last executing test programs: 7m41.113759412s ago: executing program 0 (id=318): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000181c0000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x1, 0x1}, 0x50) 7m40.887696059s ago: executing program 0 (id=321): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000207910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000002e006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36508f40b0004000b001fffffff300017d34460bc24eab554a705251e850094ff", 0x3f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000020000000000000000181100", @ANYRES32=r4], 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000006c0), &(0x7f0000000740), 0x8, 0x40, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x4, 0x4, 0x21, 0x2, r5, 0x1, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x3}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/219}, 0x20) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x5}, {0x6}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0xbcd8, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 7m40.389544841s ago: executing program 0 (id=324): socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000004400000001000084020000000a0000000300000000000001010000000000000700000000000000"], 0x0, 0x4a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000900)=""/4105, 0x1009}], 0x1}, 0x2) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e373a0c0980fc0b10070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x5f000000}, 0x0) 7m39.713651913s ago: executing program 0 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000100000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7m38.983929003s ago: executing program 0 (id=344): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000000000001d1e01", 0xc}], 0x1, 0x0, 0x0, 0xffffff97}, 0x0) 7m38.898985427s ago: executing program 0 (id=335): r0 = socket$kcm(0x29, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={r0}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4044) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="1400000037000b0fed5a806cb07163990cc47e28", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="1400000037000b0fed5a806cb07163990cc47e28", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) (async) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'pids'}, {0x2d, 'devices'}, {0x2b, 'memory'}, {0x2d, 'cpuset'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}]}, 0x49) socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, 0x0, 0x4040000) (async) sendmsg$inet(r6, 0x0, 0x4040000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x10c012, 0xac5d, 0x0, 0x2, 0x0, 0x8000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m23.712733033s ago: executing program 32 (id=335): r0 = socket$kcm(0x29, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={r0}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4044) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="1400000037000b0fed5a806cb07163990cc47e28", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="1400000037000b0fed5a806cb07163990cc47e28", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) (async) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'pids'}, {0x2d, 'devices'}, {0x2b, 'memory'}, {0x2d, 'cpuset'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}]}, 0x49) socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, 0x0, 0x4040000) (async) sendmsg$inet(r6, 0x0, 0x4040000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x10c012, 0xac5d, 0x0, 0x2, 0x0, 0x8000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3m11.775325397s ago: executing program 5 (id=2964): socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r2 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0xff, 0x0, 0x4, 0x420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x5000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="3eaa00000000000071108100000000009500000000000000def4cfe6235222a6cec899b0f10425187455ac9ceef18f483a04ae0f9ba6cd061776080c48de3f7815e61da2f2c96649e74d7b956eba1b6291bf67801658365183bbd9488db561af908b402fb778883376e95b7bed76d44ef32ed9416cd48b3147c725b837d7d0f2c16859b8c678f34185b635bd7a14823eec8d01df0d785dd0e017ade5b5ab7ae6070394215c6b67b018421b31d5d6d3d3a42dd2067a8c1a00"/195], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m10.79836927s ago: executing program 5 (id=2977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab", 0x2f}, {&(0x7f0000001980)="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", 0x220}], 0x2}, 0x24000008) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000080)={'wlan1\x00', @broadcast}) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x8f54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4) (async, rerun: 64) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r0, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000c80), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000180)=r5) 3m10.513792027s ago: executing program 5 (id=2980): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async, rerun: 64) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYRES64=r5, @ANYRES8=r4, @ANYRES64=r2, @ANYRES64, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES64=r1, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r8) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid\x00') r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async, rerun: 32) mkdirat$cgroup(r8, &(0x7f00000004c0)='syz0\x00', 0x1ff) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x400000000}, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000066000000020000000800000000000000", @ANYRES32, @ANYBLOB="0000090000a81683080000010000e9ffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000180)=ANY=[], 0xfe33) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r12 = socket$kcm(0x2, 0x7, 0x84) sendmsg$inet(r12, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r4, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/135, 0x87, 0x0, &(0x7f0000000500)=""/75, 0x4b}}, 0x10) (rerun: 32) 3m10.286937285s ago: executing program 5 (id=2982): r0 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb3}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x9, 0x1, &(0x7f0000000340)=""/1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000500)) 3m9.845414429s ago: executing program 5 (id=2987): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @local, 0x6, 0x4}, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x4804) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe2115aaaaef6dd8a, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xed) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000300)="842b7ae1c409ca932a28449d247583e7ef38799df1f00e06f9e8573158821c684672f6606095481e3ae3cc75766d61649b7629332e546ab13f5c4de6d6459486ae68e4d265d79f5845ccf97b7dcb86306363bd738cb67b5ccf3fac030c4da53372a57b8934a5bbe5f478dfab3f639eea214a1c9089c6bebcb436ce7bf400299d", &(0x7f0000000380)=""/191, &(0x7f00000004c0)="a9310901bb7bd5785acec2f52459643bfbe4e854b77be1ff4f2fd65e3445ea8d3ce64922b6205989d8b66078e78f141e6a668029", &(0x7f0000000500)="c5db05b358600b30a19b4da341a5206d6bdff88e8c4a4955d121d98f", 