][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 266.579425][T10262] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1297'. [ 266.600703][T10262] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.1297'. [ 266.646244][T10264] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1298'. [ 266.682748][T10266] netlink: 'syz.3.1299': attribute type 5 has an invalid length. [ 266.804463][T10268] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 267.573084][T10285] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 268.450286][T10297] validate_nla: 1 callbacks suppressed [ 268.450302][T10297] netlink: 'syz.3.1307': attribute type 22 has an invalid length. [ 269.002525][T10312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.213078][T10322] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 269.257669][T10322] bond0: (slave dummy0): Releasing backup interface [ 269.268263][T10322] dummy0: left promiscuous mode [ 269.276710][T10322] dummy0: left allmulticast mode [ 269.295515][T10322] team0: Port device dummy0 added [ 269.319249][T10326] __nla_validate_parse: 3 callbacks suppressed [ 269.319266][T10326] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.1316'. [ 269.338411][T10324] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1314'. [ 269.477309][T10329] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 269.524027][T10329] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 269.604879][T10331] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 269.647318][T10333] netlink: 'syz.1.1317': attribute type 21 has an invalid length. [ 269.665293][T10333] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1317'. [ 269.709234][T10336] netlink: 'syz.0.1320': attribute type 3 has an invalid length. [ 269.752471][T10336] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1320'. [ 271.828591][T10339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1321'. [ 272.025587][T10365] netlink: 'syz.1.1329': attribute type 46 has an invalid length. [ 273.190107][T10381] netlink: 'syz.1.1334': attribute type 19 has an invalid length. [ 273.234158][T10383] netlink: 'syz.0.1335': attribute type 7 has an invalid length. [ 273.639383][T10396] netlink: 'syz.1.1339': attribute type 9 has an invalid length. [ 273.651302][T10396] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1339'. [ 274.010674][T10393] À: port 1(vlan0) entered blocking state [ 274.024043][T10398] netlink: 'syz.1.1339': attribute type 9 has an invalid length. [ 274.054527][T10393] À: port 1(vlan0) entered disabled state [ 274.079121][T10398] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1339'. [ 274.102188][T10393] vlan0: entered allmulticast mode [ 274.120605][T10393] veth0_vlan: entered allmulticast mode [ 274.141644][T10393] vlan0: entered promiscuous mode [ 274.161012][T10393] À: port 1(vlan0) entered blocking state [ 274.166919][T10393] À: port 1(vlan0) entered forwarding state [ 274.229853][T10401] netlink: 'syz.3.1340': attribute type 7 has an invalid length. [ 275.423517][T10406] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.472068][T10405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1342'. [ 275.503367][T10406] openvswitch: netlink: Key type 29 is not supported [ 275.527508][T10406] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.543479][T10406] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.578243][T10406] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.807884][T10419] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 275.853251][T10419] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1345'. [ 276.283496][T10430] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1348'. [ 276.416829][T10436] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1350'. [ 276.446463][T10436] bridge0: port 4(bond0) entered disabled state [ 276.556546][T10436] bridge0: port 4(bond0) entered disabled state [ 276.566880][T10436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.579786][T10436] bond_slave_0: left promiscuous mode [ 276.588668][T10436] bond_slave_0: left allmulticast mode [ 276.607636][T10436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.619433][T10436] bond_slave_1: left promiscuous mode [ 276.625818][T10436] bond_slave_1: left allmulticast mode [ 276.645934][T10436] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 276.656629][T10436] bridge_slave_1: left promiscuous mode [ 276.662800][T10436] bridge_slave_1: left allmulticast mode [ 276.671988][T10436] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 276.681956][T10436] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 276.689682][T10436] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 276.701854][T10436] bond0 (unregistering): Released all slaves [ 276.712139][T10444] netlink: 'syz.3.1352': attribute type 21 has an invalid length. [ 276.720920][T10444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1352'. [ 276.988418][T10454] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1357'. [ 277.363598][T10476] netlink: 'syz.0.1364': attribute type 39 has an invalid length. [ 277.938601][T10498] netlink: 'syz.0.1369': attribute type 27 has an invalid length. [ 278.237409][T10505] netlink: 'syz.2.1371': attribute type 23 has an invalid length. [ 279.504288][T10535] netlink: 'syz.0.1377': attribute type 21 has an invalid length. [ 279.617118][T10536] netlink: 'syz.2.1380': attribute type 39 has an invalid length. [ 280.368276][T10557] netlink: 'syz.3.1388': attribute type 25 has an invalid length. [ 280.419696][T10557] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 280.456325][T10557] __nla_validate_parse: 4 callbacks suppressed [ 280.456341][T10557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1388'. [ 283.632377][T10588] syzkaller1: entered promiscuous mode [ 283.643990][T10588] syzkaller1: entered allmulticast mode [ 283.665047][T10588] netlink: 206976 bytes leftover after parsing attributes in process `syz.2.1397'. [ 283.876443][T10593] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 283.902635][T10593] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1399'. [ 285.065409][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.073038][T10634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.170588][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.187301][T10634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.328456][T10636] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1412'. [ 285.429257][T10647] netlink: 'syz.0.1414': attribute type 25 has an invalid length. [ 285.444985][T10647] netlink: 'syz.0.1414': attribute type 7 has an invalid length. [ 285.546727][T10647] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1414'. [ 285.563826][T10647] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 285.845262][T10667] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 285.880056][T10667] team0: Device wg1 is of different type [ 285.946876][T10672] netlink: 'syz.1.1417': attribute type 6 has an invalid length. [ 285.994673][T10672] netlink: 167332 bytes leftover after parsing attributes in process `syz.1.1417'. [ 286.960009][T10679] netlink: 'syz.2.1422': attribute type 8 has an invalid length. [ 286.997914][T10679] netlink: 'syz.2.1422': attribute type 9 has an invalid length. [ 287.030821][T10679] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 287.051222][T10679] netlink: 'syz.2.1422': attribute type 11 has an invalid length. [ 287.084701][T10679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'. [ 287.530759][T10698] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1428'. [ 288.562050][T10726] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1434'. [ 288.594687][T10727] tap0: tun_chr_ioctl cmd 35108 [ 288.856660][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.885627][T10742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.951855][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.961452][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.711460][T10765] syz.2.1447: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 289.753536][T10765] CPU: 0 PID: 10765 Comm: syz.2.1447 Not tainted syzkaller #0 [ 289.761076][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.771170][T10765] Call Trace: [ 289.774496][T10765] [ 289.777478][T10765] dump_stack_lvl+0x18c/0x250 [ 289.782223][T10765] ? show_regs_print_info+0x20/0x20 [ 289.787462][T10765] ? load_image+0x420/0x420 [ 289.791998][T10765] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 289.798445][T10765] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 289.804980][T10765] warn_alloc+0x246/0x340 [ 289.809349][T10765] ? stack_trace_save+0xaa/0x100 [ 289.814317][T10765] ? zone_watermark_ok_safe+0x230/0x230 [ 289.819906][T10765] ? kasan_set_track+0x5f/0x70 [ 289.824686][T10765] ? kasan_set_track+0x4e/0x70 [ 289.829456][T10765] ? __kasan_kmalloc+0x8f/0xa0 [ 289.834235][T10765] ? xsk_init_queue+0xad/0x100 [ 289.839004][T10765] ? xsk_setsockopt+0x4e5/0x760 [ 289.843855][T10765] ? do_sock_setsockopt+0x175/0x1a0 [ 289.849045][T10765] ? __x64_sys_setsockopt+0x182/0x200 [ 289.854415][T10765] __vmalloc_node_range+0x126/0x1330 [ 289.859731][T10765] ? free_vm_area+0x50/0x50 [ 289.864244][T10765] vmalloc_user+0x74/0x80 [ 289.868575][T10765] ? xskq_create+0xbf/0x170 [ 289.873077][T10765] xskq_create+0xbf/0x170 [ 289.877406][T10765] xsk_init_queue+0xad/0x100 [ 289.881997][T10765] xsk_setsockopt+0x4e5/0x760 [ 289.886677][T10765] ? xsk_poll+0x680/0x680 [ 289.891006][T10765] ? __fget_files+0x28/0x4b0 [ 289.895589][T10765] ? __fget_files+0x28/0x4b0 [ 289.900174][T10765] ? aa_sock_opt_perm+0x74/0x100 [ 289.905108][T10765] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 289.910646][T10765] ? security_socket_setsockopt+0x7e/0xa0 [ 289.916359][T10765] ? xsk_poll+0x680/0x680 [ 289.920688][T10765] do_sock_setsockopt+0x175/0x1a0 [ 289.925704][T10765] ? __fdget+0x180/0x210 [ 289.929945][T10765] __x64_sys_setsockopt+0x182/0x200 [ 289.935139][T10765] do_syscall_64+0x55/0xa0 [ 289.939545][T10765] ? clear_bhb_loop+0x40/0x90 [ 289.944216][T10765] ? clear_bhb_loop+0x40/0x90 [ 289.948886][T10765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.954772][T10765] RIP: 0033:0x7f7127f9cdd9 [ 289.959181][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.978784][T10765] RSP: 002b:00007f7128f28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 289.987195][T10765] RAX: ffffffffffffffda RBX: 00007f7128215fa0 RCX: 00007f7127f9cdd9 [ 289.995158][T10765] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 290.003116][T10765] RBP: 00007f7128032d69 R08: 0000000000000004 R09: 0000000000000000 [ 290.011079][T10765] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 290.019043][T10765] R13: 00007f7128216038 R14: 00007f7128215fa0 R15: 00007ffca1c5d9b8 [ 290.027019][T10765] [ 290.043687][T10765] Mem-Info: [ 290.047064][T10765] active_anon:11165 inactive_anon:0 isolated_anon:0 [ 290.047064][T10765] active_file:17035 inactive_file:40020 isolated_file:0 [ 290.047064][T10765] unevictable:768 dirty:147 writeback:0 [ 290.047064][T10765] slab_reclaimable:10459 slab_unreclaimable:93803 [ 290.047064][T10765] mapped:26660 shmem:3911 pagetables:629 [ 290.047064][T10765] sec_pagetables:0 bounce:0 [ 290.047064][T10765] kernel_misc_reclaimable:0 [ 290.047064][T10765] free:1343552 free_pcp:8626 free_cma:0 [ 290.117259][T10765] Node 0 active_anon:46380kB inactive_anon:0kB active_file:68140kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108128kB dirty:588kB writeback:0kB shmem:15636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no [ 290.151668][T10765] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 290.233375][T10765] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.286559][T10765] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 290.305616][T10765] Node 0 DMA32 free:1456812kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49940kB inactive_anon:0kB active_file:68140kB inactive_file:159056kB unevictable:1536kB writepending:588kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:16296kB local_pcp:2816kB free_cma:0kB [ 290.373313][T10765] lowmem_reserve[]: 0 0 0 0 0 [ 290.378645][T10765] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 290.433323][T10765] lowmem_reserve[]: 0 0 0 0 0 [ 290.438787][T10765] Node 1 Normal free:3898504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17316kB local_pcp:8352kB free_cma:0kB [ 290.560501][T10765] lowmem_reserve[]: 0 0 0 0 0 [ 290.579395][T10765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 290.600819][T10765] Node 0 DMA32: 1021*4kB (UME) 152*8kB (UE) 498*16kB (UME) 1373*32kB (UME) 373*64kB (UME) 108*128kB (UME) 82*256kB (UME) 36*512kB (UME) 21*1024kB (ME) 11*2048kB (UM) 312*4096kB (UM) = 1456308kB [ 290.627514][T10765] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 290.642070][T10765] Node 1 Normal: 182*4kB (UE) 44*8kB (UME) 37*16kB (UME) 58*32kB (UME) 15*64kB (UE) 6*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3898504kB [ 290.665036][T10765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.677053][T10765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.707111][T10765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.727781][T10765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.742785][T10765] 63848 total pagecache pages [ 290.759785][T10765] 0 pages in swap cache [ 290.767370][T10765] Free swap = 124996kB [ 290.771631][T10765] Total swap = 124996kB [ 290.777635][T10765] 2097051 pages RAM [ 290.781559][T10765] 0 pages HighMem/MovableOnly [ 290.795343][T10765] 416927 pages reserved [ 290.799912][T10765] 0 pages cma reserved [ 290.933948][T10801] netlink: zone id is out of range [ 290.939514][T10801] netlink: set zone limit has 8 unknown bytes [ 290.956568][T10799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.964880][T10799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.976532][T10799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.984492][T10799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.994107][T10799] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 291.001455][T10799] batman_adv: batadv0: Removing interface: virt_wifi0 [ 291.342636][T10808] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1457'. [ 291.379712][T10809] netlink: 'syz.1.1456': attribute type 3 has an invalid length. [ 291.383616][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 291.413504][T10809] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1456'. [ 292.003891][T10819] syzkaller0: entered promiscuous mode [ 292.023523][T10819] syzkaller0: entered allmulticast mode [ 292.117306][T10832] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1463'. [ 294.330906][T10869] netlink: 'syz.3.1469': attribute type 10 has an invalid length. [ 294.354437][T10869] netlink: 'syz.3.1469': attribute type 19 has an invalid length. [ 294.388157][T10869] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1469'. [ 294.429624][T10868] netlink: 'syz.3.1469': attribute type 10 has an invalid length. [ 294.448175][T10868] netlink: 