last executing test programs: 22.280877188s ago: executing program 1 (id=3169): close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, 0x0, 0x20044818) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth0_to_bond\x00', 0x4000}) sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)}, 0x4000081) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x80, 0x0, 0x0, 0x7, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x80000004, 0x7ffc}, 0x7602, 0x5, 0x0, 0x0, 0x5, 0x6, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0x11, 0x200000000000002, 0x300) 21.788045951s ago: executing program 1 (id=3174): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x800002, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 21.322239912s ago: executing program 1 (id=3178): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x5}, 0x0, 0xfffffffffffffffd, 0xfffffffe, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYRES64=r6], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) 20.877743594s ago: executing program 1 (id=3182): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce000000162079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2, 0x0, 0x60000000}, 0x2c) 20.513396763s ago: executing program 1 (id=3184): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x840, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8000000}, 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 7.457989868s ago: executing program 0 (id=3244): sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440f1) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205c31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xf, 0x0, 0x10, 0x3, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1, 0x0, 0x0, 0xfdff}, 0x0) 7.041766039s ago: executing program 2 (id=3247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x1d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) 6.730146787s ago: executing program 0 (id=3248): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0xc00}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.607801251s ago: executing program 2 (id=3249): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2000000000c708000000000002000000fe08006d1541abceca1c8da9a38982e21c5029e67a46d2ccaeda1692a7addb561de5f337634d11620c53492e7a7e968a72b28b2198ba886092c3fbe604fc0dc10b6ce1ca2e56382a5555ef622d51f39eb931d2801d3746b0c1edbc56154a1be94a11d6de12cec16a0655e40d9a995b09c3aa23f15a4a3b71472baff5139c55a818eca5"], 0x20}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0xaf, 0xe4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20113, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffe, 0xd}, 0x201, 0x6, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x70c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc783, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0xffff}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'tunl0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 6.366829867s ago: executing program 0 (id=3252): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x700}, 0x48) 5.238797776s ago: executing program 0 (id=3253): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x4}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x888a4, 0x0, 0x0, 0x0, 0x6, 0x2f07}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000040), 0x3b) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001280)='\\', 0xffffffe3}], 0x1}, 0x24004044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000440), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109242, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) 5.238608956s ago: executing program 2 (id=3254): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 4.987277472s ago: executing program 4 (id=3257): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000005080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000022000b0fd25a8c6c8c6f94f920050e614b", 0x15}], 0x1}, 0x4000010) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a3, &(0x7f0000000080)) 4.876616575s ago: executing program 2 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x47, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012", 0x33}], 0x1}, 0x20000050) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.67584301s ago: executing program 3 (id=3259): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x27, 0x40, 0x7, 0x0, 0x0, 0xd085, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x1f502, 0x6, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x45811) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) 4.242605771s ago: executing program 2 (id=3260): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110c230055) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)="5c00000011006bcc9e09000000000000006b876c1d0000007ea608640850a9f814001ac07c3504459b4774d400020254785194b8b96766c06fdbe6d6e3b4d774ba5ef071bd1884b5775e45949175cbc701b7baad3b57000000f5eb4fe700000000000000", 0x64}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x5, 0x0) 3.886498031s ago: executing program 4 (id=3261): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x78}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000180)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xc, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) 3.547233159s ago: executing program 3 (id=3262): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x19422, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.453043062s ago: executing program 4 (id=3263): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x800003ff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) 2.967230494s ago: executing program 0 (id=3264): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7, 0xc3ff}, 0x10122) 2.965856634s ago: executing program 3 (id=3273): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2000000000c708000000000002000000fe08006d1541abceca1c8da9a38982e21c5029e67a46d2ccaeda1692a7addb561de5f337634d11620c53492e7a7e968a72b28b2198ba886092c3fbe604fc0dc10b6ce1ca2e56382a5555ef622d51f39eb931d2801d3746b0c1edbc56154a1be94a11d6de12cec16a0655e40d9a995b09c3aa23f15a4a3b71472baff5139c55a818eca5"], 0x20}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0xaf, 0xe4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20113, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffe, 0xd}, 0x201, 0x6, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x6, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x70c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc783, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0xffff}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'tunl0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.75144234s ago: executing program 2 (id=3265): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x4}, 0x100001, 0xca, 0x5, 0x5, 0x6, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) openat$cgroup(r5, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000008c0)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 2.554081395s ago: executing program 4 (id=3266): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xfffffffe, @mcast1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 2.332127191s ago: executing program 0 (id=3267): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20028, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002022) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x6, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x6, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003d000000b70000000100002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003d000000b70000000100002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.320825031s ago: executing program 3 (id=3268): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x65bf, 0x40, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0x4, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x50) 2.238444493s ago: executing program 1 (id=3188): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf250c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0x2006f8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5}) ioctl$TUNGETVNETLE(r4, 0x8955, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a) 2.002656469s ago: executing program 3 (id=3269): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open$cgroup(&(0x7f0000003140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.371800015s ago: executing program 4 (id=3270): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b400000480091"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, 0x0, 0x40) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000200)="50260440a560c9ac44504b8b59090b2c1903dd1ce7b8b7ccee6ffa2a84b60ba22ca5db81b0bd1c988a86dc4005e381d9d94c59", 0x33}, {&(0x7f0000000440)="306325eb600bcdc4999e063d4090200e64639e3940d9677e5591a6af9792654a3afa5bfda72e16794d3be1e89a448721d481faf6eb6a90f8edf4f3339ff0f42b0432ad45a6f01c394344ca35e8133c4acab7db15f7db4c53a12c91792c86f0b9ffbc50304431dc676a80ec74f97b2967c846ede2bfc1b568b257187d1b6942d21d68d09867dc7fe6d05c6f33f7473485d10c99cfa49616d87185ee3ecee932f4904d740f0535889e5780cf68830e8c", 0xaf}, {&(0x7f00000028c0)="637d1ab17ac51fedb3e072a3aa7cefe264b5e64dfba5b8765a78dabebec128149ecc0594788fa33a8104191fd861e37caac9c0866e43ce4a2e7d3aafb2eebb4afe0974fc2fc260bbfb3e093c468ad9a53c51b1b5a359a911fe8a174e7cd7d49de6e99d9ad89902627e4bbf5ab228d8a7b89a6fae2c5aa5a9b390e0311e07c8613bf02d5b53038345e65f339493715a33451bb8922c848a896d73c49465dd734aa5daa14a3200893e7f7e9cd28e3f721bd6ff349c209da284f88eb1a9861646766722c977f09bf52d60a207bd2ee8baa3ebec39d28a3a16b96d189a5624dea72ea3c1030c1db2725d3fa796b3661133c1103e2bd0ec9318f7882d9620bbbba957aeaed5a90627705f55ccee259030d45b622322a65295f1cd287501e03698536ec2abdf15b69ab9170a7680c4fb828b5fcd9a66eac3e4e8258b6a3f763904d4c31f5e46985176315d35f6f23c1a8fa5a2dc6b8130a55aa781cd1adb3945bfb2a41d4cbbbe43377a8f4ff5dde13ddf7922ac29fe0581d0cc5288838b65ba7cd41df70326c8b83786beac90acc7e9d6d3b6d1351bb1125fa5afebc2e1e451b009e4b9225bbd76ad5d64d5c7c473439640983606e66e0fcc9f907bbf0fbde1f3a2105517d89c1b752e49348f2017f4c011a1740f50dff13ed6d616fbe68ede026ab499d656caca782e0aed0d088e822910547449b11f4561f63d9227bbd3fe31c90fd7071978238dc0a971b4b387d9bb77fa87f3e0b11071a85dd34f47178d5976c13e22e4d70f04ed0a4b44de44b2540024072a875ffb87f7294b02beb549cd8e252f72317dc23569d7645954716bca5148d32594cf37a9f700c5b8047fa506f90920f71dfbf5c5475b6240bd86b635a2165a049ab764fcaed4072ab39ca365f418efb1bd7794250a4d56a1a364c69df87fe7b78a940b8682b53be6405fb6a520d1c046324a74731aa0eef5ff286f2b5546366bd7ff171fbf5ceeec15404a18342781d4a0be08122e1ddb3a19c1e5ba9a5baac4c605f7c01ee2d914c03e1ebc224c92a16ba4e27484bd36499079ff3935b0d05168824e54019c7db1a16e6cf574b62e1594e420cf9f75bb2ffa4912704c9f0e0ba43a15c511b838235e399e1f32df1c516ad14c059e0900da0c760047fc61ae78f56f1225be5a22e59a03225982a4e50a36a5116ee536d1e1b625c67d8f9f635b421d10db2df104fb790f2c142100f7a9ce9af7a8084dcdb4de95af79625c2c429d6f91e79270d06320f41e09a364c1391950521e13b84b88eeaf1f2fc5c1b3569b815b7d4b96b89518dc689a6117dd2d50dc0b3de4b7ab2e235aef5b47fc3d4176d7a41bf4e8bbca2f44e721d07392f2291a3691af0f52ccce5220c43be05180d9228ed564b7a1669fd33eb9d8925ed08d7e3c7d7ecb7286dbaa15f173f482ad527e0388246f7f172de229091defd22c0edf30acb8d6634224e505ad8eaabc1584a4b0bf5f1a35cbecdc3cb580a2b7e7a7c0b0440f4648583a52faafc1a6ee6d305b0f23dcb504e669eb786bfc95380442bfe74130ab672a741c2c33aef6ee962a7b0608ab785e8cb5b4568f8c66a77dd365abd1859ea6b78253cba40ea9f3d75adf0b9f05db9c14cb6bee253ba07e101aac737ef1deb4afa7d3481f2dab8e499815d849475eba093d387cae54f534e4", 0x4a2}], 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000f500000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700e5ff1010"], 0x10b8}, 0x7f40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.086737722s ago: executing program 3 (id=3271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x5, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b12d25a", 0xa}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24044840) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="95"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_config_ext={0x401, 0x100000000000}, 0x10002, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x80}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="07637075737401536463707508"], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb8e, 0x0, &(0x7f0000000000)='\x00', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0xff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x11164) r5 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x1}, 0x88, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="503fcb679fc96999d037879a5a914ee865cc378911fb21aed33a85951233077cd84e0d29e665eae77d2a671243efa33f10e83d67705dccfbef8d0de166740643bd7152258fefa90ba36fe21f500c29104b5067a1e6506a4a199c54df8bf2650ea78ca0418afae87d73f1acf8ea853818b4ac7c353b", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 0s ago: executing program 4 (id=3272): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) close(0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0xe5d, r4}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2e0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4000040) kernel console output (not intermixed with test programs): 2.158385][ T8678] ? show_regs_print_info+0x12/0x12 [ 342.163618][ T8678] ? load_image+0x410/0x410 [ 342.168157][ T8678] ? __lock_acquire+0x7c40/0x7c40 [ 342.173225][ T8678] should_fail_ex+0x390/0x4c0 [ 342.177941][ T8678] strncpy_from_user+0x32/0x340 [ 342.182842][ T8678] bpf_prog_load+0x200/0x1530 [ 342.187573][ T8678] ? map_freeze+0x390/0x390 [ 342.192114][ T8678] ? __might_fault+0xa6/0x120 [ 342.196836][ T8678] ? __might_fault+0xa6/0x120 [ 342.201540][ T8678] ? __might_fault+0xc2/0x120 [ 342.206251][ T8678] ? __might_fault+0xa6/0x120 [ 342.210965][ T8678] ? bpf_lsm_bpf+0x5/0x10 [ 342.215330][ T8678] ? security_bpf+0x7a/0xa0 [ 342.219876][ T8678] __sys_bpf+0x5b8/0x780 [ 342.224163][ T8678] ? bpf_link_show_fdinfo+0x380/0x380 [ 342.229590][ T8678] ? lock_chain_count+0x20/0x20 [ 342.234516][ T8678] __x64_sys_bpf+0x78/0x90 [ 342.238973][ T8678] do_syscall_64+0x4c/0xa0 [ 342.243428][ T8678] ? clear_bhb_loop+0x60/0xb0 [ 342.248147][ T8678] ? clear_bhb_loop+0x60/0xb0 [ 342.252859][ T8678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.258783][ T8678] RIP: 0033:0x7fc4d259de99 [ 342.263229][ T8678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.282870][ T8678] RSP: 002b:00007fc4d34bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.291406][ T8678] RAX: ffffffffffffffda RBX: 00007fc4d2825fa0 RCX: 00007fc4d259de99 [ 342.299408][ T8678] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 342.307412][ T8678] RBP: 00007fc4d34bd090 R08: 0000000000000000 R09: 0000000000000000 [ 342.315413][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.323416][ T8678] R13: 00007fc4d2826038 R14: 00007fc4d2825fa0 R15: 00007fff4a1bff48 [ 342.331440][ T8678] [ 342.346308][ T8680] FAULT_INJECTION: forcing a failure. [ 342.346308][ T8680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.404681][ T8680] CPU: 1 PID: 8680 Comm: syz.4.1446 Not tainted syzkaller #0 [ 342.412145][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.422254][ T8680] Call Trace: [ 342.425572][ T8680] [ 342.428540][ T8680] dump_stack_lvl+0x188/0x24e [ 342.433274][ T8680] ? show_regs_print_info+0x12/0x12 [ 342.438529][ T8680] ? load_image+0x410/0x410 [ 342.443087][ T8680] ? __lock_acquire+0x7c40/0x7c40 [ 342.448171][ T8680] ? snprintf+0xe5/0x140 [ 342.452460][ T8680] should_fail_ex+0x390/0x4c0 [ 342.457300][ T8680] _copy_to_user+0x2c/0x130 [ 342.461857][ T8680] simple_read_from_buffer+0xe3/0x150 [ 342.467287][ T8680] proc_fail_nth_read+0x1a6/0x220 [ 342.472397][ T8680] ? proc_fault_inject_write+0x310/0x310 [ 342.478104][ T8680] ? fsnotify_perm+0x248/0x550 [ 342.482919][ T8680] ? proc_fault_inject_write+0x310/0x310 [ 342.488604][ T8680] vfs_read+0x2db/0x960 [ 342.492821][ T8680] ? kernel_read+0x1e0/0x1e0 [ 342.497494][ T8680] ? __fget_files+0x28/0x460 [ 342.502138][ T8680] ? __fget_files+0x3fc/0x460 [ 342.506866][ T8680] ? __fdget_pos+0x2ae/0x360 [ 342.511504][ T8680] ? ksys_read+0x70/0x260 [ 342.515886][ T8680] ksys_read+0x14d/0x260 [ 342.520531][ T8680] ? vfs_write+0x9a0/0x9a0 [ 