0x6, r5}, 0x38) 3m9.336418824s ago: executing program 5 (id=2993): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 2m54.131360262s ago: executing program 33 (id=2993): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 5.424123175s ago: executing program 3 (id=4671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 5.294448687s ago: executing program 2 (id=4673): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.163303899s ago: executing program 1 (id=4675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1\x00', 0x7101}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)='%-010d \x00'}, 0x20) 4.995777566s ago: executing program 3 (id=4676): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.980021519s ago: executing program 1 (id=4677): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000040000000000000000000ac1414aa2c200007"], 0xfdef) 4.775749323s ago: executing program 1 (id=4678): perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x27}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x11}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7040000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x10001, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34429, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080)}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"}) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xc, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x27}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) recvmsg$kcm(r1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa0}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x11}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7040000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x10001, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34429, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080)}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"}) (async) 4.723285272s ago: executing program 3 (id=4680): socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000004400000001000084020000000a0000000300000000000001010000000000000700000000000000"], 0x0, 0x4a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x1) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000900)=""/4105, 0x1009}], 0x1}, 0x2) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e373a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x2e00000000000000) 4.552066871s ago: executing program 2 (id=4681): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x50) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x1e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0xa, 0x5, 0x1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x65, 0x8, 0x7, 0x0, 0x77, 0x2800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240)}, 0x10000, 0x100, 0x8000, 0x0, 0x8001, 0x8, 0x800, 0x0, 0x7, 0x0, 0xffffffffffffff00}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) 4.082986709s ago: executing program 1 (id=4683): perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x2, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x96a8, 0x8}, 0x0, 0x5, 0x0, 0x3, 0x0, 0x85, 0xfffc, 0x0, 0x0, 0x0, 0x4000000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18600000000000000000000000000000185700000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="0d1d55a49c36a998b1a2ddd05af0c4c140813f12e9a149c12b05d4852e3c9db6825a5d1cdea4a0acfe5d863480d5427feeae8b995403ea4e308a6366f2a816e201242302a818a4", 0x47}, {&(0x7f00000001c0)="5fbe573a7259e76ee3d228b46efc7a086f500e0c57adc3ab9c7e859a1775e39066deabed0a7ef32c70eee84e09916a9917e12d7b0c989b1c75", 0x39}, {0x0}, {&(0x7f0000000640)}, {&(0x7f0000000740)="03635dfda298218201e4a34835722b45fe75e7f201c564fe270fcae99d46245674a2fbe25520be508e944fccd6736d5fe199aca6cc42afefaeab502525902c03e2a9958d863b9a915cdd2eaca8a10b637950d43f3d448a276488f78ef604da61c1163f3e067b5d40ca1766da77baee65b15c05131b770dc526b9cb5a84e53ad23911b65aab58a055244dc04739c92414918009f616f1", 0x96}, {0x0}, {&(0x7f0000000880)="8f", 0x1}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000000000000070000009404000044345ce3ac1e01010000000500000000000000800000000000000000ac141423fffffff7e00000020000000700000000000000031c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac3614bbac1e00010000000011000000fdffffff0000000001000000f900000000000000110000000000000000000000010000000300000000000000110000000000000000000000010000000300000000000000"], 0xb0}, 0xc010) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 3.977430507s ago: executing program 4 (id=4684): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x7}, 0x1b, 0x800000000, 0x3, 0x0, 0x8, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x9) 3.974931537s ago: executing program 6 (id=4685): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="3a5e176037772eab8fee8fb8befec2d6b606d39e4b75cc4bdefa1d34c439c56c259bd3443fe12d6e545924d352c82d81790162f4a290627a5171bb2bab57de55376ece0869345fba5003d79cbd87c20371c9b5ef10191280cd25758f180d72e9bdc200ed78e8a2931fa0c868d01b9a8565a0d78fea1f4a666dbd", 0x7a}], 0x1}, 0x4000810) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000004000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.844101409s ago: executing program 2 (id=4686): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xea, 0x8, 0x8, 0x1, 0x0, 0xf, 0x10209, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x2421, 0x0, 0x2, 0x0, 0x5e, 0x7fffffff, 0x401, 0x0, 0xc, 0x0, 0xc42}, 0x0, 0x7, r0, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000ebb80200"/36]) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3.71450686s ago: executing program 2 (id=4687): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x42, 0xc8, 0x0, 0x5, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa778071b550f616a, 0x84) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="009500a5058000"/24], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x6}, 0x66) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060320001123000000000000000000000000ac1414aa89"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000"], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 3.71412033s ago: executing program 3 (id=4688): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000004000"], 0xffdd) 3.680992076s ago: executing program 4 (id=4689): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="3d482000fcffffff85000000ca00000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000200000000090000007b8af8ff00000000bfa200000000000007021278b1265389b80000f8ffffffb703000008000000b7040000b50007000000000000000000451a5000fcffffff185900000100000000000000000000000da3788302ef00c6c8775c51e5d72b90962628ba604585b9e776c454c970e801aed510083f5ae64410806d305d0fa20628f7d4e88827000000000000000054988b104302902e"], &(0x7f0000000500)='GPL\x00', 0x0, 0xaf, &(0x7f0000000540)=""/175, 0x41100, 