'syz.3.1469': attribute type 19 has an invalid length. [ 294.456427][T10868] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1469'. [ 294.529860][T10873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1471'. [ 294.543770][T10875] netlink: 'syz.0.1470': attribute type 21 has an invalid length. [ 294.552340][T10875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1470'. [ 294.563932][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 294.583341][T10873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1471'. [ 294.971980][T10887] netlink: 'syz.0.1474': attribute type 3 has an invalid length. [ 295.256281][T10891] netlink: 'syz.3.1475': attribute type 6 has an invalid length. [ 296.560283][T10934] __nla_validate_parse: 7 callbacks suppressed [ 296.560297][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1487'. [ 296.578616][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1487'. [ 296.589617][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1487'. [ 296.599920][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1487'. [ 296.699989][T10940] sock: sock_set_timeout: `syz.0.1489' (pid 10940) tries to set negative timeout [ 297.163507][T10953] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.177886][T10953] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1494'. [ 300.654494][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 300.748193][T10993] netlink: 'syz.0.1506': attribute type 21 has an invalid length. [ 300.775858][T10993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1506'. [ 301.775465][T10997] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.1508'. [ 301.995353][T11023] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1515'. [ 302.419487][T11034] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 302.428314][T11034] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 302.586105][T11041] veth1_macvtap: entered promiscuous mode [ 302.591975][T11041] veth1_macvtap: left allmulticast mode [ 302.605579][T11041] veth1_macvtap: left promiscuous mode [ 303.574422][T11057] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1529'. [ 304.331641][T11082] netlink: 'syz.1.1535': attribute type 19 has an invalid length. [ 304.340202][T11082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1535'. [ 304.365880][T11083] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1536'. [ 304.417990][T11083] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 304.902580][T11089] netlink: 'syz.2.1538': attribute type 9 has an invalid length. [ 304.943616][T11089] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.1538'. [ 305.012137][T11091] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1539'. [ 305.042115][T11091] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1539'. [ 305.800230][T11103] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1543'. [ 306.120791][T11108] netlink: 'syz.3.1545': attribute type 5 has an invalid length. [ 306.416352][T11118] netlink: 'syz.3.1548': attribute type 4 has an invalid length. [ 306.694865][T11120] netlink: 'syz.3.1549': attribute type 13 has an invalid length. [ 307.373916][T11166] tap0: tun_chr_ioctl cmd 35108 [ 307.570968][T11186] wg2: entered promiscuous mode [ 307.581285][T11186] wg2: entered allmulticast mode [ 308.021950][T11233] netlink: 'syz.3.1563': attribute type 8 has an invalid length. [ 308.045302][T11233] __nla_validate_parse: 5 callbacks suppressed [ 308.045319][T11233] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1563'. [ 308.501897][T11245] IPv6: pim6reg1: Disabled Multicast RS [ 309.002710][T11268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.022748][T11261] netlink: 'syz.2.1570': attribute type 9 has an invalid length. [ 309.042100][T11261] netlink: 179572 bytes leftover after parsing attributes in process `syz.2.1570'. [ 310.009612][T11291] netlink: 'syz.3.1580': attribute type 3 has an invalid length. [ 310.038943][T11291] netlink: 'syz.3.1580': attribute type 6 has an invalid length. [ 310.073265][T11291] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1580'. [ 310.136390][T11293] netlink: 'syz.3.1580': attribute type 3 has an invalid length. [ 310.159859][T11300] netlink: 'syz.0.1583': attribute type 22 has an invalid length. [ 310.165166][T11301] delete_channel: no stack [ 310.169920][T11293] netlink: 'syz.3.1580': attribute type 6 has an invalid length. [ 310.186354][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 310.204337][T11293] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1580'. [ 310.968033][T11322] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1586'. [ 311.217268][T11326] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1591'. [ 311.287642][T11327] syzkaller0: entered promiscuous mode [ 311.302279][T11327] syzkaller0: entered allmulticast mode [ 312.561493][T11353] can: request_module (can-proto-0) failed. [ 313.878325][T11351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.906790][T11351] bond_slave_0: left promiscuous mode [ 313.932810][T11351] bond_slave_0: left allmulticast mode [ 313.951701][T11351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.961210][T11351] bond_slave_1: left promiscuous mode [ 313.967277][T11351] bond_slave_1: left allmulticast mode [ 313.980998][T11351] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 313.991014][T11351] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 313.999217][T11351] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 314.016331][T11351] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 314.025969][T11351] bridge_slave_1: left promiscuous mode [ 314.031830][T11351] bridge_slave_1: left allmulticast mode [ 314.042565][T11351] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 314.051686][T11351] syz_tun: left allmulticast mode [ 314.062173][T11351] bond0 (unregistering): Released all slaves [ 314.072631][T11354] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 314.080750][T11354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1599'. [ 314.091335][T11354] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 314.522983][T11381] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 314.530649][T11381] dvmrp1: linktype set to 823 [ 315.288025][T11398] netlink: 'syz.3.1612': attribute type 17 has an invalid length. [ 315.298471][T11398] netlink: 'syz.3.1612': attribute type 16 has an invalid length. [ 315.307987][T11398] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1612'. [ 315.460908][T11389] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.1608'. [ 316.165483][T11415] netlink: 'syz.2.1616': attribute type 1 has an invalid length. [ 316.175142][T11415] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1616'. [ 316.195156][T11415] netlink: 'syz.2.1616': attribute type 25 has an invalid length. [ 316.214747][T11417] netlink: 151496 bytes leftover after parsing attributes in process `syz.0.1617'. [ 316.538299][T11430] netlink: set zone limit has 8 unknown bytes [ 316.895491][T11443] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 316.913664][T11443] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 317.202995][T11447] netlink: 'syz.1.1625': attribute type 10 has an invalid length. [ 317.262042][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.268948][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.850206][T11464] netlink: 'syz.2.1629': attribute type 29 has an invalid length. [ 317.965776][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 317.971361][T11464] netlink: 'syz.2.1629': attribute type 29 has an invalid length. [ 317.981619][T11469] tap0: tun_chr_ioctl cmd 1074025681 [ 318.007423][T11473] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1631'. [ 318.023263][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.043673][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.049059][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.118060][T11473] netlink: 'syz.3.1631': attribute type 13 has an invalid length. [ 318.138077][T11473] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1631'. [ 318.157381][T11473] syz_tun: refused to change device tx_queue_len [ 318.165181][T11473] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 318.189823][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.197565][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.213767][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.219548][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.233404][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.260683][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.268460][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.276048][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.291736][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.305164][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.310568][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.339715][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.365004][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.383370][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.413970][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.434829][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.448296][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.480590][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.488998][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.502282][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.507784][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.512498][T11489] netlink: 'syz.1.1637': attribute type 9 has an invalid length. [ 318.514375][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.526411][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.536396][T11489] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1637'. [ 318.562236][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.577552][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.595767][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.604953][T11493] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1637'. [ 318.606394][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.622372][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.644643][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.650043][T11468] tap0: tun_chr_ioctl cmd 1074025673 [ 318.945797][T11509] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1645'. [ 318.983011][T11509] netlink: 'syz.2.1645': attribute type 11 has an invalid length. [ 319.006145][T11509] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 319.031449][T11509] CPU: 1 PID: 11509 Comm: syz.2.1645 Not tainted syzkaller #0 [ 319.038953][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.049037][T11509] Call Trace: [ 319.052334][T11509] [ 319.055281][T11509] dump_stack_lvl+0x18c/0x250 [ 319.060000][T11509] ? show_regs_print_info+0x20/0x20 [ 319.065229][T11509] ? load_image+0x420/0x420 [ 319.069781][T11509] sysfs_warn_dup+0x8e/0xa0 [ 319.074310][T11509] sysfs_do_create_link_sd+0xc0/0x110 [ 319.079718][T11509] device_add_class_symlinks+0x1cf/0x240 [ 319.085384][T11509] device_add+0x507/0xc20 [ 319.089744][T11509] wiphy_register+0x1dad/0x2ae0 [ 319.094637][T11509] ? cfg80211_event_work+0x40/0x40 [ 319.099773][T11509] ? minstrel_ht_alloc+0x88a/0x990 [ 319.104922][T11509] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 319.111025][T11509] ieee80211_register_hw+0x3464/0x4250 [ 319.116536][T11509] ? ieee80211_tasklet_handler+0x20/0x20 [ 319.122189][T11509] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 319.128114][T11509] ? __debug_object_init+0xec/0x450 [ 319.133347][T11509] ? __asan_memset+0x22/0x40 [ 319.137965][T11509] ? __hrtimer_init+0x186/0x270 [ 319.142938][T11509] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 319.148714][T11509] ? mac80211_hwsim_free+0x220/0x220 [ 319.154025][T11509] ? rcu_is_watching+0x15/0xb0 [ 319.158821][T11509] ? kstrndup+0xbd/0x140 [ 319.163106][T11509] hwsim_new_radio_nl+0xdc9/0x1a90 [ 319.168248][T11509] ? __nla_validate+0x50/0x50 [ 319.172966][T11509] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 319.179313][T11509] ? __nla_parse+0x40/0x50 [ 319.183737][T11509] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 319.190100][T11509] genl_family_rcv_msg_doit+0x211/0x310 [ 319.195678][T11509] ? end_current_label_crit_section+0x170/0x170 [ 319.201952][T11509] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 319.207880][T11509] ? bpf_lsm_capable+0x9/0x10 [ 319.212589][T11509] ? security_capable+0x89/0xb0 [ 319.217479][T11509] genl_rcv_msg+0x619/0x7a0 [ 319.222013][T11509] ? genl_bind+0x360/0x360 [ 319.226457][T11509] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 319.232820][T11509] ? ref_tracker_free+0x690/0x840 [ 319.237883][T11509] netlink_rcv_skb+0x241/0x4d0 [ 319.242678][T11509] ? genl_bind+0x360/0x360 [ 319.247119][T11509] ? netlink_ack+0x1180/0x1180 [ 319.251924][T11509] ? __lock_acquire+0x7d40/0x7d40 [ 319.256982][T11509] ? down_read+0x1ac/0x2e0 [ 319.261415][T11509] genl_rcv+0x28/0x40 [ 319.265415][T11509] netlink_unicast+0x751/0x8d0 [ 319.270224][T11509] netlink_sendmsg+0x8d0/0xbf0 [ 319.275015][T11509] ? netlink_getsockopt+0x590/0x590 [ 319.280209][T11509] ? aa_sock_msg_perm+0x94/0x150 [ 319.285140][T11509] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 319.290413][T11509] ? security_socket_sendmsg+0x80/0xa0 [ 319.295859][T11509] ? netlink_getsockopt+0x590/0x590 [ 319.301049][T11509] ____sys_sendmsg+0x5ba/0x960 [ 319.305805][T11509] ? __asan_memset+0x22/0x40 [ 319.310384][T11509] ? __sys_sendmsg_sock+0x30/0x30 [ 319.315396][T11509] ? __import_iovec+0x5f2/0x850 [ 319.320243][T11509] ? import_iovec+0x73/0xa0 [ 319.324755][T11509] ___sys_sendmsg+0x2a6/0x360 [ 319.329447][T11509] ? __sys_sendmsg+0x2a0/0x2a0 [ 319.334275][T11509] __se_sys_sendmsg+0x1c2/0x2b0 [ 319.335175][T11529] validate_nla: 1 callbacks suppressed [ 319.335187][T11529] netlink: 'syz.0.1650': attribute type 153 has an invalid length. [ 319.339133][T11509] ? __x64_sys_sendmsg+0x80/0x80 [ 319.344839][T11529] __nla_validate_parse: 1 callbacks suppressed [ 319.344851][T11529] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1650'. [ 319.352462][T11509] ? lockdep_hardirqs_on+0x98/0x150 [ 319.377996][T11509] do_syscall_64+0x55/0xa0 [ 319.382436][T11509] ? clear_bhb_loop+0x40/0x90 [ 319.387142][T11509] ? clear_bhb_loop+0x40/0x90 [ 319.391825][T11509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.397735][T11509] RIP: 0033:0x7f7127f9cdd9 [ 319.402142][T11509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.421744][T11509] RSP: 002b:00007f7128f28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.430148][T11509] RAX: ffffffffffffffda RBX: 00007f7128215fa0 RCX: 00007f7127f9cdd9 [ 319.438113][T11509] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 319.446089][T11509] RBP: 00007f7128032d69 R08: 0000000000000000 R09: 0000000000000000 [ 319.454082][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.462068][T11509] R13: 00007f7128216038 R14: 00007f7128215fa0 R15: 00007ffca1c5d9b8 [ 319.470075][T11509] [ 319.551443][T11526] netlink: 'syz.3.1647': attribute type 3 has an invalid length. [ 319.564501][T11526] netlink: 'syz.3.1647': attribute type 8 has an invalid length. [ 319.572915][T11526] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1647'. [ 319.766857][T11541] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1653'. [ 319.958838][T11554] netlink: 5750 bytes leftover after parsing attributes in process `syz.3.1658'. [ 320.186985][T11565] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1660'. [ 320.597195][T11593] netlink: 'syz.3.1668': attribute type 10 has an invalid length. [ 321.291338][T11627] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 321.337796][T11627] team0: Port device hsr_slave_0 added [ 321.354334][T11628] netlink: 'syz.3.1677': attribute type 10 has an invalid length. [ 322.518957][T11649] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1685'. [ 323.146642][T11666] netlink: 'syz.1.1689': attribute type 11 has an invalid length. [ 323.179263][T11666] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1689'. [ 323.215154][T11672] netlink: 'syz.1.1689': attribute type 4 has an invalid length. [ 323.222934][T11672] netlink: 174100 bytes leftover after parsing attributes in process `syz.1.1689'. [ 323.342833][T11666] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 326.907525][T11695] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 326.922562][T11695] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 330.988943][T11702] syzkaller0: entered promiscuous mode [ 330.997029][T11702] syzkaller0: entered allmulticast mode [ 331.009586][T11711] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1700'. [ 331.020848][T11711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.476659][T11733] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.493507][T11734] netlink: 'syz.1.1705': attribute type 3 has an invalid length. [ 332.501297][T11734] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1705'. [ 332.706754][T11752] netlink: 207776 bytes leftover after parsing attributes in process `syz.2.1712'. [ 335.107158][T11781] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 335.260812][T11781] netlink: 'syz.3.1719': attribute type 28 has an invalid length. [ 335.304895][T11781] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 335.312745][T11781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1719'. [ 335.548317][T11794] pim6reg1: entered promiscuous mode [ 335.556077][T11794] pim6reg1: entered allmulticast mode [ 335.576969][T11794] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1723'. [ 335.729135][T11807] netlink: 'syz.0.1728': attribute type 33 has an invalid length. [ 335.743200][T11807] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1728'. [ 335.773054][T11807] `: renamed from ip6tnl0 (while UP) [ 335.865425][T11807] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 336.020272][T11803] netlink: 'syz.3.1726': attribute type 2 has an invalid length. [ 336.493221][T11835] netlink: 'syz.0.1735': attribute type 2 has an invalid length. [ 336.501001][T11835] netlink: 'syz.0.1735': attribute type 9 has an invalid length. [ 336.548776][T11835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1735'. [ 336.671141][T11845] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 336.679421][T11845] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1738'. [ 336.988665][T11853] netlink: 'syz.3.1740': attribute type 29 has an invalid length. [ 337.324685][T11860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1742'. [ 337.627564][T11866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.651905][T11868] validate_nla: 7 callbacks suppressed [ 337.651951][T11868] netlink: 'syz.0.1746': attribute type 27 has an invalid length. [ 337.671553][T11868] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1746'. [ 337.754862][T11871] netlink: 'syz.1.1744': attribute type 21 has an invalid length. [ 337.780417][T11870] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.539745][T11877] netlink: 'syz.3.1747': attribute type 29 has an invalid length. [ 338.557856][T11877] netlink: 'syz.3.1747': attribute type 29 has an invalid length. [ 340.417969][T11903] netlink: 'syz.0.1755': attribute type 10 has an invalid length. [ 340.427174][T11903] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 340.790467][T11915] pim6reg1: left promiscuous mode [ 340.799673][T11915] pim6reg1: left allmulticast mode [ 341.597768][T11954] netlink: 'syz.0.1771': attribute type 29 has an invalid length. [ 341.636365][T11954] netlink: 'syz.0.1771': attribute type 29 has an invalid length. [ 341.646280][T11956] netlink: 'syz.0.1771': attribute type 29 has an invalid length. [ 341.660501][T11954] netlink: 'syz.0.1771': attribute type 29 has an invalid length. [ 342.218225][T11946] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 342.330859][T11946] team0: Device ipvlan1 failed to register rx_handler [ 342.450439][T11969] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.473913][T11969] syzkaller0: entered promiscuous mode [ 342.479510][T11969] syzkaller0: entered allmulticast mode [ 342.525226][T11979] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1776'. [ 344.248874][T12011] delete_channel: no stack [ 344.287290][T12011] delete_channel: no stack [ 344.441318][T12018] validate_nla: 1 callbacks suppressed [ 344.441351][T12018] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 344.499023][T12018] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1787'. [ 344.589386][T12018] netlink: 'syz.2.1787': attribute type 3 has an invalid length. [ 344.647560][T12018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1787'. [ 344.940977][T12026] netlink: 'syz.1.1786': attribute type 10 has an invalid length. [ 345.195570][T12050] netlink: 'syz.3.1797': attribute type 2 has an invalid length. [ 345.237509][T12050] netlink: 'syz.3.1797': attribute type 8 has an invalid length. [ 345.267791][T12050] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1797'. [ 345.483287][T12062] netlink: 'syz.3.1801': attribute type 19 has an invalid length. [ 345.507545][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1801'. [ 346.042462][T12066] syzkaller0: entered promiscuous mode [ 346.075680][T12066] syzkaller0: entered allmulticast mode [ 353.712729][T12144] netlink: 'syz.1.1821': attribute type 3 has an invalid length. [ 353.742124][T12144] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1821'. [ 353.885404][T12155] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1825'. [ 353.913930][T12155] netlink: 7807 bytes leftover after parsing attributes in process `syz.3.1825'. [ 354.110361][T12162] netlink: 'syz.3.1828': attribute type 9 has an invalid length. [ 354.142762][T12162] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1828'. [ 354.162791][T12168] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1830'. [ 354.246194][T12168] sctp: [Deprecated]: syz.2.1830 (pid 12168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.246194][T12168] Use struct sctp_sack_info instead [ 354.644684][T12191] netlink: 'syz.0.1835': attribute type 3 has an invalid length. [ 354.652463][T12191] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1835'. [ 355.205271][T12214] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1842'. [ 355.218368][T12217] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1843'. [ 355.242129][T12217] hsr_slave_0: left promiscuous mode [ 355.297120][T12214] netlink: 'syz.3.1842': attribute type 11 has an invalid length. [ 355.329353][T12217] bridge0: port 3(hsr0) entered disabled state [ 355.342002][T12214] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1842'. [ 355.379080][T12217] hsr0 (unregistering): left allmulticast mode [ 355.385727][T12217] bridge0: port 3(hsr0) entered disabled state [ 355.411098][T12218] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1842'. [ 355.421017][T12218] bridge_slave_1: default FDB implementation only supports local addresses [ 355.466719][T12214] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 355.494036][T12214] CPU: 1 PID: 12214 Comm: syz.3.1842 Not tainted syzkaller #0 [ 355.501538][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.511595][T12214] Call Trace: [ 355.514891][T12214] [ 355.517840][T12214] dump_stack_lvl+0x18c/0x250 [ 355.522552][T12214] ? show_regs_print_info+0x20/0x20 [ 355.527781][T12214] ? load_image+0x420/0x420 [ 355.532335][T12214] sysfs_warn_dup+0x8e/0xa0 [ 355.536868][T12214] sysfs_do_create_link_sd+0xc0/0x110 [ 355.542265][T12214] device_add_class_symlinks+0x1cf/0x240 [ 355.547922][T12214] device_add+0x507/0xc20 [ 355.552281][T12214] wiphy_register+0x1dad/0x2ae0 [ 355.557177][T12214] ? cfg80211_event_work+0x40/0x40 [ 355.562306][T12214] ? minstrel_ht_alloc+0x88a/0x990 [ 355.567452][T12214] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 355.573554][T12214] ieee80211_register_hw+0x3464/0x4250 [ 355.579067][T12214] ? ieee80211_tasklet_handler+0x20/0x20 [ 355.584720][T12214] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 355.590642][T12214] ? __debug_object_init+0xec/0x450 [ 355.595881][T12214] ? __asan_memset+0x22/0x40 [ 355.600500][T12214] ? __hrtimer_init+0x186/0x270 [ 355.605379][T12214] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 355.611158][T12214] ? mac80211_hwsim_free+0x220/0x220 [ 355.616464][T12214] ? rcu_is_watching+0x15/0xb0 [ 355.621269][T12214] ? kstrndup+0xbd/0x140 [ 355.625539][T12214] hwsim_new_radio_nl+0xdc9/0x1a90 [ 355.630677][T12214] ? __nla_validate+0x50/0x50 [ 355.635386][T12214] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 355.641743][T12214] ? __nla_parse+0x40/0x50 [ 355.646174][T12214] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 355.652526][T12214] genl_family_rcv_msg_doit+0x211/0x310 [ 355.658082][T12214] ? end_current_label_crit_section+0x170/0x170 [ 355.664343][T12214] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 355.670258][T12214] ? bpf_lsm_capable+0x9/0x10 [ 355.674956][T12214] ? security_capable+0x89/0xb0 [ 355.679834][T12214] genl_rcv_msg+0x619/0x7a0 [ 355.684361][T12214] ? genl_bind+0x360/0x360 [ 355.688797][T12214] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 355.695163][T12214] netlink_rcv_skb+0x241/0x4d0 [ 355.699960][T12214] ? genl_bind+0x360/0x360 [ 355.704393][T12214] ? netlink_ack+0x1180/0x1180 [ 355.709175][T12214] ? __lock_acquire+0x7d40/0x7d40 [ 355.714199][T12214] ? net_generic+0x1e/0x240 [ 355.718713][T12214] ? down_read+0x1ac/0x2e0 [ 355.723135][T12214] genl_rcv+0x28/0x40 [ 355.727115][T12214] netlink_unicast+0x751/0x8d0 [ 355.731887][T12214] netlink_sendmsg+0x8d0/0xbf0 [ 355.736655][T12214] ? netlink_getsockopt+0x590/0x590 [ 355.741852][T12214] ? aa_sock_msg_perm+0x94/0x150 [ 355.746789][T12214] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 355.752066][T12214] ? security_socket_sendmsg+0x80/0xa0 [ 355.757520][T12214] ? netlink_getsockopt+0x590/0x590 [ 355.762720][T12214] ____sys_sendmsg+0x5ba/0x960 [ 355.767490][T12214] ? __asan_memset+0x22/0x40 [ 355.772075][T12214] ? __sys_sendmsg_sock+0x30/0x30 [ 355.777087][T12214] ? __import_iovec+0x5f2/0x850 [ 355.781937][T12214] ? import_iovec+0x73/0xa0 [ 355.786435][T12214] ___sys_sendmsg+0x2a6/0x360 [ 355.791115][T12214] ? __sys_sendmsg+0x2a0/0x2a0 [ 355.795894][T12214] ? trace_call_bpf+0xc3/0x6c0 [ 355.800657][T12214] ? debug_mutex_init+0x38/0x70 [ 355.805530][T12214] __se_sys_sendmsg+0x1c2/0x2b0 [ 355.810385][T12214] ? __x64_sys_sendmsg+0x80/0x80 [ 355.815329][T12214] ? lockdep_hardirqs_on+0x98/0x150 [ 355.820527][T12214] do_syscall_64+0x55/0xa0 [ 355.824933][T12214] ? clear_bhb_loop+0x40/0x90 [ 355.829604][T12214] ? clear_bhb_loop+0x40/0x90 [ 355.834280][T12214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.840167][T12214] RIP: 0033:0x7ff390f9cdd9 [ 355.844573][T12214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.864169][T12214] RSP: 002b:00007ff391df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.872571][T12214] RAX: ffffffffffffffda RBX: 00007ff391215fa0 RCX: 00007ff390f9cdd9 [ 355.880532][T12214] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 355.888506][T12214] RBP: 00007ff391032d69 R08: 0000000000000000 R09: 0000000000000000 [ 355.896479][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.904443][T12214] R13: 00007ff391216038 R14: 00007ff391215fa0 R15: 00007ffed1e039b8 [ 355.912428][T12214] [ 356.387285][T12248] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.417191][T12254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.449585][T12254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.461298][T12254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.469260][T12254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.504319][T12260] netlink: 'syz.3.1849': attribute type 3 has an invalid length. [ 356.514148][T12254] bond0: (slave batadv0): Releasing backup interface [ 356.521391][T12254] batadv0 (unregistering): left promiscuous mode [ 356.528019][T12254] batadv0 (unregistering): left allmulticast mode [ 356.621358][T12265] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 356.695879][T12265] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 356.956965][T12282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.984165][T12284] netlink: 'syz.3.1859': attribute type 2 has an invalid length. [ 357.419817][T12299] netlink: 'syz.1.1862': attribute type 2 has an invalid length. [ 357.516760][T12301] netlink: 'syz.3.1863': attribute type 10 has an invalid length. [ 357.528913][T12301] .3ãc¤±: mtu less than device minimum [ 358.499999][T12335] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 360.000057][T12373] __nla_validate_parse: 8 callbacks suppressed [ 360.000093][T12373] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1881'. [ 360.464335][T12398] netlink: 'syz.0.1891': attribute type 10 has an invalid length. [ 361.335345][T12430] netlink: 'syz.1.1902': attribute type 12 has an invalid length. [ 361.343697][T12430] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1902'. [ 361.358235][T12426] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 361.375440][T12426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1900'. [ 361.441082][T12431] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1902'. [ 361.569891][T12436] netlink: 'syz.0.1904': attribute type 27 has an invalid length. [ 361.609320][T12436] netlink: 'syz.0.1904': attribute type 4 has an invalid length. [ 361.641740][T12436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1904'. [ 361.697796][T12442] tap0: tun_chr_ioctl cmd 1074025680 [ 361.944140][T12449] netlink: 'syz.3.1908': attribute type 17 has an invalid length. [ 361.972347][T12449] netlink: 'syz.3.1908': attribute type 16 has an invalid length. [ 362.019408][T12449] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1908'. [ 362.323777][T12460] netlink: 'syz.0.1910': attribute type 5 has an invalid length. [ 362.366394][T12460] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1910'. [ 