342.525006][ T8680] ? lockdep_hardirqs_on+0x94/0x140 [ 342.530258][ T8680] do_syscall_64+0x4c/0xa0 [ 342.534730][ T8680] ? clear_bhb_loop+0x60/0xb0 [ 342.539469][ T8680] ? clear_bhb_loop+0x60/0xb0 [ 342.544203][ T8680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.550142][ T8680] RIP: 0033:0x7ff533f5e6ce [ 342.554600][ T8680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 342.574258][ T8680] RSP: 002b:00007ff534f48fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.582727][ T8680] RAX: ffffffffffffffda RBX: 00007ff534f496c0 RCX: 00007ff533f5e6ce [ 342.590745][ T8680] RDX: 000000000000000f RSI: 00007ff534f490a0 RDI: 0000000000000009 [ 342.598760][ T8680] RBP: 00007ff534f49090 R08: 0000000000000000 R09: 0000000000000000 [ 342.606785][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.614793][ T8680] R13: 00007ff534226038 R14: 00007ff534225fa0 R15: 00007ffcba0ed408 [ 342.622828][ T8680] [ 345.462718][ T8739] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 345.475444][ T8739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.774140][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1467'. [ 346.147240][ T8758] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 346.184350][ T8758] device geneve0 entered promiscuous mode [ 346.243889][ T8758] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 347.574782][ T8788] device syzkaller0 entered promiscuous mode [ 347.612282][ T8789] netlink: 'syz.3.1481': attribute type 21 has an invalid length. [ 347.727389][ T8789] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1481'. [ 347.773346][ T8800] netlink: 'syz.0.1485': attribute type 41 has an invalid length. [ 350.847836][ T8800] netlink: 'syz.0.1485': attribute type 41 has an invalid length. [ 350.861413][ T8802] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 350.884611][ T8802] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1485'. [ 350.902028][ T8832] netlink: 'syz.4.1496': attribute type 6 has an invalid length. [ 350.914567][ T8832] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1496'. [ 351.461227][ T8845] device syzkaller0 entered promiscuous mode [ 352.629650][ T8857] netlink: 'syz.3.1505': attribute type 10 has an invalid length. [ 352.930315][ T8859] FAULT_INJECTION: forcing a failure. [ 352.930315][ T8859] name failslab, interval 1, probability 0, space 0, times 0 [ 352.984214][ T8859] CPU: 1 PID: 8859 Comm: syz.1.1506 Not tainted syzkaller #0 [ 352.991683][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 353.001796][ T8859] Call Trace: [ 353.005118][ T8859] [ 353.008090][ T8859] dump_stack_lvl+0x188/0x24e [ 353.012873][ T8859] ? show_regs_print_info+0x12/0x12 [ 353.018136][ T8859] ? load_image+0x410/0x410 [ 353.022691][ T8859] ? __might_sleep+0xd0/0xd0 [ 353.027326][ T8859] ? __lock_acquire+0x7c40/0x7c40 [ 353.032418][ T8859] should_fail_ex+0x390/0x4c0 [ 353.037160][ T8859] should_failslab+0x5/0x20 [ 353.041709][ T8859] slab_pre_alloc_hook+0x59/0x300 [ 353.046795][ T8859] kmem_cache_alloc_node+0x5a/0x310 [ 353.052043][ T8859] ? __alloc_skb+0xf9/0x7d0 [ 353.056610][ T8859] __alloc_skb+0xf9/0x7d0 [ 353.060994][ T8859] alloc_skb_with_frags+0xa7/0x710 [ 353.066158][ T8859] ? __lock_acquire+0x138a/0x7c40 [ 353.071253][ T8859] sock_alloc_send_pskb+0x87f/0x9a0 [ 353.076567][ T8859] ? sock_kzfree_s+0x50/0x50 [ 353.081210][ T8859] ? fib4_rule_action+0x8b/0x330 [ 353.086295][ T8859] ? fib4_rule_action+0x8b/0x330 [ 353.091303][ T8859] __ip_append_data+0x260a/0x38d0 [ 353.096405][ T8859] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 353.101312][ T8859] ? ip_route_output_key_hash+0x139/0x330 [ 353.107082][ T8859] ? ip_setup_cork+0x850/0x850 [ 353.111910][ T8859] ? ip_setup_cork+0x528/0x850 [ 353.116733][ T8859] ip_make_skb+0x227/0x440 [ 353.121210][ T8859] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 353.126126][ T8859] ? ip_flush_pending_frames+0x250/0x250 [ 353.131816][ T8859] ? aa_label_sk_perm+0x4b9/0x660 [ 353.135543][ T8873] netlink: 'syz.0.1510': attribute type 2 has an invalid length. [ 353.136870][ T8859] ? __lock_acquire+0x7c40/0x7c40 [ 353.149683][ T8859] udp_sendmsg+0x1b04/0x23d0 [ 353.154337][ T8859] ? nohz_csd_func+0x340/0x360 [ 353.159144][ T8859] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 353.164044][ T8859] ? udp_cmsg_send+0x350/0x350 [ 353.168860][ T8859] ? __lock_acquire+0x138a/0x7c40 [ 353.173930][ T8859] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 353.180382][ T8859] ? sock_rps_record_flow+0x19/0x3f0 [ 353.185700][ T8859] ? inet_sendmsg+0x7a/0x2a0 [ 353.190324][ T8859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 353.195645][ T8859] ? inet_send_prepare+0x250/0x250 [ 353.200786][ T8859] kernel_sendmsg+0x246/0x370 [ 353.205504][ T8859] ? sock_sendmsg+0x350/0x350 [ 353.210263][ T8859] rxrpc_send_abort_packet+0x41c/0x710 [ 353.215782][ T8859] ? trace_rxrpc_tx_packet+0x250/0x250 [ 353.221303][ T8859] ? rxrpc_abort_call+0x49/0x60 [ 353.226193][ T8859] ? _local_bh_enable+0xa0/0xa0 [ 353.231076][ T8859] ? rxrpc_abort_call+0x49/0x60 [ 353.235963][ T8859] ? rxrpc_abort_call+0x49/0x60 [ 353.240848][ T8859] rxrpc_release_calls_on_socket+0x274/0x320 [ 353.246870][ T8859] rxrpc_release+0x265/0x430 [ 353.251498][ T8859] sock_close+0xbf/0x210 [ 353.255795][ T8859] ? sock_mmap+0x90/0x90 [ 353.260065][ T8859] __fput+0x20a/0x8b0 [ 353.264077][ T8859] task_work_run+0x1d0/0x260 [ 353.268705][ T8859] ? task_work_cancel+0x220/0x220 [ 353.273768][ T8859] get_signal+0x118d/0x1340 [ 353.278325][ T8859] arch_do_signal_or_restart+0xc4/0x1310 [ 353.283986][ T8859] ? kick_process+0xd4/0x140 [ 353.288648][ T8859] ? task_work_add+0x2cb/0x330 [ 353.293445][ T8859] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 353.298869][ T8859] ? get_sigframe_size+0x10/0x10 [ 353.303837][ T8859] ? fput+0x157/0x1a0 [ 353.307858][ T8859] ? exit_to_user_mode_loop+0x3b/0x110 [ 353.313357][ T8859] exit_to_user_mode_loop+0x70/0x110 [ 353.318682][ T8859] exit_to_user_mode_prepare+0xee/0x180 [ 353.324264][ T8859] syscall_exit_to_user_mode+0x16/0x40 [ 353.329748][ T8859] do_syscall_64+0x58/0xa0 [ 353.334197][ T8859] ? clear_bhb_loop+0x60/0xb0 [ 353.338908][ T8859] ? clear_bhb_loop+0x60/0xb0 [ 353.343614][ T8859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.349537][ T8859] RIP: 0033:0x7f0429f9de99 [ 353.353983][ T8859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.373710][ T8859] RSP: 002b:00007f042ae87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 353.382153][ T8859] RAX: fffffffffffffe00 RBX: 00007f042a225fa0 RCX: 00007f0429f9de99 [ 353.390155][ T8859] RDX: 0000000000010000 RSI: 0000200000003fc0 RDI: 0000000000000003 [ 353.398185][ T8859] RBP: 00007f042ae87090 R08: 0000000000000000 R09: 0000000000000000 [ 353.406181][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.414177][ T8859] R13: 00007f042a226038 R14: 00007f042a225fa0 R15: 00007fffa342af78 [ 353.422191][ T8859] [ 353.454673][ T8873] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1510'. [ 354.005694][ T8881] netlink: 'syz.0.1510': attribute type 10 has an invalid length. [ 354.030625][ T8881] team0: Port device bridge_slave_1 added [ 354.322440][ T8896] netlink: 'syz.3.1518': attribute type 41 has an invalid length. [ 354.365362][ T8896] netlink: 'syz.3.1518': attribute type 41 has an invalid length. [ 354.455292][ T8896] netlink: 'syz.3.1518': attribute type 10 has an invalid length. [ 354.520721][ T8896] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1518'. [ 354.580490][ T8903] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1520'. [ 355.767449][ T8931] netlink: 'syz.3.1531': attribute type 6 has an invalid length. [ 355.808396][ T8931] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1531'. [ 356.041584][ T8939] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.1533'. [ 359.931216][ T9005] netlink: 'syz.1.1557': attribute type 39 has an invalid length. [ 360.031501][ T9008] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1560'. [ 360.548881][ T9028] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 360.613395][ T9028] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1567'. [ 364.112063][ T9061] netlink: 'syz.4.1579': attribute type 13 has an invalid length. [ 364.132697][ T9061] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.1579'. [ 364.181233][ T9059] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1578'. [ 365.823893][ T9100] netlink: 'syz.1.1592': attribute type 2 has an invalid length. [ 365.845010][ T9100] netlink: 'syz.1.1592': attribute type 8 has an invalid length. [ 365.852838][ T9100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1592'. [ 366.173877][ T9109] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1596'. [ 366.202991][ T9100] can: request_module (can-proto-0) failed. [ 367.216556][ T9125] netlink: 'syz.3.1602': attribute type 10 has an invalid length. [ 367.903616][ T9151] netlink: 'syz.3.1609': attribute type 21 has an invalid length. [ 367.944020][ T9148] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1608'. [ 368.848232][ T9165] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.1613'. [ 370.574866][ T9197] netlink: 'syz.1.1624': attribute type 39 has an invalid length. [ 372.145203][ T30] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 373.885054][ T9265] netlink: 'syz.3.1644': attribute type 2 has an invalid length. [ 373.908902][ T9265] netlink: 'syz.3.1644': attribute type 8 has an invalid length. [ 373.932777][ T9265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1644'. [ 374.122788][ T9277] netlink: 'syz.0.1648': attribute type 33 has an invalid length. [ 374.195834][ T9277] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1648'. [ 374.477937][ T9284] can: request_module (can-proto-0) failed. [ 374.890223][ T9294] netlink: 'syz.0.1652': attribute type 29 has an invalid length. [ 374.914690][ T9294] netlink: 'syz.0.1652': attribute type 29 has an invalid length. [ 376.700838][ T9330] can: request_module (can-proto-0) failed. [ 377.029878][ T9338] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 377.365956][ T9338] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.397015][ T9338] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.475592][ T9338] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.507910][ T9338] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.073284][ T9338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.138060][ T9338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.170684][ T9338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.189966][ T9338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.220388][ T9338] team0: Port device geneve1 added [ 378.546504][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.552913][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.134557][ T9404] IPv6: pim6reg1: Disabled Multicast RS [ 380.806548][ T9417] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1691'. [ 381.562668][ T9437] netlink: 'syz.0.1700': attribute type 21 has an invalid length. [ 382.282757][ T9456] netlink: 'syz.3.1707': attribute type 29 has an invalid length. [ 382.621082][ T9456] netlink: 'syz.3.1707': attribute type 29 has an invalid length. [ 383.948648][ T9486] netlink: 'syz.0.1715': attribute type 21 has an invalid length. [ 383.999598][ T9490] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1717'. [ 384.241080][ T9501] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1722'. [ 384.270402][ T9501] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 384.283896][ T9501] CPU: 1 PID: 9501 Comm: syz.2.1722 Not tainted syzkaller #0 [ 384.291359][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 384.301561][ T9501] Call Trace: [ 384.304918][ T9501] [ 384.307895][ T9501] dump_stack_lvl+0x188/0x24e [ 384.312642][ T9501] ? show_regs_print_info+0x12/0x12 [ 384.317910][ T9501] ? load_image+0x410/0x410 [ 384.322482][ T9501] sysfs_warn_dup+0x8a/0xa0 [ 384.327050][ T9501] sysfs_do_create_link_sd+0xc0/0x110 [ 384.332487][ T9501] device_add+0x83b/0x1050 [ 384.336968][ T9501] wiphy_register+0x1d8b/0x2aa0 [ 384.341917][ T9501] ? cfg80211_event_work+0x40/0x40 [ 384.347133][ T9501] ? minstrel_ht_alloc+0x894/0xa20 [ 384.352322][ T9501] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 384.358457][ T9501] ieee80211_register_hw+0x2d48/0x39f0 [ 384.364002][ T9501] ? ieee80211_register_hw+0xf41/0x39f0 [ 384.369620][ T9501] ? ieee80211_register_hw+0xf41/0x39f0 [ 384.375260][ T9501] ? ieee80211_tasklet_handler+0x20/0x20 [ 384.380978][ T9501] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 384.386987][ T9501] ? __debug_object_init+0xed/0x440 [ 384.392281][ T9501] ? memset+0x1e/0x40 [ 384.396330][ T9501] ? __hrtimer_init+0x189/0x270 [ 384.401262][ T9501] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 384.407078][ T9501] ? memcpy+0x3c/0x60 [ 384.411137][ T9501] hwsim_new_radio_nl+0xab7/0xc90 [ 384.416255][ T9501] genl_family_rcv_msg_doit+0x22f/0x350 [ 384.421871][ T9501] ? end_current_label_crit_section+0x170/0x170 [ 384.428194][ T9501] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 384.434163][ T9501] ? bpf_lsm_capable+0x5/0x10 [ 384.438915][ T9501] ? security_capable+0x85/0xb0 [ 384.443856][ T9501] genl_rcv_msg+0x601/0x790 [ 384.448426][ T9501] ? lock_chain_count+0x20/0x20 [ 384.453360][ T9501] ? genl_bind+0x360/0x360 [ 384.457873][ T9501] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 384.464295][ T9501] netlink_rcv_skb+0x1ef/0x440 [ 384.469143][ T9501] ? genl_bind+0x360/0x360 [ 384.473626][ T9501] ? netlink_ack+0x1160/0x1160 [ 384.478498][ T9501] ? down_read+0x1a8/0x2d0 [ 384.482979][ T9501] genl_rcv+0x24/0x40 [ 384.487021][ T9501] netlink_unicast+0x7ad/0x920 [ 384.491877][ T9501] netlink_sendmsg+0x8ad/0xbd0 [ 384.496738][ T9501] ? netlink_getsockopt+0x550/0x550 [ 384.502015][ T9501] ? apparmor_socket_sendmsg+0x8a/0x330 [ 384.507637][ T9501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 384.512987][ T9501] ? security_socket_sendmsg+0x7c/0xa0 [ 384.518514][ T9501] ? netlink_getsockopt+0x550/0x550 [ 384.523789][ T9501] ____sys_sendmsg+0x5ed/0x9a0 [ 384.528643][ T9501] ? __sys_sendmsg_sock+0x30/0x30 [ 384.533759][ T9501] ? __import_iovec+0x306/0x510 [ 384.538707][ T9501] ? import_iovec+0x6f/0xa0 [ 384.543285][ T9501] ___sys_sendmsg+0x2a2/0x360 [ 384.548026][ T9501] ? __sys_sendmsg+0x2a0/0x2a0 [ 384.552894][ T9501] __se_sys_sendmsg+0x1c3/0x2b0 [ 384.557796][ T9501] ? __x64_sys_sendmsg+0x80/0x80 [ 384.562845][ T9501] ? lockdep_hardirqs_on+0x94/0x140 [ 384.568095][ T9501] do_syscall_64+0x4c/0xa0 [ 384.572593][ T9501] ? clear_bhb_loop+0x60/0xb0 [ 384.577334][ T9501] ? clear_bhb_loop+0x60/0xb0 [ 384.582060][ T9501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.587999][ T9501] RIP: 0033:0x7f90b1b9de99 [ 384.592457][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.612114][ T9501] RSP: 002b:00007f90b29d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.620576][ T9501] RAX: ffffffffffffffda RBX: 00007f90b1e25fa0 RCX: 00007f90b1b9de99 [ 384.628590][ T9501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 384.636600][ T9501] RBP: 00007f90b1c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 384.644610][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.652617][ T9501] R13: 00007f90b1e26038 R14: 00007f90b1e25fa0 R15: 00007fff22a4fe08 [ 384.660649][ T9501] [ 386.810465][ T9566] netlink: 'syz.1.1741': attribute type 10 has an invalid length. [ 388.138421][ T9601] netlink: 'syz.4.1753': attribute type 10 has an invalid length. [ 391.307946][ T9681] netlink: 'syz.4.1779': attribute type 39 has an invalid length. [ 391.964092][ T9686] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1781'. [ 392.369885][ T9697] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 392.424722][ T9697] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1785'. [ 396.068314][ T9749] netlink: 'syz.3.1800': attribute type 10 has an invalid length. [ 399.664980][ T9838] netlink: 'syz.2.1832': attribute type 10 has an invalid length. [ 400.783868][ T9867] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1839'. [ 401.168974][ T9874] netlink: 'syz.1.1841': attribute type 21 has an invalid length. [ 401.303422][ T9875] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1841'. [ 