0xa, '\x00', r3, @lsm=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x6b, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair(0x12, 0x1, 0x6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="03000000004000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.400056553s ago: executing program 6 (id=4690): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfe33) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r7 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r6, &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x20100000000, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.172596771s ago: executing program 2 (id=4691): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x5, 0x300) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c2c4, 0x2, 0x2, 0x9, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x1000, 0x7}, 0x100250, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) sendmsg$kcm(r4, &(0x7f0000002880)={&(0x7f00000000c0)=@l2={0x1f, 0x6, @none, 0xffff, 0x1}, 0x80, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000000500)="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", 0x3ef}, {&(0x7f0000001680)="85a1bf05551cc03e1651964bfb1d91b3d50bef8417f306d28ad6ad8aaacbd74d7049b6ae64abaeb89f36bd0f8a8e484592087de2a43895d627783b02a4df26080f189f803c4f17f35b13fb5f3f4674bea12eb7302c05b1fe81e32d71e35315f6070d02360ad64941433e", 0x6a}, {&(0x7f00000017c0)}], 0x4}, 0x800) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000aef10000000ba8000001201", 0x2e}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r6, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d00020009000100ff3582c137", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.008217328s ago: executing program 6 (id=4692): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8, @local, 0x6, 0x4}, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x4804) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xe2115aaaaef6dd8a, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xed) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x7fffffff, 0x10}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000300)="842b7ae1c409ca932a28449d247583e7ef38799df1f00e06f9e8573158821c684672f6606095481e3ae3cc75766d61649b7629332e546ab13f5c4de6d6459486ae68e4d265d79f5845ccf97b7dcb86306363bd738cb67b5ccf3fac030c4da53372a57b8934a5bbe5f478dfab3f639eea214a1c9089c6bebcb436ce7bf400299d", &(0x7f0000000380)=""/191, &(0x7f00000004c0)="a9310901bb7bd5785acec2f52459643bfbe4e854b77be1ff4f2fd65e3445ea8d3ce64922b6205989d8b66078e78f141e6a668029", &(0x7f0000000500)="c5db05b358600b30a19b4da341a5206d6bdff88e8c4a4955d121d98f", 0x6, r5}, 0x38) 2.837280767s ago: executing program 1 (id=4693): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0xe6d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xb4de, 0x2}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x900000000000000) 2.834060688s ago: executing program 4 (id=4694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440401, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'pimreg1\x00', 0x200}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="f4000900062b2c25fe80070000e4c8030000000f238466cc00007a000000ad6e911b51818463b40006000001", 0x2c}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) 2.786612165s ago: executing program 3 (id=4695): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x74}, {0x6, 0x0, 0x4}]}) 2.785088665s ago: executing program 6 (id=4705): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="3d482000fcffffff85000000ca00000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000200000000090000007b8af8ff00000000bfa200000000000007021278b1265389b80000f8ffffffb703000008000000b7040000b50007000000000000000000451a5000fcffffff185900000100000000000000000000000da3788302ef00c6c8775c51e5d72b90962628ba604585b9e776c454c970e801aed510083f5ae64410806d305d0fa20628f7d4e88827000000000000000054988b104302902e"], &(0x7f0000000500)='GPL\x00', 0x0, 0xaf, &(0x7f0000000540)=""/175, 0x41100, 0xa, '\x00', r3, @lsm=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x6b, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair(0x12, 0x1, 0x6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="03000000004000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 977.419537ms ago: executing program 3 (id=4696): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x2000000000, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x14, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x20}, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381a989347033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21368fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000", 0x89}], 0x1}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r8, 0x8, 0x0, 0x728b83fa, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, r9, 0x24, 0x2000, 0xffffffffffffffff, @value=r11, @void, @void, @void, r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, r1, 0x1, 0x28, 0x0, @void, @void, @void, @value=r12, r10}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r13], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r14}, 0xc) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 977.063858ms ago: executing program 4 (id=4697): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000300040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01fffffff0000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 960.71945ms ago: executing program 6 (id=4707): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="3d482000fcffffff85000000ca00000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000200000000090000007b8af8ff00000000bfa200000000000007021278b1265389b80000f8ffffffb703000008000000b7040000b50007000000000000000000451a5000fcffffff185900000100000000000000000000000da3788302ef00c6c8775c51e5d72b90962628ba604585b9e776c454c970e801aed510083f5ae64410806d305d0fa20628f7d4e88827000000000000000054988b104302902e"], &(0x7f0000000500)='GPL\x00', 0x0, 0xaf, &(0x7f0000000540)=""/175, 0x41100, 0xa, '\x00', r3, @lsm=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0xd, 0x6b, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) socketpair(0x12, 0x1, 0x6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b000000000000009500a505000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="03000000004000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 960.39039ms ago: executing program 1 (id=4698): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0xff, 0x0, 0x4, 0x420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="3eaa00000000000071108100000000009500000000000000def4cfe6235222a6cec899b0f10425187455ac9ceef18f483a04ae0f9ba6cd061776080c48de3f7815e61da2f2c96649e74d7b956eba1b6291bf67801658365183bbd9488db561af908b402fb778883376e95b7bed76d44ef32ed9416cd48b3147c725b837d7d0f2c16859b8c678f34185b635bd7a14823eec8d01df0d785dd0e017ade5b5ab7ae6070394215c6b67b018421b31d5d6d3d3a42dd2067a8c1a00"/195], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (fail_nth: 3) 955.737601ms ago: executing program 2 (id=4699): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x100000, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x140) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0xc8, 0x0, 0x0, 0xa6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x4, 0x76, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10084, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0xffd7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x16, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r7, @ANYRESOCT=r7, @ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="5d97c7", @ANYRESDEC=r1, @ANYRESOCT=r6, @ANYRESOCT=r5], 0x48) recvmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)=[{}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x5, &(0x7f0000000880)=""/102, 0x66}, 0x40012100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff99, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030010000b05d25a806c8c6f94f90324fc601000010025110000053582fb8f51c18fffd99b8e8bc137153e37", 0x33fe0}], 0x1}, 0x40040) 836.229871ms ago: executing program 4 (id=4700): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000120}, 0x10) 20.309677ms ago: executing program 4 (id=4701): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0xff, 0x0, 0x4, 0x420, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="3eaa00000000000071108100000000009500000000000000def4cfe6235222a6cec899b0f10425187455ac9ceef18f483a04ae0f9ba6cd061776080c48de3f7815e61da2f2c96649e74d7b956eba1b6291bf67801658365183bbd9488db561af908b402fb778883376e95b7bed76d44ef32ed9416cd48b3147c725b837d7d0f2c16859b8c678f34185b635bd7a14823eec8d01df0d785dd0e017ade5b5ab7ae6070394215c6b67b018421b31d5d6d3d3a42dd2067a8c1a00"/195], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 0s ago: executing program 6 (id=4702): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(r4, &(0x7f0000001000)='memory.events.local\x00', 0x275a, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d4002"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (rerun: 32) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f83a"], 0xfdef) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x6, 0xfffffff7}, {0x9, 0x9}]}, @enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x695, [{0x0, 0x3}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x66}, 0x28) kernel console output (not intermixed with test programs): free:1358799 free_pcp:8160 free_cma:0 [ 431.866718][T14398] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3274'. [ 431.939926][T14149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.055829][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.093787][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.131591][T14369] Node 0 active_anon:1164kB inactive_anon:70636kB active_file:76004kB inactive_file:152272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117960kB dirty:240kB writeback:0kB shmem:49204kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11128kB pagetables:2648kB all_unreclaimable? no [ 432.390005][T14149] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.533545][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.563723][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.690888][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.698998][ T8823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.830370][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.875927][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.953775][T14369] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 433.005537][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.013090][ T8823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.152421][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 433.246673][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 433.266032][T14369] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.386142][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.441930][T14369] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 433.481401][T14369] Node 0 DMA32 free:1515600kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1164kB inactive_anon:55852kB active_file:76004kB inactive_file:152272kB unevictable:1536kB writepending:280kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:41512kB local_pcp:20160kB free_cma:0kB [ 433.524368][T14407] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3276'. [ 433.533163][T14369] lowmem_reserve[]: 0 0 0 0 0 [ 433.538666][T14369] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 433.594239][T14369] lowmem_reserve[]: 0 0 0 0 0 [ 433.599337][T14369] Node 1 Normal free:3921012kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:608kB local_pcp:0kB free_cma:0kB [ 433.669386][T14420] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3280'. [ 433.679660][T14369] lowmem_reserve[]: 0 0 0 0 0 [ 433.694904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.713346][T14369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 433.729401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.776555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.797715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.809602][T14369] Node 0 DMA32: 1608*4kB (UME) 919*8kB (UME) 575*16kB (UME) 427*32kB (UME) 29*64kB (UME) 64*128kB (UM) 59*256kB (UM) 25*512kB (UME) 9*1024kB (M) 5*2048kB (UME) 349*4096kB (UM) = 1523560kB [ 433.838079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 433.848723][T14423] ref_ctr_offset mismatch. inode: 0x17b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 433.860966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.883057][T14369] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 433.930838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.966015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 433.974139][T14369] Node 1 Normal: 229*4kB (UME) 38*8kB (UME) 33*16kB (UME) 193*32kB (UME) 82*64kB (UME) 26*128kB (UE) 14*256kB (UM) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 950*4096kB (M) = 3921012kB [ 433.979429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.018797][T14149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.099270][T14369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.135059][ T8813] tipc: Left network mode [ 434.168911][T14426] netlink: 'syz.3.3282': attribute type 10 has an invalid length. [ 434.196391][T14369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.228821][T14369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.314090][T14369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.453085][T14369] 63117 total pagecache pages [ 434.458079][T14369] 0 pages in swap cache [ 434.462605][T14369] Swap cache stats: add 0, delete 0, find 0/0 [ 434.613676][T14369] Free swap = 124996kB [ 434.626735][T14430] netlink: 'syz.1.3283': attribute type 10 has an invalid length. [ 434.659957][T14369] Total swap = 124996kB [ 434.673566][T14430] device veth0_vlan left promiscuous mode [ 434.682672][T14369] 2097051 pages RAM [ 434.702988][T14369] 0 pages HighMem/MovableOnly [ 434.708073][T14369] 411490 pages reserved [ 434.712614][T14369] 