last executing test programs: 1m12.182488826s ago: executing program 0 (id=1463): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x2}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x5, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x7, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d40}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r5}], &(0x7f0000000200)='GPL\x00', 0x101, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @lsm=0x1b, r6, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x10, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000540)=[0x1, r7, r8, r9, r10, r11], &(0x7f0000000580)=[{0x4, 0x5, 0x10, 0xc}, {0x3, 0x4, 0x8, 0x2}, {0x5, 0x2, 0x5, 0x1}, {0x5, 0x3, 0x3, 0x1}, {0x3, 0x1, 0x10, 0x3}, {0x1, 0x3, 0xd, 0x1}, {0x3, 0x4, 0x4, 0xb}], 0x10, 0x7}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 1m11.032433213s ago: executing program 0 (id=1465): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x6}, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x480042, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) sendmsg$kcm(r1, 0x0, 0x8004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40", 0x9c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r2, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRESHEX=r2, @ANYBLOB="8d4b3280585e308f58457025f9431fff8eb22998ebc7c97dc5b8516703c0975f11d27896b9e4264934644f617d7407725611007132acbd1c112f9880bbcbd8c43bcc14d21abe2d33a2fde27e60d4ababa782fb2fedc323510e2efcae0a206f2457471a9e8e1d0775b9d8800fe8976b5d5cbb7125f5e19ff3cc87aeae0bebed8ff782be9c53d71ca5740d1eac42635f1f6b6926e8b63d4675ede6406b6ecfbdeca7da562ca3530303d466a184802531858712ab4331ce91f6bc855d49240e029c3178587920a6"], 0x308}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41a84000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000002c0b324e0000000000bc1c7181bc03000200"/34], 0x50) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000200000085000000330000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='D(\x00'/17, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007a00000000000000000000000000e700"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fea1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1m9.704939094s ago: executing program 0 (id=1472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a19, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000000c0), 0x4) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000300), 0x4}, 0x400, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890c, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m8.539684471s ago: executing program 0 (id=1476): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdff0000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000000600)=""/227, 0xe3}], 0x2, &(0x7f00000007c0)=""/27, 0x1b}, 0x10063) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r9 = socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff}]}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x8, 0x1}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x2a, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000070a8635b00000000070000002d69623dffffffffb7080000000000007b8af8ff00000000b708000014a800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000001832000001000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7004200000000000000000082d91caf9827989fcef300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0x9, &(0x7f0000000780)=""/9, 0x41000, 0x1a, '\x00', 0x0, @sock_ops, r8, 0x8, &(0x7f00000007c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7, 0x7ba00000}, 0x10, r10, r8, 0x3, &(0x7f0000000840)=[r8, r8, r1, r8], &(0x7f0000000880)=[{0x3, 0x1, 0x0, 0x2}, {0x1, 0x1, 0x0, 0x6}, {0x1, 0x4, 0x7}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r9, 0x11b, 0x2, &(0x7f0000000900)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1500000001000000100000000500000010000000", @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="010000000400000001000000000000000000000000b4c2217da852eca89a476a0000000000000041406ec0fc4916f16a04a34b75b3f254b0e48073c916a92c9cb3020b79dc585985412bf23a38da982633a7d4f372ef975b8c6720efe7eb59309b4c31f56183bee3778c1098f9f5d53fcfcc656f46ca4df12ad9be216275071d9740f70374af101e382c6ef8f244f633c4cf5689aa0ab6eb310083e580055da5c9ef8431af829816bdc90204f3e44e3fd723c7d5df5542"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000240)={0x20fffffe}, 0x8) unlink(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) 1m7.32693387s ago: executing program 0 (id=1481): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08061ced030ec080000000060000000400e2ffca1b1f00bf9ed7815e53a7c5eb89edd20e0212bb381adce747033a0093b837dc6cc01e32efaec8c7a6ec081208000300069bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff269ff000000000000000000aa612a90be00000000000000", 0x89}], 0x1}, 0x400c000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="000000000000006f1375950000000000850000000c000000b7000000000000009500000000aa016a6165bdb9e13fe659aa8f75000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58, &(0x7f00000025c0)}, 0x10) setsockopt$sock_attach_bpf(r2, 0x29, 0x4d, 0x0, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@phonet={0x23, 0x8, 0x0, 0x31}, 0x80, 0x0}, 0x480c0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 1m6.816920632s ago: executing program 0 (id=1484): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x230}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100000400100000000000000200000003000000000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0xc001) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x28, 0x4, 0x22, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 50.948683104s ago: executing program 32 (id=1484): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x230}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000100000400100000000000000200000003000000000000000000000604"], 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x18}, 0xc001) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x28, 0x4, 0x22, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 8.009540192s ago: executing program 1 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000a0000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000f0000004000000040"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x8, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}, 0x20040d4) sendmsg$kcm(r6, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)="f6", 0x1}], 0x1}, 0x4004045) close(r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="0700000000000000000000fd7400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002740)={&(0x7f0000000140)="5f2ce8f4fd564f8be80b84a8d504a122ca0a06f720538bbc988a5f4aa79f57a5138a00324e3ace5cbc17bcdcbf65dd728259fc777f4d254627fa", &(0x7f0000001580)=""/4096, &(0x7f0000002580)="b0118df0b7ddc3cf1e3c05b6b035f27ea95c6e41fd3d523dbf1c4077c43b76855d87a136b5bdecf21a5af51d9e4c01bfb8252c230f3d4ef789b4099e2cfbe1eca647787efa89473bd3fa48663788676df9976c47f186325651d18ce18dd7d79136e7259db27ad29c909b9be5a64fd2b9eb1744a7a56a2b2737ad009922f344798b7805ce4bbf3081290a0e6945c9f57e675a9ba57909a51062050b936b630d3a08ce2649b86a3b34e7f9247c7b50281aec3fd48dca27328406d86c942c01336d69e88c1775974c57bcac82cd58282dc8b09d14d7645870206f61a08d34", &(0x7f0000002680), 0x8, r7}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="ca87a9505c0d6708f0c10c566786", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0xc3, 0x54}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="06ff03076844babeb89eacf008e9", 0x0, 0xfd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000080000000804000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000000940b8010306d04f48d55e4064a50c8527d0033c222b13d4c536b2cc59276a295171ef41df2d3ac0b4caf9d9730115493756a36bf22efbef006870b636ab75aa5463be7dd0380a405cf93f788cb1ac2cda0667db8b37ac45842faaa7497215f7fe5110471"], 0x50) 7.103435763s ago: executing program 1 (id=1655): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000750000008500000006000000bfa100000000000007010000f8ffffffb7020000080000b7030000000000000504000000000000b745000000000000850000001c000000950000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)}, 0x0) sendmsg$inet(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{0x0}], 0x1}, 0x4000001) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0x0, 0x0}, 0x10) sendmsg$kcm(r3, &(0x7f0000001300)={&(0x7f0000000580)=@caif=@rfm={0x25, 0x8, "9bf9d409d4a0d579aa48570ec04f6e0f"}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000600)="b3473f85c37aa4e0ec96c4b0c07ce5f1e785441f166905386b2439255160e01d4447743a2a7da4fec074dd92", 0x2c}, {&(0x7f0000000900)="a95617f8e76ceeb85bf298cbdee91a7d8734c61933690e82481e969f3adc8ff73a223d3d0d5b523dd898860710f9b9ffe91e5fa9216eadb8049757a0a697f2bad3dd791e9670908f7b319cd77385b235319e1c88765c7cb92472dea44cb6f9cb8e1d8e1786a6ce5ca5ac9315ec71b51da95df4afcb094810c23a57a34135a74b601ed13c88a016403b6e0fcf8ce112d4612e39cb43a7971ea1566baaa33ef48a1d20d278c351d00441e2be20eb5e01cc3aa1d7b529b26affb7ac036a43971f6cf521b3546ec4dddffc", 0xc9}, {&(0x7f0000000a00)="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", 0xfe}, {&(0x7f0000000b00)="6a0d3d78f3d4e890cdf48510e41196a3c008ff0ccc02cc92a5b966fe81cf96db23d9fdfcb6e018883586786f4a51bc64a8f0d2b3ec35f82552e3df4a83ba28f8f562f54ce813f7661c097f1833b443a571bfb0b531541ac0bb39b4908bf5f0aa480ba9aea0b08f5789b50b3b5f09b4f3ed140f9ce13f5556a23f43c8fb5b3ca2369f0f998ffb4234d47dbf73e384ed9d32f697074eab16a00ad324ef8edd70fd21294b9735985281929f6a0bc37049dfe0f6d8075b4f0b3a25d63855c7b4dbf67245a4d9578efaa2a8eba217777840782da9257a7619e8d3dd80b302c97a5e9e0b44729d020d2ac9478a8ce0919b7649a63d", 0xf2}, {&(0x7f0000000c00)="76152afd4cd94df9e8dfa63ab5394f69dd3bb83e6cb7705080e0a79ab56e5b4a305c89a60e30f320b49e77", 0x2b}, {&(0x7f0000000c40)="2e469745732ac45abd692c72d4cfadf61dce2ea46a583ac85a2d6b3c1b66752a738ba15eaa90519b8c4eeefdc018625817ff3d81bc43fc0608f132fc7d27f198f21e65545f3d51fa2cc0d3c995b96b54bfd5dc65e4809985c6fe7381a350a2dc8d7e1519b6b28ddb6c", 0x69}, {&(0x7f0000000cc0)="50e43f623e246f6fcc2109782d1c9021a37947527177c61042944cf00a033fe92e7b1b82bda1c8a763ade168af0ff6e178fe9653d33d9b87454683ac5a6c178a9ae8c78d2be161e5d4645a5a4972e4876e65dedfd8a9a935039cd976c594de810b636eb2f1bc1b9148eb34b75def94", 0x6f}], 0x7, &(0x7f0000000dc0)=[{0x108, 0x119, 0x3f4, "a22461f5ad1d289cd86f56be8c8e0a30bbcff938b269adad7c4dc1773cd3df390eacb7b47beee2b36216da987751e7fcd9e453d64b55ac535e959efaa09c4c62f0d4aa57e958e33a97bb9fc549782bc0e168cd56da4bebe8cd4fb1c90dea1987d5bd8527fe64f5ebf8fa19a4507bfb57aeec6eb6670aa0ee659b6bf808cf18bbd72a932255c9c2763b6b9a92d85f26a66465b3da8b4a511cd58cd6a022ace1603693632afc84c59287cc7b49dc7c00f4e9313a24ca226d301f3118b81dc7b9c3e9ce8c0e33351393f12985894ca8b6a8bac13af7601d272496b95124ce3ece6082ba64fce52e83bf493fd7c0c905a304dba234ae05e7"}, {0xd0, 0x0, 0x16a9, "93b66f2e466f84c210543bf2ec146a05ce05ab233e805af8d504064aa8e9781eb22883968059cd757a054d3ed81af029527efc0d7da9a0667908ed5e467f2260fb76cbc17d5be178479a852b092b8ae4a652361ff3d627563699f80c677b1d3cb1247b4772745ee1bd2e9fb7ff8a51ef5644fb3b5e22be7362baa86d2b7e9a65d436394458bed53353353a55d63d9fbe96e06b2121ccbd351e264d24667cc70bf18b87d3d81988dca913dededd5e84fb1d1be91af2c51d75759d50ca89a29c8f"}, {0x50, 0x115, 0x80000000, "663a70699bb14a2d49a3b760f6c91326f99e019c35858c96f1b7c3c951eaceef03fc01b76e5df59401de8cc7cbcc448c3357bdb76ca6b032714a"}, {0xd0, 0x116, 0x6, "94d051f7748cf2311d7d6cc68cd5dbf831b06791f7a2dbb54248e98eb90ec858f65bd2b89a1c33443b0ee3ce493b88a31b0e998d5569de57c4689dd9d42e0a7d801e82156f08166fff5f9027506a213802ceee0f8f4994b4e440cab4dc60b4cfa65fd1f89434ec9ab49d68ad64b73fcddd39f85e5239ba35c54ab681527e55e5bb808997d9f6b875cfa0982b2a819588177a1a03dcc09206ae4ae72e8c34d3a256dc74552389e296c7c29bb39b628582601206e2140b6a6df170f4ffb7f85904"}, {0xa8, 0x1, 0x1, "d71264fa5dc6335e288699e33590bf1c6f778bac798de687a16123c758e576334a04826726fe3b34ef7c617d276843ccc02dbd6e7b87d9d9d7d06389022218be135a7d3f8197f5a8644221f9163ed9d3252687c6cc3c1658d4fd4b48c7aaf310a86b481d0aae867a1b1bf871dcfc49de13bf707dea8d8aa61c36b03dbf1ed192a211a741ef9d33f04dc884f3ca26c33a527d3cbb70f03d"}, {0xa0, 0x10a, 0x7, "739e557e66f729f6525162a966a002db40c754e0914bda467608f2a0343db2a8fd0075df515c864207f3bb6fff0f54cba157b5653bda4e9a0dd90416c8a0a6564eaaaa7084c6d223e6c9816ba0c4677a9b3eed51dcc75b4e6504d37ecc2899de207d525d2d3ad3cae62343b3eb08a7ecad5004b9f4a69e7f4953561954b70d41d6f453b76a196e5a7a7bab"}, {0x38, 0x119, 0x18, "4ee1427ff39c0693964ad05afd6027d9acec702e27823e53f97994eea91c4840d5ade5d95a"}, {0xc8, 0x112, 0x4000000, "0e121895c200ac6749d5790b7b0e1df98439a8c98d6a47162e3557343bd88d81b68ec46e424155850a02836e84e7c2557725e7a33000df5218b4a1a0a43fe9d06c9e84b2a279448166ad74c2c9e2916e84a7e47584d0247c50f8fc9fe4679cdfe64a649dda8c7d2c0bf26070de9cb20f0a2a6e5fa07c1c0c78ed670ac95d29576eb9fb086a5b33af5e7916e498cab81ab51c203d2c14df527dba2f16c0baa09ebf084416de1b319fd23718aec46ba4dddbb9838ba1"}], 0x540}, 0xc000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000001000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x0) 6.725841982s ago: executing program 1 (id=1657): perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@const={0x9, 0x0, 0x0, 0xa, 0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f00000000c0)=""/43, 0x7d, 0x2b, 0x1, 0x400}, 0x28) close(r1) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'perf_event'}, {0x2b, 'net'}, {0x0, 'blkio'}, {0x2d, 'blkio'}]}, 0x1f) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40b}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.558748796s ago: executing program 1 (id=1660): socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a0401000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0xfffffffffffffe66, 0x0, 0x0, 0x7fffffff}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0xe, 0x5, 0x22, 0x7, 0x12040, 0x1, 0x10000, '\x00', 0x0, r0, 0x0, 0x20000000, 0x0, 0x0, @void, @value, @value=r2}, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x20040800) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000300)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuset.memory_pressure\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5.924980671s ago: executing program 4 (id=1662): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r1, 0xa, 0x2028}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 4.435817526s ago: executing program 4 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000000000079104800000000007104350000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xd}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) socket$kcm(0x10, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x103100, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r2}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="001000"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRESHEX=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xce7}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0x3) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a400014006", 0x39}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r5}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x22, 0x2, 0x21) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x5, 0x0) 3.210316855s ago: executing program 4 (id=1667): r0 = socket$kcm(0x23, 0x5, 0x0) close(0x3) (async) close(0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r1}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000011800000000000000010000ec16c7", @ANYRES32], 0x38, 0x800}, 0x8841) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000011800000000000000010000ec16c7", @ANYRES32], 0x38, 0x800}, 0x8841) 3.139132277s ago: executing program 2 (id=1668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) close(r1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000080)=""/32}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000500000002000000020000060423000001000000000000000300000000000000005f2e5f00"], 0x0, 0x39}, 0x20) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x3, &(0x7f0000000140)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d000f00027c"}) 3.135792446s ago: executing program 1 (id=1669): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000001400)={&(0x7f0000000040)=@caif=@dbg={0x25, 0x1, 0x3c}, 0x80, &(0x7f0000001300)=[{&(0x7f00000000c0)="d49518acd027be8ec7c9b0821f4ef96e35cb305d280c31bffe604136ad3493166966972ba698d23eb6a6035200c6b41213f069d83f614bcd35a8ab38424da3d26990769d55cab84ae4767f06bb8e94d0c121fd65e41bbea4742a09e3e03a4b0dc2de0a2d06c49afd7ceffc27b9214b", 0x6f}, {&(0x7f0000000140)="4b25e3f3bf634dd503d96d6a090e946e73f12831cce3ca3668563d4b2924336bfbda5613de95affa571fa7", 0x2b}, {&(0x7f0000000180)="da05cf0c77dbe7adcaef18ead6c1ce5d0674ff5beff6a06ce560b8b469be5903e488650d6239f992f0135c9a2007febe4ba146c646e2eb20fe504602356e5f3cd6909123d64010b44a56a48299090ea5d142402581d5d9ca25c445f0a14eafeb2f8429ff5c11c5ad1e4c5f98bd27da86092b7f0f5d8e33ec205fc1224a992a50b562b292415f27e7c8b7ee654e0cacb5aac1e91e62ac9e015e375eb59f55e92e", 0xa0}, {&(0x7f0000000240)="57bb2d2a39ba158cacc06bae4a1aca2fbf079ebcd1c6a03698dafc1f62546af849c5efe0e0a25388d81e96125ede53e6a2b7bec5a734aa207103e7d2b08ae4fb78f0a3331b68655541fd203fd6b3bfed6966e4b660df84b693213bb905890e0cb040e64792761b9b8dc7dd4fc45d1602cfacca9faddbb32fab308b8c60beab5d813ffd53c123", 0x86}, {&(0x7f0000000300)="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", 0x1000}], 0x5, &(0x7f0000001380)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}, 0x40040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000014c0)={0x5, &(0x7f0000001480)=[{0x6, 0xe, 0x5, 0x8}, {0x0, 0x4, 0xb, 0x4e23}, {0x5, 0x3, 0x4, 0x5}, {0x6, 0x40, 0x9, 0x10001}, {0x1, 0x9, 0x2, 0x8}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@var={0xb, 0x0, 0x0, 0xe, 0x5}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x27, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @var={0x10, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x0, 0x0]}}, &(0x7f0000001700)=""/146, 0x65, 0x92, 0x1, 0x1c, 0x10000}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x19, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3e1b891aeeb48718}}}, &(0x7f0000001980)='GPL\x00', 0x0, 0x6b, &(0x7f00000019c0)=""/107, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x3, 0x9, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001b00)=[{0x1, 0x1, 0xf, 0xc}, {0x3, 0x4, 0x5, 0x4}, {0x2, 0x4, 0x8, 0x5}, {0x2, 0x1, 0x4, 0xc}], 0x10, 0x68f}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x2, 0x5, &(0x7f00000015c0)=@raw=[@jmp={0x5, 0x0, 0xc, 0x6, 0x8, 0x100, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000001600)='GPL\x00', 0x1, 0xa, &(0x7f0000001640)=""/10, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, r4, 0x8, &(0x7f0000001800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001840)={0x0, 0x10001, 0xcfc5, 0xfffffff2}, 0x10, 0x0, r5, 0x6, &(0x7f0000001c80)=[r6], &(0x7f0000001cc0)=[{0x2, 0x5, 0xc, 0xb}, {0x4, 0x5, 0x6}, {0x3, 0x2, 0x6, 0x7}, {0x3, 0x5, 0x6, 0x7}, {0x2, 0x3, 0xe, 0x6}, {0x4, 0x1, 0x10, 0x8}], 0x10, 0x7ff}, 0x94) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000001e00)={'ip6gretap0\x00'}) r8 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000001e40)=0x5) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001e80)={0x8}, 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ec0)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0x2, '\x00', 0x0, r4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x18, &(0x7f0000001f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xf5a}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x4, 0x0, 0x2, 0xa, 0x3, 0x184, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002000)='syzkaller\x00', 0x3, 0x65, &(0x7f0000002040)=""/101, 0x40f00, 0x9, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000020c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002100)=[r6, r6], &(0x7f0000002140)=[{0x2, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x5, 0x8}, {0x4, 0x2, 0x3, 0xa}, {0x0, 0x1, 0x3, 0x8}, {0x5, 0x4, 0x4, 0x6}, {0x2, 0x2, 0xb, 0xa}, {0x2, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x3}, {0x3, 0x1, 0x1, 0xb}], 0x10, 0x6}, 0x94) r10 = getpid() r11 = syz_open_procfs$namespace(r10, &(0x7f00000022c0)='ns/time_for_children\x00') r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000002300), 0x8000, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000002340)) ioctl$TUNGETVNETHDRSZ(r12, 0x800454d7, &(0x7f0000002380)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000023c0)='cpu.weight\x00', 0x2, 0x0) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002400)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000002440), 0x12) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002480)=r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002840)={{r3, 0xffffffffffffffff}, &(0x7f00000027c0), &(0x7f0000002800)=r2}, 0x20) sendmsg$unix(r0, &(0x7f0000002900)={&(0x7f00000024c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002540)="27a9fd1cdb6f710146eb3d0b5bc5b67baa570dc3c1b3c0f7e8b10c6967293d17882c15cf2eb95be4d74a073ee9a5f97e4cdf698e49f8c7a62168f9a31d79afaaec90e016b6935594af6a16feea51828c7c2d60172bae10f63f4c76d3f54912858518f23577605992c7a97c4677e7f8013b48d347d1132c095305aaf53128e6f73bdee6f53e915c70e899a50474d0586415fb025a6e7facaf549c18bdad967c808a4a1ec645c29a885912ccd7b249762c4e959c1d28358afdc6f6fd7c6026a1a4463cb636d490fd7ad226ea52c9404e631ea7d31be200b46aebf5623cfcb9287086f9a90bed5ab1ec41ca534f8d2d", 