402.416417][ T9883] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 404.167094][ T30] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.355581][ T9905] netlink: 'syz.2.1851': attribute type 10 has an invalid length. [ 407.284096][ T9968] netlink: 'syz.1.1873': attribute type 3 has an invalid length. [ 407.301471][ T9968] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1873'. [ 407.898744][ T9985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1878'. [ 409.364902][T10010] netlink: 'syz.2.1885': attribute type 29 has an invalid length. [ 409.485612][T10010] netlink: 'syz.2.1885': attribute type 29 has an invalid length. [ 413.994530][T10055] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1900'. [ 416.188537][T10111] netlink: 'syz.4.1920': attribute type 21 has an invalid length. [ 417.450139][T10145] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1932'. [ 417.494670][T10145] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 418.088812][T10156] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1935'. [ 419.959648][T10199] netlink: 'syz.3.1951': attribute type 29 has an invalid length. [ 420.009182][T10199] netlink: 'syz.3.1951': attribute type 29 has an invalid length. [ 420.189506][T10208] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 420.610745][T10230] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 420.620306][T10230] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 420.630259][T10230] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 420.655301][T10230] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 420.705157][T10230] netlink: 'syz.4.1960': attribute type 29 has an invalid length. [ 420.736992][T10230] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1960'. [ 426.099928][T10325] netlink: 'syz.0.1994': attribute type 39 has an invalid length. [ 426.219746][T10327] netlink: 'syz.3.1995': attribute type 1 has an invalid length. [ 426.234631][T10327] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1995'. [ 426.784801][T10323] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1993'. [ 427.124172][T10331] sctp: [Deprecated]: syz.4.1997 (pid 10331) Use of int in maxseg socket option. [ 427.124172][T10331] Use struct sctp_assoc_value instead [ 434.165500][T10480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 434.573272][T10483] netlink: 'syz.0.2047': attribute type 10 has an invalid length. [ 435.701964][T10483] team0 (unregistering): Port device team_slave_0 removed [ 435.766035][T10483] team0 (unregistering): Port device team_slave_1 removed [ 435.858112][T10483] team0 (unregistering): Port device bridge_slave_1 removed [ 436.005144][T10495] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2051'. [ 436.146772][ T4320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 436.614957][T10514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2058'. [ 436.886489][T10514] device syzkaller0 entered promiscuous mode [ 436.908408][T10521] netlink: 'syz.1.2059': attribute type 21 has an invalid length. [ 439.986471][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.992897][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.089945][T10588] netlink: 'syz.2.2077': attribute type 10 has an invalid length. [ 443.142593][T10588] team0: Device hsr_slave_0 failed to register rx_handler [ 443.347622][T10599] netlink: 'syz.1.2079': attribute type 3 has an invalid length. [ 443.389111][T10599] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2079'. [ 443.460454][T10595] netlink: 'syz.0.2080': attribute type 10 has an invalid length. [ 443.476436][T10595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.615323][T10595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.953558][T10609] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2084'. [ 444.091582][T10612] Ÿë: port 1(gretap0) entered blocking state [ 444.141652][T10612] Ÿë: port 1(gretap0) entered disabled state [ 444.162262][T10612] device gretap0 entered promiscuous mode [ 444.227772][T10615] Ÿë: port 2(veth0_to_team) entered blocking state [ 444.248013][T10615] Ÿë: port 2(veth0_to_team) entered disabled state [ 444.271167][T10615] device veth0_to_team entered promiscuous mode [ 446.174849][T10654] netlink: 'syz.4.2095': attribute type 10 has an invalid length. [ 449.179299][T10700] netlink: 'syz.2.2108': attribute type 21 has an invalid length. [ 449.273996][T10700] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2108'. [ 449.353649][T10702] netlink: 'syz.3.2109': attribute type 10 has an invalid length. [ 449.394516][T10702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.590022][T10702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.460454][T10734] netlink: 'syz.2.2120': attribute type 21 has an invalid length. [ 453.057463][T10742] device syzkaller0 entered promiscuous mode [ 453.114737][T10749] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.2127'. [ 457.490378][T10791] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2141'. [ 457.519952][T10791] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 458.189404][T10814] netlink: 'syz.3.2146': attribute type 1 has an invalid length. [ 459.696347][T10836] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2155'. [ 460.424607][T10860] netlink: 'syz.4.2163': attribute type 21 has an invalid length. [ 463.510211][T10908] netlink: 'syz.4.2178': attribute type 1 has an invalid length. [ 463.520793][T10908] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2178'. [ 463.720410][T10915] netlink: 'syz.4.2181': attribute type 29 has an invalid length. [ 463.734133][T10915] netlink: 'syz.4.2181': attribute type 29 has an invalid length. [ 463.752469][T10918] netlink: 'syz.4.2181': attribute type 29 has an invalid length. [ 463.786125][T10915] netlink: 'syz.4.2181': attribute type 29 has an invalid length. [ 463.845203][T10918] netlink: 'syz.4.2181': attribute type 29 has an invalid length. [ 463.864786][T10918] netlink: 'syz.4.2181': attribute type 29 has an invalid length. [ 467.606910][T10990] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2209'. [ 468.100224][T11008] Dead loop on virtual device ip6_vti0, fix it urgently! [ 468.152871][ T4320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.978947][T11036] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 470.322839][T11041] netlink: 'syz.4.2220': attribute type 5 has an invalid length. [ 470.332733][T11041] netlink: 'syz.4.2220': attribute type 30 has an invalid length. [ 470.404204][T11041] netlink: 'syz.4.2220': attribute type 2 has an invalid length. [ 470.484393][T11041] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2220'. [ 470.869257][T11044] netlink: 'syz.4.2220': attribute type 10 has an invalid length. [ 470.958607][T11044] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.985391][T11044] team0: Port device bridge_slave_1 added [ 471.497029][T11072] netlink: 'syz.3.2229': attribute type 29 has an invalid length. [ 471.622849][T11072] netlink: 'syz.3.2229': attribute type 29 has an invalid length. [ 471.705401][T11080] netlink: 'syz.3.2229': attribute type 29 has an invalid length. [ 471.748321][T11077] netlink: 'syz.3.2229': attribute type 29 has an invalid length. [ 471.837929][T11079] netlink: 'syz.3.2229': attribute type 29 has an invalid length. [ 472.758826][ T4279] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 473.478600][T11121] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2242'. [ 473.509121][T11121] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 473.558968][T11121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.089956][T11141] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2251'. [ 476.302431][T11164] device syzkaller0 entered promiscuous mode [ 479.265528][T11218] validate_nla: 9 callbacks suppressed [ 479.265612][T11218] netlink: 'syz.2.2273': attribute type 29 has an invalid length. [ 479.321634][T11218] netlink: 'syz.2.2273': attribute type 29 has an invalid length. [ 479.363694][T11223] netlink: 'syz.2.2273': attribute type 29 has an invalid length. [ 479.444054][T11227] netlink: 'syz.2.2273': attribute type 29 has an invalid length. [ 480.176118][T11235] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2279'. [ 480.796800][T11242] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2281'. [ 482.973005][T11288] netlink: 'syz.4.2295': attribute type 10 has an invalid length. [ 483.319825][T11295] netlink: 'syz.1.2299': attribute type 10 has an invalid length. [ 483.437851][T11302] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2297'. [ 483.444832][T11295] netlink: 'syz.1.2299': attribute type 19 has an invalid length. [ 483.464915][T11295] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.2299'. [ 483.740705][T11309] netlink: 'syz.3.2297': attribute type 10 has an invalid length. [ 485.931611][T11345] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2311'. [ 488.079616][T11399] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2326'. [ 488.143896][T11399] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 488.667851][T11415] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 491.451011][T11448] device sit0 entered promiscuous mode [ 493.222818][T11497] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 493.244593][T11497] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2356'. [ 495.549349][T11541] netlink: 'syz.3.2370': attribute type 3 has an invalid length. [ 495.755116][T11541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2370'. [ 495.818375][T11548] netlink: 'syz.3.2370': attribute type 3 has an invalid length. [ 495.899759][T11548] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2370'. [ 498.825694][T11606] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2391'. [ 500.146883][ T4320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.604109][T11642] netlink: 'syz.2.2399': attribute type 39 has an invalid length. [ 500.959458][T11655] netlink: 'syz.0.2400': attribute type 3 has an invalid length. [ 501.065720][T11655] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2400'. [ 501.142687][T11665] netlink: 'syz.0.2400': attribute type 3 has an invalid length. [ 501.163412][T11665] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2400'. [ 501.948261][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.955002][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.074222][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2407'. [ 502.395189][T11684] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.2410'. [ 502.408521][T11686] netlink: 'syz.2.2411': attribute type 21 has an invalid length. [ 504.942391][T11734] netlink: 'syz.4.2424': attribute type 3 has an invalid length. [ 505.062151][T11734] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2424'. [ 505.171325][T11736] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2426'. [ 505.338500][T11734] netlink: 'syz.4.2424': attribute type 3 has an invalid length. [ 505.536829][T11734] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2424'. [ 507.342766][T11781] device syzkaller0 entered promiscuous mode [ 507.584647][T11791] : port 1(ip6gretap0) entered blocking state [ 507.604763][T11791] : port 1(ip6gretap0) entered disabled state [ 507.612559][T11791] device ip6gretap0 entered promiscuous mode [ 507.664110][T11796] netlink: 'syz.4.2443': attribute type 21 has an invalid length. [ 511.057614][T11825] netlink: 'syz.2.2451': attribute type 9 has an invalid length. [ 511.104432][T11825] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2451'. [ 511.721943][T11849] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2460'. [ 512.039250][T11862] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2464'. [ 512.339153][T11869] netlink: 'syz.3.2466': attribute type 21 has an invalid length. [ 513.185415][T11890] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2475'. [ 513.207814][T11890] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 513.217366][T11890] CPU: 1 PID: 11890 Comm: syz.2.2475 Not tainted syzkaller #0 [ 513.224895][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 513.235020][T11890] Call Trace: [ 513.238406][T11890] [ 513.241461][T11890] dump_stack_lvl+0x188/0x24e [ 513.246370][T11890] ? show_regs_print_info+0x12/0x12 [ 513.251630][T11890] ? load_image+0x410/0x410 [ 513.256248][T11890] sysfs_warn_dup+0x8a/0xa0 [ 513.260829][T11890] sysfs_do_create_link_sd+0xc0/0x110 [ 513.266268][T11890] device_add+0x83b/0x1050 [ 513.270831][T11890] wiphy_register+0x1d8b/0x2aa0 [ 513.275835][T11890] ? cfg80211_event_work+0x40/0x40 [ 513.281006][T11890] ? minstrel_ht_alloc+0x894/0xa20 [ 513.286314][T11890] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 513.292488][T11890] ieee80211_register_hw+0x2d48/0x39f0 [ 513.298093][T11890] ? ieee80211_register_hw+0xf41/0x39f0 [ 513.303704][T11890] ? ieee80211_register_hw+0xf41/0x39f0 [ 513.309316][T11890] ? ieee80211_tasklet_handler+0x20/0x20 [ 513.315036][T11890] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 513.321049][T11890] ? __debug_object_init+0xed/0x440 [ 513.326392][T11890] ? memset+0x1e/0x40 [ 513.330472][T11890] ? __hrtimer_init+0x189/0x270 [ 513.335450][T11890] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 513.341310][T11890] ? memcpy+0x3c/0x60 [ 513.345346][T11890] hwsim_new_radio_nl+0xab7/0xc90 [ 513.350486][T11890] genl_family_rcv_msg_doit+0x22f/0x350 [ 513.356173][T11890] ? end_current_label_crit_section+0x170/0x170 [ 513.362554][T11890] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 513.368539][T11890] ? bpf_lsm_capable+0x5/0x10 [ 513.373369][T11890] ? security_capable+0x85/0xb0 [ 513.378356][T11890] genl_rcv_msg+0x601/0x790 [ 513.383022][T11890] ? lock_chain_count+0x20/0x20 [ 513.387970][T11890] ? genl_bind+0x360/0x360 [ 513.392436][T11890] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 513.398841][T11890] netlink_rcv_skb+0x1ef/0x440 [ 513.403726][T11890] ? genl_bind+0x360/0x360 [ 513.408205][T11890] ? netlink_ack+0x1160/0x1160 [ 513.413050][T11890] ? down_read+0x1a8/0x2d0 [ 513.417524][T11890] genl_rcv+0x24/0x40 [ 513.421594][T11890] netlink_unicast+0x7ad/0x920 [ 513.426441][T11890] netlink_sendmsg+0x8ad/0xbd0 [ 513.431278][T11890] ? netlink_getsockopt+0x550/0x550 [ 513.436540][T11890] ? apparmor_socket_sendmsg+0x8a/0x330 [ 513.442154][T11890] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 513.447487][T11890] ? security_socket_sendmsg+0x7c/0xa0 [ 513.453057][T11890] ? netlink_getsockopt+0x550/0x550 [ 513.458318][T11890] ____sys_sendmsg+0x5ed/0x9a0 [ 513.463228][T11890] ? __sys_sendmsg_sock+0x30/0x30 [ 513.468317][T11890] ? __import_iovec+0x306/0x510 [ 513.473303][T11890] ? import_iovec+0x6f/0xa0 [ 513.477873][T11890] ___sys_sendmsg+0x2a2/0x360 [ 513.482625][T11890] ? __sys_sendmsg+0x2a0/0x2a0 [ 513.487550][T11890] __se_sys_sendmsg+0x1c3/0x2b0 [ 513.492471][T11890] ? __x64_sys_sendmsg+0x80/0x80 [ 513.497492][T11890] ? lockdep_hardirqs_on+0x94/0x140 [ 513.502741][T11890] do_syscall_64+0x4c/0xa0 [ 513.507209][T11890] ? clear_bhb_loop+0x60/0xb0 [ 513.512103][T11890] ? clear_bhb_loop+0x60/0xb0 [ 513.516867][T11890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.522813][T11890] RIP: 0033:0x7f90b1b9de99 [ 513.527337][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.547039][T11890] RSP: 002b:00007f90b29d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.555599][T11890] RAX: ffffffffffffffda RBX: 00007f90b1e25fa0 RCX: 00007f90b1b9de99 [ 513.563621][T11890] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 513.571635][T11890] RBP: 00007f90b1c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 513.579647][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.587656][T11890] R13: 00007f90b1e26038 R14: 00007f90b1e25fa0 R15: 00007fff22a4fe08 [ 513.595705][T11890] [ 514.138804][T11905] : port 1(ip6gretap0) entered blocking state [ 514.205500][T11905] : port 1(ip6gretap0) entered disabled state [ 514.283325][T11905] device ip6gretap0 entered promiscuous mode [ 514.911843][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2488'. [ 517.479316][T11980] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2510'. [ 517.914387][T11977] can: request_module (can-proto-0) failed. [ 518.251386][T12001] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 