362.410474][T12460] bridge_slave_1: default FDB implementation only supports local addresses [ 362.570312][T12464] netlink: 'syz.1.1911': attribute type 4 has an invalid length. [ 362.583837][T12464] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1911'. [ 362.630518][T12464] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1911'. [ 362.712896][T12467] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1911'. [ 363.156901][T12475] bridge_slave_1: default FDB implementation only supports local addresses [ 363.478790][T12494] IPv6: Can't replace route, no match found [ 363.761894][T12503] netlink: 'syz.2.1924': attribute type 3 has an invalid length. [ 364.222653][T12522] sit0: entered allmulticast mode [ 364.258718][T12521] sit0: entered promiscuous mode [ 366.228391][T12571] validate_nla: 1 callbacks suppressed [ 366.228403][T12571] netlink: 'syz.1.1945': attribute type 25 has an invalid length. [ 366.241862][T12571] netlink: 'syz.1.1945': attribute type 12 has an invalid length. [ 366.504684][T12581] __nla_validate_parse: 4 callbacks suppressed [ 366.504701][T12581] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1949'. [ 366.578060][T12585] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1952'. [ 366.592825][T12583] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 366.601097][T12583] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1951'. [ 366.610954][T12585] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 367.044206][T12608] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1958'. [ 368.113093][T12655] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 368.445937][T12676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1977'. [ 368.510313][T12672] netlink: 'syz.2.1977': attribute type 4 has an invalid length. [ 368.529727][T12678] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1977'. [ 368.541452][T12672] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1977'. [ 368.612711][T12681] netlink: 'syz.3.1981': attribute type 21 has an invalid length. [ 368.620726][T12681] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1981'. [ 368.946744][T12685] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 369.169640][T12695] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1985'. [ 369.338529][T12702] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.711011][T12711] netlink: 'syz.0.1991': attribute type 4 has an invalid length. [ 370.935988][T12755] netlink: 'syz.0.2006': attribute type 40 has an invalid length. [ 370.951359][T12755] tc_dump_action: action bad kind [ 371.077124][T12758] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 371.911771][T12767] netlink: 'syz.1.2008': attribute type 21 has an invalid length. [ 371.960661][T12767] netlink: 'syz.1.2008': attribute type 1 has an invalid length. [ 372.021149][T12769] netlink: 'syz.3.2007': attribute type 4 has an invalid length. [ 372.045970][T12769] __nla_validate_parse: 7 callbacks suppressed [ 372.045984][T12769] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2007'. [ 372.069119][T12771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2007'. [ 372.219042][T12769] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2007'. [ 373.303014][T12785] netlink: 'syz.2.2012': attribute type 39 has an invalid length. [ 373.311240][T12788] netlink: 'syz.3.2013': attribute type 41 has an invalid length. [ 375.194670][T12854] netlink: 703 bytes leftover after parsing attributes in process `syz.2.2033'. [ 375.634119][T12879] netlink: 'syz.3.2038': attribute type 10 has an invalid length. [ 375.686041][T12881] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2039'. [ 375.703329][ T5837] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 376.495943][T12889] netlink: 'syz.1.2037': attribute type 15 has an invalid length. [ 376.504953][T12889] netlink: 'syz.1.2037': attribute type 7 has an invalid length. [ 376.994101][T12919] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2049'. [ 377.049055][T12918] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 377.076581][T12918] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 377.111405][T12919] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 377.122430][T12923] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 377.318499][ T5772] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 378.856980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.873407][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.240671][T12950] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 379.249192][T12942] netlink: 'syz.2.2054': attribute type 21 has an invalid length. [ 379.259926][T12950] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2057'. [ 379.441058][T12960] netlink: 'syz.1.2062': attribute type 3 has an invalid length. [ 379.448969][T12960] netlink: 'syz.1.2062': attribute type 4 has an invalid length. [ 379.465705][T12960] netlink: 'syz.1.2062': attribute type 7 has an invalid length. [ 379.499971][T12960] netlink: 'syz.1.2062': attribute type 8 has an invalid length. [ 379.516362][T12960] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.2062'. [ 379.986283][T12980] À: port 1(ªªªªªª) entered blocking state [ 380.004798][T12980] À: port 1(ªªªªªª) entered disabled state [ 380.011745][T12980] ªªªªªª: entered allmulticast mode [ 380.020957][T12980] veth0_vlan: entered allmulticast mode [ 380.036662][T12980] ªªªªªª: entered promiscuous mode [ 380.056273][T12982] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2067'. [ 380.071664][T12985] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2068'. [ 380.270448][T12997] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2071'. [ 380.284257][T12997] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 380.398992][T12999] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2072'. [ 380.453297][T13003] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2074'. [ 380.548773][T13014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2078'. [ 380.691558][T13026] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2080'. [ 381.181233][T13052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2087'. [ 384.675881][T13077] validate_nla: 8 callbacks suppressed [ 384.675895][T13077] netlink: 'syz.3.2093': attribute type 21 has an invalid length. [ 384.761051][T13077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.768408][T13077] IPv6: NLM_F_CREATE should be set when creating new route [ 384.775675][T13077] IPv6: NLM_F_CREATE should be set when creating new route [ 384.782892][T13077] IPv6: NLM_F_CREATE should be set when creating new route [ 385.074839][T13081] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 385.935456][T13068] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2092'. [ 385.951709][T13068] bridge_slave_1: default FDB implementation only supports local addresses [ 385.984843][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 386.028224][T13108] netlink: 'syz.0.2104': attribute type 9 has an invalid length. [ 386.063481][T13108] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2104'. [ 386.132369][T13068] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2092'. [ 386.445170][T13068] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 386.453254][T13068] CPU: 1 PID: 13068 Comm: syz.1.2092 Not tainted syzkaller #0 [ 386.460724][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 386.470773][T13068] Call Trace: [ 386.474055][T13068] [ 386.476989][T13068] dump_stack_lvl+0x18c/0x250 [ 386.481666][T13068] ? show_regs_print_info+0x20/0x20 [ 386.486858][T13068] ? load_image+0x420/0x420 [ 386.491366][T13068] sysfs_warn_dup+0x8e/0xa0 [ 386.495871][T13068] sysfs_do_create_link_sd+0xc0/0x110 [ 386.501254][T13068] device_add_class_symlinks+0x1cf/0x240 [ 386.506895][T13068] device_add+0x507/0xc20 [ 386.511269][T13068] wiphy_register+0x1dad/0x2ae0 [ 386.516157][T13068] ? cfg80211_event_work+0x40/0x40 [ 386.521268][T13068] ? minstrel_ht_alloc+0x88a/0x990 [ 386.526394][T13068] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 386.532463][T13068] ieee80211_register_hw+0x3464/0x4250 [ 386.537942][T13068] ? ieee80211_tasklet_handler+0x20/0x20 [ 386.543574][T13068] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 386.549469][T13068] ? __debug_object_init+0xec/0x450 [ 386.554672][T13068] ? __asan_memset+0x22/0x40 [ 386.559262][T13068] ? __hrtimer_init+0x186/0x270 [ 386.564112][T13068] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 386.569846][T13068] ? mac80211_hwsim_free+0x220/0x220 [ 386.575137][T13068] ? rcu_is_watching+0x15/0xb0 [ 386.579907][T13068] ? kstrndup+0xbd/0x140 [ 386.584153][T13068] hwsim_new_radio_nl+0xdc9/0x1a90 [ 386.589266][T13068] ? mark_lock+0x94/0x320 [ 386.593595][T13068] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 386.599919][T13068] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.606069][T13068] ? lockdep_hardirqs_on+0x98/0x150 [ 386.611263][T13068] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.617423][T13068] genl_family_rcv_msg_doit+0x211/0x310 [ 386.622966][T13068] ? end_current_label_crit_section+0x170/0x170 [ 386.629209][T13068] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 386.635102][T13068] ? bpf_lsm_capable+0x9/0x10 [ 386.639776][T13068] ? security_capable+0x89/0xb0 [ 386.644628][T13068] genl_rcv_msg+0x619/0x7a0 [ 386.649133][T13068] ? genl_bind+0x360/0x360 [ 386.653541][T13068] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 386.659864][T13068] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 386.666451][T13068] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 386.673044][T13068] netlink_rcv_skb+0x241/0x4d0 [ 386.677806][T13068] ? genl_bind+0x360/0x360 [ 386.682215][T13068] ? netlink_ack+0x1180/0x1180 [ 386.686985][T13068] ? __lock_acquire+0x7d40/0x7d40 [ 386.692006][T13068] ? net_generic+0x1e/0x240 [ 386.696521][T13068] ? down_read+0x1ac/0x2e0 [ 386.700936][T13068] genl_rcv+0x28/0x40 [ 386.704911][T13068] netlink_unicast+0x751/0x8d0 [ 386.709677][T13068] netlink_sendmsg+0x8d0/0xbf0 [ 386.714449][T13068] ? netlink_getsockopt+0x590/0x590 [ 386.719646][T13068] ? aa_sock_msg_perm+0x94/0x150 [ 386.724578][T13068] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 386.729855][T13068] ? security_socket_sendmsg+0x80/0xa0 [ 386.735304][T13068] ? netlink_getsockopt+0x590/0x590 [ 386.740498][T13068] ____sys_sendmsg+0x5ba/0x960 [ 386.745259][T13068] ? __asan_memset+0x22/0x40 [ 386.749843][T13068] ? __sys_sendmsg_sock+0x30/0x30 [ 386.754858][T13068] ? __import_iovec+0x5f2/0x850 [ 386.759703][T13068] ? import_iovec+0x73/0xa0 [ 386.764198][T13068] ___sys_sendmsg+0x2a6/0x360 [ 386.768871][T13068] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.773663][T13068] __se_sys_sendmsg+0x1c2/0x2b0 [ 386.778506][T13068] ? __x64_sys_sendmsg+0x80/0x80 [ 386.783448][T13068] ? lockdep_hardirqs_on+0x98/0x150 [ 386.788641][T13068] do_syscall_64+0x55/0xa0 [ 386.793043][T13068] ? clear_bhb_loop+0x40/0x90 [ 386.797711][T13068] ? clear_bhb_loop+0x40/0x90 [ 386.802379][T13068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.808266][T13068] RIP: 0033:0x7f3ee8f9cdd9 [ 386.812680][T13068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.832276][T13068] RSP: 002b:00007f3ee9f25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.840690][T13068] RAX: ffffffffffffffda RBX: 00007f3ee9216090 RCX: 00007f3ee8f9cdd9 [ 386.848654][T13068] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 386.856615][T13068] RBP: 00007f3ee9032d69 R08: 0000000000000000 R09: 0000000000000000 [ 386.864577][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.872539][T13068] R13: 00007f3ee9216128 R14: 00007f3ee9216090 R15: 00007ffd7f7bec88 [ 386.880521][T13068] [ 386.893775][T13118] netlink: 'syz.3.2106': attribute type 6 has an invalid length. [ 386.901521][T13118] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2106'. [ 386.914705][T13119] netlink: 'syz.3.2106': attribute type 6 has an invalid length. [ 386.922844][T13119] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2106'. [ 387.064196][T13127] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2108'. [ 387.089602][T13127] netlink: 'syz.2.2108': attribute type 10 has an invalid length. [ 387.111523][T13127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2108'. [ 387.136598][T13127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.201214][T13127] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2108'. [ 387.232915][T13131] netlink: 'syz.2.2108': attribute type 10 has an invalid length. [ 387.255104][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2108'. [ 387.269125][T13131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.464728][T13140] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 387.845585][T13143] team0: Port device team_slave_0 removed [ 388.007463][T13161] netlink: 'syz.1.2121': attribute type 2 has an invalid length. [ 388.058966][T13160] netlink: 'syz.0.2119': attribute type 2 has an invalid length. [ 388.077219][T13160] netlink: 'syz.0.2119': attribute type 8 has an invalid length. [ 389.958337][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 389.967776][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 389.977009][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 389.986219][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 389.995615][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 390.004813][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 390.014252][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 390.023542][T13213] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 391.401769][T13236] validate_nla: 4 callbacks suppressed [ 391.401787][T13236] netlink: 'syz.0.2146': attribute type 21 has an invalid length. [ 391.416081][T13236] __nla_validate_parse: 5 callbacks suppressed [ 391.416095][T13236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2146'. [ 391.445976][T13240] netlink: 'syz.2.2147': attribute type 11 has an invalid length. [ 391.469132][T13240] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2147'. [ 392.181972][ T5772] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 392.483590][T13252] syzkaller0: entered promiscuous mode [ 392.497302][T13252] syzkaller0: entered allmulticast mode [ 394.194162][T13290] sit0: entered allmulticast mode [ 394.210864][T13292] sit0: entered promiscuous mode [ 394.433709][T13315] ip6gretap0: left allmulticast mode [ 394.439528][T13315] ip6gretap0: left promiscuous mode [ 394.468388][T13315] bridge0: port 2(ip6gretap0) entered disabled state [ 394.547125][T13315] dummy0: left allmulticast mode [ 394.552379][T13315] dummy0: left promiscuous mode [ 394.602723][T13315] bridge0: port 4(dummy0) entered disabled state [ 394.646092][T13315] bridge_slave_0: left allmulticast mode [ 394.652253][T13315] bridge_slave_0: left promiscuous mode [ 394.666366][T13315] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.112252][T13345] netlink: 'syz.0.2176': attribute type 39 has an invalid length. [ 395.135510][T13347] netlink: 'syz.1.2174': attribute type 4 has an invalid