0xee}, {&(0x7f0000002640)="5e4b816ce8be8460c217333ffc7b1de52085833d28bfcd105ed450ab2ab55e22a0aa9687967fb8077c5ec81c2209c1e58046d0d814bd9aacee5d0fbaa4c401596f346fdac003cbf11eacbacab2decba9a0528eed01423835dd6f8bdc144d026d73eea50ada749ab5a177b1c6a534eb29e90cac32f63ea7ae3b45335368ff691dce933c64e70321d557472fc32dfbde012a136efca40c84668fcc2c46b72cf5d1d0c5abb0c60f321ed68173d731a77e719c747e8e21866ad5f40d5720f6204f63749e80cea93bcca8cb960e46ee7cdc3fa743056f74312bec7bf9bf27ea240228f5da38dcb487bdf31283", 0xea}, {&(0x7f0000002740)="b90ed4391e3a8198670b516cda64943befe7175debf863bfefc4db3eb1eeda454d7c", 0x22}], 0x3, &(0x7f0000002880)=[@rights={{0x14, 0x1, 0x1, [r14]}}, @rights={{0x2c, 0x1, 0x1, [r7, r0, r2, r7, r2, r11, r8]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee00}}}], 0x80, 0x4000000}, 0x20004000) r15 = perf_event_open(&(0x7f0000002940)={0x2, 0x80, 0x1, 0x6, 0x0, 0x2, 0x0, 0x8cc, 0x804, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8000000000000, 0x1ff}, 0x40, 0x4b98, 0x80000000, 0x9, 0xb677, 0x9, 0x68b, 0x0, 0x3, 0x0, 0x7fffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r7) recvmsg$unix(r1, &(0x7f0000002c00)={&(0x7f00000029c0), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/82, 0x52}, {&(0x7f0000002ac0)=""/177, 0xb1}, {&(0x7f0000002b80)=""/41, 0x29}], 0x3}, 0x100) 3.135327217s ago: executing program 3 (id=1670): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="d8000000140081054e81f782db44b9040a1d08020a000000040000a10d000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfac64dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a50b70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) 2.913439392s ago: executing program 3 (id=1671): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2b}]}, {0x0, [0x0, 0x30, 0x0, 0x2e]}}, &(0x7f0000001380)=""/4096, 0x2e, 0x1000, 0x0, 0xfff}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x22, 0x7, &(0x7f0000002440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}, [@alu={0x4, 0x1, 0xd, 0x1, 0x4, 0x6, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, @call={0x85, 0x0, 0x0, 0xc}]}, &(0x7f0000002480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40e00, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000002500)={0x1, 0x3, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000002540)=[0xffffffffffffffff, 0x1], &(0x7f0000002580)=[{0x2, 0x1, 0x8, 0x5}]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=@base={0x0, 0x69d1, 0xffff3d6e, 0x6, 0x40000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002740)={0x1b, 0x0, 0x0, 0x13b, 0x0, 0x1, 0xffff0001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80ed}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x4c}, @jmp={0x5, 0x0, 0x4, 0x2, 0x1, 0x40}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5da}, @jmp={0x5, 0x1, 0x5, 0xb, 0x3, 0xfffffffffffffffe, 0x1f}, @jmp={0x5, 0x0, 0x3, 0x0, 0x8, 0xfffffffffffffff4, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000280)=""/4096, 0x41100, 0x16, '\x00', r2, 0x17, r3, 0x8, &(0x7f00000023c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x4, 0x1, 0x0, 0xc}, 0x10, 0x5, r4, 0x4, &(0x7f00000027c0)=[r5, 0xffffffffffffffff, r6, 0x1, 0xffffffffffffffff, r7, 0x1], &(0x7f0000002800)=[{0x3, 0x3, 0x9, 0x2}, {0x3, 0x5, 0xf, 0x3}, {0x4, 0x5, 0xb, 0xb}, {0x5, 0x4, 0xb, 0x5}], 0x10, 0x2}, 0x94) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002900), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000002940)={[{0x2b, 'pids'}]}, 0x6) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x18, 0x13, &(0x7f0000002980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x3}, [@generic={0x1, 0x9, 0xc, 0x9, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xfd, 0x2, 0x7, 0xa, 0xdad9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000002a40)='syzkaller\x00', 0x6, 0x19, &(0x7f0000002a80)=""/25, 0x41100, 0x40, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002ac0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002b00)={0x2, 0xa, 0x0, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002b40)=[r6, r5, r0], 0x0, 0x10, 0xe0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002d40)={@cgroup=0xffffffffffffffff, 0x14, 0x1, 0x3, &(0x7f0000002c40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d00)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002dc0)={0xd76, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d80)={@fallback=r1, r8, 0x2d, 0x20, r10, @void, @void, @void, @value=r13, r12}, 0x20) r14 = openat$cgroup_ro(r11, &(0x7f0000002e00)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e40)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1c81, '\x00', 0x0, r14, 0x3, 0x3, 0x3}, 0x50) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003140)={0xffffffffffffffff, 0xe33, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003200)={0x6, 0x2e, &(0x7f0000002ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4a4f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}, @tail_call, @cb_func={0x18, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x1, 0x9, 0xa, 0x8, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x0, 0x1, 0x4, 0x7, 0x3, 0x1, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000003040)='GPL\x00', 0x6f, 0x33, &(0x7f0000003080)=""/51, 0x41000, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000030c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000003100)={0x3, 0xc, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003180)=[r5, r15, r16, r6, r14, r6], &(0x7f00000031c0)=[{0x1, 0x3, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000032c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r15, 0xc6, '\x00', r2, r3, 0x1, 0x2, 0x3}, 0x50) r17 = gettid() r18 = perf_event_open$cgroup(&(0x7f0000003400)={0x1, 0x80, 0xc, 0x0, 0x2, 0x3, 0x0, 0x7, 0x400, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x8, 0x918}, 0x400, 0x6, 0x7, 0x8, 0x6, 0x7, 0x7, 0x0, 0x7fff, 0x0, 0x4}, r14, 0xe, r14, 0x5) perf_event_open(&(0x7f0000003380)={0x3, 0x80, 0x1, 0x9, 0x3, 0x12, 0x0, 0x7, 0x1415, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efafbb1, 0x2, @perf_bp={&(0x7f0000003340), 0x8}, 0x900e0, 0x5, 0x73, 0x5, 0xb, 0xd77, 0x5, 0x0, 0xc7b, 0x0, 0x7}, r17, 0xffffffffffffffff, r18, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000003480)={'bond_slave_1\x00', 0x400}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000034c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r15, 0x4, '\x00', r2, r14, 0x1, 0x5, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003540)={@ifindex=r2, r10, 0x21, 0x30, 0x0, @void, @void, @void, @value=r13, r12}, 0x20) write$cgroup_int(r5, &(0x7f0000003580)=0x6, 0x12) sendmsg$sock(r4, &(0x7f0000003bc0)={&(0x7f00000035c0)=@pppol2tpin6={0x18, 0x1, {0x0, r14, 0x0, 0x4, 0x3, 0x2, {0xa, 0x4e20, 0x1, @private0, 0x6}}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003640)="fa7726ab8eebcc8bc2f2aed6ab47b072a0e57aca6091d5d5776a828e50eb955f57695757bc58b009d00dde5d3ab6b8950345a8e6e8e871321fe5ccc1da6017c025b4157285cd748ede163cfd549cd82816ad74d37f353f1701c6096a0f3922c92b0bca3a722013c7a1854ca62253dbd51da73cc9e943b976cef14c76f232b5b9db6add6e382a54a183431d05f21e38cdd049ab321de2dbc5dd9a5213e76a60c71fe154851aa3aeac83127d0519fede47d9e1", 0xb2}, {&(0x7f0000003700)="a03943a2584c17a77a9b1ece9a54909308c6", 0x12}, {&(0x7f0000003740)="1f3a3a9a9a24c8f36dde6148ac24b32f73ed94cc052746083b4b818d61a0f91b4ab94c0cf15716002b777af8cb46d4704b65623157f3959dfcfaa10b63bf5969a970af3d7c6caa3e6317c351be50193467ce1b541ecea811452675ddd0445ed36157e52ef6e75248c02fa38e5be11a27b3aeb0f3f57f7b59c3404c47eb604772fa0b1ad75bcaaab03be46dfdaa8619edf0", 0x91}, {&(0x7f0000003800)="08ada22b874e87b112fc93bd32fef482909a2139c2e51fb502eed9f07c204bae4f69133d187e2460f08f518330436856d54b4df430ab3dd200271d310df0b9f58fe5b3080536063559882c57b0503d5c0496cb542a172dc556e9817869fbd82af08d31fe6ef940a83057f4d38df3d4708270a7521b024d81122f6c1f", 0x7c}, {&(0x7f0000003880)="23cb196f4b82b7e149da9ddcd367abd2e791e5292fe84582a14723de6f79cdcdc715d819e490eb7a7f0bbf19368ac557a3b98f0b9991f47433cfc4592bbdccd10a6654aba30f23cc8942fc92ea9f40cc57b381685b755875c7a1a12536", 0x5d}, {&(0x7f0000003900)="998e6505e1e8c3408b6719859f49de117c650288cd3e9d3c8008d57dc2839935e58a5542d05ccacf39886c79c7c49bb7c6efa8921df5e7df5c878a67164c82ea8ae2e80479917e3ed0bfd3fbb74eb6d7034352aebb23", 0x56}, {&(0x7f0000003980)="9210741e440ba38016fbff6266b579b161de3d592f628c921da69227dc846b464c5a4e36c2c08a60262fa2968e9d38408df76fce1f8b4fb4000e346ec8583cf91ffe49404a7f268a2a5ddb85c1532da12295738924848b95f09c631b7da099bd0eb8372ee74f1533aeb0c67db403e9314dcb365c7592cbac0eefb96e27a38bb4c3ad17654e313ff2c2882a5f2a24fd3aa802557965", 0x95}, {&(0x7f0000003a40)="2f2f471882716c78aef52b06d8340cd17ff989a3a7f6e6d7689abd70efaf0c47f0a466305863bc0bd23c8ad005ab10696ffba085c8dfa8a03f623e263333d6b2513594a5e8201b8e8aa2a1e095e0efd69597b9d7436ac4b0a1e55dc96d32b1e1723430c4a8340d99b2d9fb", 0x6b}], 0x8, &(0x7f0000003b40)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x20000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003c80)={r16, 0x58, &(0x7f0000003c00)}, 0x10) write$cgroup_devices(r14, &(0x7f0000003cc0)={'c', ' *:* ', 'wm\x00'}, 0x9) 2.794723605s ago: executing program 2 (id=1672): r0 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400000000000000, 0x3fff7ffa}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x101010, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0xff80000000000001, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000080000000000000003", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28, @ANYRES16=r0], 0x50) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x7, 0x4, 0x100, 0x10, 0x8}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x10001, 0x7fffffff}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x10006, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r3, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) write$cgroup_devices(r5, 0x0, 0xffdd) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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", @ANYRES16=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f00000002c0)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004923edf5d8800120087dbfba1b40000e3a44ac4537b5a1e5dec8947e31f19a9db55536ce5d28cc74d7f2e59e54b8516adcd7b3f412cf4aa4efaed8629470b2e52a88c6f4adb43b26026deee73433b5b380aa47450110d2dbdda8c8eb590795e433239f5369098f3c3ef15ffb0321a9bf52550d5fe7eda59f13c3c53f901debdcfb88c26d5ce301c838a6283b421c48eafacec5a565bfd906f4da6ae3a8ede370b097cced7d104b64b40e65fb1e253eb5a6bfbc8741554ede8374205a400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.726132046s ago: executing program 3 (id=1673): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.621835628s ago: executing program 4 (id=1674): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (rerun: 32) r0 = socket$kcm(0x28, 0x5, 0x0) sendmsg(r0, &(0x7f0000001cc0)={&(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, 0x80, 0x0}, 0x44008080) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) (async, rerun: 64) r1 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 64) close(r1) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x20, 0x0, 0x5, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) (async) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) (async) recvmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/101, 0x65}], 0x1}, 0x100) 2.508330831s ago: executing program 2 (id=1675): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r2 = socket$kcm(0x1e, 0x2, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)}, 0x40000180) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) close(r1) (async, rerun: 32) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (rerun: 32) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) (async, rerun: 64) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x8, 0x0, 0x8b, 0x0, 0x0, 0x420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8726, 0x100}, 0xac, 0xffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400", 0x36}], 0x1}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd5}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000, 0x1, @perf_config_ext={0x1, 0xdbfb}, 0x804, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1456, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x4, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c00000b000c00003591a79791460002"], &(0x7f0000000340)=""/81, 0x26, 0x51, 0x1, 0x5}, 0x28) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x27) (async) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x20, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) 2.158503339s ago: executing program 1 (id=1676): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c1"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907"], 0xfe1b) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa5, 0x0, &(0x7f0000000280)="fd4eaa0fe932d182b949c608162ea9c445b1738dc7ae6e95e7f4de4929e1b008350cf8ecd9324da3d6f3d2c0b6dccb546b38a3dc7b24ea92e83f3415ad31cf603c668b8353957a2c1ca32831c7dcef4ca3eff480c4072c8bffdd0581c356b3384b99d3c1a10e039c77e17b111c86e4948d45647780fdbb5b18c7b3a90806fa8797b897b4a4bfe425ad57d4694a552c54003a729b3f04c68bbbef6f26eac9398c6824650aef", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x9c) socketpair(0x1, 0x1, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x4, 0x8}, 0x10, 0x1a0b6, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500), 0x10, 0x6}, 0x94) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000042000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f64526adf2b25a7994b538efca4eb01001800000000000000100026001000000007000000040000000000000e0400"], 0x0, 0x2f}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000181000000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000058da000000"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2}, 0x94) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (rerun: 32) 2.10971439s ago: executing program 3 (id=1677): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x29e0}, 0x1051ec, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 1.796137168s ago: executing program 2 (id=1678): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0xc, 0x2, 0x5, 0x200c, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000a50000007b00000095"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.415173597s ago: executing program 2 (id=1679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020207500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) 1.201905722s ago: executing program 4 (id=1680): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x1, &(0x7f0000000100)=@raw=[@exit], &(0x7f0000000140)='GPL\x00', 0xb4af, 0x3e, &(0x7f0000000180)=""/62, 0x41000, 0x46, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x4, 0x8000, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x3, 0x5, 0x6, 0x5}], 0x10, 0x9}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x800000}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) socket$kcm(0x10, 0x2, 0x4) (async) r6 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) sendmsg(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r3}) 1.201111912s ago: executing program 3 (id=1681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xd0, &(0x7f0000000240)=""/208}, 0x94) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18aa700000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001fc0)={@map=r1, 0x9, 0x0, 0x44, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001f00)=[0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002000)={@fallback=r4, 0xffffffffffffffff, 0x2b, 0x2008, 0x0, @value=r6, @void, @void, @void, r7}, 0x20) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000)=r6, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fe00000000000000feff05ff850000df1800000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r8, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000001900)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f00000019c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@bloom_filter={0x1e, 0x3f98d798, 0x33b, 0x4, 0x8038, r6, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x2, @value=r6}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d80)={0x6, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x280000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xfffffa0a, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x48, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x3, 0x0, 0x232c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[r10, r11], &(0x7f0000001d40)=[{0x5, 0x5, 0x5, 0xc}, {0x1, 0x4, 0xb, 0x1}, {0x4, 0x3, 0x5, 0x6}], 0x10, 0x7}, 0x94) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x822e64e75fe68dc4, 0xc, 0x1d09, 0x4, 0x8000, 0xffffffffffffffff, 0x10, '\x00', 0x0, r0, 0x0, 0x2, 0x2}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r14}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r14, &(0x7f0000000540), &(0x7f0000000640)}, 0x20) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r15, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xd, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000000000000000000fbff00001811000083ef90f95c0e495b7d6764cfd5d74439601f1952c5c21493995a54b9d28a444c9756aa7eecd1a35f9f5287614af7f78e9ae40435d9a0a9ddd12107a1a24364c465117da4ae2b0e5da84630175bcb12e781436269bab663640dab4d06d962ecfdfb51346835174db082f28c1ef141b69cacb10695e2c707bf1291fbaf160c51b5d6cad7253f73f9a8fc130d238c54d11753a36b734dbf2522dea30b941edc749b2b254c1cc9a657bec1639060c5bd44b8ffc5b75f2930188398d1c9ac552b1ae0e300f01be4bc41edd1f7", @ANYRES32=r18, @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ldst={0x3, 0x1, 0x0, 0x5, 0x1, 0x6, 0x10}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x703, 0x0, 0x0, 0x41000, 0x2a, '\x00', r9, 0x0, r12, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x1, r13, r14, r15, r16, r0, 0x1, r17, r18], &(0x7f0000000700)=[{0x0, 0x4, 0x4, 0x9}], 0x10, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) 1.196096992s ago: executing program 2 (id=1682): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000005140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003dc0)=ANY=[@ANYBLOB], 0x1360}, 0x24000080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x1570, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e2, 0x5, 0x400008, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, r0, 0x1) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r3, 0x10e, 0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000140)='./file0\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x0, 0x0, 0x2e) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r7, 0x24, 0x0, 0x5, &(0x7f0000000440)=[0x0], 0x3ffffe70, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.99724ms ago: executing program 3 (id=1683): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x9003}, 0x38) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000050000000000001004000000002e002786e24dc5c33fb31d5ec9ca5310d623a6cabfed2552eba298d67b999dee43ce04700c9f2812fc7cfd879cee155bb3ba89a56ceb93c15ce35fb6f5"], &(0x7f0000000380)=""/198, 0x27, 0xc6, 0x0, 0xdf, 0x10000}, 0x28) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) (async, rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x10, 0x0, r0, 0x5, '\x00', r3, r4, 0x0, 0x2, 0x5}, 0x50) (rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b00)=@o_path={&(0x7f0000000100)='./file0\x00', r7, 0x4000, r5}, 0x18) (async) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x73, &(0x7f0000000200)=""/115, 0x40f00, 0x16, '\x00', r3, @fallback=0x2b, r4, 0x8, &(0x7f0000000540)={0x6, 0xffffffff}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x9, 0x5, 0xdeab}, 0x10, r6, r9, 0x0, 0x0, &(0x7f0000000600), 0x10, 0x7}, 0x94) (async) recvmsg$unix(r2, 0x0, 0x40) (async) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f00000000c0)=0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x40000000, 0x0, 0xf, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async, rerun: 32) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x4b, 0xfffff01c}, {0x6, 0x0, 0x0, 0x8}]}) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) 0s ago: executing program 4 (id=1684): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='a\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76fc93ff9afd0872ecce91a39b3f3824156b769b321b544b66539836f8bfa154a884a214335c60bcdf9a236fe7", @ANYBLOB="0200000003000000020000000a00"], 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) (async, rerun: 64) r5 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x84, 0x78, 0x0, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002b40)="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", 0x1b2}], 0x1}, 0x8400) (async) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640)}], 0x2}, 0x0) (async) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, r6}, 0xfffffffffffffdbb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) write$cgroup_devices(r1, 0x0, 0x8) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xff) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[], 0x0, 0x34}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): sing attributes in process `syz.3.323'. [ 