518.444514][T12001] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2514'. [ 520.887904][T12047] FAULT_INJECTION: forcing a failure. [ 520.887904][T12047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.934595][T12047] CPU: 1 PID: 12047 Comm: syz.4.2529 Not tainted syzkaller #0 [ 520.942163][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 520.952260][T12047] Call Trace: [ 520.955581][T12047] [ 520.958555][T12047] dump_stack_lvl+0x188/0x24e [ 520.963299][T12047] ? show_regs_print_info+0x12/0x12 [ 520.968553][T12047] ? load_image+0x410/0x410 [ 520.973146][T12047] ? __lock_acquire+0x7c40/0x7c40 [ 520.978240][T12047] should_fail_ex+0x390/0x4c0 [ 520.983085][T12047] _copy_from_user+0x2c/0x170 [ 520.987832][T12047] ___sys_sendmsg+0x1c3/0x360 [ 520.992594][T12047] ? __sys_sendmsg+0x2a0/0x2a0 [ 520.997477][T12047] ? __lock_acquire+0x7c40/0x7c40 [ 521.002622][T12047] __se_sys_sendmsg+0x1c3/0x2b0 [ 521.007545][T12047] ? __x64_sys_sendmsg+0x80/0x80 [ 521.012576][T12047] ? lockdep_hardirqs_on+0x94/0x140 [ 521.017831][T12047] do_syscall_64+0x4c/0xa0 [ 521.022299][T12047] ? clear_bhb_loop+0x60/0xb0 [ 521.027022][T12047] ? clear_bhb_loop+0x60/0xb0 [ 521.031751][T12047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.037696][T12047] RIP: 0033:0x7ff533f9de99 [ 521.042155][T12047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.061819][T12047] RSP: 002b:00007ff534f49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.070291][T12047] RAX: ffffffffffffffda RBX: 00007ff534225fa0 RCX: 00007ff533f9de99 [ 521.078302][T12047] RDX: 0000000000008014 RSI: 0000200000000080 RDI: 0000000000000006 [ 521.086344][T12047] RBP: 00007ff534f49090 R08: 0000000000000000 R09: 0000000000000000 [ 521.094363][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.102384][T12047] R13: 00007ff534226038 R14: 00007ff534225fa0 R15: 00007ffcba0ed408 [ 521.110445][T12047] [ 521.570107][T12057] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2533'. [ 521.894925][T12067] Dead loop on virtual device ip6_vti0, fix it urgently! [ 523.135365][T12064] delete_channel: no stack [ 523.399920][T12081] FAULT_INJECTION: forcing a failure. [ 523.399920][T12081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.460817][T12081] CPU: 1 PID: 12081 Comm: syz.1.2541 Not tainted syzkaller #0 [ 523.468385][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 523.478492][T12081] Call Trace: [ 523.481806][T12081] [ 523.484774][T12081] dump_stack_lvl+0x188/0x24e [ 523.489508][T12081] ? show_regs_print_info+0x12/0x12 [ 523.494759][T12081] ? load_image+0x410/0x410 [ 523.499317][T12081] ? __lock_acquire+0x7c40/0x7c40 [ 523.504404][T12081] should_fail_ex+0x390/0x4c0 [ 523.509143][T12081] _copy_from_user+0x2c/0x170 [ 523.513867][T12081] __sys_bpf+0x2ea/0x780 [ 523.518242][T12081] ? bpf_link_show_fdinfo+0x380/0x380 [ 523.523694][T12081] ? lock_chain_count+0x20/0x20 [ 523.528610][T12081] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 523.534661][T12081] __x64_sys_bpf+0x78/0x90 [ 523.539232][T12081] do_syscall_64+0x4c/0xa0 [ 523.543699][T12081] ? clear_bhb_loop+0x60/0xb0 [ 523.548429][T12081] ? clear_bhb_loop+0x60/0xb0 [ 523.553163][T12081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.559110][T12081] RIP: 0033:0x7f0429f9de99 [ 523.563572][T12081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.583229][T12081] RSP: 002b:00007f042ae87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.591697][T12081] RAX: ffffffffffffffda RBX: 00007f042a225fa0 RCX: 00007f0429f9de99 [ 523.599718][T12081] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 523.607736][T12081] RBP: 00007f042ae87090 R08: 0000000000000000 R09: 0000000000000000 [ 523.615746][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.623763][T12081] R13: 00007f042a226038 R14: 00007f042a225fa0 R15: 00007fffa342af78 [ 523.631796][T12081] [ 524.307845][T12101] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2549'. [ 524.443094][T12110] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 526.551285][T12110] team0: Port device geneve1 added [ 526.893944][T12131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2558'. [ 526.987229][T12131] device caif0 entered promiscuous mode [ 527.015018][T12131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.062427][T12157] netlink: 'syz.4.2568': attribute type 10 has an invalid length. [ 528.093188][T12161] netlink: 'syz.2.2569': attribute type 2 has an invalid length. [ 528.125136][T12161] netlink: 'syz.2.2569': attribute type 4 has an invalid length. [ 528.133203][T12161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2569'. [ 528.360085][T12168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2573'. [ 528.373660][T12169] netlink: 'syz.1.2572': attribute type 1 has an invalid length. [ 528.411758][T12169] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2572'. [ 528.815246][T12180] netlink: 'syz.1.2578': attribute type 3 has an invalid length. [ 528.861910][T12180] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2578'. [ 529.807270][T12184] netlink: 'syz.0.2580': attribute type 21 has an invalid length. [ 531.872653][T12196] netlink: 'syz.1.2578': attribute type 2 has an invalid length. [ 531.888622][T12196] netlink: 'syz.1.2578': attribute type 8 has an invalid length. [ 531.901195][T12196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2578'. [ 532.152408][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 532.473626][T12207] netlink: 'syz.0.2586': attribute type 10 has an invalid length. [ 533.589347][T12235] netlink: 'syz.2.2596': attribute type 10 has an invalid length. [ 533.642776][T12235] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.680765][T12235] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.690761][T12235] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.701898][T12235] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.826184][T12235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.854237][T12235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.864655][T12235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.873765][T12235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.959070][T12241] netlink: 'syz.3.2598': attribute type 3 has an invalid length. [ 533.982825][T12235] team0: Port device geneve1 added [ 533.998271][T12241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2598'. [ 534.192735][T12243] netlink: 'syz.3.2598': attribute type 2 has an invalid length. [ 534.235506][T12243] netlink: 'syz.3.2598': attribute type 8 has an invalid length. [ 534.263535][T12243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2598'. [ 534.471408][T12250] __sock_release: fasync list not empty! [ 534.661309][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2602'. [ 534.707730][T12256] device caif0 entered promiscuous mode [ 534.721782][T12256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.850870][T12264] netlink: 'syz.4.2607': attribute type 6 has an invalid length. [ 534.869018][T12264] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2607'. [ 535.533928][T12281] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2613'. [ 535.722855][T12285] netlink: 'syz.2.2614': attribute type 3 has an invalid length. [ 535.738352][T12285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2614'. [ 536.439236][T12288] netlink: 'syz.2.2614': attribute type 2 has an invalid length. [ 536.448499][T12281] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 536.458093][T12281] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 536.468630][T12281] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 536.482375][T12288] netlink: 'syz.2.2614': attribute type 8 has an invalid length. [ 536.514522][T12288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2614'. [ 537.611990][T12312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2621'. [ 537.637697][T12312] device caif0 entered promiscuous mode [ 537.671666][T12312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.500947][T12331] netlink: 'syz.1.2628': attribute type 21 has an invalid length. [ 538.810176][T12334] netlink: 'syz.4.2629': attribute type 10 has an invalid length. [ 541.654727][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2637'. [ 541.666247][T12365] device caif0 entered promiscuous mode [ 541.672138][T12365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.458616][T12397] netlink: 'syz.2.2651': attribute type 10 has an invalid length. [ 545.732102][T12397] team0 (unregistering): Port device team_slave_0 removed [ 545.897268][T12397] team0 (unregistering): Port device team_slave_1 removed [ 546.646912][T12397] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.658969][T12397] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.675200][T12397] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.684749][T12397] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.714199][T12397] team0 (unregistering): Port device geneve1 removed [ 547.219249][T12453] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2670'. [ 547.309064][T12456] netlink: 'syz.0.2670': attribute type 20 has an invalid length. [ 547.319652][T12456] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2670'. [ 547.389356][T12459] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2670'. [ 548.146825][T12467] FAULT_INJECTION: forcing a failure. [ 548.146825][T12467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.201538][T12467] CPU: 1 PID: 12467 Comm: syz.2.2674 Not tainted syzkaller #0 [ 548.209117][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 548.219255][T12467] Call Trace: [ 548.222608][T12467] [ 548.225602][T12467] dump_stack_lvl+0x188/0x24e [ 548.230384][T12467] ? show_regs_print_info+0x12/0x12 [ 548.235666][T12467] ? load_image+0x410/0x410 [ 548.240273][T12467] ? __lock_acquire+0x7c40/0x7c40 [ 548.245405][T12467] should_fail_ex+0x390/0x4c0 [ 548.250187][T12467] _copy_from_user+0x2c/0x170 [ 548.254951][T12467] __copy_msghdr+0x384/0x560 [ 548.259644][T12467] ___sys_sendmsg+0x210/0x360 [ 548.264422][T12467] ? __sys_sendmsg+0x2a0/0x2a0 [ 548.269389][T12467] ? __lock_acquire+0x7c40/0x7c40 [ 548.274587][T12467] __se_sys_sendmsg+0x1c3/0x2b0 [ 548.279518][T12467] ? ct_nmi_exit+0x145/0x1c0 [ 548.284203][T12467] ? __x64_sys_sendmsg+0x80/0x80 [ 548.289288][T12467] ? lockdep_hardirqs_on+0x94/0x140 [ 548.294581][T12467] do_syscall_64+0x4c/0xa0 [ 548.299075][T12467] ? clear_bhb_loop+0x60/0xb0 [ 548.303831][T12467] ? clear_bhb_loop+0x60/0xb0 [ 548.308594][T12467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.314574][T12467] RIP: 0033:0x7f90b1b9de99 [ 548.319114][T12467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.339240][T12467] RSP: 002b:00007f90b29d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.347747][T12467] RAX: ffffffffffffffda RBX: 00007f90b1e25fa0 RCX: 00007f90b1b9de99 [ 548.355788][T12467] RDX: 0000000000008014 RSI: 0000200000000080 RDI: 0000000000000006 [ 548.363925][T12467] RBP: 00007f90b29d4090 R08: 0000000000000000 R09: 0000000000000000 [ 548.371978][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.380036][T12467] R13: 00007f90b1e26038 R14: 00007f90b1e25fa0 R15: 00007fff22a4fe08 [ 548.388198][T12467] [ 548.653548][T12470] netlink: 'syz.3.2676': attribute type 10 has an invalid length. [ 549.231625][T12470] team0 (unregistering): Port device team_slave_0 removed [ 549.274610][T12470] team0 (unregistering): Port device team_slave_1 removed [ 549.305942][T12486] Dead loop on virtual device ip6_vti0, fix it urgently! [ 551.581049][T12535] netlink: 'syz.2.2695': attribute type 21 has an invalid length. [ 551.968424][T12549] FAULT_INJECTION: forcing a failure. [ 551.968424][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 552.019707][T12549] CPU: 0 PID: 12549 Comm: syz.0.2700 Not tainted syzkaller #0 [ 552.027281][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 552.037479][T12549] Call Trace: [ 552.040803][T12549] [ 552.043780][T12549] dump_stack_lvl+0x188/0x24e [ 552.048519][T12549] ? show_regs_print_info+0x12/0x12 [ 552.053780][T12549] ? load_image+0x410/0x410 [ 552.058334][T12549] ? __lock_acquire+0x7c40/0x7c40 [ 552.063425][T12549] should_fail_ex+0x390/0x4c0 [ 552.068175][T12549] should_failslab+0x5/0x20 [ 552.072840][T12549] slab_pre_alloc_hook+0x59/0x300 [ 552.077935][T12549] ? verify_lock_unused+0x140/0x140 [ 552.083195][T12549] ? bpf_test_init+0x9f/0x140 [ 552.087929][T12549] __kmem_cache_alloc_node+0x4f/0x270 [ 552.093360][T12549] ? bpf_test_init+0x9f/0x140 [ 552.098100][T12549] __kmalloc+0xa3/0x240 [ 552.102317][T12549] bpf_test_init+0x9f/0x140 [ 552.106876][T12549] bpf_prog_test_run_xdp+0x488/0xf80 [ 552.112217][T12549] ? __lock_acquire+0x7c40/0x7c40 [ 552.117316][T12549] ? dev_put+0x80/0x80 [ 552.121445][T12549] ? dev_put+0x80/0x80 [ 552.125564][T12549] bpf_prog_test_run+0x31c/0x390 [ 552.130562][T12549] __sys_bpf+0x62b/0x780 [ 552.134865][T12549] ? bpf_link_show_fdinfo+0x380/0x380 [ 552.140311][T12549] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 552.146535][T12549] __x64_sys_bpf+0x78/0x90 [ 552.151006][T12549] do_syscall_64+0x4c/0xa0 [ 552.155481][T12549] ? clear_bhb_loop+0x60/0xb0 [ 552.160217][T12549] ? clear_bhb_loop+0x60/0xb0 [ 552.165034][T12549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.170982][T12549] RIP: 0033:0x7fc4d259de99 [ 552.175443][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.195103][T12549] RSP: 002b:00007fc4d34bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.203575][T12549] RAX: ffffffffffffffda RBX: 00007fc4d2825fa0 RCX: 00007fc4d259de99 [ 552.211603][T12549] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 552.219628][T12549] RBP: 00007fc4d34bd090 R08: 0000000000000000 R09: 0000000000000000 [ 552.227652][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.235671][T12549] R13: 00007fc4d2826038 R14: 00007fc4d2825fa0 R15: 00007fff4a1bff48 [ 552.243718][T12549] [ 553.655904][T12594] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2714'. [ 554.292994][T12600] device syzkaller0 entered promiscuous mode [ 558.346299][T12628] netlink: 'syz.1.2723': attribute type 10 has an invalid length. [ 558.354783][T12628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.366064][T12628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.393619][T12638] netlink: 'syz.3.2729': attribute type 39 has an invalid length. [ 558.414904][T12637] netlink: 'syz.0.2728': attribute type 7 has an invalid length. [ 558.652019][T12649] netlink: 'syz.1.2732': attribute type 29 has an invalid length. [ 558.664685][T12649] netlink: 'syz.1.2732': attribute type 29 has an invalid length. [ 559.624257][T12666] netlink: 'syz.4.2737': attribute type 3 has an invalid length. [ 559.634103][T12666] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2737'. [ 561.005837][T12695] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2748'. [ 561.338841][T12701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2750'. [ 562.041143][T12715] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2755'. [ 562.130822][T12713] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2756'. [ 562.917033][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.923503][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.146069][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.633050][T12757] netlink: 'syz.0.2768': attribute type 10 has an invalid length. [ 564.742880][T12764] netlink: 'syz.2.2769': attribute type 2 has an invalid length. [ 564.821925][T12764] netlink: 'syz.2.2769': attribute type 8 has an invalid length. [ 564.869538][T12764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2769'. [ 565.784041][T12781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2776'. [ 567.583032][T12815] netlink: 'syz.2.2784': attribute type 10 has an invalid length. [ 567.916536][T12822] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2788'. [ 568.043460][T12829] netlink: 'syz.1.2789': attribute type 10 has an invalid length. [ 568.084772][T12829] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2789'. [ 568.213460][T12829] device veth0_vlan left promiscuous mode [ 569.906674][T12823] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2788'. [ 571.709533][T12875] netlink: 'syz.4.2801': attribute