0 pages cma reserved [ 434.800438][T14430] device veth0_vlan entered promiscuous mode [ 434.888775][T14430] team0: Device veth0_vlan failed to register rx_handler [ 435.363868][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.400716][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.445843][T14149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.891562][T14467] netlink: 'syz.1.3293': attribute type 10 has an invalid length. [ 435.912454][T14467] device veth0_vlan left promiscuous mode [ 435.934506][T14467] device veth0_vlan entered promiscuous mode [ 435.979993][T14467] team0: Device veth0_vlan failed to register rx_handler [ 436.111963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.128825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.141424][T14476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.154154][T14476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.181319][T14476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.195355][T14476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.416995][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.433980][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.468078][T14149] device veth0_vlan entered promiscuous mode [ 436.513495][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.534979][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.582098][T14149] device veth1_vlan entered promiscuous mode [ 436.637316][T14502] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3301'. [ 436.744478][T14502] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 436.754449][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.817016][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.857466][T14149] device veth0_macvtap entered promiscuous mode [ 436.886605][T14511] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3304'. [ 437.157836][T14514] netlink: 'syz.1.3305': attribute type 10 has an invalid length. [ 437.171232][T14514] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3305'. [ 437.191964][T14511] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 437.219990][T14511] CPU: 0 PID: 14511 Comm: syz.3.3304 Not tainted syzkaller #0 [ 437.228061][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.238640][T14511] Call Trace: [ 437.242046][T14511] [ 437.244992][T14511] dump_stack_lvl+0x188/0x250 [ 437.250228][T14511] ? show_regs_print_info+0x20/0x20 [ 437.255690][T14511] ? load_image+0x400/0x400 [ 437.260404][T14511] sysfs_warn_dup+0x8a/0xa0 [ 437.266074][T14511] sysfs_do_create_link_sd+0xc0/0x110 [ 437.271790][T14511] device_add+0x7ed/0xfb0 [ 437.276592][T14511] wiphy_register+0x1e81/0x2c30 [ 437.282377][T14511] ? cfg80211_event_work+0x40/0x40 [ 437.287706][T14511] ? minstrel_ht_alloc+0x808/0x980 [ 437.293051][T14511] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 437.299599][T14511] ieee80211_register_hw+0x2aa1/0x3af0 [ 437.305105][T14511] ? ieee80211_tasklet_handler+0x20/0x20 [ 437.311314][T14511] ? rcu_is_watching+0x11/0xa0 [ 437.316547][T14511] ? memset+0x1e/0x40 [ 437.320867][T14511] ? hrtimer_init+0x10c/0x220 [ 437.325602][T14511] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 437.331834][T14511] hwsim_new_radio_nl+0xa6f/0xc40 [ 437.337273][T14511] genl_rcv_msg+0xcea/0xf90 [ 437.341850][T14511] ? genl_bind+0x380/0x380 [ 437.346860][T14511] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 437.352909][T14511] ? verify_lock_unused+0x140/0x140 [ 437.358446][T14511] ? perf_trace_lock+0xe4/0x390 [ 437.363599][T14511] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 437.370256][T14511] netlink_rcv_skb+0x1f5/0x440 [ 437.375417][T14511] ? genl_bind+0x380/0x380 [ 437.380268][T14511] ? netlink_ack+0xb50/0xb50 [ 437.385094][T14511] ? __lock_acquire+0x7d10/0x7d10 [ 437.390532][T14511] ? down_read+0x1aa/0x2e0 [ 437.395150][T14511] genl_rcv+0x24/0x40 [ 437.399244][T14511] netlink_unicast+0x774/0x920 [ 437.404047][T14511] netlink_sendmsg+0x8ba/0xbe0 [ 437.409047][T14511] ? netlink_getsockopt+0x570/0x570 [ 437.414658][T14511] ? aa_sock_msg_perm+0x94/0x150 [ 437.420063][T14511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 437.425461][T14511] ? security_socket_sendmsg+0x7c/0xa0 [ 437.431036][T14511] ? netlink_getsockopt+0x570/0x570 [ 437.436337][T14511] ____sys_sendmsg+0x5b7/0x8f0 [ 437.441399][T14511] ? __sys_sendmsg_sock+0x30/0x30 [ 437.446545][T14511] ? import_iovec+0x6f/0xa0 [ 437.451259][T14511] ___sys_sendmsg+0x236/0x2e0 [ 437.456387][T14511] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.461282][T14511] ? trace_event_raw_event_lock+0x270/0x270 [ 437.467679][T14511] __se_sys_sendmsg+0x1af/0x290 [ 437.473133][T14511] ? __x64_sys_sendmsg+0x80/0x80 [ 437.478142][T14511] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 437.484345][T14511] ? lockdep_hardirqs_on+0x94/0x140 [ 437.489895][T14511] do_syscall_64+0x4c/0xa0 [ 437.494486][T14511] ? clear_bhb_loop+0x30/0x80 [ 437.499273][T14511] ? clear_bhb_loop+0x30/0x80 [ 437.504178][T14511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 437.510220][T14511] RIP: 0033:0x7f3edfb1e819 [ 437.515323][T14511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.535962][T14511] RSP: 002b:00007f3eddd78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.544867][T14511] RAX: ffffffffffffffda RBX: 00007f3edfd97fa0 RCX: 00007f3edfb1e819 [ 437.552965][T14511] RDX: 0000000040000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 437.561051][T14511] RBP: 00007f3edfbb4c91 R08: 0000000000000000 R09: 0000000000000000 [ 437.569213][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.577566][T14511] R13: 00007f3edfd98038 R14: 00007f3edfd97fa0 R15: 00007ffea842aa28 [ 437.585767][T14511] [ 437.641898][T14149] device veth1_macvtap entered promiscuous mode [ 437.656303][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 437.670545][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.789485][T14521] netlink: 'syz.1.3307': attribute type 11 has an invalid length. [ 437.806764][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.812992][T14521] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.3307'. [ 437.826164][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.839276][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.851079][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.866970][T14149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.882004][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.893360][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.906018][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.917927][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.932148][T14149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.974060][T14149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.993576][T14149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.006757][T14149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.018050][T14149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.055408][T14149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.089462][T14149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.150584][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.184372][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.204710][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.243079][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.283805][T14521] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 