148.708168][ T5781] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 148.723032][ T7091] hsr0: entered promiscuous mode [ 148.817981][ T7091] bridge0: port 3(hsr0) entered blocking state [ 148.863454][ T7091] bridge0: port 3(hsr0) entered disabled state [ 148.949453][ T7091] hsr0: entered allmulticast mode [ 148.962439][ T7091] hsr_slave_0: entered allmulticast mode [ 148.986055][ T7091] hsr_slave_1: entered allmulticast mode [ 149.222576][ T7091] bridge0: port 3(hsr0) entered blocking state [ 149.232180][ T7091] bridge0: port 3(hsr0) entered forwarding state [ 149.929579][ T7119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.330'. [ 150.144456][ T7128] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.331'. [ 150.409430][ T7134] netlink: 'syz.1.335': attribute type 29 has an invalid length. [ 150.428072][ T7134] netlink: 'syz.1.335': attribute type 3 has an invalid length. [ 150.455591][ T7134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.335'. [ 150.978252][ T7152] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.341'. [ 151.033786][ T7155] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.344'. [ 151.081542][ T7156] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.343'. [ 151.430465][ T7163] netlink: 168 bytes leftover after parsing attributes in process `syz.2.346'. [ 151.605351][ T7173] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.349'. [ 152.149759][ T7182] netlink: 'syz.0.352': attribute type 12 has an invalid length. [ 152.177420][ T7182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'. [ 152.483141][ T7190] netlink: 'syz.0.353': attribute type 21 has an invalid length. [ 152.877146][ T7201] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 152.887153][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 153.087559][ T7206] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 153.137597][ T7206] bond0: (slave wlan1): Opening slave failed [ 154.343203][ T7233] €Â05: renamed from pim6reg1 [ 154.651607][ T7243] tipc: Started in network mode [ 154.666538][ T7243] tipc: Node identity b, cluster identity 57 [ 154.682420][ T7243] tipc: Node number set to 11 [ 155.076090][ T7264] __nla_validate_parse: 7 callbacks suppressed [ 155.076107][ T7264] netlink: 108 bytes leftover after parsing attributes in process `syz.2.373'. [ 155.405263][ T7273] netlink: 'syz.3.377': attribute type 21 has an invalid length. [ 155.716075][ T7282] netlink: 'syz.1.379': attribute type 2 has an invalid length. [ 155.766790][ T7282] netlink: 'syz.1.379': attribute type 8 has an invalid length. [ 155.789928][ T7282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.379'. [ 155.841116][ T7280] netlink: 160 bytes leftover after parsing attributes in process `syz.3.380'. [ 155.897084][ T7287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.381'. [ 155.930349][ T7287] batadv0: entered promiscuous mode [ 155.960225][ T7284] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.378'. [ 155.983039][ T7284] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.378'. [ 155.997025][ T7275] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.378'. [ 156.427332][ T7296] lo: entered allmulticast mode [ 156.636848][ T7302] netlink: 'syz.3.388': attribute type 21 has an invalid length. [ 156.655836][ T7302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.388'. [ 156.992028][ T7312] netlink: 'syz.3.389': attribute type 17 has an invalid length. [ 157.032227][ T7312] netlink: 148 bytes leftover after parsing attributes in process `syz.3.389'. [ 157.063066][ T7315] netlink: 14 bytes leftover after parsing attributes in process `syz.2.390'. [ 157.662435][ T7315] hsr_slave_0: left promiscuous mode [ 157.695931][ T7321] netlink: 'syz.1.391': attribute type 41 has an invalid length. [ 157.995456][ T7315] hsr_slave_1: left promiscuous mode [ 158.169059][ T7321] netlink: 'syz.1.391': attribute type 41 has an invalid length. [ 158.241330][ T7325] netlink: 'syz.0.392': attribute type 2 has an invalid length. [ 159.028951][ T7347] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 159.055622][ T7347] CPU: 0 PID: 7347 Comm: syz.3.398 Not tainted syzkaller #0 [ 159.063015][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.073165][ T7347] Call Trace: [ 159.076497][ T7347] [ 159.079485][ T7347] dump_stack_lvl+0x18c/0x250 [ 159.084254][ T7347] ? show_regs_print_info+0x20/0x20 [ 159.089645][ T7347] ? load_image+0x420/0x420 [ 159.094231][ T7347] sysfs_warn_dup+0x8e/0xa0 [ 159.098809][ T7347] sysfs_do_create_link_sd+0xc0/0x110 [ 159.104257][ T7347] device_add_class_symlinks+0x1cf/0x240 [ 159.109974][ T7347] device_add+0x4f9/0xc40 [ 159.114381][ T7347] wiphy_register+0x1d99/0x2ac0 [ 159.119340][ T7347] ? cfg80211_event_work+0x40/0x40 [ 159.124522][ T7347] ? minstrel_ht_alloc+0x88a/0x990 [ 159.129714][ T7347] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 159.135874][ T7347] ieee80211_register_hw+0x2dd8/0x3b30 [ 159.141430][ T7347] ? ieee80211_register_hw+0xfb1/0x3b30 [ 159.147066][ T7347] ? ieee80211_tasklet_handler+0x20/0x20 [ 159.152776][ T7347] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 159.158741][ T7347] ? __debug_object_init+0xec/0x450 [ 159.164013][ T7347] ? __asan_memset+0x22/0x40 [ 159.168677][ T7347] ? __hrtimer_init+0x189/0x270 [ 159.173600][ T7347] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 159.179421][ T7347] ? mac80211_hwsim_free+0x220/0x220 [ 159.184773][ T7347] ? rcu_is_watching+0x15/0xb0 [ 159.189634][ T7347] ? kstrndup+0xbd/0x140 [ 159.193959][ T7347] hwsim_new_radio_nl+0xdad/0x1a70 [ 159.199133][ T7347] ? __nla_validate+0x50/0x50 [ 159.203888][ T7347] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 159.210293][ T7347] ? __nla_parse+0x40/0x50 [ 159.214776][ T7347] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 159.221173][ T7347] genl_family_rcv_msg_doit+0x21a/0x310 [ 159.226791][ T7347] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 159.232756][ T7347] ? bpf_lsm_capable+0x9/0x10 [ 159.237494][ T7347] ? security_capable+0x89/0xb0 [ 159.242413][ T7347] genl_rcv_msg+0x611/0x7a0 [ 159.246987][ T7347] ? genl_bind+0x360/0x360 [ 159.251456][ T7347] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 159.257839][ T7347] netlink_rcv_skb+0x235/0x4c0 [ 159.262626][ T7347] ? genl_bind+0x360/0x360 [ 159.267079][ T7347] ? netlink_ack+0x1160/0x1160 [ 159.271917][ T7347] ? __lock_acquire+0x7d80/0x7d80 [ 159.276985][ T7347] ? down_read+0x1ac/0x2e0 [ 159.281439][ T7347] genl_rcv+0x28/0x40 [ 159.285488][ T7347] netlink_unicast+0x7b1/0x930 [ 159.290324][ T7347] netlink_sendmsg+0x8d0/0xbf0 [ 159.295161][ T7347] ? netlink_getsockopt+0x590/0x590 [ 159.300431][ T7347] ? apparmor_socket_sendmsg+0x8e/0x330 [ 159.306041][ T7347] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.311397][ T7347] ? security_socket_sendmsg+0x80/0xa0 [ 159.316921][ T7347] ? netlink_getsockopt+0x590/0x590 [ 159.322185][ T7347] ____sys_sendmsg+0x61b/0x980 [ 159.327029][ T7347] ? __asan_memset+0x22/0x40 [ 159.331708][ T7347] ? __sys_sendmsg_sock+0x30/0x30 [ 159.336805][ T7347] ? __import_iovec+0x5f2/0x850 [ 159.341735][ T7347] ? import_iovec+0x73/0xa0 [ 159.346309][ T7347] ___sys_sendmsg+0x2a6/0x360 [ 159.351049][ T7347] ? __sys_sendmsg+0x2b0/0x2b0 [ 159.355933][ T7347] __se_sys_sendmsg+0x1d0/0x2c0 [ 159.360850][ T7347] ? __x64_sys_sendmsg+0x80/0x80 [ 159.365868][ T7347] ? lockdep_hardirqs_on+0x98/0x150 [ 159.371147][ T7347] do_syscall_64+0x55/0xb0 [ 159.375628][ T7347] ? clear_bhb_loop+0x40/0x90 [ 159.380368][ T7347] ? clear_bhb_loop+0x40/0x90 [ 159.385105][ T7347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.391069][ T7347] RIP: 0033:0x7f5c3cd9e159 [ 159.395542][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.415247][ T7347] RSP: 002b:00007f5c3dd54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.423738][ T7347] RAX: ffffffffffffffda RBX: 00007f5c3d025fa0 RCX: 00007f5c3cd9e159 [ 159.431868][ T7347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 159.439902][ T7347] RBP: 00007f5c3ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 159.447937][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.455969][ T7347] R13: 00007f5c3d026038 R14: 00007f5c3d025fa0 R15: 00007ffe2e6a59e8 [ 159.464199][ T7347] [ 159.694826][ T7367] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 160.031779][ T7363] sit0: entered allmulticast mode [ 160.314917][ T7386] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 160.354007][ T7386] __nla_validate_parse: 2 callbacks suppressed [ 160.354027][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.409'. [ 165.032729][ T7434] syzkaller0: entered allmulticast mode [ 165.049196][ T7440] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.419'. [ 165.266416][ T7450] netlink: 'syz.0.422': attribute type 17 has an invalid length. [ 165.277828][ T7450] netlink: 'syz.0.422': attribute type 16 has an invalid length. [ 165.290044][ T7450] netlink: 152 bytes leftover after parsing attributes in process `syz.0.422'. [ 165.339178][ T7446] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 165.371192][ T7446] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.421'. [ 165.533598][ T7446] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 165.650816][ T7461] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.424'. [ 165.713516][ T7458] netlink: 'syz.1.424': attribute type 2 has an invalid length. [ 165.721293][ T7458] netlink: 'syz.1.424': attribute type 8 has an invalid length. [ 165.761397][ T7458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.424'. [ 166.400022][ T7475] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.428'. [ 166.464503][ T7476] netlink: 'syz.1.429': attribute type 6 has an invalid length. [ 166.494942][ T7476] netlink: 164 bytes leftover after parsing attributes in process `syz.1.429'. [ 167.586464][ T7509] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.433'. [ 167.638085][ T7513] netlink: 'syz.1.432': attribute type 10 has an invalid length. [ 167.791652][ T7513] team0: Port device dummy0 added [ 167.820058][ T7518] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.434'. [ 167.846956][ T7505] netlink: 14 bytes leftover after parsing attributes in process `syz.1.432'. [ 167.862299][ T7505] netlink: get zone limit has 4 unknown bytes [ 167.922344][ T7518] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 167.948257][ T7517] netlink: 'syz.3.435': attribute type 5 has an invalid length. [ 168.469771][ T7534] netlink: 'syz.3.439': attribute type 39 has an invalid length. [ 168.685184][ T7537] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.440'. [ 168.749395][ T7533] delete_channel: no stack [ 168.870091][ T7537] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 168.881799][ T7541] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.438'. [ 168.891567][ T7537] CPU: 1 PID: 7537 Comm: syz.0.440 Not tainted syzkaller #0 [ 168.898921][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.909034][ T7537] Call Trace: [ 168.912343][ T7537] [ 168.915305][ T7537] dump_stack_lvl+0x18c/0x250 [ 168.920026][ T7537] ? show_regs_print_info+0x20/0x20 [ 168.925254][ T7537] ? load_image+0x420/0x420 [ 168.929803][ T7537] sysfs_warn_dup+0x8e/0xa0 [ 168.934423][ T7537] sysfs_do_create_link_sd+0xc0/0x110 [ 168.939827][ T7537] device_add_class_symlinks+0x1cf/0x240 [ 168.945494][ T7537] device_add+0x4f9/0xc40 [ 168.949872][ T7537] wiphy_register+0x1d99/0x2ac0 [ 168.954773][ T7537] ? cfg80211_event_work+0x40/0x40 [ 168.959918][ T7537] ? minstrel_ht_alloc+0x88a/0x990 [ 168.965070][ T7537] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 168.971181][ T7537] ieee80211_register_hw+0x2dd8/0x3b30 [ 168.976685][ T7537] ? ieee80211_register_hw+0xfb1/0x3b30 [ 168.982275][ T7537] ? ieee80211_tasklet_handler+0x20/0x20 [ 168.987938][ T7537] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 168.993869][ T7537] ? __debug_object_init+0xec/0x450 [ 168.999100][ T7537] ? __asan_memset+0x22/0x40 [ 169.003730][ T7537] ? __hrtimer_init+0x189/0x270 [ 169.008642][ T7537] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 169.014414][ T7537] ? mac80211_hwsim_free+0x220/0x220 [ 169.019725][ T7537] ? rcu_is_watching+0x15/0xb0 [ 169.024531][ T7537] ? kstrndup+0xbd/0x140 [ 169.028820][ T7537] hwsim_new_radio_nl+0xdad/0x1a70 [ 169.033968][ T7537] ? __nla_validate+0x50/0x50 [ 169.038693][ T7537] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 169.045087][ T7537] ? __nla_parse+0x40/0x50 [ 169.049550][ T7537] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 169.055912][ T7537] genl_family_rcv_msg_doit+0x21a/0x310 [ 169.061494][ T7537] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 169.067428][ T7537] ? bpf_lsm_capable+0x9/0x10 [ 169.072153][ T7537] ? security_capable+0x89/0xb0 [ 169.077051][ T7537] genl_rcv_msg+0x611/0x7a0 [ 169.081595][ T7537] ? genl_bind+0x360/0x360 [ 169.086042][ T7537] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 169.092410][ T7537] ? ref_tracker_free+0x686/0x830 [ 169.097470][ T7537] ? __kasan_kmalloc_large+0x8b/0xa0 [ 169.102797][ T7537] netlink_rcv_skb+0x235/0x4c0 [ 169.107599][ T7537] ? genl_bind+0x360/0x360 [ 169.112047][ T7537] ? netlink_ack+0x1160/0x1160 [ 169.116854][ T7537] ? __lock_acquire+0x7d80/0x7d80 [ 169.121918][ T7537] ? down_read+0x1ac/0x2e0 [ 169.126404][ T7537] genl_rcv+0x28/0x40 [ 169.130419][ T7537] netlink_unicast+0x7b1/0x930 [ 169.135220][ T7537] netlink_sendmsg+0x8d0/0xbf0 [ 169.140017][ T7537] ? netlink_getsockopt+0x590/0x590 [ 169.145254][ T7537] ? apparmor_socket_sendmsg+0x8e/0x330 [ 169.150837][ T7537] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 169.156157][ T7537] ? security_socket_sendmsg+0x80/0xa0 [ 169.161642][ T7537] ? netlink_getsockopt+0x590/0x590 [ 169.166867][ T7537] ____sys_sendmsg+0x61b/0x980 [ 169.171765][ T7537] ? __asan_memset+0x22/0x40 [ 169.176402][ T7537] ? __sys_sendmsg_sock+0x30/0x30 [ 169.181453][ T7537] ? __import_iovec+0x5f2/0x850 [ 169.186358][ T7537] ? import_iovec+0x73/0xa0 [ 169.190901][ T7537] ___sys_sendmsg+0x2a6/0x360 [ 169.195706][ T7537] ? __sys_sendmsg+0x2b0/0x2b0 [ 169.200551][ T7537] __se_sys_sendmsg+0x1d0/0x2c0 [ 169.205439][ T7537] ? __x64_sys_sendmsg+0x80/0x80 [ 169.210422][ T7537] ? lockdep_hardirqs_on+0x98/0x150 [ 169.215659][ T7537] do_syscall_64+0x55/0xb0 [ 169.220133][ T7537] ? clear_bhb_loop+0x40/0x90 [ 169.224843][ T7537] ? clear_bhb_loop+0x40/0x90 [ 169.229573][ T7537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.235512][ T7537] RIP: 0033:0x7fc77499e159 [ 169.239963][ T7537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.259615][ T7537] RSP: 002b:00007fc77579a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.268071][ T7537] RAX: ffffffffffffffda RBX: 00007fc774c26090 RCX: 00007fc77499e159 [ 169.276087][ T7537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 169.284099][ T7537] RBP: 00007fc774a35024 R08: 0000000000000000 R09: 0000000000000000 [ 169.292135][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.300150][ T7537] R13: 00007fc774c26128 R14: 00007fc774c26090 R15: 00007fff20adb948 [ 169.308167][ T7537] [ 169.520396][ T7536] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 169.565666][ T7536] CPU: 0 PID: 7536 Comm: syz.0.440 Not tainted syzkaller #0 [ 169.573167][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.583275][ T7536] Call Trace: [ 169.586618][ T7536] [ 169.589615][ T7536] dump_stack_lvl+0x18c/0x250 [ 169.594359][ T7536] ? show_regs_print_info+0x20/0x20 [ 169.599621][ T7536] ? load_image+0x420/0x420 [ 169.604201][ T7536] sysfs_warn_dup+0x8e/0xa0 [ 169.608774][ T7536] sysfs_do_create_link_sd+0xc0/0x110 [ 169.614205][ T7536] device_add_class_symlinks+0x1cf/0x240 [ 169.619901][ T7536] device_add+0x4f9/0xc40 [ 169.624281][ T7536] wiphy_register+0x1d99/0x2ac0 [ 169.629217][ T7536] ? cfg80211_event_work+0x40/0x40 [ 169.634393][ T7536] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.640626][ T7536] ? rtnl_unlock+0x9/0x10 [ 169.645023][ T7536] ieee80211_register_hw+0x2dd8/0x3b30 [ 169.650552][ T7536] ? ieee80211_register_hw+0xfb1/0x3b30 [ 169.656171][ T7536] ? ieee80211_tasklet_handler+0x20/0x20 [ 169.661878][ T7536] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 169.667835][ T7536] ? __debug_object_init+0xec/0x450 [ 169.673101][ T7536] ? __asan_memset+0x22/0x40 [ 169.677759][ T7536] ? __hrtimer_init+0x189/0x270 [ 169.682672][ T7536] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 169.688473][ T7536] ? mac80211_hwsim_free+0x220/0x220 [ 169.694601][ T7536] ? rcu_is_watching+0x15/0xb0 [ 169.699611][ T7536] ? kstrndup+0xbd/0x140 [ 169.703928][ T7536] hwsim_new_radio_nl+0xdad/0x1a70 [ 169.709105][ T7536] ? __nla_validate+0x50/0x50 [ 169.713860][ T7536] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 169.720270][ T7536] ? __nla_parse+0x40/0x50 [ 169.724760][ T7536] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 169.731161][ T7536] genl_family_rcv_msg_doit+0x21a/0x310 [ 169.736786][ T7536] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 169.742752][ T7536] ? bpf_lsm_capable+0x9/0x10 [ 169.747503][ T7536] ? security_capable+0x89/0xb0 [ 169.752418][ T7536] genl_rcv_msg+0x611/0x7a0 [ 169.756990][ T7536] ? genl_bind+0x360/0x360 [ 169.761456][ T7536] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 169.767489][ T7536] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 169.773878][ T7536] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 169.779675][ T7536] netlink_rcv_skb+0x235/0x4c0 [ 169.784499][ T7536] ? genl_bind+0x360/0x360 [ 169.788976][ T7536] ? netlink_ack+0x1160/0x1160 [ 169.793821][ T7536] ? down_read+0x1ac/0x2e0 [ 169.798305][ T7536] genl_rcv+0x28/0x40 [ 169.802341][ T7536] netlink_unicast+0x7b1/0x930 [ 169.807166][ T7536] netlink_sendmsg+0x8d0/0xbf0 [ 169.812006][ T7536] ? netlink_getsockopt+0x590/0x590 [ 169.817289][ T7536] ? netlink_getsockopt+0x590/0x590 [ 169.822559][ T7536] ____sys_sendmsg+0x61b/0x980 [ 169.827413][ T7536] ? __asan_memset+0x22/0x40 [ 169.832109][ T7536] ? __sys_sendmsg_sock+0x30/0x30 [ 169.837207][ T7536] ? __import_iovec+0x5f2/0x850 [ 169.842146][ T7536] ? import_iovec+0x73/0xa0 [ 169.846712][ T7536] ___sys_sendmsg+0x2a6/0x360 [ 169.851440][ T7536] ? __sys_sendmsg+0x2b0/0x2b0 [ 169.856282][ T7536] __se_sys_sendmsg+0x1d0/0x2c0 [ 169.861173][ T7536] ? __x64_sys_sendmsg+0x80/0x80 [ 169.866162][ T7536] ? syscall_enter_from_user_mode+0x2e/0x80 [ 169.872104][ T7536] do_syscall_64+0x55/0xb0 [ 169.876564][ T7536] ? clear_bhb_loop+0x40/0x90 [ 169.881277][ T7536] ? clear_bhb_loop+0x40/0x90 [ 169.886000][ T7536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.891927][ T7536] RIP: 0033:0x7fc77499e159 [ 169.896372][ T7536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.916013][ T7536] RSP: 002b:00007fc7757bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.924465][ T7536] RAX: ffffffffffffffda RBX: 00007fc774c25fa0 RCX: 00007fc77499e159 [ 169.932471][ T7536] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 169.940468][ T7536] RBP: 00007fc774a35024 R08: 0000000000000000 R09: 0000000000000000 [ 169.948463][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.956465][ T7536] R13: 00007fc774c26038 R14: 00007fc774c25fa0 R15: 00007fff20adb948 [ 169.964479][ T7536] [ 170.407919][ T7561] validate_nla: 1 callbacks suppressed [ 170.407939][ T7561] netlink: 'syz.1.447': attribute type 21 has an invalid length. [ 170.432529][ T7561] __nla_validate_parse: 2 callbacks suppressed [ 170.432547][ T7561] netlink: 152 bytes leftover after parsing attributes in process `syz.1.447'. [ 170.608968][ T7565] netlink: 'syz.0.448': attribute type 29 has an invalid length. [ 170.678976][ T7565] netlink: 'syz.0.448': attribute type 29 has an invalid length. [ 170.690273][ T7567] netlink: 'syz.0.448': attribute type 29 has an invalid length. [ 170.700668][ T7569] netlink: 'syz.0.448': attribute type 29 has an invalid length. [ 170.713695][ T7564] netlink: 'syz.0.448': attribute type 29 has an invalid length. [ 170.728466][ T7569] netlink: 'syz.0.448': attribute type 29 has an invalid length. [ 170.821109][ T7571] netlink: 'syz.2.449': attribute type 10 has an invalid length. [ 171.919406][ T7571] team0 (unregistering): Port device team_slave_0 removed [ 172.023486][ T7571] team0 (unregistering): Port device team_slave_1 removed [ 172.101940][ T7592] bridge0: port 3(hsr0) entered disabled state [ 172.108488][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.117744][ T7592] bridge0: port 1(c@0Ù) entered disabled state [ 172.150391][ T7592] bridge0: entered allmulticast mode [ 172.193081][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 172.208089][ T7577] netlink: 128 bytes leftover after parsing attributes in process `syz.1.450'. [ 172.221212][ T7577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.590810][ T7647] netlink: 763 bytes leftover after parsing attributes in process `syz.0.467'. [ 173.723363][ T7650] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 173.845119][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.904643][ T7650] team0: Port device bond0 added [ 174.023420][ T7650] syz.3.469 (7650) used greatest stack depth: 19208 bytes left [ 174.919429][ T7681] netlink: 'syz.1.476': attribute type 21 has an invalid length. [ 174.934458][ T7681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.476'. [ 174.976727][ T7664] delete_channel: no stack [ 175.535819][ T7698] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.481'. [ 175.555096][ T7698] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.481'. [ 175.580773][ T7698] netlink: 22 bytes leftover after parsing attributes in process `syz.2.481'. [ 176.213897][ T7714] validate_nla: 1 callbacks suppressed [ 176.213934][ T7714] netlink: 'syz.0.488': attribute type 3 has an invalid length. [ 176.240488][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.488'. [ 176.561389][ T7731] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.490'. [ 176.865349][ T7736] netlink: 'syz.0.491': attribute type 6 has an invalid length. [ 177.504677][ T7744] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.492'. [ 182.345605][ T7824] netlink: 'syz.1.502': attribute type 10 has an invalid length. [ 182.360020][ T7824] macvlan0: entered promiscuous mode [ 182.419046][ T7824] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 182.664908][ T7832] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 182.731361][ T7832] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 182.774904][ T7834] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 184.141603][ T7863] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.512'. [ 184.198251][ T7863] netlink: 'syz.1.512': attribute type 39 has an invalid length. [ 184.219125][ T7867] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.514'. [ 184.311236][ T7863] bond0: (slave macvlan0): Releasing backup interface [ 185.423545][ T7906] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 185.594905][ T7910] netlink: 'syz.0.522': attribute type 2 has an invalid length. [ 185.614532][ T7910] netlink: 'syz.0.522': attribute type 11 has an invalid length. [ 185.622828][ T7910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.522'. [ 186.400645][ T7928] netlink: 'syz.1.524': attribute type 23 has an invalid length. [ 186.566541][ T7934] netlink: 'syz.3.526': attribute type 9 has an invalid length. [ 186.576591][ T7933] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.526'. [ 186.590799][ T7934] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.526'. [ 187.063360][ T7948] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.530'. [ 187.902750][ T7945] team0: Port device geneve1 added [ 188.134306][ T7958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 188.166502][ T7958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 188.178769][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 188.209216][ T7953] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 188.219590][ T7945] syz.3.530 (7945) used greatest stack depth: 18440 bytes left [ 188.434015][ T7964] validate_nla: 3 callbacks suppressed [ 188.434131][ T7964] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 188.750047][ T7967] netlink: 'syz.2.535': attribute type 41 has an invalid length. [ 188.763640][ T7978] netlink: 'syz.1.537': attribute type 2 has an invalid length. [ 188.788690][ T7978] netlink: 'syz.1.537': attribute type 2 has an invalid length. [ 189.533313][ T7995] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 189.770225][ T7998] __nla_validate_parse: 3 callbacks suppressed [ 189.770263][ T7998] netlink: 176 bytes leftover after parsing attributes in process `syz.2.542'. [ 189.894486][ T8002] netlink: 'syz.1.541': attribute type 3 has an invalid length. [ 189.976220][ T8002] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.541'. [ 192.186953][ T8042] vcan0: entered allmulticast mode [ 192.307443][ T8051] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 192.324108][ T8051] veth0_macvtap: left promiscuous mode [ 192.612524][ T8055] delete_channel: no stack [ 192.785897][ T8060] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 192.803043][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.555'. [ 193.266856][ T8073] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 193.290531][ T8073] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.560'. [ 193.335140][ T8075] netlink: 188 bytes leftover after parsing attributes in process `syz.3.562'. [ 193.576399][ T8082] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 193.602266][ T8082] netlink: 152 bytes leftover after parsing attributes in process `syz.1.563'. [ 193.667274][ T8082] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 194.839880][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.846533][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.371514][ T8120] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 195.419872][ T8120] geneve0: entered promiscuous mode [ 195.715704][ T8120] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 195.746346][ T8125] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 195.764926][ T8125] netlink: 55 bytes leftover after parsing attributes in process `syz.2.572'. [ 196.092254][ T8138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.576'. [ 196.129509][ T8138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.576'. [ 196.192143][ T8140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.576'. [ 196.496967][ T8147] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 196.516130][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 196.528736][ T8147] ipvlan1: entered promiscuous mode [ 196.545024][ T8147] ipvlan1: entered allmulticast mode [ 196.551056][ T8147] veth0_vlan: entered allmulticast mode [ 196.597692][ T8147] bridge0: port 3(ipvlan1) entered blocking state [ 196.614960][ T8147] bridge0: port 3(ipvlan1) entered disabled state [ 196.720358][ T8147] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 197.093314][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.101343][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.154960][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.166872][ T8162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.558532][ T8177] netlink: 'syz.3.585': attribute type 10 has an invalid length. [ 197.580906][ T8177] veth1_vlan: entered allmulticast mode [ 197.625839][ T8177] team0: Device veth1_vlan failed to register rx_handler [ 197.861541][ T8192] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 197.869427][ T8192] pim6reg0: ignored: set checksum disabled [ 197.940355][ T8196] netlink: 'syz.2.591': attribute type 2 has an invalid length. [ 197.961226][ T8196] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 197.971835][ T8196] netlink: 9 bytes leftover after parsing attributes in process `syz.2.591'. [ 204.799668][ T8227] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.598'. [ 204.869638][ T8227] netlink: 'syz.1.598': attribute type 3 has an invalid length. [ 204.890181][ T8227] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 204.898352][ T8227] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.598'. [ 204.916761][ T8228] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 204.951974][ T8228] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 205.860274][ T8279] netlink: 'syz.0.607': attribute type 9 has an invalid length. [ 205.869895][ T8279] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.607'. [ 206.756659][ T8294] netlink: 'syz.0.612': attribute type 9 has an invalid length. [ 206.783839][ T8294] netlink: 'syz.0.612': attribute type 23 has an invalid length. [ 206.807238][ T8294] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.612'. [ 206.997370][ T8301] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.614'. [ 207.152327][ T8237] Bluetooth: hci1: command 0x0406 tx timeout [ 207.160219][ T8237] Bluetooth: hci2: command 0x0406 tx timeout [ 207.166902][ T8237] Bluetooth: hci0: command 0x0406 tx timeout [ 207.173402][ T8237] Bluetooth: hci3: command 0x0406 tx timeout [ 209.401927][ T8365] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 209.490053][ T8365] team0: Device wg1 is of different type [ 210.539597][ T8407] netlink: 'syz.2.644': attribute type 10 has an invalid length. [ 210.553362][ T8407] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.644'. [ 210.571815][ T8407] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 211.861443][ T8432] syz.1.652[8432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.863730][ T8432] syz.1.652[8432] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.019096][ T8432] netlink: 'syz.1.652': attribute type 2 has an invalid length. [ 212.048601][ T8432] netlink: 'syz.1.652': attribute type 8 has an invalid length. [ 212.093153][ T8432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.652'. [ 212.217727][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.655'. [ 212.740983][ T8447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.655'. [ 212.809935][ T8456] syzkaller0: entered promiscuous mode [ 212.815849][ T8456] syzkaller0: entered allmulticast mode [ 212.826420][ T8449] IPv6: Can't replace route, no match found [ 213.039729][ T8459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.657'. [ 213.221342][ T8472] netlink: 'syz.2.661': attribute type 2 has an invalid length. [ 213.297453][ T8472] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.661'. [ 215.834192][ T8470] team_slave_0: entered promiscuous mode [ 215.839938][ T8470] team_slave_0: entered allmulticast mode [ 216.127179][ T8487] netlink: 'syz.1.663': attribute type 9 has an invalid length. [ 216.146517][ T8487] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.663'. [ 217.064342][ T8522] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.673'. [ 217.166867][ T8520] syzkaller0: entered promiscuous mode [ 217.172789][ T8520] syzkaller0: entered allmulticast mode [ 219.477471][ T8543] netlink: 'syz.2.677': attribute type 3 has an invalid length. [ 219.485598][ T8543] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.677'. [ 219.793778][ T8554] syzkaller0: entered promiscuous mode [ 219.799439][ T8554] syzkaller0: entered allmulticast mode [ 221.296140][ T8599] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 221.312254][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 223.010313][ T8575] netlink: 'syz.3.685': attribute type 21 has an invalid length. [ 223.018313][ T8575] netlink: 128 bytes leftover after parsing attributes in process `syz.3.685'. [ 223.027404][ T8575] netlink: 'syz.3.685': attribute type 4 has an invalid length. [ 223.063713][ T8599] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 223.071539][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 223.220826][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 226.454241][ T8675] netlink: 'syz.2.712': attribute type 28 has an invalid length. [ 226.546334][ T8675] netlink: 'syz.2.712': attribute type 29 has an invalid length. [ 226.589639][ T8675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.712'. [ 226.766402][ T8681] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 226.775025][ T8681] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.716'. [ 227.518105][ T8690] syzkaller0: entered promiscuous mode [ 227.524094][ T8690] syzkaller0: entered allmulticast mode [ 227.762444][ T8701] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.719'. [ 230.206824][ T8737] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.727'. [ 230.769512][ T8711] netlink: 144 bytes leftover after parsing attributes in process `syz.1.722'. [ 230.798325][ T8711] team0: Port device team_slave_0 removed [ 230.807655][ T8711] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 230.827153][ T8737] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.727'. [ 230.852898][ T8739] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 230.868054][ T8739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.727'. [ 230.893538][ T8739] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 231.576227][ T8767] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.732'. [ 231.988685][ T8776] netlink: 'syz.3.738': attribute type 22 has an invalid length. [ 231.997566][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'. [ 232.638590][ T8789] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.741'. [ 232.672441][ T8789] openvswitch: netlink: Key type 29 is not supported [ 232.772883][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 232.972751][ T8800] netlink: 140 bytes leftover after parsing attributes in process `syz.3.746'. [ 233.052426][ T8800] netlink: 10 bytes leftover after parsing attributes in process `syz.3.746'. [ 233.069351][ T8807] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.748'. [ 233.115621][ T8800] bond0: (slave bond_slave_0): Releasing backup interface [ 233.173318][ T8800] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 234.960250][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 239.689724][ T8919] netlink: 'syz.3.774': attribute type 21 has an invalid length. [ 239.847591][ T8927] netlink: 'syz.3.776': attribute type 13 has an invalid length. [ 239.859100][ T8927] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.776'. [ 240.076316][ T8929] tap0: tun_chr_ioctl cmd 1074025677 [ 240.083535][ T8929] tap0: linktype set to 806 [ 240.383179][ T8937] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 240.406477][ T8937] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.780'. [ 240.416915][ T8937] netlink: 9 bytes leftover after parsing attributes in process `syz.3.780'. [ 240.868440][ T8952] netlink: 'syz.1.784': attribute type 11 has an invalid length. [ 240.913432][ T8952] netlink: 176 bytes leftover after parsing attributes in process `syz.1.784'. [ 240.968369][ T8955] netlink: 'syz.3.785': attribute type 3 has an invalid length. [ 241.022398][ T8955] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.785'. [ 241.088833][ T8956] netlink: 'syz.1.784': attribute type 10 has an invalid length. [ 241.103401][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.171842][ T8956] bridge_slave_1: left allmulticast mode [ 241.182430][ T8956] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.395560][ T8962] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 241.488491][ T8962] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 241.546650][ T8959] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 241.644776][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.737989][ T8959] bridge_slave_1: left allmulticast mode [ 241.821179][ T8959] bridge_slave_1: left promiscuous mode [ 241.919884][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.968783][ T8968] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 242.234200][ T8959] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 242.263832][ T8969] netlink: 14 bytes leftover after parsing attributes in process `syz.2.788'. [ 242.289869][ T8968] netlink: 'syz.3.789': attribute type 29 has an invalid length. [ 244.560352][ T9045] syz.2.809[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.560516][ T9045] syz.2.809[9045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.113330][ T9056] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 245.263463][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 3876 [ 245.394250][ T6603] wlan1: Trigger new scan to find an IBSS to join [ 246.141446][ T9071] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.817'. [ 246.493532][ T9079] validate_nla: 66 callbacks suppressed [ 246.493565][ T9079] netlink: 'syz.1.818': attribute type 11 has an invalid length. [ 248.445427][ T6603] wlan1: Trigger new scan to find an IBSS to join [ 249.713739][ T8269] wlan1: Creating new IBSS network, BSSID de:7b:fd:d5:31:c4 [ 250.037019][ T9094] netlink: 'syz.0.822': attribute type 39 has an invalid length. [ 250.926607][ T9137] netlink: 144 bytes leftover after parsing attributes in process `syz.1.830'. [ 250.946438][ T9137] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 251.358523][ T9153] netlink: 'syz.0.833': attribute type 9 has an invalid length. [ 251.384273][ T9153] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.833'. [ 251.671544][ T9165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.837'. [ 252.063891][ T9168] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.838'. [ 252.106518][ T9174] netlink: 176 bytes leftover after parsing attributes in process `syz.2.840'. [ 254.754585][ T9214] netlink: 16206 bytes leftover after parsing attributes in process `syz.2.851'. [ 255.368243][ T9225] netlink: 'syz.0.852': attribute type 9 has an invalid length. [ 255.407851][ T9225] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.852'. [ 255.426731][ T9226] netlink: 'syz.1.856': attribute type 12 has an invalid length. [ 255.442663][ T9226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.856'. [ 256.032446][ T9219] netlink: 'syz.0.852': attribute type 9 has an invalid length. [ 256.048524][ T9219] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.852'. [ 256.270071][ T9244] syzkaller0: entered promiscuous mode [ 256.281055][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.287593][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.300210][ T9244] syzkaller0: entered allmulticast mode [ 257.019418][ T9260] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.862'. [ 257.046214][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 257.123428][ T9262] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.863'. [ 257.373638][ T9287] netlink: 144 bytes leftover after parsing attributes in process `syz.3.866'. [ 257.425411][ T9286] netlink: 'syz.2.868': attribute type 21 has an invalid length. [ 257.452857][ T9286] netlink: 'syz.2.868': attribute type 4 has an invalid length. [ 257.799785][ T9297] netlink: 'syz.3.872': attribute type 9 has an invalid length. [ 257.841767][ T9297] netlink: 399 bytes leftover after parsing attributes in process `syz.3.872'. [ 257.952287][ T9304] syzkaller0: entered promiscuous mode [ 257.959639][ T9304] syzkaller0: entered allmulticast mode [ 258.356785][ T9308] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 258.382314][ T9308] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.874'. [ 258.539275][ T51] Bluetooth: hci0: Malformed LE Event: 0x0d [ 258.599928][ T9311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.875'. [ 258.766827][ T9317] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.877'. [ 258.784909][ T9317] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 258.897695][ T9321] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.878'. [ 259.032753][ T9321] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.878'. [ 259.323899][ T9337] netlink: 'syz.2.883': attribute type 2 has an invalid length. [ 259.557626][ T9348] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 259.895818][ T9354] netlink: 'syz.1.888': attribute type 21 has an invalid length. [ 259.904586][ T9354] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.071663][ T9358] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 260.082467][ T9358] CPU: 1 PID: 9358 Comm: syz.3.889 Not tainted syzkaller #0 [ 260.089855][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.099969][ T9358] Call Trace: [ 260.103306][ T9358] [ 260.106309][ T9358] dump_stack_lvl+0x18c/0x250 [ 260.111054][ T9358] ? show_regs_print_info+0x20/0x20 [ 260.116287][ T9358] ? load_image+0x420/0x420 [ 260.120844][ T9358] sysfs_warn_dup+0x8e/0xa0 [ 260.125409][ T9358] sysfs_do_create_link_sd+0xc0/0x110 [ 260.130834][ T9358] device_add_class_symlinks+0x1cf/0x240 [ 260.136552][ T9358] device_add+0x4f9/0xc40 [ 260.140972][ T9358] wiphy_register+0x1d99/0x2ac0 [ 260.145926][ T9358] ? cfg80211_event_work+0x40/0x40 [ 260.151112][ T9358] ? minstrel_ht_alloc+0x88a/0x990 [ 260.156299][ T9358] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 260.162465][ T9358] ieee80211_register_hw+0x2dd8/0x3b30 [ 260.167997][ T9358] ? ieee80211_register_hw+0xfb1/0x3b30 [ 260.173581][ T9358] ? ieee80211_tasklet_handler+0x20/0x20 [ 260.179273][ T9358] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 260.185440][ T9358] ? __debug_object_init+0xec/0x450 [ 260.190684][ T9358] ? __asan_memset+0x22/0x40 [ 260.195318][ T9358] ? __hrtimer_init+0x189/0x270 [ 260.200238][ T9358] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 260.206088][ T9358] ? mac80211_hwsim_free+0x220/0x220 [ 260.211438][ T9358] ? rcu_is_watching+0x15/0xb0 [ 260.216363][ T9358] ? kstrndup+0xbd/0x140 [ 260.220712][ T9358] hwsim_new_radio_nl+0xdad/0x1a70 [ 260.225884][ T9358] ? __nla_validate+0x50/0x50 [ 260.230643][ T9358] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 260.237055][ T9358] ? __nla_parse+0x40/0x50 [ 260.241543][ T9358] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 260.247933][ T9358] genl_family_rcv_msg_doit+0x21a/0x310 [ 260.253556][ T9358] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 260.259542][ T9358] ? bpf_lsm_capable+0x9/0x10 [ 260.264262][ T9358] ? security_capable+0x89/0xb0 [ 260.269159][ T9358] genl_rcv_msg+0x611/0x7a0 [ 260.273724][ T9358] ? genl_bind+0x360/0x360 [ 260.278203][ T9358] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 260.284558][ T9358] ? perf_trace_lock+0xfc/0x3b0 [ 260.289468][ T9358] ? __kasan_kmalloc_large+0x8b/0xa0 [ 260.294860][ T9358] netlink_rcv_skb+0x235/0x4c0 [ 260.299693][ T9358] ? genl_bind+0x360/0x360 [ 260.304177][ T9358] ? netlink_ack+0x1160/0x1160 [ 260.309003][ T9358] ? __lock_acquire+0x7d80/0x7d80 [ 260.314066][ T9358] ? down_read+0x1ac/0x2e0 [ 260.318527][ T9358] genl_rcv+0x28/0x40 [ 260.322548][ T9358] netlink_unicast+0x7b1/0x930 [ 260.327348][ T9358] netlink_sendmsg+0x8d0/0xbf0 [ 260.332164][ T9358] ? netlink_getsockopt+0x590/0x590 [ 260.337408][ T9358] ? apparmor_socket_sendmsg+0x8e/0x330 [ 260.342998][ T9358] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 260.348349][ T9358] ? security_socket_sendmsg+0x80/0xa0 [ 260.353858][ T9358] ? netlink_getsockopt+0x590/0x590 [ 260.359101][ T9358] ____sys_sendmsg+0x61b/0x980 [ 260.363902][ T9358] ? __asan_memset+0x22/0x40 [ 260.368528][ T9358] ? __sys_sendmsg_sock+0x30/0x30 [ 260.373577][ T9358] ? __import_iovec+0x5f2/0x850 [ 260.378466][ T9358] ? import_iovec+0x73/0xa0 [ 260.383017][ T9358] ___sys_sendmsg+0x2a6/0x360 [ 260.387771][ T9358] ? __sys_sendmsg+0x2b0/0x2b0 [ 260.392669][ T9358] __se_sys_sendmsg+0x1d0/0x2c0 [ 260.397587][ T9358] ? __x64_sys_sendmsg+0x80/0x80 [ 260.402612][ T9358] ? lockdep_hardirqs_on+0x98/0x150 [ 260.407890][ T9358] do_syscall_64+0x55/0xb0 [ 260.412374][ T9358] ? clear_bhb_loop+0x40/0x90 [ 260.417098][ T9358] ? clear_bhb_loop+0x40/0x90 [ 260.421799][ T9358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.427717][ T9358] RIP: 0033:0x7f5c3cd9e159 [ 260.432284][ T9358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.451953][ T9358] RSP: 002b:00007f5c3dd54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.460424][ T9358] RAX: ffffffffffffffda RBX: 00007f5c3d025fa0 RCX: 00007f5c3cd9e159 [ 260.468435][ T9358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.476431][ T9358] RBP: 00007f5c3ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 260.484444][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.492467][ T9358] R13: 00007f5c3d026038 R14: 00007f5c3d025fa0 R15: 00007ffe2e6a59e8 [ 260.500520][ T9358] [ 260.526727][ T9360] netlink: 'syz.2.890': attribute type 33 has an invalid length. [ 260.551464][ T9360] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 260.891421][ T9361] netlink: 'syz.2.890': attribute type 33 has an invalid length. [ 260.901583][ T9367] netlink: 'syz.3.889': attribute type 11 has an invalid length. [ 260.913528][ T9361] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 260.937060][ T9367] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 261.308250][ T9374] delete_channel: no stack [ 261.342342][ T9374] delete_channel: no stack [ 262.560001][ T9402] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 263.194137][ T9410] __nla_validate_parse: 6 callbacks suppressed [ 263.194157][ T9410] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.900'. [ 263.435759][ T9427] netlink: 'syz.0.905': attribute type 3 has an invalid length. [ 263.448992][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.905'. [ 263.556874][ T9425] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 263.581341][ T9425] netlink: 55 bytes leftover after parsing attributes in process `syz.3.904'. [ 264.256812][ T51] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 266.307431][ T9442] netlink: 'syz.3.909': attribute type 10 has an invalid length. [ 266.366026][ T9442] bridge_slave_1: left allmulticast mode [ 266.381994][ T9442] bridge_slave_1: left promiscuous mode [ 266.388000][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.426610][ T9442] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 266.739064][ T9458] syzkaller0: entered promiscuous mode [ 266.763491][ T9458] syzkaller0: entered allmulticast mode [ 267.107800][ T9471] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.916'. [ 267.272908][ T9475] netlink: 'syz.1.917': attribute type 2 has an invalid length. [ 267.280658][ T9475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.917'. [ 267.478700][ T9488] netlink: 'syz.3.920': attribute type 21 has an invalid length. [ 267.491978][ T9488] netlink: 'syz.3.920': attribute type 10 has an invalid length. [ 267.501459][ T9488] netlink: 13070 bytes leftover after parsing attributes in process `syz.3.920'. [ 267.568235][ T9488] netlink: 'syz.3.920': attribute type 29 has an invalid length. [ 267.864530][ T9486] netlink: 'syz.3.920': attribute type 10 has an invalid length. [ 267.897615][ T9486] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.915385][ T9486] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.925426][ T9486] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.949197][ T9486] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.987398][ T9486] geneve0: entered promiscuous mode [ 268.078779][ T9486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.104141][ T9486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.114253][ T9486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.124053][ T9486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.151509][ T9486] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 268.165383][ T9488] netlink: 'syz.3.920': attribute type 29 has an invalid length. [ 268.174755][ T9494] netlink: 'syz.3.920': attribute type 29 has an invalid length. [ 268.469414][ T9518] sctp: [Deprecated]: syz.0.928 (pid 9518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.469414][ T9518] Use struct sctp_sack_info instead [ 269.075276][ T9537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.935'. [ 270.410090][ T9565] netlink: 'syz.2.943': attribute type 27 has an invalid length. [ 270.560575][ T9576] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 270.779359][ T9576] team0 (unregistering): Port device team_slave_0 removed [ 270.799071][ T9576] team0 (unregistering): Port device team_slave_1 removed [ 270.820016][ T9576] team0 (unregistering): Port device bond0 removed [ 270.846364][ T9576] team0 (unregistering): Port device geneve1 removed [ 271.254669][ T9593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.949'. [ 271.266907][ T9593] ipvlan1: entered promiscuous mode [ 271.274311][ T9593] ipvlan1: entered allmulticast mode [ 271.279676][ T9593] veth0_vlan: entered allmulticast mode [ 271.288926][ T9593] bridge0: port 2(ipvlan1) entered blocking state [ 271.297273][ T9593] bridge0: port 2(ipvlan1) entered disabled state [ 271.307816][ T9593] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 271.507888][ T9610] validate_nla: 1 callbacks suppressed [ 271.507907][ T9610] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 271.584426][ T9610] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 272.818071][ T9629] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 273.635755][ T9624] delete_channel: no stack [ 273.759072][ T9634] netlink: 'syz.3.959': attribute type 9 has an invalid length. [ 273.805741][ T9634] netlink: 'syz.3.959': attribute type 23 has an invalid length. [ 273.842415][ T9634] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.959'. [ 274.100632][ T9639] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.960'. [ 274.434687][ T9648] netlink: 'syz.3.965': attribute type 19 has an invalid length. [ 274.453453][ T9648] netlink: 156 bytes leftover after parsing attributes in process `syz.3.965'. [ 275.458330][ T9669] netlink: 'syz.0.970': attribute type 21 has an invalid length. [ 275.708541][ T9682] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.973'. [ 276.696217][ T9695] netlink: 164 bytes leftover after parsing attributes in process `syz.1.978'. [ 276.897470][ T9696] netlink: 164 bytes leftover after parsing attributes in process `syz.1.978'. [ 278.009829][ T9715] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 278.040806][ T9715] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 278.108032][ T9715] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 278.245143][ T9715] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 278.267471][ T9718] netlink: 763 bytes leftover after parsing attributes in process `syz.2.984'. [ 278.376711][ T9724] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 278.737044][ T9715] netlink: 'syz.0.983': attribute type 29 has an invalid length. [ 278.758105][ T9738] netlink: 'syz.3.988': attribute type 6 has an invalid length. [ 278.777849][ T9738] netlink: 168 bytes leftover after parsing attributes in process `syz.3.988'. [ 278.823829][ T9733] netlink: 128 bytes leftover after parsing attributes in process `syz.1.985'. [ 278.839122][ T9733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.941147][ T9742] tap0: tun_chr_ioctl cmd 1074025676 [ 278.959980][ T9742] tap0: owner set to 776 [ 279.708931][ T9761] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.996'. [ 280.080259][ T9768] netlink: 'syz.0.998': attribute type 19 has an invalid length. [ 280.102390][ T9768] netlink: 156 bytes leftover after parsing attributes in process `syz.0.998'. [ 280.481576][ T9771] netlink: 64 bytes leftover after parsing attributes in process `syz.0.999'. [ 280.650540][ T9777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1001'. [ 280.660996][ T9777] delete_channel: no stack [ 280.676844][ T9778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1001'. [ 280.724014][ T9776] delete_channel: no stack [ 280.905618][ T9783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1002'. [ 281.510185][ T9799] netlink: 'syz.3.1008': attribute type 10 has an invalid length. [ 281.533702][ T9799] batman_adv: batadv0: Adding interface: netdevsim0 [ 281.540389][ T9799] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.580035][ T9799] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 281.638067][ T9800] netlink: 'syz.3.1008': attribute type 33 has an invalid length. [ 281.664821][ T9800] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1008'. [ 281.926531][ T9806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1010'. [ 282.721587][ T9822] ±ÿ: renamed from lo (while UP) [ 283.057871][ T9825] netlink: 'syz.0.1016': attribute type 8 has an invalid length. [ 283.088854][ T9825] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1016'. [ 283.242408][ T9832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1019'. [ 283.255371][ T9828] netlink: 'syz.1.1017': attribute type 9 has an invalid length. [ 285.794863][ T9907] __nla_validate_parse: 3 callbacks suppressed [ 285.794884][ T9907] netlink: 193072 bytes leftover after parsing attributes in process `syz.2.1048'. [ 285.820339][ T9906] netlink: 'syz.3.1050': attribute type 6 has an invalid length. [ 285.886584][ T9906] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1050'. [ 286.239944][ T9921] netlink: 'syz.2.1052': attribute type 21 has an invalid length. [ 286.261761][ T9920] netlink: 'syz.0.1054': attribute type 17 has an invalid length. [ 286.272811][ T9920] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 286.376536][ T9923] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1047'. [ 286.720690][ T9926] netlink: 'syz.0.1057': attribute type 9 has an invalid length. [ 286.742777][ T9926] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1057'. [ 287.410135][ T9938] netlink: 'syz.0.1060': attribute type 10 has an invalid length. [ 287.435211][ T9938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1060'. [ 287.493085][ T9938] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 287.532724][ T9940] netlink: 'syz.0.1060': attribute type 10 has an invalid length. [ 287.565688][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1060'. [ 287.588432][ T9940] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 288.205398][ T9957] netlink: 'syz.2.1063': attribute type 21 has an invalid length. [ 288.241726][ T9957] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1063'. [ 292.009693][ T9958] mac80211_hwsim hwsim6 ..ãc¤±: renamed from wlan1 (while UP) [ 292.474376][ T9983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1078'. [ 292.754344][ T9985] netlink: 'syz.1.1070': attribute type 9 has an invalid length. [ 292.763446][ T9985] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1070'. [ 293.934928][T10014] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1081'. [ 294.512589][T10033] netlink: 'syz.0.1086': attribute type 9 has an invalid length. [ 294.520807][T10033] netlink: 'syz.0.1086': attribute type 23 has an invalid length. [ 294.573499][T10033] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1086'. [ 295.071031][T10030] syzkaller0: entered promiscuous mode [ 295.105008][T10030] syzkaller0: entered allmulticast mode [ 295.980063][T10083] netlink: 'syz.3.1089': attribute type 9 has an invalid length. [ 296.020600][T10083] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1089'. [ 298.772310][T10108] netlink: 'syz.2.1096': attribute type 5 has an invalid length. [ 298.790418][T10108] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 298.805831][T10108] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1096'. [ 299.687536][T10115] netlink: 'syz.2.1097': attribute type 21 has an invalid length. [ 299.722418][T10115] netlink: 'syz.2.1097': attribute type 6 has an invalid length. [ 299.731034][T10115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1097'. [ 300.301670][T10131] netlink: 'syz.0.1102': attribute type 27 has an invalid length. [ 300.392200][T10131] netlink: 'syz.0.1102': attribute type 25 has an invalid length. [ 302.150119][T10166] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1112'. [ 302.228656][T10166] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1112'. [ 302.303391][T10169] netlink: 'syz.3.1113': attribute type 21 has an invalid length. [ 302.311655][T10169] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.432928][T10169] IPv6: Can't replace route, no match found [ 302.501818][T10169] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 303.502437][T10192] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1120'. [ 303.539218][T10192] netlink: 'syz.1.1120': attribute type 21 has an invalid length. [ 303.747472][T10202] netlink: 'syz.3.1122': attribute type 39 has an invalid length. [ 304.277322][T10214] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 304.292727][T10214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1129'. [ 304.333344][T10214] batman_adv: batadv0: Adding interface: veth0_vlan [ 304.382477][T10214] batman_adv: batadv0: Interface activated: veth0_vlan [ 305.644454][T10227] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1133'. [ 306.164264][T10240] netlink: 'syz.0.1135': attribute type 2 has an invalid length. [ 306.236788][T10240] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1135'. [ 306.282229][T10247] netlink: 'syz.0.1135': attribute type 13 has an invalid length. [ 306.290335][T10247] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.1135'. [ 307.446514][T10280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1145'. [ 307.754349][T10285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1146'. [ 308.340968][T10297] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1149'. [ 308.382556][T10299] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1149'. [ 308.850544][T10308] netlink: 'syz.3.1152': attribute type 153 has an invalid length. [ 308.866515][T10308] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 308.881072][T10308] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1152'. [ 311.202989][T10304] netlink: 'syz.2.1150': attribute type 11 has an invalid length. [ 311.210885][T10304] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1150'. [ 311.343726][T10317] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1153'. [ 311.792822][T10332] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1158'. [ 312.855894][T10340] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1161'. [ 312.886187][T10346] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1163'. [ 312.907425][T10351] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1162'. [ 312.944238][T10346] team0: Port device team_slave_0 removed [ 312.957768][T10346] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 313.609724][T10367] netlink: 'syz.0.1169': attribute type 16 has an invalid length. [ 313.630204][T10367] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 313.640895][T10369] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 313.652276][T10367] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1169'. [ 313.674196][T10369] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 314.071873][T10373] netlink: 'syz.3.1171': attribute type 15 has an invalid length. [ 314.080757][T10373] netlink: 'syz.3.1171': attribute type 16 has an invalid length. [ 314.102464][T10373] netlink: 'syz.3.1171': attribute type 20 has an invalid length. [ 314.110721][T10373] netlink: 'syz.3.1171': attribute type 21 has an invalid length. [ 314.140402][T10373] netlink: 'syz.3.1171': attribute type 23 has an invalid length. [ 314.162366][T10373] netlink: 'syz.3.1171': attribute type 25 has an invalid length. [ 314.184303][T10373] netlink: 'syz.3.1171': attribute type 27 has an invalid length. [ 314.199959][T10379] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1172'. [ 314.359135][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.380469][T10384] bridge0: entered allmulticast mode [ 314.582479][T10384] bridge_slave_0: left allmulticast mode [ 314.588695][T10384] bridge_slave_0: left promiscuous mode [ 314.616662][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.695082][T10408] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1180'. [ 316.438309][T10433] hsr0: left allmulticast mode [ 316.456730][T10433] hsr_slave_0: left allmulticast mode [ 316.468158][T10433] hsr_slave_1: left allmulticast mode [ 316.481710][T10433] bridge0: port 3(hsr0) entered disabled state [ 316.574360][T10433] @0Ù: left allmulticast mode [ 316.602212][T10433] @0Ù: left promiscuous mode [ 316.609547][T10433] bridge0: port 1(c@0Ù) entered disabled state [ 317.086480][T10451] validate_nla: 5 callbacks suppressed [ 317.086499][T10451] netlink: 'syz.2.1193': attribute type 21 has an invalid length. [ 317.100716][T10451] netlink: 'syz.2.1193': attribute type 12 has an invalid length. [ 317.108936][T10451] netlink: 'syz.2.1193': attribute type 13 has an invalid length. [ 317.117227][T10451] netlink: 'syz.2.1193': attribute type 14 has an invalid length. [ 317.127522][T10451] netlink: 'syz.2.1193': attribute type 15 has an invalid length. [ 317.137648][T10451] netlink: 'syz.2.1193': attribute type 16 has an invalid length. [ 317.149776][T10451] netlink: 'syz.2.1193': attribute type 19 has an invalid length. [ 317.162255][T10451] netlink: 'syz.2.1193': attribute type 21 has an invalid length. [ 317.173091][T10451] netlink: 'syz.2.1193': attribute type 22 has an invalid length. [ 317.181273][T10451] netlink: 'syz.2.1193': attribute type 4 has an invalid length. [ 317.192446][T10451] netlink: 9622 bytes leftover after parsing attributes in process `syz.2.1193'. [ 317.467277][ T51] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 317.736199][T10455] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1195'. [ 317.752412][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.758840][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.136386][T10487] FAULT_INJECTION: forcing a failure. [ 319.136386][T10487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 319.170287][T10487] CPU: 0 PID: 10487 Comm: syz.3.1207 Not tainted syzkaller #0 [ 319.177860][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.187975][T10487] Call Trace: [ 319.191298][T10487] [ 319.194273][T10487] dump_stack_lvl+0x18c/0x250 [ 319.199022][T10487] ? show_regs_print_info+0x20/0x20 [ 319.204276][T10487] ? load_image+0x420/0x420 [ 319.208837][T10487] ? __lock_acquire+0x7d80/0x7d80 [ 319.213918][T10487] ? snprintf+0xe9/0x140 [ 319.218241][T10487] should_fail_ex+0x394/0x4c0 [ 319.222979][T10487] _copy_to_user+0x2f/0xa0 [ 319.227456][T10487] simple_read_from_buffer+0xe7/0x150 [ 319.232966][T10487] proc_fail_nth_read+0x1e8/0x260 [ 319.238494][T10487] ? proc_fault_inject_write+0x360/0x360 [ 319.244196][T10487] ? fsnotify_perm+0x271/0x5e0 [ 319.249026][T10487] ? proc_fault_inject_write+0x360/0x360 [ 319.254742][T10487] vfs_read+0x298/0x990 [ 319.258967][T10487] ? kernel_read+0x1e0/0x1e0 [ 319.263620][T10487] ? __fget_files+0x28/0x460 [ 319.268263][T10487] ? __fget_files+0x3fc/0x460 [ 319.273014][T10487] ? __fdget_pos+0x2a3/0x330 [ 319.277660][T10487] ? ksys_read+0x74/0x260 [ 319.282039][T10487] ksys_read+0x151/0x260 [ 319.286336][T10487] ? vfs_write+0x9a0/0x9a0 [ 319.290814][T10487] ? lockdep_hardirqs_on+0x98/0x150 [ 319.296061][T10487] do_syscall_64+0x55/0xb0 [ 319.300521][T10487] ? clear_bhb_loop+0x40/0x90 [ 319.305245][T10487] ? clear_bhb_loop+0x40/0x90 [ 319.310055][T10487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.315994][T10487] RIP: 0033:0x7f5c3cd5e98e [ 319.320439][T10487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.340173][T10487] RSP: 002b:00007f5c3dd53fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.348651][T10487] RAX: ffffffffffffffda RBX: 00007f5c3dd546c0 RCX: 00007f5c3cd5e98e [ 319.356653][T10487] RDX: 000000000000000f RSI: 00007f5c3dd540a0 RDI: 0000000000000003 [ 319.364676][T10487] RBP: 00007f5c3dd54090 R08: 0000000000000000 R09: 0000000000000000 [ 319.372675][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.380672][T10487] R13: 00007f5c3d026038 R14: 00007f5c3d025fa0 R15: 00007ffe2e6a59e8 [ 319.388697][T10487] [ 319.503001][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.511856][T10489] bridge0: entered allmulticast mode [ 