type 10 has an invalid length. [ 572.162452][T12889] FAULT_INJECTION: forcing a failure. [ 572.162452][T12889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.175980][T12889] CPU: 1 PID: 12889 Comm: syz.2.2808 Not tainted syzkaller #0 [ 572.183544][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 572.193664][T12889] Call Trace: [ 572.196999][T12889] [ 572.199973][T12889] dump_stack_lvl+0x188/0x24e [ 572.204710][T12889] ? show_regs_print_info+0x12/0x12 [ 572.209960][T12889] ? load_image+0x410/0x410 [ 572.214532][T12889] ? __lock_acquire+0x7c40/0x7c40 [ 572.219645][T12889] should_fail_ex+0x390/0x4c0 [ 572.224404][T12889] _copy_from_user+0x2c/0x170 [ 572.229147][T12889] ____sys_sendmsg+0x31a/0x9a0 [ 572.233974][T12889] ? __lock_acquire+0x7c40/0x7c40 [ 572.239066][T12889] ? __sys_sendmsg_sock+0x30/0x30 [ 572.244136][T12889] ? __import_iovec+0x306/0x510 [ 572.249065][T12889] ? import_iovec+0x6f/0xa0 [ 572.253627][T12889] ___sys_sendmsg+0x2a2/0x360 [ 572.258376][T12889] ? __sys_sendmsg+0x2a0/0x2a0 [ 572.263256][T12889] ? __lock_acquire+0x7c40/0x7c40 [ 572.268407][T12889] __se_sys_sendmsg+0x1c3/0x2b0 [ 572.273321][T12889] ? __x64_sys_sendmsg+0x80/0x80 [ 572.278352][T12889] ? lockdep_hardirqs_on+0x94/0x140 [ 572.283602][T12889] do_syscall_64+0x4c/0xa0 [ 572.288071][T12889] ? clear_bhb_loop+0x60/0xb0 [ 572.292816][T12889] ? clear_bhb_loop+0x60/0xb0 [ 572.297549][T12889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.303483][T12889] RIP: 0033:0x7f90b1b9de99 [ 572.307938][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.327583][T12889] RSP: 002b:00007f90b29d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.336060][T12889] RAX: ffffffffffffffda RBX: 00007f90b1e25fa0 RCX: 00007f90b1b9de99 [ 572.344077][T12889] RDX: 0000000000008014 RSI: 0000200000000080 RDI: 0000000000000006 [ 572.352085][T12889] RBP: 00007f90b29d4090 R08: 0000000000000000 R09: 0000000000000000 [ 572.360093][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.368097][T12889] R13: 00007f90b1e26038 R14: 00007f90b1e25fa0 R15: 00007fff22a4fe08 [ 572.376163][T12889] [ 573.058907][T12897] Dead loop on virtual device ip6_vti0, fix it urgently! [ 574.428438][T12907] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2812'. [ 574.439007][T12911] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 574.493584][T12911] netlink: 'syz.3.2816': attribute type 29 has an invalid length. [ 575.649629][T12932] netlink: 'syz.3.2821': attribute type 1 has an invalid length. [ 575.668682][T12932] netlink: 'syz.3.2821': attribute type 4 has an invalid length. [ 575.684775][T12932] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2821'. [ 578.383362][T12968] netlink: 'syz.1.2831': attribute type 13 has an invalid length. [ 578.444996][T12968] netlink: 'syz.1.2831': attribute type 58 has an invalid length. [ 578.516169][T12968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2831'. [ 579.654561][T12987] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2836'. [ 580.301370][T12997] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2840'. [ 580.813730][T13016] netlink: 'syz.2.2846': attribute type 2 has an invalid length. [ 580.861870][T13016] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2846'. [ 582.855997][T13044] netlink: 'syz.3.2856': attribute type 39 has an invalid length. [ 583.015994][T13040] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2854'. [ 583.580020][T13057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2859'. [ 583.667531][T13057] openvswitch: netlink: Message has 6 unknown bytes. [ 583.874889][T13070] netlink: 'syz.4.2866': attribute type 6 has an invalid length. [ 583.883478][T13070] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2866'. [ 584.763099][T13086] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2871'. [ 585.313471][T13092] netlink: 'syz.0.2872': attribute type 9 has an invalid length. [ 585.345571][T13092] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2872'. [ 585.733160][T13095] netlink: 'syz.4.2873': attribute type 3 has an invalid length. [ 585.775092][T13095] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2873'. [ 585.877228][T13092] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2872'. [ 589.341073][T13131] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2883'. [ 590.177121][T13151] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2893'. [ 590.768607][T13164] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2897'. [ 590.816038][T13164] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 590.854378][T13164] CPU: 0 PID: 13164 Comm: syz.3.2897 Not tainted syzkaller #0 [ 590.861925][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 590.872037][T13164] Call Trace: [ 590.875364][T13164] [ 590.878337][T13164] dump_stack_lvl+0x188/0x24e [ 590.883073][T13164] ? show_regs_print_info+0x12/0x12 [ 590.888329][T13164] ? load_image+0x410/0x410 [ 590.892892][T13164] sysfs_warn_dup+0x8a/0xa0 [ 590.897453][T13164] sysfs_do_create_link_sd+0xc0/0x110 [ 590.902899][T13164] device_add+0x83b/0x1050 [ 590.907388][T13164] wiphy_register+0x1d8b/0x2aa0 [ 590.912325][T13164] ? cfg80211_event_work+0x40/0x40 [ 590.917500][T13164] ? minstrel_ht_alloc+0x894/0xa20 [ 590.922691][T13164] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 590.928814][T13164] ieee80211_register_hw+0x2d48/0x39f0 [ 590.934344][T13164] ? ieee80211_register_hw+0xf41/0x39f0 [ 590.939929][T13164] ? ieee80211_register_hw+0xf41/0x39f0 [ 590.945517][T13164] ? ieee80211_tasklet_handler+0x20/0x20 [ 590.951198][T13164] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 590.957120][T13164] ? __debug_object_init+0xed/0x440 [ 590.962363][T13164] ? memset+0x1e/0x40 [ 590.966374][T13164] ? __hrtimer_init+0x189/0x270 [ 590.971255][T13164] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 590.977014][T13164] ? memcpy+0x3c/0x60 [ 590.981027][T13164] hwsim_new_radio_nl+0xab7/0xc90 [ 590.986102][T13164] genl_family_rcv_msg_doit+0x22f/0x350 [ 590.991679][T13164] ? end_current_label_crit_section+0x170/0x170 [ 590.997976][T13164] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 591.003949][T13164] ? bpf_lsm_capable+0x5/0x10 [ 591.008678][T13164] ? security_capable+0x85/0xb0 [ 591.013581][T13164] genl_rcv_msg+0x601/0x790 [ 591.018131][T13164] ? genl_bind+0x360/0x360 [ 591.022573][T13164] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 591.028948][T13164] netlink_rcv_skb+0x1ef/0x440 [ 591.033752][T13164] ? genl_bind+0x360/0x360 [ 591.038201][T13164] ? netlink_ack+0x1160/0x1160 [ 591.043012][T13164] ? down_read+0x1a8/0x2d0 [ 591.047469][T13164] genl_rcv+0x24/0x40 [ 591.051474][T13164] netlink_unicast+0x7ad/0x920 [ 591.056282][T13164] netlink_sendmsg+0x8ad/0xbd0 [ 591.061091][T13164] ? netlink_getsockopt+0x550/0x550 [ 591.066349][T13164] ? apparmor_socket_sendmsg+0x8a/0x330 [ 591.071953][T13164] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 591.077441][T13164] ? security_socket_sendmsg+0x7c/0xa0 [ 591.082933][T13164] ? netlink_getsockopt+0x550/0x550 [ 591.088196][T13164] ____sys_sendmsg+0x5ed/0x9a0 [ 591.093004][T13164] ? __sys_sendmsg_sock+0x30/0x30 [ 591.098114][T13164] ? __import_iovec+0x306/0x510 [ 591.103014][T13164] ? import_iovec+0x6f/0xa0 [ 591.107568][T13164] ___sys_sendmsg+0x2a2/0x360 [ 591.112285][T13164] ? __sys_sendmsg+0x2a0/0x2a0 [ 591.117123][T13164] __se_sys_sendmsg+0x1c3/0x2b0 [ 591.122005][T13164] ? ct_nmi_exit+0x145/0x1c0 [ 591.126654][T13164] ? __x64_sys_sendmsg+0x80/0x80 [ 591.131643][T13164] ? lockdep_hardirqs_on+0x94/0x140 [ 591.136870][T13164] do_syscall_64+0x4c/0xa0 [ 591.141314][T13164] ? clear_bhb_loop+0x60/0xb0 [ 591.146021][T13164] ? clear_bhb_loop+0x60/0xb0 [ 591.150734][T13164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.156654][T13164] RIP: 0033:0x7f25bab9de99 [ 591.161098][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.180726][T13164] RSP: 002b:00007f25bba87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.189182][T13164] RAX: ffffffffffffffda RBX: 00007f25bae25fa0 RCX: 00007f25bab9de99 [ 591.197191][T13164] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 591.205188][T13164] RBP: 00007f25bac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 591.213186][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.221179][T13164] R13: 00007f25bae26038 R14: 00007f25bae25fa0 R15: 00007ffd7e62dec8 [ 591.229209][T13164] [ 591.503552][T13174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.520055][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.528692][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.541069][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.549415][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 591.556988][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 591.656455][T13171] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2900'. [ 592.128735][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.594483][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 593.626772][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.673346][T13190] netlink: 'syz.1.2904': attribute type 2 has an invalid length. [ 593.724371][T13198] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 593.779956][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.888940][ T9] bond0: (slave netdevsim0): Releasing backup interface [ 593.900889][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.180704][T13172] chnl_net:caif_netlink_parms(): no params data found [ 594.767646][T13214] netlink: 'syz.0.2913': attribute type 6 has an invalid length. [ 595.211271][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.240282][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.291117][T13172] device bridge_slave_0 entered promiscuous mode [ 595.674456][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 596.145809][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.483199][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.514569][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.522917][T13172] device bridge_slave_1 entered promiscuous mode [ 596.842091][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.017206][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.320394][T13172] team0: Port device team_slave_0 added [ 597.511458][T13172] team0: Port device team_slave_1 added [ 597.647491][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.660756][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.705579][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.744552][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 597.949903][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.969693][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.081662][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.225156][T13172] device hsr_slave_0 entered promiscuous mode [ 598.236300][T13172] device hsr_slave_1 entered promiscuous mode [ 598.276451][T13172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.284113][T13172] Cannot create hsr debugfs directory [ 598.674533][T13296] Dead loop on virtual device ip6_vti0, fix it urgently! [ 599.829880][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 600.561368][T13323] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2940'. [ 600.655219][ T9] device hsr_slave_0 left promiscuous mode [ 600.695968][ T9] device hsr_slave_1 left promiscuous mode [ 600.735213][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.742773][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.805162][ T9] device bridge_slave_0 left promiscuous mode [ 600.811973][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.879626][ T9] device veth1_vlan left promiscuous mode [ 601.356595][ T9] team0 (unregistering): Port device geneve1 removed [ 603.007341][ T9] team0 (unregistering): Port device team_slave_1 removed [ 603.183469][ T9] team0 (unregistering): Port device team_slave_0 removed [ 603.314464][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.444709][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.583133][ T9] team0 (unregistering): Port device bridge_slave_1 removed [ 603.631168][ T9] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 604.301922][ T9] team0 (unregistering): Port device bridge0 removed [ 604.426732][ T9] bond0 (unregistering): Released all slaves [ 604.668857][T13330] netlink: 'syz.2.2942': attribute type 10 has an invalid length. [ 604.678265][T13361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2953'. [ 605.038008][T13172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 605.069474][T13366] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2955'. [ 605.097641][T13172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 605.147398][T13172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 605.183048][T13172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 605.666878][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.715195][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.734725][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.748985][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.804089][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.823222][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.845687][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.852864][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.884769][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.925464][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.955052][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.962248][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.026204][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.065730][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.092892][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.167962][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.190711][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.210212][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.233841][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.263226][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.301257][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.347739][T13172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.405325][T13172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.446201][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.471125][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.509458][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.980377][T13418] netlink: 'syz.1.2967': attribute type 6 has an invalid length. [ 607.031285][T13418] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2967'. [ 607.109703][T13410] netlink: 'syz.0.2965': attribute type 10 has an invalid length. [ 607.706975][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.723034][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.774145][T13172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.446341][T13444] netlink: 'syz.2.2975': attribute type 29 has an invalid length. [ 608.486298][T13444] netlink: 'syz.2.2975': attribute type 29 has an invalid length. [ 608.594813][T13448] netlink: 'syz.2.2975': attribute type 29 has an invalid length. [ 609.905828][T13488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.099515][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.150762][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.235767][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.270772][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.299034][T13172] device veth0_vlan entered promiscuous mode [ 610.314087][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.331522][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.348347][T13172] device veth1_vlan entered promiscuous mode [ 610.390275][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.401188][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.425746][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.445018][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.469852][T13172] device veth0_macvtap entered promiscuous mode [ 610.503732][T13172] device veth1_macvtap entered promiscuous mode [ 