length. [ 395.143941][T13347] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2174'. [ 395.349489][T13356] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2178'. [ 395.369304][T13356] net_ratelimit: 3321 callbacks suppressed [ 395.369437][T13356] openvswitch: netlink: Flow actions attr not present in new flow. [ 395.460368][T13359] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 396.036621][T13372] netlink: 'syz.0.2182': attribute type 10 has an invalid length. [ 396.606743][T13395] netlink: 'syz.0.2190': attribute type 11 has an invalid length. [ 396.635601][T13395] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 396.666312][T13395] netlink: 'syz.0.2190': attribute type 1 has an invalid length. [ 396.677675][T13395] netlink: 'syz.0.2190': attribute type 2 has an invalid length. [ 396.686214][T13395] netlink: 198140 bytes leftover after parsing attributes in process `syz.0.2190'. [ 397.087352][T13415] netlink: 'syz.2.2198': attribute type 10 has an invalid length. [ 397.110132][T13415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2198'. [ 397.138361][T13415] bridge0: port 2(veth0_vlan) entered blocking state [ 397.153462][T13415] bridge0: port 2(veth0_vlan) entered disabled state [ 397.172242][T13415] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 397.841182][T13438] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.246342][T13452] netlink: 'syz.2.2209': attribute type 2 has an invalid length. [ 399.293705][T13452] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2209'. [ 399.612977][T13457] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2212'. [ 403.612839][T13478] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 403.646055][T13478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 404.282119][T13483] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2217'. [ 406.162513][T13495] netlink: 'syz.0.2220': attribute type 25 has an invalid length. [ 406.239156][T13500] netlink: 'syz.0.2220': attribute type 10 has an invalid length. [ 407.535415][T13523] netlink: 'syz.1.2230': attribute type 21 has an invalid length. [ 408.205809][T13528] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2231'. [ 408.562335][T13532] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2233'. [ 409.351015][T13542] ref_ctr_offset mismatch. inode: 0xb1b offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 409.467169][T13548] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2237'. [ 409.523345][T13548] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2237'. [ 409.543280][T13548] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2237'. [ 409.752661][T13554] netlink: 'syz.1.2239': attribute type 30 has an invalid length. [ 409.781103][T13540] netlink: 'syz.3.2234': attribute type 10 has an invalid length. [ 409.845777][T13540] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2234'. [ 409.886841][T13554] netlink: 'syz.1.2239': attribute type 7 has an invalid length. [ 410.285475][T13565] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 410.294673][T13565] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2250'. [ 410.822915][T13571] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2243'. [ 410.932483][T13571] team0: Port device team_slave_0 removed [ 411.026222][T13570] netlink: 'syz.3.2242': attribute type 21 has an invalid length. [ 416.001156][T13582] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 416.024628][T13617] netlink: 'syz.3.2256': attribute type 3 has an invalid length. [ 416.265688][T13632] mac80211_hwsim hwsim17 ..ãc¤±: renamed from wlan1 (while UP) [ 416.270315][T13623] delete_channel: no stack [ 416.278178][T13623] delete_channel: no stack [ 416.299730][ T5772] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 416.332010][T13636] netlink: 'syz.2.2261': attribute type 17 has an invalid length. [ 416.349025][T13636] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2261'. [ 416.361961][T13636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.531955][T13646] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 416.559039][T13646] netlink: 13586 bytes leftover after parsing attributes in process `syz.2.2264'. [ 416.714962][T13657] netlink: 'syz.1.2265': attribute type 21 has an invalid length. [ 416.724292][T13657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2265'. [ 416.733530][T13657] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 416.809988][T13658] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2268'. [ 418.461919][T13660] netlink: 'syz.1.2269': attribute type 2 has an invalid length. [ 418.471248][T13660] netlink: 'syz.1.2269': attribute type 8 has an invalid length. [ 418.479031][T13660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2269'. [ 418.489788][T13673] netlink: 'syz.1.2269': attribute type 11 has an invalid length. [ 418.580684][T13680] syzkaller0: entered promiscuous mode [ 418.590723][T13680] syzkaller0: entered allmulticast mode [ 420.213505][T13711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2278'. [ 420.233889][T13711] netlink: 'syz.2.2278': attribute type 12 has an invalid length. [ 420.241731][T13711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2278'. [ 420.299309][T13709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.725861][T13731] tap0: tun_chr_ioctl cmd 1074025675 [ 420.731204][T13731] tap0: persist enabled [ 420.756051][T13730] tap0: tun_chr_ioctl cmd 21731 [ 420.767742][T13731] tap0: tun_chr_ioctl cmd 1074025672 [ 420.773403][T13731] tap0: ignored: set checksum enabled [ 420.849304][T13734] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2283'. [ 420.871785][T13734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.172908][T13743] syzkaller0: entered promiscuous mode [ 421.197421][T13743] syzkaller0: entered allmulticast mode [ 421.489543][T13757] validate_nla: 3 callbacks suppressed [ 421.489559][T13757] netlink: 'syz.0.2288': attribute type 10 has an invalid length. [ 421.512388][T13757] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2288'. [ 421.638061][T13755] syzkaller1: entered promiscuous mode [ 421.647223][T13755] syzkaller1: entered allmulticast mode [ 421.779917][T13764] netlink: zone id is out of range [ 421.789848][T13764] netlink: set zone limit has 8 unknown bytes [ 424.942053][T13786] syzkaller0: entered promiscuous mode [ 424.960534][T13786] syzkaller0: entered allmulticast mode [ 426.547942][T13792] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 426.575862][T13795] tc_dump_action: action bad kind [ 430.518467][T13814] netlink: 'syz.1.2302': attribute type 21 has an invalid length. [ 430.526481][T13814] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2302'. [ 430.535853][T13814] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2302'. [ 431.764584][T13837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2309'. [ 431.974991][T13847] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2310'. [ 433.967280][T13865] netlink: 'syz.2.2315': attribute type 4 has an invalid length. [ 433.982831][T13865] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2315'. [ 434.018620][T13869] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2317'. [ 434.182524][T13873] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2318'. [ 434.203428][T13873] bridge_slave_1: default FDB implementation only supports local addresses [ 434.337782][T13879] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2320'. [ 434.878994][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.893459][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.901462][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.911066][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.933282][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 434.942034][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.952113][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.109827][T13897] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2324'. [ 435.142135][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.169598][T13893] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 435.178286][T13893] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 435.242441][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.329581][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.398571][T13890] chnl_net:caif_netlink_parms(): no params data found [ 435.548839][T13890] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.564492][T13890] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.571713][T13890] bridge_slave_0: entered allmulticast mode [ 435.587441][T13890] bridge_slave_0: entered promiscuous mode [ 435.615318][T13920] netlink: 'syz.1.2329': attribute type 3 has an invalid length. [ 435.623970][T13890] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.631118][T13890] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.644214][T13890] bridge_slave_1: entered allmulticast mode [ 435.660177][T13890] bridge_slave_1: entered promiscuous mode [ 435.732154][ T12] tipc: Left network mode [ 435.758816][T13925] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2329'. [ 435.800331][T13890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.867330][T13890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.920205][T13890] team0: Port device team_slave_0 added [ 435.934737][T13890] team0: Port device team_slave_1 added [ 436.148589][T13890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.190352][T13890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.225736][T13890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.241335][T13890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.252163][T13890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.310413][T13890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.706123][T13940] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 436.779532][T13940] .`: (slave team0): Releasing backup interface [ 436.804008][T13949] netlink: 'syz.1.2333': attribute type 3 has an invalid length. [ 436.804875][T13940] team0 (unregistering): Port device team_slave_1 removed [ 436.823792][T13940] team0 (unregistering): Port device hsr_slave_0 removed [ 436.890328][T13953] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2334'. [ 437.054818][ T51] Bluetooth: hci2: command tx timeout [ 437.117395][T13890] hsr_slave_0: entered promiscuous mode [ 437.145842][T13890] hsr_slave_1: entered promiscuous mode [ 437.279229][T13966] netlink: 'syz.0.2338': attribute type 33 has an invalid length. [ 437.304231][T13966] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2338'. [ 437.397768][T13971] netlink: 'syz.0.2338': attribute type 15 has an invalid length. [ 437.416186][T13971] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2338'. [ 438.560389][T14003] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2343'. [ 438.659580][ T12] vlan0: left allmulticast mode [ 438.683346][ T12] vlan0: left promiscuous mode [ 438.692773][ T12] À: port 1(vlan0) entered disabled state [ 438.717065][ T12] bridge_slave_0: left allmulticast mode [ 438.722768][ T12] bridge_slave_0: left promiscuous mode [ 438.743314][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.133465][ T51] Bluetooth: hci2: command tx timeout [ 439.686650][ T12] veth1_vlan: left promiscuous mode [ 440.100520][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.106903][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.214230][ T51] Bluetooth: hci2: command tx timeout [ 441.780358][ T12] team0 (unregistering): Port device team_slave_1 removed [ 442.042842][ T12] team0 (unregistering): Port device dummy0 removed [ 442.171046][T14016] netlink: 'syz.0.2346': attribute type 21 has an invalid length. [ 442.180772][T14016] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 442.188765][T14016] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.2346'. [ 442.204063][T14017] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2346'. [ 442.456831][T14043] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2352'. [ 442.690202][T13890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.700815][T13890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.712061][T13890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.721504][T13890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.849714][T13890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.890681][T13890] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.926347][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.933519][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.955532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.962700][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.302867][ T51] Bluetooth: hci2: command tx timeout [ 443.506755][T14071] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2355'. [ 443.736437][T13890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.816804][T14081] netlink: 'syz.3.2357': attribute type 6 has an invalid length. [ 443.924145][T13890] veth0_vlan: entered promiscuous mode [ 443.986823][T13890] veth1_vlan: entered promiscuous mode [ 444.059355][T13890] veth0_macvtap: entered promiscuous mode [ 444.090729][T13890] veth1_macvtap: entered promiscuous mode [ 444.146134][T13890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.177143][T13890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.192927][T13890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.201976][T13890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.211480][T13890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.222220][T13890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.388153][T10840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.414686][T10840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.466155][T10840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.486584][T10840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.526157][T14113] syzkaller0: entered allmulticast mode [ 446.194190][T14131] netlink: 'syz.3.2367': attribute type 22 has an invalid length. [ 446.236130][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 448.384573][T14154] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2370'. [ 448.425776][T14162] netlink: 'syz.0.2373': attribute type 29 has an invalid length. [ 448.436970][T14162] netlink: 'syz.0.2373': attribute type 29 has an invalid length. [ 448.459214][T14162] netlink: 'syz.0.2373': attribute type 29 has an invalid length. [ 448.472818][T14162] netlink: 'syz.0.2373': attribute type 29 has an invalid length. [ 448.502056][T14162] netlink: 'syz.0.2373': attribute type 29 has an invalid length. [ 448.981871][T14177] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 448.990194][T14177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2378'. [ 449.327047][T14193] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2384'. [ 449.426076][T14195] netlink: 'syz.0.2386': attribute type 2 has an invalid length. [ 449.434554][T14195] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2386'. [ 