319.710015][T10489] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.951201][T10494] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 320.010634][T10494] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 320.717180][T10513] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1217'. [ 321.553742][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.561754][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.591167][T10533] bridge0: entered allmulticast mode [ 321.726637][T10533] bridge_slave_1: left allmulticast mode [ 321.732969][T10533] bridge_slave_1: left promiscuous mode [ 321.739102][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.774548][T10533] bridge_slave_0: left allmulticast mode [ 321.780521][T10533] bridge_slave_0: left promiscuous mode [ 321.818860][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.974939][T10541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1223'. [ 322.118180][T10540] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 322.132343][T10540] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 322.260633][T10542] syzkaller0: entered promiscuous mode [ 322.283018][T10542] syzkaller0: entered allmulticast mode [ 325.043368][T10554] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1228'. [ 325.237710][T10572] validate_nla: 9 callbacks suppressed [ 325.237737][T10572] netlink: 'syz.2.1231': attribute type 21 has an invalid length. [ 325.704261][T10585] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1236'. [ 325.721599][T10585] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1236'. [ 326.082846][T10587] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 326.103656][T10587] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 326.402467][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 326.411703][T10601] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1241'. [ 326.429443][T10602] netlink: 'syz.0.1242': attribute type 4 has an invalid length. [ 326.458192][T10602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1242'. [ 326.851660][T10604] syzkaller0: entered promiscuous mode [ 326.862219][T10604] syzkaller0: entered allmulticast mode [ 327.014377][T10622] netlink: 'syz.2.1247': attribute type 5 has an invalid length. [ 327.042174][T10622] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1247'. [ 329.237394][ T7374] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 329.499292][T10643] netlink: 'syz.3.1252': attribute type 21 has an invalid length. [ 329.517480][T10643] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1252'. [ 329.741099][T10649] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1254'. [ 329.824275][T10655] netlink: 'syz.1.1255': attribute type 25 has an invalid length. [ 329.857828][T10655] netlink: 'syz.1.1255': attribute type 3 has an invalid length. [ 329.874139][T10655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1255'. [ 330.099867][T10667] __nla_validate_parse: 2 callbacks suppressed [ 330.099886][T10667] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1256'. [ 330.394145][T10679] netlink: 'syz.3.1259': attribute type 29 has an invalid length. [ 330.402551][T10679] netlink: 'syz.3.1259': attribute type 29 has an invalid length. [ 330.412855][T10679] netlink: 'syz.3.1259': attribute type 29 has an invalid length. [ 330.421440][T10679] netlink: 'syz.3.1259': attribute type 29 has an invalid length. [ 330.430617][T10679] netlink: 'syz.3.1259': attribute type 29 has an invalid length. [ 330.621793][T10685] netlink: 'syz.2.1263': attribute type 28 has an invalid length. [ 330.677033][T10683] netlink: 'syz.3.1262': attribute type 4 has an invalid length. [ 330.716723][T10683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1262'. [ 331.948671][T10683] syzkaller0: entered promiscuous mode [ 331.957620][T10683] syzkaller0: entered allmulticast mode [ 331.972145][T10699] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1266'. [ 333.849725][T10708] netlink: 'syz.1.1268': attribute type 21 has an invalid length. [ 333.857808][T10708] netlink: 'syz.1.1268': attribute type 6 has an invalid length. [ 333.865758][T10708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1268'. [ 334.499489][T10717] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1271'. [ 334.593349][T10717] hsr_slave_0: left promiscuous mode [ 334.648762][T10719] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 334.662281][T10717] hsr_slave_1: left promiscuous mode [ 334.693274][T10715] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1269'. [ 336.483301][T10746] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1279'. [ 336.548492][T10745] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1279'. [ 336.668040][T10751] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1280'. [ 336.813820][T10756] validate_nla: 4 callbacks suppressed [ 336.813840][T10756] netlink: 'syz.2.1281': attribute type 4 has an invalid length. [ 336.962739][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1281'. [ 337.490361][T10758] syzkaller0: entered promiscuous mode [ 337.500548][T10758] syzkaller0: entered allmulticast mode [ 337.920366][T10732] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1275'. [ 337.950808][T10732] bridge_slave_1: default FDB implementation only supports local addresses [ 338.363165][T10774] delete_channel: no stack [ 338.370287][T10769] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 338.382249][T10774] delete_channel: no stack [ 338.392845][T10769] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1284'. [ 339.095381][T10781] netlink: 'syz.0.1287': attribute type 29 has an invalid length. [ 340.580639][T10773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.590666][T10773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.603121][T10773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.610969][T10773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.620470][T10773] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 340.628722][T10773] batman_adv: batadv0: Removing interface: veth0_vlan [ 340.642718][T10773] batman_adv: batadv0: Removing interface: netdevsim0 [ 340.797619][T10731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.813063][T10781] netlink: 'syz.0.1287': attribute type 29 has an invalid length. [ 340.832665][T10787] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1288'. [ 341.067592][T10797] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1292'. [ 341.082730][T10795] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.1290'. [ 341.094315][T10798] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.1290'. [ 341.395868][T10804] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 341.567712][T10812] netlink: 'syz.3.1297': attribute type 4 has an invalid length. [ 341.589389][T10812] __nla_validate_parse: 1 callbacks suppressed [ 341.589409][T10812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1297'. [ 341.667032][T10806] netlink: 'syz.0.1296': attribute type 2 has an invalid length. [ 342.308207][T10821] netlink: 'syz.1.1299': attribute type 29 has an invalid length. [ 342.386365][T10821] netlink: 'syz.1.1299': attribute type 29 has an invalid length. [ 342.415842][T10825] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1300'. [ 342.662173][T10825] netlink: 207808 bytes leftover after parsing attributes in process `syz.0.1300'. [ 342.710571][T10815] syzkaller0: entered promiscuous mode [ 342.721389][T10815] syzkaller0: entered allmulticast mode [ 344.134964][T10850] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1305'. [ 344.156152][T10850] openvswitch: netlink: Key type 29 is not supported [ 346.679933][T10848] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 348.021764][T10862] netlink: 'syz.3.1307': attribute type 10 has an invalid length. [ 348.029963][T10862] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1307'. [ 348.298260][T10872] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 348.330334][T10872] netlink: 'syz.0.1310': attribute type 29 has an invalid length. [ 348.357488][T10868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1309'. [ 349.649652][T10892] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1312'. [ 350.388878][T10913] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1320'. [ 350.430525][T10913] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 350.462330][T10913] CPU: 1 PID: 10913 Comm: syz.3.1320 Not tainted syzkaller #0 [ 350.469902][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.480018][T10913] Call Trace: [ 350.483355][T10913] [ 350.486369][T10913] dump_stack_lvl+0x18c/0x250 [ 350.491120][T10913] ? show_regs_print_info+0x20/0x20 [ 350.496380][T10913] ? load_image+0x420/0x420 [ 350.500960][T10913] sysfs_warn_dup+0x8e/0xa0 [ 350.505529][T10913] sysfs_do_create_link_sd+0xc0/0x110 [ 350.510980][T10913] device_add_class_symlinks+0x1cf/0x240 [ 350.516708][T10913] device_add+0x4f9/0xc40 [ 350.521178][T10913] wiphy_register+0x1d99/0x2ac0 [ 350.526133][T10913] ? cfg80211_event_work+0x40/0x40 [ 350.531319][T10913] ? minstrel_ht_alloc+0x88a/0x990 [ 350.536511][T10913] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 350.542651][T10913] ieee80211_register_hw+0x2dd8/0x3b30 [ 350.548201][T10913] ? ieee80211_register_hw+0xfb1/0x3b30 [ 350.553827][T10913] ? ieee80211_tasklet_handler+0x20/0x20 [ 350.559521][T10913] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 350.565482][T10913] ? __debug_object_init+0xec/0x450 [ 350.570795][T10913] ? __asan_memset+0x22/0x40 [ 350.575470][T10913] ? __hrtimer_init+0x189/0x270 [ 350.580392][T10913] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 350.586211][T10913] ? mac80211_hwsim_free+0x220/0x220 [ 350.591550][T10913] ? rcu_is_watching+0x15/0xb0 [ 350.596366][T10913] ? kstrndup+0xbd/0x140 [ 350.600666][T10913] hwsim_new_radio_nl+0xdad/0x1a70 [ 350.605821][T10913] ? __nla_validate+0x50/0x50 [ 350.610549][T10913] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 350.616920][T10913] ? __nla_parse+0x40/0x50 [ 350.621389][T10913] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 350.627808][T10913] genl_family_rcv_msg_doit+0x21a/0x310 [ 350.633485][T10913] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 350.639421][T10913] ? bpf_lsm_capable+0x9/0x10 [ 350.644137][T10913] ? security_capable+0x89/0xb0 [ 350.649032][T10913] genl_rcv_msg+0x611/0x7a0 [ 350.653579][T10913] ? genl_bind+0x360/0x360 [ 350.658042][T10913] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 350.664409][T10913] ? ref_tracker_free+0x686/0x830 [ 350.669476][T10913] ? __kasan_kmalloc_large+0x8b/0xa0 [ 350.674807][T10913] netlink_rcv_skb+0x235/0x4c0 [ 350.679606][T10913] ? genl_bind+0x360/0x360 [ 350.684062][T10913] ? netlink_ack+0x1160/0x1160 [ 350.688873][T10913] ? __lock_acquire+0x7d80/0x7d80 [ 350.693937][T10913] ? down_read+0x1ac/0x2e0 [ 350.698399][T10913] genl_rcv+0x28/0x40 [ 350.702433][T10913] netlink_unicast+0x7b1/0x930 [ 350.707241][T10913] netlink_sendmsg+0x8d0/0xbf0 [ 350.712056][T10913] ? netlink_getsockopt+0x590/0x590 [ 350.717294][T10913] ? apparmor_socket_sendmsg+0x8e/0x330 [ 350.722873][T10913] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 350.728201][T10913] ? security_socket_sendmsg+0x80/0xa0 [ 350.733700][T10913] ? netlink_getsockopt+0x590/0x590 [ 350.738932][T10913] ____sys_sendmsg+0x61b/0x980 [ 350.743742][T10913] ? __asan_memset+0x22/0x40 [ 350.748374][T10913] ? __sys_sendmsg_sock+0x30/0x30 [ 350.753432][T10913] ? __import_iovec+0x5f2/0x850 [ 350.758329][T10913] ? import_iovec+0x73/0xa0 [ 350.762869][T10913] ___sys_sendmsg+0x2a6/0x360 [ 350.767581][T10913] ? __sys_sendmsg+0x2b0/0x2b0 [ 350.772400][T10913] ? trace_call_bpf+0xc3/0x6c0 [ 350.777221][T10913] __se_sys_sendmsg+0x1d0/0x2c0 [ 350.782114][T10913] ? __x64_sys_sendmsg+0x80/0x80 [ 350.787104][T10913] ? lockdep_hardirqs_on+0x98/0x150 [ 350.792345][T10913] do_syscall_64+0x55/0xb0 [ 350.796794][T10913] ? clear_bhb_loop+0x40/0x90 [ 350.801590][T10913] ? clear_bhb_loop+0x40/0x90 [ 350.806308][T10913] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.812239][T10913] RIP: 0033:0x7f5c3cd9e159 [ 350.816695][T10913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.836374][T10913] RSP: 002b:00007f5c3dd54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.844827][T10913] RAX: ffffffffffffffda RBX: 00007f5c3d025fa0 RCX: 00007f5c3cd9e159 [ 350.852828][T10913] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 350.860824][T10913] RBP: 00007f5c3ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 350.868909][T10913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.876908][T10913] R13: 00007f5c3d026038 R14: 00007f5c3d025fa0 R15: 00007ffe2e6a59e8 [ 350.884935][T10913] [ 350.893797][T10918] netlink: 'syz.0.1319': attribute type 3 has an invalid length. [ 350.902062][T10918] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1319'. [ 351.460099][T10927] netlink: 'syz.0.1323': attribute type 3 has an invalid length. [ 351.501017][T10933] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 351.509394][T10927] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1323'. [ 351.693671][T10930] netlink: 'syz.3.1326': attribute type 10 has an invalid length. [ 351.745739][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1326'. [ 351.813626][T10935] veth0_vlan: entered allmulticast mode [ 352.117271][T10926] netlink: 'syz.2.1324': attribute type 3 has an invalid length. [ 352.170833][T10926] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1324'. [ 352.555854][T10946] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1329'. [ 352.573586][T10949] netlink: 'syz.0.1328': attribute type 21 has an invalid length. [ 352.592183][T10949] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 352.655616][T10946] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1329'. [ 352.666230][T10946] bridge_slave_1: default FDB implementation only supports local addresses [ 353.148491][T10962] validate_nla: 1 callbacks suppressed [ 353.148519][T10962] netlink: 'syz.1.1334': attribute type 10 has an invalid length. [ 354.009252][T10969] netlink: 'syz.1.1334': attribute type 3 has an invalid length. [ 354.038199][T10969] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.1334'. [ 354.153447][T10962] syzkaller0: entered promiscuous mode [ 354.176441][T10962] syzkaller0: entered allmulticast mode [ 358.693509][T10992] netlink: 'syz.0.1344': attribute type 21 has an invalid length. [ 358.842610][T10997] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1345'. [ 358.868547][T10998] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 358.977451][T10998] team0: Port device hsr_slave_0 added [ 359.000806][T10997] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 359.024053][T11006] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1349'. [ 359.033759][T11006] openvswitch: netlink: Key type 29 is not supported [ 359.080023][T11000] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 359.159976][T11000] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 359.629373][T11028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1362'. [ 359.650049][T11028] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 359.661664][T11028] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 359.683247][T11028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1362'. [ 359.715095][T11028] netlink: 'syz.0.1362': attribute type 10 has an invalid length. [ 359.732238][T11028] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1362'. [ 359.765605][T11032] netlink: 'syz.1.1354': attribute type 21 has an invalid length. [ 359.779067][T11028] netlink: 'syz.0.1362': attribute type 10 has an invalid length. [ 359.790054][T11028] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1362'. [ 360.057296][T11041] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1359'. [ 360.071335][T11041] openvswitch: netlink: Key type 29 is not supported [ 360.248853][T11047] netlink: 'syz.3.1361': attribute type 29 has an invalid length. [ 361.678189][T11068] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1368'. [ 361.694979][T11068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.240579][T11085] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1371'. [ 364.250233][T11085] openvswitch: netlink: Key type 29 is not supported [ 364.692387][T11087] delete_channel: no stack [ 367.702237][T11098] validate_nla: 3 callbacks suppressed [ 367.702259][T11098] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 367.729885][T11098] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1374'. [ 367.754866][T11098] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 367.889222][T11107] netlink: 'syz.2.1377': attribute type 6 has an invalid length. [ 368.296792][T11115] netlink: 'syz.1.1381': attribute type 9 has an invalid length. [ 368.324094][T11115] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1381'. [ 368.361000][T11116] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1379'. [ 368.530309][T11120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1382'. [ 369.442772][T11128] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1384'. [ 369.471698][T11128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.531555][T11129] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1383'. [ 369.587078][T11129] netlink: 'syz.0.1383': attribute type 2 has an invalid length. [ 369.632175][T11129] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1383'. [ 369.747655][T11137] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1385'. [ 369.786497][T11137] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1385'. [ 369.830468][T11137] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 370.632447][T11150] netlink: 'syz.0.1389': attribute type 46 has an invalid length. [ 370.641740][T11150] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1389'. [ 370.943777][T11152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.951105][T11152] IPv6: NLM_F_CREATE should be set when creating new route [ 370.958474][T11152] IPv6: NLM_F_CREATE should be set when creating new route [ 370.965834][T11152] IPv6: NLM_F_CREATE should be set when creating new route [ 371.416683][T11173] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 371.425338][T11173] netlink: 'syz.3.1391': attribute type 3 has an invalid length. [ 371.488654][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 371.498953][T11175] netlink: 'syz.1.1396': attribute type 1 has an invalid length. [ 371.509202][T11175] netlink: 'syz.1.1396': attribute type 2 has an invalid length. [ 371.948114][T11184] team0: Port device netdevsim0 added [ 372.292922][T11194] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 372.587745][T11212] TCP: TCP_TX_DELAY enabled [ 373.007444][T11219] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 373.402799][T11224] __nla_validate_parse: 5 callbacks suppressed [ 373.402817][T11224] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1409'. [ 374.004808][T11252] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1418'. [ 374.053981][T11233] Dead loop on virtual device ip6_vti0, fix it urgently! [ 375.217839][T11281] validate_nla: 2 callbacks suppressed [ 375.217857][T11281] netlink: 'syz.2.1425': attribute type 29 has an invalid length. [ 375.264806][T11282] cgroup: fork rejected by pids controller in /syz3 [ 375.289921][T11281] netlink: 'syz.2.1425': attribute type 29 has an invalid length. [ 376.688253][T11407] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1433'. [ 377.305263][ T8268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.447207][ T8268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.570319][ T8268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.651863][ T8268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.743540][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.760246][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.769656][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.791704][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.802456][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 377.812776][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.433882][ T8268] tipc: Left network mode [ 378.468549][T11425] chnl_net:caif_netlink_parms(): no params data found [ 378.645125][T11448] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 378.711260][T11447] netlink: 'syz.0.1440': attribute type 39 has an invalid length. [ 378.843738][T11446] delete_channel: no stack [ 379.060856][T11468] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1442'. [ 379.093656][T11468] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 379.159589][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.166665][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.185551][T11456] syzkaller0: entered promiscuous mode [ 379.191447][T11456] syzkaller0: entered allmulticast mode [ 379.317353][T11425] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.340899][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.377620][T11425] bridge_slave_0: entered allmulticast mode [ 379.397822][T11425] bridge_slave_0: entered promiscuous mode [ 379.877879][ T5781] Bluetooth: hci2: command tx timeout [ 381.433855][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.441063][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.448684][T11425] bridge_slave_1: entered allmulticast mode [ 381.461605][T11425] bridge_slave_1: entered promiscuous mode [ 381.538888][T11477] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 381.694071][T11425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.706612][T11425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.838097][T11493] netlink: 'syz.0.1447': attribute type 39 has an invalid length. [ 381.952639][ T5781] Bluetooth: hci2: command tx timeout [ 382.013099][T11425] team0: Port device team_slave_0 added [ 382.239432][T11425] team0: Port device team_slave_1 added [ 382.472974][T11425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.480010][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.629467][T11425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.652618][T11425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.659657][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.705610][T11425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.797329][T11505] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1449'. [ 383.269066][T11425] hsr_slave_0: entered promiscuous mode [ 383.428262][T11425] hsr_slave_1: entered promiscuous mode [ 383.710285][T11527] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 383.740106][T11527] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1452'. [ 383.832371][T11530] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1453'. [ 383.877820][ T8268] bond0: (slave ..