438.488007][T14520] delete_channel: no stack [ 438.588212][T14536] netlink: 'syz.4.3312': attribute type 10 has an invalid length. [ 438.857388][T14536] device veth0_vlan left promiscuous mode [ 439.021571][T14536] device veth0_vlan entered promiscuous mode [ 439.058910][T14536] team0: Device veth0_vlan failed to register rx_handler [ 439.498128][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.560433][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.569773][T14567] netlink: 'syz.1.3318': attribute type 3 has an invalid length. [ 439.580530][T14569] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3321'. [ 439.602787][T14567] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3318'. [ 439.649790][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.670830][T14569] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3321'. [ 439.675838][ T8795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.755738][ T8795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.759639][T14569] device hsr_slave_0 left promiscuous mode [ 439.988000][T14569] device hsr_slave_1 left promiscuous mode [ 440.089159][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.226183][T14583] netlink: 'syz.1.3326': attribute type 39 has an invalid length. [ 440.394997][T14583] device hsr_slave_1 left promiscuous mode [ 440.519902][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.526510][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.625182][T14591] netlink: 'syz.4.3328': attribute type 10 has an invalid length. [ 440.868396][T14591] team0: Device xfrm0 is of different type [ 441.372412][T14604] netlink: 'syz.4.3333': attribute type 10 has an invalid length. [ 441.413295][T14604] device veth0_vlan left promiscuous mode [ 441.432702][T14604] device veth0_vlan entered promiscuous mode [ 441.452646][T14604] team0: Device veth0_vlan failed to register rx_handler [ 441.736565][T14625] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3340'. [ 441.754105][T14625] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3340'. [ 441.947218][T14636] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3341'. [ 442.151196][T14639] device syzkaller0 entered promiscuous mode [ 442.232825][T14647] ref_ctr_offset mismatch. inode: 0x31 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 442.263530][ T8813] bond0: (slave wlan1): Releasing backup interface [ 445.291353][ T8813] device veth0_to_bridge left promiscuous mode [ 445.408649][ T8813] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 445.509762][ T8813] device hsr_slave_0 left promiscuous mode [ 445.693877][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.701815][ T8813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.790217][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.863640][ T8813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.005008][ T8813] device veth1_vlan left promiscuous mode [ 446.462651][T14689] netlink: 'syz.1.3354': attribute type 1 has an invalid length. [ 446.480694][T14689] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3354'. [ 446.655149][T14699] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3355'. [ 446.706806][T14699] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3355'. [ 446.958581][ T8813] team0 (unregistering): Port device team_slave_1 removed [ 447.001808][ T8813] team0 (unregistering): Port device team_slave_0 removed [ 447.029700][ T8813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.059919][ T8813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.093749][ T8813] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 447.205553][ T8813] bond0 (unregistering): (slave team0): Releasing backup interface [ 447.241757][ T8813] bond0 (unregistering): Released all slaves [ 447.259787][T14683] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3353'. [ 447.542758][T14718] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3359'. [ 447.591946][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.609678][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.833556][T14715] device bridge_slave_1 left promiscuous mode [ 447.851491][T14715] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.881812][T14715] device bridge_slave_0 left promiscuous mode [ 447.891447][T14715] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.592327][T14745] ref_ctr_offset mismatch. inode: 0x175 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 449.252648][T14754] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3373'. [ 449.348724][T14754] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 451.703063][T10404] Bluetooth: hci4: command 0x0409 tx timeout [ 452.293934][T14766] netlink: 'syz.6.3375': attribute type 10 has an invalid length. [ 452.311056][T14766] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3375'. [ 452.558185][T14786] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.565744][T14786] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.727433][T14783] device bridge_slave_1 left promiscuous mode [ 452.740957][T14783] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.812262][T14783] device bridge_slave_0 left promiscuous mode [ 452.837709][T14783] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.276918][T14810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3386'. [ 453.325515][T14807] netlink: 'syz.6.3385': attribute type 1 has an invalid length. [ 453.380777][T14807] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3385'. [ 453.433696][ T8813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.555375][T14768] chnl_net:caif_netlink_parms(): no params data found [ 453.619801][ T8813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.755920][T14768] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.763615][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.772349][T14768] device bridge_slave_0 entered promiscuous mode [ 453.783811][T10405] Bluetooth: hci4: command 0x041b tx timeout [ 453.826596][ T8813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.918809][T14768] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.941992][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.964598][T14768] device bridge_slave_1 entered promiscuous mode [ 453.985743][T14845] netlink: 'syz.1.3393': attribute type 10 has an invalid length. [ 454.009980][T14848] netlink: 209820 bytes leftover after parsing attributes in process `syz.6.3395'. [ 454.132466][T14845] team0: Device xfrm0 is of different type [ 454.257142][ T8813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.342740][T14768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.371850][T14867] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.379746][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.443145][T14870] device