449.815509][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.835485][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.844852][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.865084][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.872748][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 449.880469][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.967382][T10840] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.989667][T14220] netlink: 'syz.2.2393': attribute type 2 has an invalid length. [ 449.998600][T14220] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 450.006420][T14220] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2393'. [ 450.115410][T10840] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.158285][T14224] netlink: 'syz.1.2394': attribute type 22 has an invalid length. [ 450.167384][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'. [ 450.208419][T10840] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.244332][T14226] cgroup: fork rejected by pids controller in /syz0 [ 450.296792][T10840] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.008688][T10840] tipc: Left network mode [ 451.169812][T14208] chnl_net:caif_netlink_parms(): no params data found [ 451.277220][T10840] ip6gretap0 (unregistering): left allmulticast mode [ 451.290458][T10840] ip6gretap0 (unregistering): left promiscuous mode [ 451.301700][T10840] Ÿë: port 1(ip6gretap0) entered disabled state [ 451.933373][ T5772] Bluetooth: hci3: command tx timeout [ 452.096939][T14208] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.105284][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.112448][T14208] bridge_slave_0: entered allmulticast mode [ 452.124755][T14208] bridge_slave_0: entered promiscuous mode [ 452.134282][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.139753][T14208] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.143134][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.152068][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.156495][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.162643][T14208] bridge_slave_1: entered allmulticast mode [ 452.179473][T14208] bridge_slave_1: entered promiscuous mode [ 452.185424][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.194933][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 452.202422][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.289531][T14208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.316443][T14208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.418871][T14208] team0: Port device team_slave_0 added [ 452.430225][T14208] team0: Port device team_slave_1 added [ 452.481773][T14371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2402'. [ 452.593695][T14208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.614864][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.643808][T14208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.660752][T14208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.670002][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.700535][T14208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.012697][T14208] hsr_slave_0: entered promiscuous mode [ 453.019010][T14208] hsr_slave_1: entered promiscuous mode [ 453.026157][T14208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.033814][T14208] Cannot create hsr debugfs directory [ 453.282526][T14390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 453.610487][T14365] chnl_net:caif_netlink_parms(): no params data found [ 454.015856][ T5772] Bluetooth: hci3: command tx timeout [ 454.128316][T14428] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.2410'. [ 454.233990][T14428] delete_channel: no stack [ 454.263273][ T5772] Bluetooth: hci0: command tx timeout [ 454.346818][T14365] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.358174][T14365] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.365774][T14365] bridge_slave_0: entered allmulticast mode [ 454.372425][T14365] bridge_slave_0: entered promiscuous mode [ 454.393477][T10840] veth1_macvtap: left promiscuous mode [ 454.399031][T10840] veth0_macvtap: left promiscuous mode [ 454.404707][T10840] veth1_vlan: left promiscuous mode [ 454.410030][T10840] veth0_vlan: left promiscuous mode [ 455.009375][T10840] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.047918][T10840] .` (unregistering): (slave 1@ÿ): Releasing backup interface [ 455.081925][T10840] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 455.289100][T10840] .` (unregistering): Released all slaves [ 455.335407][T14365] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.342603][T14365] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.351263][T14365] bridge_slave_1: entered allmulticast mode [ 455.358765][T14365] bridge_slave_1: entered promiscuous mode [ 455.373565][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.485605][T14365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.515226][T14365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.574960][T14448] validate_nla: 2 callbacks suppressed [ 455.574970][T14448] netlink: 'syz.2.2414': attribute type 29 has an invalid length. [ 455.610792][T14365] team0: Port device team_slave_0 added [ 455.627797][T14448] netlink: 'syz.2.2414': attribute type 29 has an invalid length. [ 455.666981][T14365] team0: Port device team_slave_1 added [ 455.698136][T14208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.744026][T14208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.772690][T14365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.780762][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.809003][T14365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.827457][T14365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.834802][T14365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.863356][T14365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.877193][T14208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 455.932571][T14208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 455.947458][T14452] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2415'. [ 455.998217][T14365] hsr_slave_0: entered promiscuous mode [ 456.015056][T14365] hsr_slave_1: entered promiscuous mode [ 456.021361][T14365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.033407][T14365] Cannot create hsr debugfs directory [ 456.096035][ T5772] Bluetooth: hci3: command tx timeout [ 456.280557][T10840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.334879][ T5772] Bluetooth: hci0: command tx timeout [ 456.350518][T14464] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 456.359628][T14464] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2417'. [ 456.516685][T14208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.550516][T10840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.645131][T10840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.682181][T14208] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.705849][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.712968][T10835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.745020][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.752176][T10835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.835146][T10840] bond0: (slave netdevsim0): Releasing backup interface [ 456.853859][T10840] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 456.862331][T10840] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 456.905840][T10840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.946861][T14478] netlink: 'syz.2.2418': attribute type 15 has an invalid length. [ 456.988879][T14478] netlink: 'syz.2.2418': attribute type 7 has an invalid length. [ 457.275946][T10840] tipc: Left network mode [ 457.292052][ T5772] Bluetooth: hci1: ISO packet too small [ 457.326791][T14496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.640408][T14510] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2425'. [ 457.672220][T14509] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 457.700689][T14509] netlink: 'syz.1.2424': attribute type 3 has an invalid length. [ 457.733851][T14509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2424'. [ 457.801438][T14208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.050400][T14208] veth0_vlan: entered promiscuous mode [ 458.119754][T14208] veth1_vlan: entered promiscuous mode [ 458.176108][ T5772] Bluetooth: hci3: command tx timeout [ 458.205083][T14530] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2429'. [ 458.235431][T14530] bridge_slave_1: default FDB implementation only supports local addresses [ 458.414481][ T5772] Bluetooth: hci0: command tx timeout [ 458.446562][T14365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.508027][T14208] veth0_macvtap: entered promiscuous mode [ 458.543849][T14365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.610919][T14208] veth1_macvtap: entered promiscuous mode [ 458.662251][T14365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.707394][T14365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.918882][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.935096][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.947679][T14208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.971886][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.982757][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.994869][T14208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.061253][T14208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.083185][T14208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.098480][T14208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.118356][T14208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.135775][T14550] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 459.152666][T14550] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 459.775134][T14365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.809491][T14365] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.818945][T14573] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2436'. [ 459.873220][T14577] netlink: 'syz.1.2436': attribute type 29 has an invalid length. [ 459.885782][T14572] netlink: 'syz.1.2436': attribute type 29 has an invalid length. [ 459.900460][T14577] netlink: 'syz.1.2436': attribute type 29 has an invalid length. [ 459.934008][T14576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.941227][T14576] IPv6: NLM_F_CREATE should be set when creating new route [ 459.948551][T14576] IPv6: NLM_F_CREATE should be set when creating new route [ 459.955812][T14576] IPv6: NLM_F_CREATE should be set when creating new route [ 459.971169][T10835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.982519][T10835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.044656][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.051780][ T7881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.066912][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.074072][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.188139][T10840] ªªªªªª: left allmulticast mode [ 460.213271][T10840] veth0_vlan: left allmulticast mode [ 460.218607][T10840] ªªªªªª: left promiscuous mode [ 460.238639][T10840] À: port 1(ªªªªªª) entered disabled state [ 460.302476][T10840] hsr_slave_0: left promiscuous mode [ 460.315648][T10840] hsr_slave_1: left promiscuous mode [ 460.322162][T10840] hsr0: left allmulticast mode [ 460.331940][T10840] bridge0: port 3(hsr0) entered disabled state [ 460.340786][T10840] bridge_slave_0: left allmulticast mode [ 460.346701][T10840] bridge_slave_0: left promiscuous mode [ 460.354991][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.381699][T10840] veth1_vlan: left promiscuous mode [ 460.495112][ T5772] Bluetooth: hci0: command tx timeout [ 461.232038][T10840] team0 (unregistering): Port device team_slave_1 removed [ 461.267106][T10840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.277869][T10840] bond_slave_1 (unregistering): left promiscuous mode [ 461.286234][T10840] bond_slave_1 (unregistering): left allmulticast mode [ 461.354267][T10840] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.363235][T10840] bridge_slave_1 (unregistering): left promiscuous mode [ 461.370184][T10840] bridge_slave_1 (unregistering): left allmulticast mode [ 461.541703][T10840] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 461.551419][T10840] dummy0 (unregistering): left promiscuous mode [ 461.557778][T10840] dummy0 (unregistering): left allmulticast mode [ 461.581657][T10840] team0 (unregistering): Port device bridge0 removed [ 461.609887][T10840] bond0 (unregistering): Released all slaves [ 461.742500][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.750773][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.061742][T14606] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2385'. [ 462.095151][T14604] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2385'. [ 462.114651][T14604] netlink: zone id is out of range [ 462.153457][T14606] netlink: zone id is out of range [ 462.471838][T14614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 462.500363][T14365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.601477][T14365] veth0_vlan: entered promiscuous mode [ 462.634101][T14365] veth1_vlan: entered promiscuous mode [ 462.690786][T14365] veth0_macvtap: entered promiscuous mode [ 462.723576][T14365] veth1_macvtap: entered promiscuous mode [ 462.784156][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.801761][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.811946][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.823452][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.835002][T14365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.854797][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.865585][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.875618][T14365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.886901][T14365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.898627][T14365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.926535][T14365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.939686][T14365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.949572][T14365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.963736][T14365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.092510][ T6803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.106511][ T6803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.147548][T14629] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 463.231408][T10831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.269737][T14631] netlink: 'syz.1.2449': attribute type 11 has an invalid length. [ 463.275062][T10831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.291073][T14631] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2449'. [ 463.332578][T14631] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 463.363416][T14631] CPU: 0 PID: 14631 Comm: syz.1.2449 Not