610.567140][T13172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.584492][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.593650][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.613285][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.644834][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.679428][T13172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.704325][T13172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.769832][T13172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.811253][T13172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.890905][T13172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.928434][T13172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.974302][T13172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.020482][T13172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.050674][T13172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.086099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.100155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.120913][T13172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.147455][T13172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.192634][T13172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.228308][T13172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.504092][ T5004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.522481][ T5004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.555664][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.664193][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.693847][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.739277][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 611.832899][T13534] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2994'. [ 612.021963][T13539] netlink: 'syz.2.2996': attribute type 3 has an invalid length. [ 612.094783][T13539] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2996'. [ 613.227310][T13566] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3004'. [ 613.330511][T13566] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 613.364384][T13566] CPU: 1 PID: 13566 Comm: syz.0.3004 Not tainted syzkaller #0 [ 613.371946][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 613.382047][T13566] Call Trace: [ 613.385370][T13566] [ 613.388341][T13566] dump_stack_lvl+0x188/0x24e [ 613.393082][T13566] ? show_regs_print_info+0x12/0x12 [ 613.398334][T13566] ? load_image+0x410/0x410 [ 613.402894][T13566] sysfs_warn_dup+0x8a/0xa0 [ 613.407454][T13566] sysfs_do_create_link_sd+0xc0/0x110 [ 613.412885][T13566] device_add+0x83b/0x1050 [ 613.417365][T13566] wiphy_register+0x1d8b/0x2aa0 [ 613.422300][T13566] ? cfg80211_event_work+0x40/0x40 [ 613.427471][T13566] ? minstrel_ht_alloc+0x894/0xa20 [ 613.432660][T13566] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 613.438794][T13566] ieee80211_register_hw+0x2d48/0x39f0 [ 613.444331][T13566] ? ieee80211_register_hw+0xf41/0x39f0 [ 613.449956][T13566] ? ieee80211_register_hw+0xf41/0x39f0 [ 613.455571][T13566] ? ieee80211_tasklet_handler+0x20/0x20 [ 613.461257][T13566] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 613.467236][T13566] ? __debug_object_init+0xed/0x440 [ 613.472504][T13566] ? memset+0x1e/0x40 [ 613.476534][T13566] ? __hrtimer_init+0x189/0x270 [ 613.481451][T13566] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 613.487239][T13566] ? memcpy+0x3c/0x60 [ 613.491274][T13566] hwsim_new_radio_nl+0xab7/0xc90 [ 613.496375][T13566] genl_family_rcv_msg_doit+0x22f/0x350 [ 613.501981][T13566] ? end_current_label_crit_section+0x170/0x170 [ 613.508294][T13566] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 613.514250][T13566] ? bpf_lsm_capable+0x5/0x10 [ 613.518980][T13566] ? security_capable+0x85/0xb0 [ 613.523897][T13566] genl_rcv_msg+0x601/0x790 [ 613.528464][T13566] ? genl_bind+0x360/0x360 [ 613.532925][T13566] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 613.539334][T13566] netlink_rcv_skb+0x1ef/0x440 [ 613.544163][T13566] ? genl_bind+0x360/0x360 [ 613.548662][T13566] ? netlink_ack+0x1160/0x1160 [ 613.553485][T13566] ? down_read+0x1a8/0x2d0 [ 613.557935][T13566] genl_rcv+0x24/0x40 [ 613.561941][T13566] netlink_unicast+0x7ad/0x920 [ 613.566748][T13566] netlink_sendmsg+0x8ad/0xbd0 [ 613.571562][T13566] ? netlink_getsockopt+0x550/0x550 [ 613.576804][T13566] ? apparmor_socket_sendmsg+0x8a/0x330 [ 613.582405][T13566] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 613.587725][T13566] ? security_socket_sendmsg+0x7c/0xa0 [ 613.593212][T13566] ? netlink_getsockopt+0x550/0x550 [ 613.598450][T13566] ____sys_sendmsg+0x5ed/0x9a0 [ 613.603256][T13566] ? __sys_sendmsg_sock+0x30/0x30 [ 613.608311][T13566] ? __import_iovec+0x306/0x510 [ 613.613201][T13566] ? import_iovec+0x6f/0xa0 [ 613.617738][T13566] ___sys_sendmsg+0x2a2/0x360 [ 613.622485][T13566] ? __sys_sendmsg+0x2a0/0x2a0 [ 613.627320][T13566] __se_sys_sendmsg+0x1c3/0x2b0 [ 613.632203][T13566] ? __x64_sys_sendmsg+0x80/0x80 [ 613.637189][T13566] ? lockdep_hardirqs_on+0x94/0x140 [ 613.642426][T13566] do_syscall_64+0x4c/0xa0 [ 613.646886][T13566] ? clear_bhb_loop+0x60/0xb0 [ 613.651596][T13566] ? clear_bhb_loop+0x60/0xb0 [ 613.656301][T13566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 613.662228][T13566] RIP: 0033:0x7fc4d259de99 [ 613.666668][T13566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.686324][T13566] RSP: 002b:00007fc4d34bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.694767][T13566] RAX: ffffffffffffffda RBX: 00007fc4d2825fa0 RCX: 00007fc4d259de99 [ 613.702761][T13566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 613.710757][T13566] RBP: 00007fc4d2633eaf R08: 0000000000000000 R09: 0000000000000000 [ 613.718754][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.726748][T13566] R13: 00007fc4d2826038 R14: 00007fc4d2825fa0 R15: 00007fff4a1bff48 [ 613.734765][T13566] [ 613.799012][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.808208][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.820517][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.847186][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 613.862312][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 613.870142][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.357165][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.522327][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.748449][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.865270][T13588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3010'. [ 615.377421][T13588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.422305][T13588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.545302][T13588] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 615.721665][T13588] bond0 (unregistering): Released all slaves [ 615.889207][ T30] bond0: (slave netdevsim0): Releasing backup interface [ 615.904557][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 615.959715][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.007741][T13569] chnl_net:caif_netlink_parms(): no params data found [ 616.467768][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.484482][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.492875][T13569] device bridge_slave_0 entered promiscuous mode [ 616.573745][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.614884][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.646423][T13569] device bridge_slave_1 entered promiscuous mode [ 616.809942][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.103547][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.346724][T13569] team0: Port device team_slave_0 added [ 617.401247][T13569] team0: Port device team_slave_1 added [ 617.770140][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.814325][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.901320][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.992553][ T4274] Bluetooth: hci5: command 0x041b tx timeout [ 618.086547][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.093582][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.233030][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.863522][T13666] netlink: 'syz.1.3025': attribute type 3 has an invalid length. [ 618.916481][T13569] device hsr_slave_0 entered promiscuous mode [ 618.934453][T13666] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3025'. [ 618.951568][T13569] device hsr_slave_1 entered promiscuous mode [ 619.426940][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.455034][T13569] Cannot create hsr debugfs directory [ 620.064741][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 620.777589][T13691] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3033'. [ 622.284367][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 622.668747][T13717] netlink: 'syz.2.3040': attribute type 29 has an invalid length. [ 622.780768][T13717] netlink: 'syz.2.3040': attribute type 3 has an invalid length. [ 622.908065][T13717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3040'. [ 623.888005][ T30] device hsr_slave_0 left promiscuous mode [ 623.903594][ T30] device hsr_slave_1 left promiscuous mode [ 623.931905][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.962625][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.041427][T13752] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3046'. [ 624.308378][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.315013][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.336380][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.393652][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.707633][ T30] bond0 (unregistering): Released all slaves [ 625.741923][T13753] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3047'. [ 625.760528][T13753] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 625.970960][T13765] netlink: 64931 bytes leftover after parsing attributes in process `syz.4.3050'. [ 626.019981][T13765] netlink: 'syz.4.3050': attribute type 1 has an invalid length. [ 626.037623][T13569] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 626.092271][T13765] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3050'. [ 626.130338][T13569] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.880027][T13569] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 627.499602][T13569] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 627.787407][T13786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3056'. [ 627.925447][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.087377][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.115941][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.144698][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.163462][T13785] netlink: 'syz.1.3057': attribute type 3 has an invalid length. [ 628.188690][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.215547][T13785] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3057'. [ 628.268106][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.327540][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.354193][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.361478][ T5004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.433229][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.505370][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 628.534359][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 628.545892][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.553040][ T5004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.625322][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 628.641617][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.683521][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.726052][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.770522][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.815420][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.859228][T13569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.888197][T13569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.914677][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.932755][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.985862][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.020287][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.060815][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.094071][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.295269][T13824] netlink: 'syz.0.3064': attribute type 29 has an invalid length. [ 629.303168][T13824] netlink: 'syz.0.3064': attribute type 3 has an invalid length. [ 629.340402][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3064'. [ 630.151103][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.171302][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 630.210746][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.284608][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.332155][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.455991][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.473070][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.528328][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.562813][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.574013][T13569] device veth0_vlan entered promiscuous mode [ 630.619237][T13569] device veth1_vlan entered promiscuous mode [ 631.965171][T13840] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.972721][T13840] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.073335][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 632.095747][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 632.129053][T13864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3072'. [ 632.186661][T11323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 632.216284][T11323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.242208][T13569] device veth0_macvtap entered promiscuous mode [ 632.277372][T13569] device veth1_macvtap entered promiscuous mode [ 632.363641][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.428800][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.503885][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.532542][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 632.545273][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.564062][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.605195][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.645222][T13874] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3075'. [ 632.697782][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.769920][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.820626][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.885055][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.950739][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.026313][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.092861][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.144194][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.177031][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.266010][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 633.341890][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 633.361684][T13569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.404556][T13569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.438254][T13569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.490031][T13569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.389235][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.415111][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.477870][T11323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 634.500635][T11323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.529414][T11323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.600890][T11323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 635.851880][T13933] netlink: 'syz.0.3084': attribute type 6 has an invalid length. [ 635.895242][T13933] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3084'. [ 636.635021][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.645779][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.655420][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.664685][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.672668][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 