bridge_slave_1 left promiscuous mode [ 454.449559][T14870] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.489750][T14870] device bridge_slave_0 left promiscuous mode [ 454.506627][T14870] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.591625][T14768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.619432][T14877] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3402'. [ 454.700059][T14768] team0: Port device team_slave_0 added [ 454.784672][T14768] team0: Port device team_slave_1 added [ 454.946748][T14768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.013872][T14768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.149161][T14768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.176852][T14768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.243118][T14768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.366931][T14918] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3413'. [ 455.377107][T14768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.393974][ T8813] tipc: Left network mode [ 455.564675][T14922] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.3414'. [ 455.597488][T14768] device hsr_slave_0 entered promiscuous mode [ 455.632266][T14768] device hsr_slave_1 entered promiscuous mode [ 455.642188][T14768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.659635][T14768] Cannot create hsr debugfs directory [ 455.683176][T14922] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.3414'. [ 455.863585][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 456.526789][T14949] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3421'. [ 456.780175][ T8813] device erspan0 left promiscuous mode [ 456.825348][ T8813] syzkaller: port 1(erspan0) entered disabled state [ 457.069329][T14975] device syzkaller0 entered promiscuous mode [ 457.120064][T14986] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 457.437118][T14768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.493994][T14768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.605544][T14768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.742021][T14768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.947832][T10403] Bluetooth: hci4: command 0x0419 tx timeout [ 458.239365][T15016] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3443'. [ 458.332375][T15013] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3442'. [ 458.495529][T14768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.548913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 458.572202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.653622][T14768] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.699359][T15040] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3449'. [ 458.825201][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.886866][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.000657][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.008071][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.103040][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.164166][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.227019][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.234587][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.274419][T15040] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.3449'. [ 459.326964][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.338869][T15039] delete_channel: no stack [ 459.354094][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.443649][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.518145][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.574016][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.678644][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.766912][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.829458][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.875117][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.898777][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.954738][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.994062][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.033240][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.093615][T15081] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3461'. [ 460.265306][T15088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3464'. [ 460.530438][T15090] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3463'. [ 460.883758][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.910626][T15104] netlink: 'syz.4.3467': attribute type 1 has an invalid length. [ 460.937917][T15104] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3467'. [ 460.960108][ T8823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 461.006551][T14768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.045722][ T8813] team0: Port device wlan1 removed [ 461.101382][T15118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3469'. [ 461.173877][T15125] syz.4.3471[15125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.183956][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 461.263625][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 461.340678][T15124] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3470'. [ 461.441546][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 461.459397][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 461.544266][ T8813] device veth0_to_bridge left promiscuous mode [ 461.559684][ T8813] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 461.658495][ T8813] device hsr_slave_0 left promiscuous mode [ 461.677136][ T8813] device bridge_slave_0 left promiscuous mode [ 461.684725][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.945175][ T8813] team0 (unregistering): Port device team_slave_1 removed [ 461.972574][ T8813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.990752][ T8813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.008588][ T8813] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 462.054656][ T8813] bond0 (unregistering): (slave team0): Releasing backup interface [ 462.083038][ T8813] bond0 (unregistering): Released all slaves [ 462.162812][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.172778][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.194983][T14768] device veth0_vlan entered promiscuous mode [ 462.268800][T14768] device veth1_vlan entered promiscuous mode [ 462.454361][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 462.478892][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 462.488812][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 462.499513][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.543104][T15162] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 462.566237][T14768] device veth0_macvtap entered promiscuous mode [ 462.734083][T15172] netlink: 'syz.1.3483': attribute type 10 has an invalid length. [ 462.743931][T14768] device