tainted syzkaller #0 [ 463.370907][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.380979][T14631] Call Trace: [ 463.384275][T14631] [ 463.387225][T14631] dump_stack_lvl+0x18c/0x250 [ 463.391939][T14631] ? show_regs_print_info+0x20/0x20 [ 463.397183][T14631] ? load_image+0x420/0x420 [ 463.401732][T14631] sysfs_warn_dup+0x8e/0xa0 [ 463.406260][T14631] sysfs_do_create_link_sd+0xc0/0x110 [ 463.411656][T14631] device_add_class_symlinks+0x1cf/0x240 [ 463.417320][T14631] device_add+0x507/0xc20 [ 463.421679][T14631] wiphy_register+0x1dad/0x2ae0 [ 463.426571][T14631] ? cfg80211_event_work+0x40/0x40 [ 463.431763][T14631] ? minstrel_ht_alloc+0x88a/0x990 [ 463.436942][T14631] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 463.443042][T14631] ieee80211_register_hw+0x3464/0x4250 [ 463.448544][T14631] ? ieee80211_tasklet_handler+0x20/0x20 [ 463.454197][T14631] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 463.460106][T14631] ? __debug_object_init+0xec/0x450 [ 463.465299][T14631] ? __asan_memset+0x22/0x40 [ 463.469877][T14631] ? __hrtimer_init+0x186/0x270 [ 463.474736][T14631] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 463.480502][T14631] ? mac80211_hwsim_free+0x220/0x220 [ 463.485810][T14631] ? rcu_is_watching+0x15/0xb0 [ 463.490604][T14631] ? kstrndup+0xbd/0x140 [ 463.494889][T14631] hwsim_new_radio_nl+0xdc9/0x1a90 [ 463.500027][T14631] ? __nla_validate+0x50/0x50 [ 463.504740][T14631] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 463.511101][T14631] ? __nla_parse+0x40/0x50 [ 463.515543][T14631] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 463.521894][T14631] genl_family_rcv_msg_doit+0x211/0x310 [ 463.527461][T14631] ? end_current_label_crit_section+0x170/0x170 [ 463.533734][T14631] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 463.539657][T14631] ? bpf_lsm_capable+0x9/0x10 [ 463.544352][T14631] ? security_capable+0x89/0xb0 [ 463.549236][T14631] genl_rcv_msg+0x619/0x7a0 [ 463.553770][T14631] ? genl_bind+0x360/0x360 [ 463.558209][T14631] ? perf_trace_lock+0xfc/0x3b0 [ 463.563077][T14631] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 463.569405][T14631] ? perf_trace_lock+0xfc/0x3b0 [ 463.574270][T14631] netlink_rcv_skb+0x241/0x4d0 [ 463.579065][T14631] ? genl_bind+0x360/0x360 [ 463.583493][T14631] ? netlink_ack+0x1180/0x1180 [ 463.588288][T14631] ? __lock_acquire+0x7d40/0x7d40 [ 463.593326][T14631] ? net_generic+0x1e/0x240 [ 463.597840][T14631] ? down_read+0x1ac/0x2e0 [ 463.602261][T14631] genl_rcv+0x28/0x40 [ 463.606257][T14631] netlink_unicast+0x751/0x8d0 [ 463.611063][T14631] netlink_sendmsg+0x8d0/0xbf0 [ 463.615862][T14631] ? netlink_getsockopt+0x590/0x590 [ 463.621087][T14631] ? aa_sock_msg_perm+0x94/0x150 [ 463.626058][T14631] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 463.631365][T14631] ? security_socket_sendmsg+0x80/0xa0 [ 463.636841][T14631] ? netlink_getsockopt+0x590/0x590 [ 463.642074][T14631] ____sys_sendmsg+0x5ba/0x960 [ 463.646864][T14631] ? __asan_memset+0x22/0x40 [ 463.651486][T14631] ? __sys_sendmsg_sock+0x30/0x30 [ 463.656533][T14631] ? __import_iovec+0x5f2/0x850 [ 463.661412][T14631] ? import_iovec+0x73/0xa0 [ 463.665935][T14631] ___sys_sendmsg+0x2a6/0x360 [ 463.670633][T14631] ? __sys_sendmsg+0x2a0/0x2a0 [ 463.675472][T14631] __se_sys_sendmsg+0x1c2/0x2b0 [ 463.680347][T14631] ? __x64_sys_sendmsg+0x80/0x80 [ 463.685319][T14631] ? lockdep_hardirqs_on+0x98/0x150 [ 463.690540][T14631] do_syscall_64+0x55/0xa0 [ 463.694971][T14631] ? clear_bhb_loop+0x40/0x90 [ 463.699667][T14631] ? clear_bhb_loop+0x40/0x90 [ 463.704367][T14631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.710278][T14631] RIP: 0033:0x7f3ee8f9cdd9 [ 463.714708][T14631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.734330][T14631] RSP: 002b:00007f3ee9f46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.742763][T14631] RAX: ffffffffffffffda RBX: 00007f3ee9215fa0 RCX: 00007f3ee8f9cdd9 [ 463.750749][T14631] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 463.758755][T14631] RBP: 00007f3ee9032d69 R08: 0000000000000000 R09: 0000000000000000 [ 463.766733][T14631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.774715][T14631] R13: 00007f3ee9216038 R14: 00007f3ee9215fa0 R15: 00007ffd7f7bec88 [ 463.782707][T14631] [ 463.976449][T14645] validate_nla: 1 callbacks suppressed [ 463.976490][T14645] netlink: 'syz.2.2454': attribute type 1 has an invalid length. [ 464.033322][T14645] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2454'. [ 464.187245][T14649] netlink: 'syz.0.2456': attribute type 2 has an invalid length. [ 464.213289][T14649] netlink: 'syz.0.2456': attribute type 8 has an invalid length. [ 464.236940][T14649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2456'. [ 464.637970][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.687675][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.697796][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.699706][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.724846][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.734121][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 464.741437][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.901525][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.027434][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.102324][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.150485][T14687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.438243][T14667] chnl_net:caif_netlink_parms(): no params data found [ 465.537812][T14697] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2471'. [ 465.580894][T14697] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.2471'. [ 465.597197][T14697] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2471'. [ 465.631020][T14699] netlink: 'syz.0.2472': attribute type 21 has an invalid length. [ 465.639333][T14699] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2472'. [ 465.651326][T14699] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2472'. [ 465.657383][ T12] tipc: Left network mode [ 465.912372][T14667] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.927341][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.941249][T14667] bridge_slave_0: entered allmulticast mode [ 465.966011][T14667] bridge_slave_0: entered promiscuous mode [ 466.060731][T14667] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.077158][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.091151][T14667] bridge_slave_1: entered allmulticast mode [ 466.111136][T14667] bridge_slave_1: entered promiscuous mode [ 466.327965][T14667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.441418][T14667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.679804][T14667] team0: Port device team_slave_0 added [ 466.818990][ T5772] Bluetooth: hci1: command tx timeout [ 467.924907][T14667] team0: Port device team_slave_1 added [ 468.159067][T14751] netlink: 'syz.0.2482': attribute type 153 has an invalid length. [ 468.210626][T14751] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2482'. [ 468.306610][T14667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.320859][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.372845][T14667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.407782][T14667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.423162][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.469593][T14667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.554226][T14755] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2482'. [ 468.573162][T14755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.858112][T14667] hsr_slave_0: entered promiscuous mode [ 468.888111][T14667] hsr_slave_1: entered promiscuous mode [ 468.905249][ T5772] Bluetooth: hci1: command tx timeout [ 468.915868][T14667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.943466][T14667] Cannot create hsr debugfs directory [ 470.121144][T14794] vlan1: entered promiscuous mode [ 470.128597][T14794] vlan1: entered allmulticast mode [ 470.138591][T14794] veth0_vlan: entered allmulticast mode [ 470.588317][T14803] netlink: 'syz.3.2491': attribute type 13 has an invalid length. [ 470.634408][T14803] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2491'. [ 470.859383][T14803] erspan0: refused to change device tx_queue_len [ 470.894377][T14803] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 470.974360][ T5772] Bluetooth: hci1: command tx timeout [ 472.788302][T14833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.063623][ T5772] Bluetooth: hci1: command tx timeout [ 473.092102][T14667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.107687][T14845] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2496'. [ 473.122201][T14667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.134353][T14667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.152806][T14667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.410121][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.489942][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.532575][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.539775][T10835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.582661][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.589872][T10835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.722709][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.210111][T14667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.357464][T14667] veth0_vlan: entered promiscuous mode [ 474.379722][T14667] veth1_vlan: entered promiscuous mode [ 474.464788][T14667] veth0_macvtap: entered promiscuous mode [ 474.487083][T14667] veth1_macvtap: entered promiscuous mode [ 474.531468][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.556260][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.594581][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.619295][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.638670][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.666117][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.679828][T14667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.724486][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.746577][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.766707][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.780037][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.790076][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.802250][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.817696][T14667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.846196][T14667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.860542][T14667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.879619][T14667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.899854][T14667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.054378][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.088031][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.170471][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.189649][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.487705][T14910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2457'. [ 475.517419][T14910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2457'. [ 475.548896][T14910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2457'. [ 475.597679][T14910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2457'. [ 475.861039][ T5772] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 476.623634][T14954] netlink: 'syz.1.2516': attribute type 2 has an invalid length. [ 476.659298][T14954] netlink: 'syz.1.2516': attribute type 11 has an invalid length. [ 476.695856][T14954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2516'. [ 477.023180][T14963] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2518'. [ 477.049102][T14963] bridge_slave_1: default FDB implementation only supports local addresses [ 478.105920][T15005] netlink: 'syz.0.2525': attribute type 10 has an invalid length. [ 478.128252][T15005] hsr_slave_0: left promiscuous mode [ 478.151339][T15005] hsr_slave_1: left promiscuous mode [ 480.357820][T15107] tap0: tun_chr_ioctl cmd 1074025680 [ 480.454237][T15108] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.2551'. [ 480.480669][T15108] openvswitch: netlink: Flow key attr not present in new flow. [ 482.220167][T15114] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2552'. [ 482.239837][T15114] bridge_slave_1: default FDB implementation only supports local addresses [ 483.106022][T15133] netlink: 'syz.2.2558': attribute type 10 has an invalid length. [ 483.250546][T15133] team0 (unregistering): Port device team_slave_0 removed [ 483.283600][T15133] team0 (unregistering): Port device team_slave_1 removed [ 483.489031][T15149] netlink: 'syz.2.2564': attribute type 1 has an invalid length. [ 483.516827][T15152] netlink: 'syz.0.2565': attribute type 29 has an invalid length. [ 483.525281][T15152] netlink: 'syz.0.2565': attribute type 29 has an invalid length. [ 483.533329][T15149] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2564'. [ 483.544888][T15152] netlink: 'syz.0.2565': attribute type 29 has an invalid length. [ 483.553890][T15152] netlink: 'syz.0.2565': attribute type 29 has an invalid length. [ 483.736437][T15160] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 483.761914][T15160] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 483.998691][T15172] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2569'. [ 484.027993][T15172] bridge_slave_1: default FDB implementation only supports local addresses [ 484.037299][T15169] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2571'. [ 484.286647][T15179] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2574'. [ 484.344266][T15178] netlink: 'syz.3.2574': attribute type 21 has an invalid length. [ 484.378410][T15178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2574'. [ 484.463310][T15183] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2575'. [ 485.129954][T15197] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2578'. [ 485.215385][T15204] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2580'. [ 485.235898][T15204] veth0_macvtap: left promiscuous mode [ 485.531140][T15215] bridge_slave_1: default FDB implementation only supports local addresses [ 486.211594][T15238] netlink: 'syz.1.2593': attribute type 27 has an invalid length. [ 486.314021][T15238] bond0: (slave bond_slave_0): Releasing backup interface [ 486.750285][T15245] bridge_slave_1: default FDB implementation only supports local addresses [ 487.254206][T15285] delete_channel: no stack [ 488.063100][T15300] __nla_validate_parse: 2 callbacks suppressed [ 488.065015][T15300] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2610'. [ 488.146724][T15300] bridge_slave_1: default FDB implementation only supports local addresses [ 489.293564][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 0.32.0.0 [ 492.402013][T15345] netlink: 'syz.2.2625': attribute type 28 has an invalid length. [ 