636.680168][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.712160][T13947] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3088'. [ 636.897380][T13949] netlink: 'syz.1.3089': attribute type 10 has an invalid length. [ 637.475115][T13943] chnl_net:caif_netlink_parms(): no params data found [ 637.790488][T13943] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.892099][T13943] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.935633][T13943] device bridge_slave_0 entered promiscuous mode [ 637.972615][T13982] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3103'. [ 638.002326][T13943] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.016545][T13943] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.048082][T13943] device bridge_slave_1 entered promiscuous mode [ 638.122085][T13991] netlink: 'syz.0.3102': attribute type 3 has an invalid length. [ 638.175852][T13991] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3102'. [ 638.310168][T13943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.421831][T13943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.587853][T13943] team0: Port device team_slave_0 added [ 638.696532][T13943] team0: Port device team_slave_1 added [ 638.705094][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 638.911920][T13943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.926998][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.044416][T13943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.097306][T13943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.124342][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.234307][T13943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.273316][T14020] netlink: 'syz.4.3115': attribute type 3 has an invalid length. [ 639.296557][T14019] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.322293][T14020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3115'. [ 639.558969][T13943] device hsr_slave_0 entered promiscuous mode [ 639.589581][T13943] device hsr_slave_1 entered promiscuous mode [ 639.853657][ T5004] device ip6gretap0 left promiscuous mode [ 639.865300][ T5004] : port 1(ip6gretap0) entered disabled state [ 640.784468][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 641.083264][T14060] netlink: 'syz.4.3122': attribute type 3 has an invalid length. [ 641.115040][T14060] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3122'. [ 642.072374][T14073] netlink: 'syz.1.3127': attribute type 27 has an invalid length. [ 642.216197][T14072] delete_channel: no stack [ 642.441576][T13943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.517935][T13943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.560512][T13943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.590654][T13943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 642.867397][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 643.000067][T14097] netlink: 'syz.4.3134': attribute type 3 has an invalid length. [ 643.051530][T14097] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3134'. [ 643.169104][T14102] netlink: 'syz.4.3134': attribute type 3 has an invalid length. [ 643.236658][T14102] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3134'. [ 643.350272][ T5004] device hsr_slave_0 left promiscuous mode [ 643.371351][ T5004] device hsr_slave_1 left promiscuous mode [ 643.393532][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.418762][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.503919][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.514793][ T5004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.538662][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.575914][ T5004] device bridge_slave_0 left promiscuous mode [ 643.590191][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.670622][ T5004] device veth1_vlan left promiscuous mode [ 643.735128][ T5004] device veth0_vlan left promiscuous mode [ 644.469460][ T5004] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 644.944393][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 645.096967][ T5004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.194614][ T5004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.422597][T14155] FAULT_INJECTION: forcing a failure. [ 645.422597][T14155] name failslab, interval 1, probability 0, space 0, times 0 [ 645.510168][T14155] CPU: 0 PID: 14155 Comm: syz.3.3149 Not tainted syzkaller #0 [ 645.517747][T14155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 645.527901][T14155] Call Trace: [ 645.531251][T14155] [ 645.534255][T14155] dump_stack_lvl+0x188/0x24e [ 645.539034][T14155] ? show_regs_print_info+0x12/0x12 [ 645.544318][T14155] ? load_image+0x410/0x410 [ 645.548908][T14155] ? __lock_acquire+0x7c40/0x7c40 [ 645.554048][T14155] should_fail_ex+0x390/0x4c0 [ 645.558828][T14155] should_failslab+0x5/0x20 [ 645.563437][T14155] slab_pre_alloc_hook+0x59/0x300 [ 645.568552][T14155] ? rxrpc_alloc_call+0x354/0xbf0 [ 645.573754][T14155] __kmem_cache_alloc_node+0x4f/0x270 [ 645.579196][T14155] ? rxrpc_alloc_call+0x354/0xbf0 [ 645.584369][T14155] kmalloc_trace+0x26/0xe0 [ 645.588876][T14155] rxrpc_alloc_call+0x354/0xbf0 [ 645.593799][T14155] rxrpc_new_client_call+0xe7/0xe10 [ 645.599055][T14155] ? rxrpc_do_sendmsg+0xbd7/0x10e0 [ 645.604238][T14155] ? do_raw_read_unlock+0x39/0x70 [ 645.609317][T14155] ? _raw_read_unlock+0x24/0x40 [ 645.614222][T14155] rxrpc_do_sendmsg+0xbd7/0x10e0 [ 645.619227][T14155] ? rxrpc_process_local_events+0xa40/0xa40 [ 645.625213][T14155] ? rxrpc_look_up_server_security+0x530/0x530 [ 645.631417][T14155] ? __local_bh_enable_ip+0x136/0x1c0 [ 645.636931][T14155] ? rxrpc_sendmsg+0x45b/0x890 [ 645.641756][T14155] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 645.647087][T14155] ? rxrpc_getsockopt+0x150/0x150 [ 645.652193][T14155] ____sys_sendmsg+0x5ed/0x9a0 [ 645.657037][T14155] ? __lock_acquire+0x7c40/0x7c40 [ 645.662134][T14155] ? __sys_sendmsg_sock+0x30/0x30 [ 645.667209][T14155] ? __import_iovec+0x306/0x510 [ 645.672137][T14155] ? import_iovec+0x6f/0xa0 [ 645.676707][T14155] ___sys_sendmsg+0x2a2/0x360 [ 645.681457][T14155] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.686338][T14155] ? __lock_acquire+0x7c40/0x7c40 [ 645.691479][T14155] __se_sys_sendmsg+0x1c3/0x2b0 [ 645.696404][T14155] ? __x64_sys_sendmsg+0x80/0x80 [ 645.701438][T14155] ? lockdep_hardirqs_on+0x94/0x140 [ 645.706693][T14155] do_syscall_64+0x4c/0xa0 [ 645.711156][T14155] ? clear_bhb_loop+0x60/0xb0 [ 645.715894][T14155] ? clear_bhb_loop+0x60/0xb0 [ 645.720628][T14155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.726571][T14155] RIP: 0033:0x7fa1de59de99 [ 645.731034][T14155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.750706][T14155] RSP: 002b:00007fa1df55b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.759170][T14155] RAX: ffffffffffffffda RBX: 00007fa1de825fa0 RCX: 00007fa1de59de99 [ 645.767182][T14155] RDX: 0000000000008014 RSI: 0000200000000080 RDI: 0000000000000006 [ 645.775196][T14155] RBP: 00007fa1df55b090 R08: 0000000000000000 R09: 0000000000000000 [ 645.783206][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.791245][T14155] R13: 00007fa1de826038 R14: 00007fa1de825fa0 R15: 00007ffec2667268 [ 645.799324][T14155] [ 646.085948][ T5004] bond0 (unregistering): Released all slaves [ 646.225463][T14159] Dead loop on virtual device ip6_vti0, fix it urgently! [ 646.292718][T13943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.326664][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 646.405033][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.437801][T13943] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.480706][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.536002][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.555381][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.562579][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.626153][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 646.673761][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 646.693048][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.745137][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.752388][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.846175][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 646.899908][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.955960][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 646.966768][T14178] netlink: 'syz.4.3158': attribute type 29 has an invalid length. [ 646.986333][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 647.008276][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 647.034223][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 647.062650][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 647.092374][T14178] netlink: 'syz.4.3158': attribute type 29 has an invalid length. [ 647.145817][T14180] netlink: 'syz.4.3158': attribute type 29 has an invalid length. [ 647.198637][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 647.218979][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 647.263630][T14178] netlink: 'syz.4.3158': attribute type 29 has an invalid length. [ 647.308412][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.335390][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.371927][T14182] can: request_module (can-proto-0) failed. [ 647.382147][T14180] netlink: 'syz.4.3158': attribute type 29 has an invalid length. [ 647.446576][T13943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 647.469442][T14178] netlink: 'syz.4.3158': attribute type 29 has an invalid length. [ 648.068965][T14211] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3167'. [ 648.109662][T14211] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3167'. [ 648.500449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.527739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.591936][T13943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.714220][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 648.736452][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 648.802121][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 648.821407][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 648.850310][T13943] device veth0_vlan entered promiscuous mode [ 648.869417][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 648.891631][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.925143][T14228] netlink: 'syz.1.3174': attribute type 11 has an invalid length. [ 648.945991][T14228] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3174'. [ 648.981663][T13943] device veth1_vlan entered promiscuous mode [ 649.074746][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 649.105143][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 649.113667][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 649.152196][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 649.179228][T13943] device veth0_macvtap entered promiscuous mode [ 649.193793][T13943] device veth1_macvtap entered promiscuous mode [ 649.260141][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.287405][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.297324][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.308312][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.320117][T13943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.329050][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 649.348072][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 649.379339][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.402222][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.485342][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.552362][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.582484][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.611333][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.626083][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.636908][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.648228][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.680693][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.701553][T13943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.723584][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 649.740860][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 649.892487][T14243] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3179'. [ 649.964487][T14243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.056838][T14251] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3183'. [ 650.077615][T13943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.108340][T13943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.127267][T13943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.184719][T13943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.446162][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.454080][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.537525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 650.583542][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.633121][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.702047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.977551][T14261] device syzkaller0 entered promiscuous mode [ 652.016969][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.035239][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 652.043133][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 652.058170][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 652.068702][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 652.077195][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.144704][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 654.213450][T14280] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3193'. [ 654.436455][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.477044][T14291] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3196'. [ 654.560455][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.689586][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.990045][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 655.016462][T14295] sock: sock_set_timeout: `syz.4.3199' (pid 14295) tries to set negative timeout [ 655.072218][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.157776][T14295] netlink: 'syz.4.3199': attribute type 10 has an invalid length. [ 655.167340][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3199'. [ 655.193910][T14295] bridge0: port 3(veth0_vlan) entered blocking state [ 655.204543][T14295] bridge0: port 3(veth0_vlan) entered disabled state [ 655.294065][T14295] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 655.473274][T14295] device syzkaller0 entered promiscuous mode [ 655.517908][T14295] device syzkaller0 left promiscuous mode [ 655.731979][T14279] chnl_net:caif_netlink_parms(): no params data found [ 656.079939][T14279] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.115212][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.123829][T14279] device bridge_slave_0 entered promiscuous mode [ 656.224530][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 656.263883][ T11] device ip6gretap0 left promiscuous mode [ 656.273519][ T11] : port 1(ip6gretap0) entered disabled state [ 656.301554][T14279] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.319476][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.332009][T14279] device bridge_slave_1 entered promiscuous mode [ 656.348847][T14324] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3204'. [ 656.550639][T14279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.602633][T14279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.852922][T14279] team0: Port device team_slave_0 added [ 656.910515][T14279] team0: Port device team_slave_1 added [ 657.014068][T14279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.066077][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.163584][T14279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.289268][T14354] sock: sock_set_timeout: `syz.3.3214' (pid 14354) tries to set negative timeout [ 