ãc¤±): Releasing backup interface [ 383.944327][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.954518][T11532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.966511][T11532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.974201][T11532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.033227][ T5781] Bluetooth: hci2: command tx timeout [ 384.161787][T11537] netlink: 'syz.1.1454': attribute type 7 has an invalid length. [ 384.172101][T11537] netlink: 'syz.1.1454': attribute type 6 has an invalid length. [ 384.190419][T11537] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1454'. [ 384.250516][ T8268] veth1_macvtap: left promiscuous mode [ 384.258820][ T8268] veth0_macvtap: left promiscuous mode [ 384.314306][T11545] netlink: 'syz.1.1455': attribute type 2 has an invalid length. [ 384.334180][T11545] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1455'. [ 384.508082][ T8268] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 385.008195][ T8268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.090709][ T8268] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 385.269270][ T8268] bond0 (unregistering): Released all slaves [ 385.316058][T11544] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1455'. [ 386.112279][ T5781] Bluetooth: hci2: command tx timeout [ 386.218798][T11574] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 386.439195][T11425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.450441][T11425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.484109][T11425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.495921][T11425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.685242][T11425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.781057][T11425] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.823888][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.831187][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.955238][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.962508][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.434274][T11425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.690731][T11425] veth0_vlan: entered promiscuous mode [ 388.738753][T11425] veth1_vlan: entered promiscuous mode [ 388.998215][T11425] veth0_macvtap: entered promiscuous mode [ 389.053662][T11425] veth1_macvtap: entered promiscuous mode [ 389.146592][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.188795][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.214721][T11425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.258445][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.288794][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.323764][T11425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.356002][T11425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.381380][T11425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.411930][T11425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.420796][T11425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.598261][T11638] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1471'. [ 389.709311][ T6603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.750444][ T6603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.879958][ T6599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.942444][ T6599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.986847][T11673] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 391.057808][T11667] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 391.147865][T11667] netlink: 'syz.3.1477': attribute type 9 has an invalid length. [ 391.174576][T11676] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 391.186352][T11667] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1477'. [ 391.198825][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 391.447455][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 391.548430][T11684] syz_tun: entered promiscuous mode [ 391.618516][T11684] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 391.652770][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 391.935439][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 391.957105][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 391.967001][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 391.975420][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 392.012328][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 392.035301][T11684] netlink: 'syz.1.1480': attribute type 10 has an invalid length. [ 392.243408][T11702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1482'. [ 395.139015][T11702] team0: Device vxcan1 is of different type [ 395.338816][T11712] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1485'. [ 395.352337][T11712] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1485'. [ 395.433789][T11712] bond0: (slave bond_slave_0): Releasing backup interface [ 395.559078][T11712] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 396.270640][T11715] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1484'. [ 398.696804][T11735] validate_nla: 26 callbacks suppressed [ 398.696828][T11735] netlink: 'syz.3.1489': attribute type 21 has an invalid length. [ 398.722269][T11735] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.749325][T11735] IPv6: Can't replace route, no match found [ 398.802823][T11743] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 398.980450][T11743] team0: Device wg1 is of different type [ 399.939272][T11759] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1500'. [ 400.620257][T11752] netlink: 'syz.2.1491': attribute type 21 has an invalid length. [ 406.689150][T11800] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 406.695489][T11800] syzkaller1: linktype set to 6 [ 408.982452][T11817] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 409.022436][T11817] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.1503'. [ 409.090131][T11819] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1503'. [ 409.102884][T11822] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 409.110725][T11822] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.1503'. [ 409.251430][T11821] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1503'. [ 411.539578][T11847] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 411.582124][T11847] netlink: 'syz.1.1509': attribute type 2 has an invalid length. [ 411.589984][T11847] netlink: 'syz.1.1509': attribute type 2 has an invalid length. [ 411.599710][T11847] netlink: 'syz.1.1509': attribute type 3 has an invalid length. [ 411.673004][T11847] netlink: 'syz.1.1509': attribute type 4 has an invalid length. [ 411.704657][T11847] netlink: 'syz.1.1509': attribute type 5 has an invalid length. [ 411.715094][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 411.729238][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 411.740385][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 411.751204][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.764730][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 411.773145][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.780859][T11847] netlink: 'syz.1.1509': attribute type 6 has an invalid length. [ 411.840922][T11847] netlink: 'syz.1.1509': attribute type 7 has an invalid length. [ 411.893754][T11847] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1509'. [ 411.933512][T11848] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1509'. [ 413.879549][ T51] Bluetooth: hci4: command tx timeout [ 413.984946][T11869] cgroup: fork rejected by pids controller in /syz2 [ 415.002082][T11918] validate_nla: 16 callbacks suppressed [ 415.002111][T11918] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 415.067801][T11918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1516'. [ 415.113016][T11918] bond0: entered promiscuous mode [ 415.150473][T11918] bond_slave_0: entered promiscuous mode [ 415.189855][T11918] bond_slave_1: entered promiscuous mode [ 415.234755][T11918] bridge0: port 3(bond0) entered blocking state [ 415.259669][T11918] bridge0: port 3(bond0) entered disabled state [ 415.282703][T11918] bond0: entered allmulticast mode [ 415.295699][T11918] bond_slave_0: entered allmulticast mode [ 415.305918][T11918] bond_slave_1: entered allmulticast mode [ 415.340148][T11918] bridge0: port 3(bond0) entered blocking state [ 415.346810][T11918] bridge0: port 3(bond0) entered forwarding state [ 415.819874][T11849] chnl_net:caif_netlink_parms(): no params data found [ 415.972402][ T51] Bluetooth: hci4: command tx timeout [ 416.571043][T11849] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.612459][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.620073][T11849] bridge_slave_0: entered allmulticast mode [ 416.701081][T11849] bridge_slave_0: entered promiscuous mode [ 416.747404][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.852293][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.859755][T11849] bridge_slave_1: entered allmulticast mode [ 417.063320][T11849] bridge_slave_1: entered promiscuous mode [ 417.318630][T11997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.327003][T11997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.344200][T11997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.352944][T11997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.416635][T11997] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 417.428117][T11997] batman_adv: batadv0: Removing interface: virt_wifi0 [ 417.743385][T11997] team0: Port device batadv0 removed [ 417.842699][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.855238][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.037851][ T51] Bluetooth: hci4: command tx timeout [ 418.205705][ T8270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.319979][T11849] team0: Port device team_slave_0 added [ 418.331877][T11849] team0: Port device team_slave_1 added [ 418.672989][ T8270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.718304][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.740667][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.770892][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.788870][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.799840][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.838012][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.901312][ T8270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.919078][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.930186][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.945555][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.956487][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.964989][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 418.972970][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.080091][T11849] hsr_slave_0: entered promiscuous mode [ 419.103831][T12023] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1524'. [ 419.109089][T11849] hsr_slave_1: entered promiscuous mode [ 419.134705][T11849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.150939][T11849] Cannot create hsr debugfs directory [ 419.174782][ T8270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.189076][T12022] netlink: 'syz.3.1524': attribute type 21 has an invalid length. [ 419.197098][T12022] netlink: 'syz.3.1524': attribute type 13 has an invalid length. [ 419.205215][T12022] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.1524'. [ 420.114920][ T5781] Bluetooth: hci4: command tx timeout [ 420.798304][T12019] chnl_net:caif_netlink_parms(): no params data found [ 420.885546][T11849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.897611][T11849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.020512][T11849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.072086][T11849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.075313][ T5781] Bluetooth: hci1: command tx timeout [ 421.226283][ T5781] Bluetooth: hci2: ISO packet for unknown connection handle 2878 [ 421.444604][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.462244][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.469595][T12019] bridge_slave_0: entered allmulticast mode [ 421.505770][T12019] bridge_slave_0: entered promiscuous mode [ 421.632493][T12019] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.639743][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.682495][T12019] bridge_slave_1: entered allmulticast mode [ 421.690942][T12019] bridge_slave_1: entered promiscuous mode [ 422.051565][T12019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.086992][T12019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.241623][T12019] team0: Port device team_slave_0 added [ 422.287437][T12019] team0: Port device team_slave_1 added [ 422.314733][T12097] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1537'. [ 422.384491][T12019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.391546][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.422206][T12019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.453623][T12019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.460841][T12019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.488742][T12019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.560269][T11849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.695454][T11849] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.750810][T12104] netlink: 'syz.1.1539': attribute type 3 has an invalid length. [ 422.768318][T12104] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 422.793302][T12104] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1539'. [ 422.827146][T12019] hsr_slave_0: entered promiscuous mode [ 422.850352][T12019] hsr_slave_1: entered promiscuous mode [ 422.870942][T12019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.882378][T12019] Cannot create hsr debugfs directory [ 423.041756][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.049046][ T6584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.065525][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.072804][ T6584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.162157][ T5781] Bluetooth: hci1: command tx timeout [ 423.786497][T12122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1543'. [ 423.812429][T12122] tc_dump_action: action bad kind [ 424.140302][ T8270] veth1_macvtap: left promiscuous mode [ 424.161177][ T8270] veth0_macvtap: left promiscuous mode [ 424.192436][ T8270] veth1_vlan: left promiscuous mode [ 424.205464][ T8270] veth0_vlan: left promiscuous mode [ 424.919252][T12141] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1546'. [ 425.232617][ T5781] Bluetooth: hci1: command tx timeout [ 425.504756][ T8270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.560689][ T8270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.904476][ T8270] bond0 (unregistering): Released all slaves [ 426.004206][T11849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.240948][T12155] netlink: 'syz.3.1549': attribute type 39 has an invalid length. [ 426.626640][T12019] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 426.659388][T12019] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 426.693559][T12019] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.734537][T12019] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.898206][ T6603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.110493][ T6603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.301709][ T6603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.313098][ T5781] Bluetooth: hci1: command tx timeout [ 427.925408][ T6603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.116830][T12019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.147746][T11849] veth0_vlan: entered promiscuous mode [ 428.197242][T11849] veth1_vlan: entered promiscuous mode [ 428.235015][T12200] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 428.263065][T12200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1557'. [ 428.297265][T12200] caif0: entered promiscuous mode [ 428.304148][T12200] caif0: entered allmulticast mode [ 428.309545][T12200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.349743][T12019] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.473085][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.480425][ T8269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.614163][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.621474][ T6599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.066101][T11849] veth0_macvtap: entered promiscuous mode [ 429.069678][T12216] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1560'. [ 429.107060][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 429.228940][T11849] veth1_macvtap: entered promiscuous mode [ 429.493996][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.522241][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.563720][T11849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.670673][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.702255][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.724014][T11849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.795793][T11849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.842135][T11849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.850949][T11849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.902126][T11849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.298935][T12019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.800553][ T8268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.827888][ T8268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.846127][T12019] veth0_vlan: entered promiscuous mode [ 431.102608][T12019] veth1_vlan: entered promiscuous mode [ 431.135049][ T8268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.176677][ T8268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.804470][T12019] veth0_macvtap: entered promiscuous mode [ 431.941587][T12019] veth1_macvtap: entered promiscuous mode [ 432.174555][ T6603] veth1_macvtap: left promiscuous mode [ 432.180561][ T6603] veth1_vlan: left promiscuous mode [ 432.196791][ T6603] veth0_vlan: left promiscuous mode [ 432.774334][ T6603] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 433.546266][ T6603] team0 (unregistering): Port device hsr_slave_0 removed [ 433.813457][ T6603] team0 (unregistering): Port device team_slave_1 removed [ 433.954832][ T6603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.030023][ T6603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.110302][ T6603] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 434.171583][ T6603] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 434.461306][ T6603] bond0 (unregistering): Released all slaves [ 434.512930][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.528415][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.538574][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.549491][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.563466][T12019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.608885][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.620154][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.631159][T12019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.642351][T12019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.655235][T12019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.703352][T12019] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.725212][T12019] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.741412][T12019] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.750761][T12019] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.059459][ T8269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.096712][ T8269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.192835][ T6599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.220112][ T6599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.479694][T12337] netlink: 64519 bytes leftover after parsing attributes in process `syz.4.1571'. [ 437.053941][T12351] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1579'. [ 437.790772][T12351] team0: Port device team_slave_0 removed [ 437.830746][T12351] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 438.264701][T12383] netlink: 279 bytes leftover after parsing attributes in process `syz.2.1586'. [ 438.394204][T12383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1586'. [ 438.827649][T12402] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1589'. [ 438.866766][T12402] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 439.010572][T12403] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1588'. [ 439.084800][T12403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.304198][T12422] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1593'. [ 439.335944][T12422] netlink: get zone limit has 4 unknown bytes [ 439.480209][T12427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1594'. [ 439.536069][T12427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1594'. [ 439.563099][T12428] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1594'. [ 439.918070][T12432] netlink: 'syz.2.1595': attribute type 21 has an invalid length. [ 440.558924][T12436] sit0: entered allmulticast mode [ 440.584449][T12442] sit0: entered promiscuous mode [ 440.596166][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.605606][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.986596][T12472] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 441.453210][ T5781] Bluetooth: hci1: Malformed LE Event: 0x02 [ 441.781157][T12481] __nla_validate_parse: 1 callbacks suppressed [ 441.781182][T12481] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1601'. [ 441.809427][T12481] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1601'. [ 441.861727][T12481] bond0: (slave bond_slave_0): Releasing backup interface [ 441.900374][T12481] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 441.931812][T12480] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1601'. [ 442.128196][T12501] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1606'. [ 442.322495][T12511] netlink: 'syz.3.1609': attribute type 21 has an invalid length. [ 442.340156][T12511] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1609'. [ 442.766053][T12514] sit0: entered allmulticast mode [ 442.987754][T12523] sit0: entered promiscuous mode [ 443.191760][T12529] Ÿë: port 1(hsr_slave_0) entered blocking state [ 443.214171][T12529] Ÿë: port 1(hsr_slave_0) entered disabled state [ 443.220938][T12529] hsr_slave_0: entered allmulticast mode [ 443.254461][T12529] hsr_slave_0: left allmulticast mode [ 443.617161][T12555] netlink: 'syz.4.1617': attribute type 2 has an invalid length. [ 443.648216][T12555] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.1617'. [ 445.884779][T12560] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 445.923491][T12560] team0: Device hsr_slave_0 failed to register rx_handler [ 446.883692][T12570] delete_channel: no stack [ 447.417445][T12617] netlink: 'syz.1.1625': attribute type 21 has an invalid length. [ 447.533727][T12617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1625'. [ 447.608609][T12617] sit0: entered allmulticast mode [ 447.853082][T12621] sit0: entered promiscuous mode [ 448.686967][T12641] €Â0: renamed from pim6reg1 [ 449.081656][T12656] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1636'. [ 449.424446][T12670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1639'. [ 450.719121][T12733] netlink: 'syz.3.1647': attribute type 29 has an invalid length. [ 450.781318][T12733] netlink: 'syz.3.1647': attribute type 29 has an invalid length. [ 450.839871][T12735] netlink: 'syz.4.1644': attribute type 21 has an invalid length. [ 450.891643][T12735] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1644'. [ 451.163605][T12750] netlink: 'syz.1.1650': attribute type 21 has an invalid length. [ 451.171717][T12750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.179026][T12750] IPv6: NLM_F_CREATE should be set when creating new route [ 451.186386][T12750] IPv6: NLM_F_CREATE should be set when creating new route [ 451.193708][T12750] IPv6: NLM_F_CREATE should be set when creating new route [ 451.214815][T12742] sit0: entered allmulticast mode [ 451.263163][T12748] sit0: entered promiscuous mode [ 451.417387][T12749] netlink: 'syz.1.1650': attribute type 21 has an invalid length. [ 451.429692][T12749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.617402][T12761] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1652'. [ 452.128988][T12776] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1655'. [ 453.754155][T12805] netlink: 'syz.4.1662': attribute type 10 has an invalid length. [ 453.859504][T12805] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1662'. [ 453.901705][T12805] hsr0: entered promiscuous mode [ 453.924014][T12805] bridge0: port 3(hsr0) entered blocking state [ 453.961275][T12805] bridge0: port 3(hsr0) entered disabled state [ 453.985874][T12805] hsr0: entered allmulticast mode [ 454.014480][T12805] hsr_slave_0: entered allmulticast mode [ 454.039968][T12805] hsr_slave_1: entered allmulticast mode [ 454.088878][T12805] bridge0: port 3(hsr0) entered blocking state [ 454.095354][T12805] bridge0: port 3(hsr0) entered forwarding state [ 454.273149][T12804] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1662'. [ 454.378918][T12804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.566087][T12808] delete_channel: no stack [ 455.941277][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 455.973207][T12825] -: renamed from syzkaller0 [ 458.279127][T12900] netlink: 'syz.2.1682': attribute type 10 has an invalid length. [ 504.122251][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 562.931927][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 562.938700][ C1] rcu: 1-....: (1 GPs behind) idle=7704/1/0x4000000000000000 softirq=44836/44837 fqs=3747 [ 562.949738][ C1] rcu: hardirqs softirqs csw/system [ 562.956203][ C1] rcu: number: 1390223 0 0 [ 562.962648][ C1] rcu: cputime: 16506 35982 57 ==> 52490(ms) [ 562.970473][ C1] rcu: (t=10500 jiffies g=56345 q=1475 ncpus=2) [ 562.976823][ C1] rcu: rcu_preempt kthread starved for 1485 jiffies! g56345 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 562.987954][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 562.997944][ C1] rcu: RCU grace-period kthread stack dump: [ 563.003871][ C1] task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 [ 563.014686][ C1] Call Trace: [ 563.017994][ C1] [ 563.020961][ C1] __schedule+0x15ae/0x4660 [ 563.025513][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 563.030562][ C1] ? lock_chain_count+0x20/0x20 [ 563.035440][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 563.040672][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 563.046618][ C1] ? asan.module_dtor+0x20/0x20 [ 563.051497][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.056312][ C1] schedule+0xbd/0x170 [ 563.060414][ C1] schedule_timeout+0x188/0x2d0 [ 563.065291][ C1] ? console_conditional_schedule+0x40/0x40 [ 563.071210][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 563.077156][ C1] ? update_process_times+0x1b0/0x1b0 [ 563.082574][ C1] ? prepare_to_swait_event+0x344/0x360 [ 563.088180][ C1] rcu_gp_fqs_loop+0x30d/0x1590 [ 563.093071][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 563.099280][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 563.104530][ C1] ? rcu_gp_init+0x1530/0x1530 [ 563.109321][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 563.115258][ C1] ? finish_swait+0xca/0x1d0 [ 563.119894][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 563.124535][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 563.129677][ C1] ? __kthread_parkme+0x71/0x1c0 [ 563.134642][ C1] ? __kthread_parkme+0x15b/0x1c0 [ 563.139694][ C1] kthread+0x2fa/0x390 [ 563.143798][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 563.148953][ C1] ? kthread_blkcg+0xd0/0xd0 [ 563.153574][ C1] ret_from_fork+0x48/0x80 [ 563.158050][ C1] ? kthread_blkcg+0xd0/0xd0 [ 563.162668][ C1] ret_from_fork_asm+0x11/0x20 [ 563.167478][ C1] [ 563.170516][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 563.176864][ C1] Sending NMI from CPU 1 to CPUs 0: [ 563.182114][ C0] NMI backtrace for cpu 0 [ 563.182125][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 563.182141][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.182151][ C0] RIP: 0010:queued_write_lock_slowpath+0x12c/0x29f [ 563.182180][ C0] Code: f0 41 81 0e 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 78 5c 46 f7 eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08 [ 563.182195][ C0] RSP: 0018:ffffc90000007520 EFLAGS: 00000206 [ 563.182209][ C0] RAX: 00000000000001ff RBX: 1ffffffff1c9d564 RCX: ffffffff8a99a732 [ 563.182222][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e4eab20 [ 563.182232][ C0] RBP: ffffc900000075b0 R08: ffffffff8e4eab23 R09: 1ffffffff1c9d564 [ 563.182245][ C0] R10: dffffc0000000000 R11: fffffbfff1c9d565 R12: dffffc0000000000 [ 563.182257][ C0] R13: 1ffff92000000ea4 R14: ffffffff8e4eab20 R15: ffffc90000007550 [ 563.182280][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 563.182293][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.182305][ C0] CR2: 00007fd0a4bffdd4 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 563.182319][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.182330][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 563.182340][ C0] Call Trace: [ 563.182348][ C0] [ 563.182355][ C0] ? queued_read_lock_slowpath+0x250/0x250 [ 563.182380][ C0] do_raw_write_lock+0x1ea/0x260 [ 563.182417][ C0] ? do_raw_read_unlock+0x80/0x80 [ 563.182443][ C0] ? ___neigh_create+0x207/0x23d0 [ 563.182469][ C0] ___neigh_create+0x207/0x23d0 [ 563.182505][ C0] ip6_finish_output2+0x15b9/0x1690 [ 563.182533][ C0] ? ip6_finish_output2+0x71a/0x1690 [ 563.182560][ C0] ? nf_hook+0x390/0x390 [ 563.182582][ C0] ? ip6_mtu+0x321/0x3f0 [ 563.182597][ C0] ? ip6_finish_output+0x567/0x7f0 [ 563.182625][ C0] ndisc_send_skb+0xbb9/0x1480 [ 563.182647][ C0] ? ndisc_send_skb+0x201/0x1480 [ 563.182672][ C0] ? ndisc_mc_map+0x680/0x680 [ 563.182692][ C0] ? skb_dst+0xd0/0xd0 [ 563.182723][ C0] addrconf_rs_timer+0x36b/0x640 [ 563.182746][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 563.182860][ C0] call_timer_fn+0x189/0x540 [ 563.182890][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 563.182911][ C0] ? call_timer_fn+0xd2/0x540 [ 563.182928][ C0] ? __run_timers+0x810/0x810 [ 563.182961][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 563.182979][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 563.183002][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 563.183023][ C0] __run_timers+0x570/0x810 [ 563.183050][ C0] ? detach_timer+0x2b0/0x2b0 [ 563.183070][ C0] ? lock_chain_count+0x20/0x20 [ 563.183093][ C0] run_timer_softirq+0x67/0xf0 [ 563.183110][ C0] handle_softirqs+0x27d/0x820 [ 563.183128][ C0] ? read_tsc+0x9/0x20 [ 563.183145][ C0] ? ktime_get+0x24b/0x280 [ 563.183166][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 563.183185][ C0] ? do_softirq+0x1a0/0x1a0 [ 563.183205][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 563.183230][ C0] __irq_exit_rcu+0xd3/0x190 [ 563.183247][ C0] ? irq_exit_rcu+0x20/0x20 [ 563.183270][ C0] irq_exit_rcu+0x9/0x20 [ 563.183286][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 563.183317][ C0] [ 563.183325][ C0] [ 563.183330][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.183352][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 563.183378][ C0] Code: b9 19 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 76 38 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 563.183392][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 563.183406][ C0] RAX: c759c88a7ba26e00 RBX: ffffffff81631c41 RCX: c759c88a7ba26e00 [ 563.183420][ C0] RDX: 0000000000000001 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 563.183432][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b6b R09: 1ffff110171c6d6d [ 563.183444][ C0] R10: dffffc0000000000 R11: ffffed10171c6d6e R12: 1ffffffff19c0fbc [ 563.183457][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 563.183471][ C0] ? do_idle+0x221/0x5c0 [ 563.183498][ C0] default_idle+0x13/0x20 [ 563.183513][ C0] default_idle_call+0x6c/0xa0 [ 563.183528][ C0] do_idle+0x221/0x5c0 [ 563.183551][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 563.183572][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.183602][ C0] cpu_startup_entry+0x43/0x60 [ 563.183622][ C0] rest_init+0x2e2/0x300 [ 563.183637][ C0] ? time_init+0x40/0x40 [ 563.183653][ C0] arch_call_rest_init+0xe/0x10 [ 563.183672][ C0] start_kernel+0x461/0x4e0 [ 563.183691][ C0] x86_64_start_reservations+0x2a/0x30 [ 563.183718][ C0] x86_64_start_kernel+0x60/0x60 [ 563.183742][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 563.183774][ C0] [ 563.184112][ C1] CPU: 1 PID: 12885 Comm: syz.2.1682 Not tainted syzkaller #0 [ 563.666456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.676533][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 563.683067][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 eb 77 c3 f6 65 8b 05 0c 36 6a 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 563.702719][ C1] RSP: 0018:ffffc900001efc40 EFLAGS: 00000206 [ 563.708819][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 6ce36828762fe900 [ 563.716852][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: 0000000000000001 [ 563.724863][ C1] RBP: ffffc900001efcd0 R08: ffffffff911ef547 R09: 1ffffffff223dea8 [ 563.732864][ C1] R10: dffffc0000000000 R11: fffffbfff223dea9 R12: dffffc0000000000 [ 563.740859][ C1] R13: dffffc0000000000 R14: ffff8880795a05b8 R15: 1ffff9200003df88 [ 563.748857][ C1] FS: 00007f0bab6396c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 563.757828][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.764433][ C1] CR2: 0000000000000000 CR3: 000000005af30000 CR4: 00000000003506e0 [ 563.772438][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 563.780436][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 563.788519][ C1] Call Trace: [ 563.791827][ C1] [ 563.794701][ C1] ? _raw_spin_unlock+0x40/0x40 [ 563.799586][ C1] ? __stack_depot_save+0x1f/0x660 [ 563.804757][ C1] ref_tracker_free+0x511/0x830 [ 563.809638][ C1] ? refcount_inc+0x70/0x70 [ 563.814179][ C1] ? neigh_destroy+0x373/0x5e0 [ 563.818975][ C1] ? neigh_remove_one+0x5f1/0x700 [ 563.824033][ C1] ? ___neigh_create+0x491/0x23d0 [ 563.829090][ C1] ? ip6_finish_output2+0x15b9/0x1690 [ 563.834496][ C1] ? udp_tunnel6_xmit_skb+0x516/0x930 [ 563.839901][ C1] ? geneve_xmit+0x2428/0x3530 [ 563.844702][ C1] ? dev_hard_start_xmit+0x269/0x790 [ 563.850027][ C1] ? __dev_queue_xmit+0x1be8/0x37e0 [ 563.855269][ C1] ? ip6_finish_output2+0xf43/0x1690 [ 563.860586][ C1] ? ndisc_send_skb+0xbb9/0x1480 [ 563.865572][ C1] ? addrconf_rs_timer+0x36b/0x640 [ 563.870707][ C1] ? call_timer_fn+0x189/0x540 [ 563.875495][ C1] ? __run_timers+0x570/0x810 [ 563.880196][ C1] ? run_timer_softirq+0x67/0xf0 [ 563.885159][ C1] ? handle_softirqs+0x27d/0x820 [ 563.890121][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 563.894923][ C1] neigh_destroy+0x373/0x5e0 [ 563.899556][ C1] neigh_remove_one+0x5f1/0x700 [ 563.904442][ C1] ___neigh_create+0x491/0x23d0 [ 563.909338][ C1] ip6_finish_output2+0x15b9/0x1690 [ 563.914578][ C1] ? ip6_finish_output2+0x71a/0x1690 [ 563.919897][ C1] ? nf_hook+0x390/0x390 [ 563.924169][ C1] ? ip6_mtu+0x321/0x3f0 [ 563.928435][ C1] ? ip6_finish_output+0x567/0x7f0 [ 563.933587][ C1] udp_tunnel6_xmit_skb+0x516/0x930 [ 563.938827][ C1] geneve_xmit+0x2428/0x3530 [ 563.943458][ C1] ? ktime_get+0x24b/0x280 [ 563.947919][ C1] ? geneve_xmit+0x157/0x3530 [ 563.952637][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 563.958648][ C1] ? geneve_stop+0x1b0/0x1b0 [ 563.963274][ C1] ? lock_chain_count+0x20/0x20 [ 563.968153][ C1] ? validate_xmit_xfrm+0xbb/0x1340 [ 563.973383][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.979575][ C1] ? validate_xmit_skb+0x4ac/0xf30 [ 563.984725][ C1] dev_hard_start_xmit+0x269/0x790 [ 563.989879][ C1] __dev_queue_xmit+0x1be8/0x37e0 [ 563.994938][ C1] ? __dev_queue_xmit+0x272/0x37e0 [ 564.000090][ C1] ? mark_lock+0x94/0x320 [ 564.004453][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 564.010461][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 564.017690][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 564.023016][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.029204][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 564.034435][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.040626][ C1] ? ip6_finish_output2+0xd60/0x1690 [ 564.045959][ C1] ip6_finish_output2+0xf43/0x1690 [ 564.051108][ C1] ? ip6_finish_output2+0x71a/0x1690 [ 564.056442][ C1] ? nf_hook+0x390/0x390 [ 564.060719][ C1] ? ip6_mtu+0x321/0x3f0 [ 564.064997][ C1] ? ip6_finish_output+0x567/0x7f0 [ 564.070150][ C1] ndisc_send_skb+0xbb9/0x1480 [ 564.074946][ C1] ? ndisc_send_skb+0x201/0x1480 [ 564.079922][ C1] ? ndisc_mc_map+0x680/0x680 [ 564.084633][ C1] ? skb_dst+0xd0/0xd0 [ 564.088754][ C1] addrconf_rs_timer+0x36b/0x640 [ 564.093739][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 564.099839][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 564.105865][ C1] call_timer_fn+0x189/0x540 [ 564.110491][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 564.116588][ C1] ? call_timer_fn+0xd2/0x540 [ 564.121313][ C1] ? __run_timers+0x810/0x810 [ 564.126087][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 564.132205][ C1] __run_timers+0x570/0x810 [ 564.136777][ C1] ? detach_timer+0x2b0/0x2b0 [ 564.141517][ C1] ? lock_chain_count+0x20/0x20 [ 564.146413][ C1] run_timer_softirq+0x67/0xf0 [ 564.151209][ C1] handle_softirqs+0x27d/0x820 [ 564.155995][ C1] ? read_tsc+0x9/0x20 [ 564.160093][ C1] ? ktime_get+0x24b/0x280 [ 564.164548][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 564.169337][ C1] ? do_softirq+0x1a0/0x1a0 [ 564.173876][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 564.179105][ C1] __irq_exit_rcu+0xd3/0x190 [ 564.183723][ C1] ? irq_exit_rcu+0x20/0x20 [ 564.188256][ C1] irq_exit_rcu+0x9/0x20 [ 564.192525][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 564.198194][ C1] [ 564.201157][ C1] [ 564.204117][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.210131][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 564.216051][ C1] Code: 75 11 e8 0c 10 0b 00 48 85 db 75 16 e8 02 10 0b 00 eb 15 e8 fb 0f 0b 00 e8 06 58 13 09 48 85 db 74 ea e8 ec 0f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 564.235685][ C1] RSP: 0018:ffffc9000b787a00 EFLAGS: 00000246 [ 564.241783][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 564.249797][ C1] RDX: ffffc9000bb29000 RSI: 0000000000002ede RDI: 0000000000002edf [ 564.257806][ C1] RBP: ffffc9000b787ad0 R08: ffffffff911ef5ff R09: 1ffffffff223debf [ 564.265811][ C1] R10: dffffc0000000000 R11: fffffbfff223dec0 R12: 1ffff920016f0f44 [ 564.273817][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920016f0f65 [ 564.281836][ C1] ? event_function+0x300/0x300 [ 564.286724][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 564.292486][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 564.298247][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 564.303479][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 564.309143][ C1] smp_call_function_single+0x36d/0x5a0 [ 564.314719][ C1] ? event_function+0x300/0x300 [ 564.319606][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 564.325805][ C1] ? event_function+0x300/0x300 [ 564.330698][ C1] perf_install_in_context+0x5bb/0x920 [ 564.336198][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 564.342206][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 564.347434][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 564.352666][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.358875][ C1] __se_sys_perf_event_open+0x1818/0x1d40 [ 564.364641][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 564.370318][ C1] ? lock_chain_count+0x20/0x20 [ 564.375194][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 564.381209][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 564.386438][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 564.392107][ C1] do_syscall_64+0x55/0xb0 [ 564.396552][ C1] ? clear_bhb_loop+0x40/0x90 [ 564.401258][ C1] ? clear_bhb_loop+0x40/0x90 [ 564.405979][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.411906][ C1] RIP: 0033:0x7f0baa79e159 [ 564.416350][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.436207][ C1] RSP: 002b:00007f0bab639028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 564.444660][ C1] RAX: ffffffffffffffda RBX: 00007f0baaa25fa0 RCX: 00007f0baa79e159 [ 564.452655][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000140 [ 564.460648][ C1] RBP: 00007f0baa835024 R08: 0000000000000001 R09: 0000000000000000 [ 564.468648][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 564.476640][ C1] R13: 00007f0baaa26038 R14: 00007f0baaa25fa0 R15: 00007ffd76ffec38 [ 564.484647][ C1]