492.410116][T15345] netlink: 'syz.2.2625': attribute type 29 has an invalid length. [ 492.427162][T15345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2625'. [ 492.441468][T15346] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2624'. [ 496.362302][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.540355][T15381] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2644'. [ 496.563228][T15381] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 496.714055][T15390] netlink: 'syz.0.2640': attribute type 10 has an invalid length. [ 496.769469][T15391] netlink: 'syz.0.2640': attribute type 9 has an invalid length. [ 496.777416][T15391] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2640'. [ 497.613434][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 499.906154][T15393] IPv6: pim6reg1: Disabled Multicast RS [ 500.066843][T15392] netlink: 'syz.0.2640': attribute type 9 has an invalid length. [ 500.095344][T15392] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2640'. [ 501.128397][T15408] netlink: 'syz.3.2643': attribute type 4 has an invalid length. [ 501.554368][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.562421][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.794393][T15442] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 501.801349][T15442] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 505.162073][T15453] netlink: 'syz.2.2659': attribute type 16 has an invalid length. [ 505.180366][T15453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2659'. [ 505.223782][T15453] veth1_macvtap: entered allmulticast mode [ 521.025354][T15479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.034660][T15479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.042733][T15479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.051177][T15479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.059492][T15479] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 521.067159][T15479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.477294][T15476] chnl_net:caif_netlink_parms(): no params data found [ 521.597431][T15476] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.612153][T15476] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.628727][T15476] bridge_slave_0: entered allmulticast mode [ 521.641922][T15476] bridge_slave_0: entered promiscuous mode [ 521.650972][T15476] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.665633][T15476] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.672831][T15476] bridge_slave_1: entered allmulticast mode [ 521.682693][T15476] bridge_slave_1: entered promiscuous mode [ 521.731894][T15476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.746085][T15476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.796780][T15476] team0: Port device team_slave_0 added [ 521.813871][T15476] team0: Port device team_slave_1 added [ 521.846667][T15476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.861571][T15476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.888277][T15476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.911120][T15476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.922502][T15476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.957352][T15476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.479648][ T5772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 522.488478][ T5772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 522.505755][ T5772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.514087][ T5772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 522.521725][ T5772] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 522.535907][ T5772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.017318][ T5772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 523.031558][ T5772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 523.042706][ T5772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 523.059709][ T5772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 523.069534][ T5772] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 523.077818][ T5772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 523.143490][ T5772] Bluetooth: hci4: command tx timeout [ 523.564068][T15479] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 523.579184][T15479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 523.587062][T15479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 523.595751][T15479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 523.608768][T15479] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 523.616348][T15479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 610.633036][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 610.639697][ C0] rcu: 0-...!: (10499 ticks this GP) idle=603c/1/0x4000000000000000 softirq=58188/58188 fqs=715 [ 610.651093][ C0] rcu: (t=10500 jiffies g=66097 q=995 ncpus=2) [ 610.657324][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 8669 jiffies! g66097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 610.669542][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=27239 [ 610.677413][ C0] rcu: rcu_preempt kthread starved for 8670 jiffies! g66097 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 610.688679][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 610.698635][ C0] rcu: RCU grace-period kthread stack dump: [ 610.704519][ C0] task:rcu_preempt state:I stack:26728 pid:17 ppid:2 flags:0x00004000 [ 610.713719][ C0] Call Trace: [ 610.716992][ C0] [ 610.719915][ C0] __schedule+0x1553/0x45a0 [ 610.724433][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 610.730320][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 610.736203][ C0] ? asan.module_dtor+0x20/0x20 [ 610.741050][ C0] ? enqueue_timer+0x4cd/0x550 [ 610.745808][ C0] ? __mod_timer+0x984/0xdb0 [ 610.750403][ C0] schedule+0xbd/0x170 [ 610.754467][ C0] schedule_timeout+0x188/0x2d0 [ 610.759312][ C0] ? console_conditional_schedule+0x40/0x40 [ 610.765196][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 610.771079][ C0] ? update_process_times+0x1b0/0x1b0 [ 610.776454][ C0] ? prepare_to_swait_event+0x339/0x360 [ 610.781996][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 610.786849][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 610.793005][ C0] ? rcu_gp_init+0x1560/0x1560 [ 610.797758][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 610.802607][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.807797][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 610.812997][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 610.817578][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 610.822678][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 610.827607][ C0] ? __kthread_parkme+0x162/0x1c0 [ 610.832625][ C0] kthread+0x2fa/0x390 [ 610.836681][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 610.841779][ C0] ? kthread_blkcg+0xd0/0xd0 [ 610.846356][ C0] ret_from_fork+0x48/0x80 [ 610.850760][ C0] ? kthread_blkcg+0xd0/0xd0 [ 610.855337][ C0] ret_from_fork_asm+0x11/0x20 [ 610.860106][ C0] [ 610.863115][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 610.869435][ C0] Sending NMI from CPU 0 to CPUs 1: [ 610.874632][ C1] NMI backtrace for cpu 1 [ 610.874642][ C1] CPU: 1 PID: 789 Comm: kworker/1:2 Not tainted syzkaller #0 [ 610.874656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.874666][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 610.874688][ C1] RIP: 0010:queued_write_lock_slowpath+0x13c/0x2ac [ 610.874709][ C1] Code: 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 1d 1f 4f f7 eb 20 f3 90 42 0f b6 04 23 <84> c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08 4c 89 f7 e8 fb [ 610.874723][ C1] RSP: 0018:ffffc90003c179c0 EFLAGS: 00000206 [ 610.874735][ C1] RAX: 0000000000000000 RBX: 1ffffffff1c9ad00 RCX: ffffffff8a9039cd [ 610.874746][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e4d6800 [ 610.874755][ C1] RBP: ffffc90003c17a70 R08: ffffffff8e4d6803 R09: 1ffffffff1c9ad00 [ 610.874766][ C1] R10: dffffc0000000000 R11: fffffbfff1c9ad01 R12: dffffc0000000000 [ 610.874777][ C1] R13: 1ffff92000782f3c R14: ffffffff8e4d6800 R15: ffffc90003c17a10 [ 610.874788][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 610.874801][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.874812][ C1] CR2: 000055d31f949a30 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 610.874825][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 610.874835][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 610.874845][ C1] Call Trace: [ 610.874851][ C1] [ 610.874859][ C1] ? queued_read_lock_slowpath+0x250/0x250 [ 610.874883][ C1] do_raw_write_lock+0x1ea/0x260 [ 610.874904][ C1] ? do_raw_read_unlock+0x80/0x80 [ 610.874924][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 610.874941][ C1] ? neigh_periodic_work+0x5b/0xd70 [ 610.874960][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 610.874978][ C1] neigh_periodic_work+0x5b/0xd70 [ 610.874999][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.875016][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 610.875034][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 610.875052][ C1] process_scheduled_works+0xa5d/0x15d0 [ 610.875085][ C1] ? worker_attach_to_pool+0x380/0x380 [ 610.875111][ C1] ? assign_work+0x3d2/0x5d0 [ 610.875131][ C1] worker_thread+0xa55/0xfc0 [ 610.875149][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 610.875167][ C1] ? _raw_spin_unlock+0x40/0x40 [ 610.875182][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 610.875211][ C1] kthread+0x2fa/0x390 [ 610.875224][ C1] ? pr_cont_work+0x560/0x560 [ 610.875241][ C1] ? kthread_blkcg+0xd0/0xd0 [ 610.875255][ C1] ret_from_fork+0x48/0x80 [ 610.875272][ C1] ? kthread_blkcg+0xd0/0xd0 [ 610.875286][ C1] ret_from_fork_asm+0x11/0x20 [ 610.875313][ C1] [ 610.875650][ C0] CPU: 0 PID: 15471 Comm: syz.2.2665 Not tainted syzkaller #0 [ 611.149598][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.159906][ C0] RIP: 0010:kasan_quarantine_put+0x88/0x220 [ 611.165797][ C0] Code: e8 ad 2f ae ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 c0 7a 03 00 45 [ 611.185397][ C0] RSP: 0018:ffffc90000007420 EFLAGS: 00000206 [ 611.191455][ C0] RAX: 667556f88d700501 RBX: ffff88807a233500 RCX: 667556f88d700500 [ 611.199418][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 611.207385][ C0] RBP: ffff88807a233500 R08: ffffffff911c6547 R09: 1ffffffff2238ca8 [ 611.215350][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca9 R12: 0000000000000000 [ 611.223311][ C0] R13: ffffc900000074b8 R14: 000000000004ca20 R15: 0000000000000286 [ 611.231270][ C0] FS: 00007f8077f4d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 611.240185][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.246758][ C0] CR2: 0000000000000000 CR3: 000000005cd62000 CR4: 00000000003506f0 [ 611.254719][ C0] DR0: 0000000000000000 DR1: 0100000000000000 DR2: 0000200000000300 [ 611.262679][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 611.270641][ C0] Call Trace: [ 611.273912][ C0] [ 611.276749][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 611.282204][ C0] ? netlink_broadcast_filtered+0x101c/0x1110 [ 611.288266][ C0] kmem_cache_free+0xf8/0x270 [ 611.292943][ C0] netlink_broadcast_filtered+0x101c/0x1110 [ 611.298840][ C0] ? neigh_stat_seq_show+0x2b0/0x2b0 [ 611.304133][ C0] nlmsg_notify+0xf0/0x1a0 [ 611.308540][ C0] ? __neigh_notify+0x29/0x300 [ 611.313296][ C0] __neigh_notify+0x1ae/0x300 [ 611.317969][ C0] neigh_cleanup_and_release+0xa0/0x260 [ 611.323508][ C0] neigh_remove_one+0x5f1/0x700 [ 611.328352][ C0] ___neigh_create+0x467/0x2440 [ 611.333200][ C0] ? ip6_finish_output2+0x156b/0x1630 [ 611.338572][ C0] ip6_finish_output2+0x1581/0x1630 [ 611.343767][ C0] ? ip6_finish_output2+0x645/0x1630 [ 611.349043][ C0] ? ip6_mtu+0x7d/0x3f0 [ 611.353193][ C0] ? nf_hook+0x390/0x390 [ 611.357432][ C0] ? ip6_finish_output+0x57b/0x820 [ 611.362540][ C0] ndisc_send_skb+0xc26/0x14f0 [ 611.367299][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 611.372234][ C0] ? ndisc_mc_map+0x680/0x680 [ 611.376906][ C0] ? skb_dst+0xd0/0xd0 [ 611.380982][ C0] addrconf_rs_timer+0x2d5/0x630 [ 611.385916][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 611.391972][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 611.397971][ C0] call_timer_fn+0x189/0x540 [ 611.402563][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 611.408622][ C0] ? call_timer_fn+0xd2/0x540 [ 611.413290][ C0] ? __run_timers+0x800/0x800 [ 611.417973][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 611.424036][ C0] __run_timers+0x542/0x800 [ 611.428540][ C0] ? detach_timer+0x2b0/0x2b0 [ 611.433237][ C0] run_timer_softirq+0x67/0xf0 [ 611.438011][ C0] handle_softirqs+0x280/0x820 [ 611.442774][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 611.447535][ C0] ? do_softirq+0x1a0/0x1a0 [ 611.452034][ C0] __irq_exit_rcu+0xd3/0x190 [ 611.456620][ C0] ? irq_exit_rcu+0x20/0x20 [ 611.461124][ C0] irq_exit_rcu+0x9/0x20 [ 611.465355][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 611.470987][ C0] [ 611.473908][ C0] [ 611.476832][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.482806][ C0] RIP: 0010:__up_read+0x2f6/0x6b0 [ 611.487823][ C0] Code: 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 60 0f 85 8f 03 00 00 48 8d 65 d8 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 8b 1c 24 48 89 df e8 94 27 00 00 [ 611.507419][ C0] RSP: 0018:ffffc900126a7d10 EFLAGS: 00000246 [ 611.513480][ C0] RAX: 667556f88d700500 RBX: ffff88802a613c00 RCX: 0000000000000000 [ 611.521442][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 611.529404][ C0] RBP: ffffc900126a7d30 R08: ffff888023dd19b7 R09: 1ffff110047ba336 [ 611.537367][ C0] R10: dffffc0000000000 R11: ffffed10047ba337 R12: 0000000000000000 [ 611.545330][ C0] R13: 1ffff920024d4f94 R14: dffffc0000000000 R15: ffff888023dd19b8 [ 611.553312][ C0] __se_sys_perf_event_open+0x1899/0x1c50 [ 611.559040][ C0] ? security_bpf+0x7e/0xa0 [ 611.563545][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 611.569177][ C0] ? lock_chain_count+0x20/0x20 [ 611.574024][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 611.579221][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 611.584849][ C0] do_syscall_64+0x55/0xa0 [ 611.589269][ C0] ? clear_bhb_loop+0x40/0x90 [ 611.593949][ C0] ? clear_bhb_loop+0x40/0x90 [ 611.598624][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.604510][ C0] RIP: 0033:0x7f8076f9cdd9 [ 611.608918][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.628520][ C0] RSP: 002b:00007f8077f4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 611.636930][ C0] RAX: ffffffffffffffda RBX: 00007f8077215fa0 RCX: 00007f8076f9cdd9 [ 611.644897][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 611.653189][ C0] RBP: 00007f8077032d69 R08: 0000000000000000 R09: 0000000000000000 [ 611.661151][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 611.669112][ C0] R13: 00007f8077216038 R14: 00007f8077215fa0 R15: 00007ffc861a8438 [ 611.677089][ C0]