657.338418][T14279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.354341][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.451721][T14279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.627818][T14354] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 657.657444][T14354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3214'. [ 657.724212][T14354] bridge0: port 3(veth0_vlan) entered blocking state [ 657.736611][T14354] bridge0: port 3(veth0_vlan) entered disabled state [ 657.898146][T14354] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 658.117620][T14279] device hsr_slave_0 entered promiscuous mode [ 658.148065][T14279] device hsr_slave_1 entered promiscuous mode [ 658.196031][T14279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.226140][T14279] Cannot create hsr debugfs directory [ 658.270298][T14354] device syzkaller0 entered promiscuous mode [ 658.304731][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 658.590621][T14358] device syzkaller0 left promiscuous mode [ 658.630511][T14379] IPv6: NLM_F_CREATE should be specified when creating new route [ 660.399950][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 660.584934][ T11] device hsr_slave_1 left promiscuous mode [ 660.597076][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.618969][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.681452][ T11] device veth1_vlan left promiscuous mode [ 660.921324][ T11] team0 (unregistering): Port device geneve1 removed [ 661.338540][ T11] team0 (unregistering): Port device team_slave_1 removed [ 661.382688][ T11] team0 (unregistering): Port device team_slave_0 removed [ 661.427665][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.474036][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.745821][ T11] bond0 (unregistering): Released all slaves [ 661.800027][T14429] netlink: 'syz.2.3235': attribute type 10 has an invalid length. [ 662.097830][T14279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 662.142772][T14445] sock: sock_set_timeout: `syz.2.3236' (pid 14445) tries to set negative timeout [ 662.177829][T14279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 662.295041][T14445] netlink: 'syz.2.3236': attribute type 10 has an invalid length. [ 662.303376][T14445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3236'. [ 662.341416][T14445] bridge0: port 3(veth0_vlan) entered blocking state [ 662.349577][T14445] bridge0: port 3(veth0_vlan) entered disabled state [ 662.365462][T14445] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 662.389732][T14279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 662.409647][T14279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 662.499870][T14445] device syzkaller0 entered promiscuous mode [ 662.607216][T14446] device syzkaller0 left promiscuous mode [ 662.959590][T14279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.047061][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 663.061387][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 663.106153][T14279] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.132040][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 663.148596][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 663.181374][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.188622][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.246101][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 663.280396][T14474] netlink: 'syz.0.3244': attribute type 10 has an invalid length. [ 663.307878][T14474] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3244'. [ 663.386497][T14481] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 663.493979][T14481] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3245'. [ 663.560752][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.573381][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.596810][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.604013][ T5004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.684910][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 663.761232][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.816140][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.826848][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.865264][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.892045][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.922899][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.965345][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.986520][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 664.027827][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 664.091834][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 664.128127][ T4274] Bluetooth: hci5: unexpected subevent 0x0c length: 150 > 5 [ 664.141900][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.952653][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 664.963706][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.006101][T14279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.040124][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 665.073536][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.155349][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 665.167353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.230574][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.259619][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.302168][T14279] device veth0_vlan entered promiscuous mode [ 665.353115][T14521] sock: sock_set_timeout: `syz.0.3253' (pid 14521) tries to set negative timeout [ 665.365971][T14279] device veth1_vlan entered promiscuous mode [ 665.473394][T14279] device veth0_macvtap entered promiscuous mode [ 665.544767][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 665.557476][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 665.583299][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 665.644612][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 665.680152][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 665.717479][T14521] netlink: 'syz.0.3253': attribute type 10 has an invalid length. [ 665.752359][T14521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3253'. [ 665.836015][T14521] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 665.941918][T14279] device veth1_macvtap entered promiscuous mode [ 666.029070][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 666.122508][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.156421][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.186919][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.231253][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.278692][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.323194][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.366769][T14279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.428988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 666.451616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.476263][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.496219][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.517907][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.569177][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.579543][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.590409][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.600658][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.612547][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.626009][T14279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.636373][T14554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3260'. [ 666.663616][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.809092][T14554] device bridge_slave_0 left promiscuous mode [ 666.839974][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.323123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 667.346684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 667.372459][T14279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.396554][T14279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.414342][T14279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.423132][T14279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.748216][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.763844][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.789288][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 667.852540][ T5000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.864338][ T5000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.885452][ T4274] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 667.987424][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 668.216012][T14582] Dead loop on virtual device ip6_vti0, fix it urgently! [ 671.043144][T14611] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3272'. [ 694.712318][T12858] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2635 jiffies s: 60621 root: 0x2/. [ 694.750921][T12858] rcu: blocking rcu_node structures (internal RCU debug): [ 694.783405][T12858] Sending NMI from CPU 0 to CPUs 1: [ 694.788866][ C1] NMI backtrace for cpu 1 [ 694.788877][ C1] CPU: 1 PID: 14591 Comm: syz.1.3188 Not tainted syzkaller #0 [ 694.788894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 694.788914][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 694.788967][ C1] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 30 d9 9e 0c 48 89 de 5b e9 77 62 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 44 3b 80 7e 65 8b 15 45 3b 80 7e 81 e2 00 01 ff 00 74 [ 694.788982][ C1] RSP: 0018:ffffc900001e0298 EFLAGS: 00000046 [ 694.788996][ C1] RAX: ffffffff81a4bc8e RBX: ffffc900001e07c0 RCX: ffff88802d779e00 [ 694.789009][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.789019][ C1] RBP: ffffc900001e0390 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 694.789032][ C1] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000000 [ 694.789044][ C1] R13: 0000000000000020 R14: 0000000000000520 R15: ffffc900001e0680 [ 694.789056][ C1] FS: 00007f5d0a0fc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 694.789070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.789082][ C1] CR2: 0000000100000000 CR3: 0000000060220000 CR4: 00000000003506e0 [ 694.789096][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 694.789107][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 694.789117][ C1] Call Trace: [ 694.789122][ C1] [ 694.789127][ C1] perf_prepare_sample+0xe4e/0x2020 [ 694.789203][ C1] ? read_lock_is_recursive+0x10/0x10 [ 694.789228][ C1] ? perf_callchain+0x190/0x190 [ 694.789251][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 694.789278][ C1] perf_event_output_forward+0x197/0x2f0 [ 694.789302][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 694.789326][ C1] ? perf_get_page_size+0x430/0x430 [ 694.789349][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 694.789379][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 694.789489][ C1] __perf_event_overflow+0x457/0x630 [ 694.789531][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 694.789566][ C1] perf_swevent_event+0x315/0x570 [ 694.789592][ C1] ? perf_tp_event+0xc10/0xc10 [ 694.789616][ C1] ? perf_swevent_event+0x4ba/0x570 [ 694.789640][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 694.789726][ C1] ? perf_tp_event+0xc10/0xc10 [ 694.789754][ C1] perf_tp_event+0x36b/0xc10 [ 694.789786][ C1] ? perf_tp_event+0xa8e/0xc10 [ 694.789810][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 694.789862][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 694.789890][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 694.789915][ C1] ? irqentry_enter+0x33/0x50 [ 694.789932][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 694.789957][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 694.789983][ C1] ? lock_chain_count+0x20/0x20 [ 694.790005][ C1] ? irqentry_enter+0x33/0x50 [ 694.790021][ C1] trace_hardirqs_off_finish+0x13f/0x180 [ 694.790045][ C1] irqentry_enter+0x33/0x50 [ 694.790061][ C1] sysvec_irq_work+0xa/0xc0 [ 694.790090][ C1] asm_sysvec_irq_work+0x16/0x20 [ 694.790113][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 694.790155][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 694.790169][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 694.790184][ C1] RAX: 2f1ef8c711088500 RBX: 1ffff9200003c164 RCX: 2f1ef8c711088500 [ 694.790197][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 694.790210][ C1] RBP: ffffc900001e0bd0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 694.790223][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 694.790235][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 694.790266][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.790290][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 694.790312][ C1] __rcu_read_unlock+0x78/0xd0 [ 694.790327][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 694.790378][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 694.790396][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 694.790421][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 694.790449][ C1] __hrtimer_run_queues+0x522/0xc90 [ 694.790472][ C1] ? hw_scan_work+0xf00/0xf00 [ 694.790500][ C1] ? hrtimer_interrupt+0x980/0x980 [ 694.790523][ C1] hrtimer_run_softirq+0x173/0x290 [ 694.790545][ C1] handle_softirqs+0x291/0x910 [ 694.790565][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 694.790582][ C1] ? do_softirq+0x210/0x210 [ 694.790596][ C1] ? hrtimer_interrupt+0x775/0x980 [ 694.790616][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 694.790656][ C1] __irq_exit_rcu+0x13b/0x230 [ 694.790672][ C1] ? irq_exit_rcu+0x20/0x20 [ 694.790692][ C1] irq_exit_rcu+0x5/0x20 [ 694.790706][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 694.790723][ C1] [ 694.790728][ C1] [ 694.790733][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.790756][ C1] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 694.790822][ C1] Code: d6 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 b1 e0 08 e8 fe 16 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 694.790836][ C1] RSP: 0018:ffffc90003987900 EFLAGS: 00000286 [ 694.790849][ C1] RAX: 2f1ef8c711088500 RBX: 0000000000000000 RCX: 2f1ef8c711088500 [ 694.790860][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 694.790873][ C1] RBP: ffffc90003987950 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 694.790885][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffff88802d779e00 [ 694.790897][ C1] R13: 1ffff110171e76fa R14: dffffc0000000000 R15: ffff8880b8f3b7d0 [ 694.790922][ C1] __schedule+0x1087/0x4030 [ 694.790956][ C1] ? __sched_text_start+0x8/0x8 [ 694.790978][ C1] ? plist_add+0x3d7/0x490 [ 694.791019][ C1] schedule+0xb9/0x180 [ 694.791040][ C1] ? futex_wait_queue+0x23/0x1b0 [ 694.791143][ C1] futex_wait_queue+0x134/0x1b0 [ 694.791162][ C1] futex_wait+0x1e5/0x5c0 [ 694.791184][ C1] ? futex_wait_setup+0x270/0x270 [ 694.791212][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 694.791241][ C1] do_futex+0x310/0x320 [ 694.791265][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 694.791282][ C1] ? lock_chain_count+0x20/0x20 [ 694.791307][ C1] __se_sys_futex+0x381/0x410 [ 694.791323][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 694.791340][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 694.791363][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 694.791382][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 694.791399][ C1] do_syscall_64+0x4c/0xa0 [ 694.791421][ C1] ? clear_bhb_loop+0x60/0xb0 [ 694.791442][ C1] ? clear_bhb_loop+0x60/0xb0 [ 694.791464][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.791485][ C1] RIP: 0033:0x7f5d0919de99 [ 694.791498][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.791512][ C1] RSP: 002b:00007f5d0a0fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 694.791527][ C1] RAX: ffffffffffffffda RBX: 00007f5d09425fa8 RCX: 00007f5d0919de99 [ 694.791539][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d09425fa8 [ 694.791550][ C1] RBP: 00007f5d09425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 694.791560][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.791569][ C1] R13: 00007f5d09426038 R14: 00007ffe3e9487a0 R15: 00007ffe3e948888 [ 694.791589][ C1]