veth1_macvtap entered promiscuous mode [ 462.837789][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.889677][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.910138][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.923575][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.934224][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.947672][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.036681][T14768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.059243][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.075590][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.105988][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.132380][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.146679][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.167377][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.184454][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.199203][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.212189][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.233754][T14768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.272588][T15195] __nla_validate_parse: 2 callbacks suppressed [ 463.272608][T15195] netlink: 566 bytes leftover after parsing attributes in process `syz.1.3488'. [ 463.330292][T15195] device veth0_to_bond entered promiscuous mode [ 463.405910][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.429438][ T8806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.480040][T14768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.519969][T14768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.569740][T14768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.639306][T14768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.063184][ T8817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.071544][ T8817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.394769][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 464.467653][T15229] netlink: 'syz.4.3497': attribute type 4 has an invalid length. [ 464.522030][T15229] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3497'. [ 464.604946][T15233] netlink: 'syz.6.3498': attribute type 1 has an invalid length. [ 464.658498][T15229] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 464.697222][T15233] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.3498'. [ 464.761483][ T8797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.775353][ T8797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.787301][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 465.327919][T15251] netlink: 63747 bytes leftover after parsing attributes in process `syz.2.3501'. [ 465.694700][T15268] netlink: 'syz.3.3505': attribute type 1 has an invalid length. [ 465.738008][T15268] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3505'. [ 465.968901][T15274] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3506'. [ 466.608084][T15290] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.3509'. [ 466.719305][T15290] bridge_slave_1: default FDB implementation only supports local addresses [ 466.942233][T15309] -1: renamed from syzkaller0 [ 467.398962][T15333] netlink: 'syz.4.3521': attribute type 11 has an invalid length. [ 467.493723][T15333] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.3521'. [ 467.756735][T15332] delete_channel: no stack [ 468.050411][T15360] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3527'. [ 468.090421][T15363] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3528'. [ 468.142517][T15360] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 468.377956][T15366] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 468.429610][T15366] device syzkaller0 entered promiscuous mode [ 468.487378][T15379] netlink: 'syz.3.3531': attribute type 10 has an invalid length. [ 468.529562][T15379] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3531'. [ 468.861308][T15363] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 468.883317][T15363] CPU: 0 PID: 15363 Comm: syz.6.3528 Not tainted syzkaller #0 [ 468.891252][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.901711][T15363] Call Trace: [ 468.905278][T15363] [ 468.908533][T15363] dump_stack_lvl+0x188/0x250 [ 468.913509][T15363] ? show_regs_print_info+0x20/0x20 [ 468.919017][T15363] ? load_image+0x400/0x400 [ 468.923934][T15363] sysfs_warn_dup+0x8a/0xa0 [ 468.928856][T15363] sysfs_do_create_link_sd+0xc0/0x110 [ 468.934433][T15363] device_add+0x7ed/0xfb0 [ 468.938941][T15363] wiphy_register+0x1e81/0x2c30 [ 468.944405][T15363] ? cfg80211_event_work+0x40/0x40 [ 468.949824][T15363] ? minstrel_ht_alloc+0x808/0x980 [ 468.955167][T15363] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 468.961775][T15363] ieee80211_register_hw+0x2aa1/0x3af0 [ 468.967677][T15363] ? ieee80211_tasklet_handler+0x20/0x20 [ 468.973817][T15363] ? rcu_is_watching+0x11/0xa0 [ 468.978802][T15363] ? memset+0x1e/0x40 [ 468.983005][T15363] ? hrtimer_init+0x10c/0x220 [ 468.987902][T15363] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 468.994416][T15363] hwsim_new_radio_nl+0xa6f/0xc40 [ 468.999873][T15363] genl_rcv_msg+0xcea/0xf90 [ 469.005141][T15363] ? genl_bind+0x380/0x380 [ 469.009906][T15363] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 469.015400][T15363] ? verify_lock_unused+0x140/0x140 [ 469.020959][T15363] ? perf_trace_lock+0xe4/0x390 [ 469.026027][T15363] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 469.032708][T15363] netlink_rcv_skb+0x1f5/0x440 [ 469.037851][T15363] ? genl_bind+0x380/0x380 [ 469.042298][T15363] ? netlink_ack+0xb50/0xb50 [ 469.047384][T15363] ? __lock_acquire+0x7d10/0x7d10 [ 469.052932][T15363] ? down_read+0x1aa/0x2e0 [ 469.057498][T15363] genl_rcv+0x24/0x40 [ 469.061885][T15363] netlink_unicast+0x774/0x920 [ 469.067283][T15363] netlink_sendmsg+0x8ba/0xbe0 [ 469.072374][T15363] ? netlink_getsockopt+0x570/0x570 [ 469.077719][T15363] ? aa_sock_msg_perm+0x94/0x150 [ 469.083043][T15363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 469.088700][T15363] ? security_socket_sendmsg+0x7c/0xa0 [ 469.094538][T15363] ? netlink_getsockopt+0x570/0x570 [ 469.100242][T15363] ____sys_sendmsg+0x5b7/0x8f0 [ 469.105067][T15363] ? __sys_sendmsg_sock+0x30/0x30 [ 469.110328][T15363] ? import_iovec+0x6f/0xa0 [ 469.115055][T15363] ___sys_sendmsg+0x236/0x2e0 [ 469.119908][T15363] ? __sys_sendmsg+0x2a0/0x2a0 [ 469.125012][T15363] ? trace_event_raw_event_lock+0x270/0x270 [ 469.131127][T15363] __se_sys_sendmsg+0x1af/0x290 [ 469.136278][T15363] ? __x64_sys_sendmsg+0x80/0x80 [ 469.141649][T15363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 469.148145][T15363] ? lockdep_hardirqs_on+0x94/0x140 [ 469.153814][T15363] do_syscall_64+0x4c/0xa0 [ 469.158510][T15363] ? clear_bhb_loop+0x30/0x80 [ 469.163404][T15363] ? clear_bhb_loop+0x30/0x80 [ 469.169161][T15363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 469.175102][T15363] RIP: 0033:0x7f3cd8788819 [ 469.179816][T15363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.200096][T15363] RSP: 002b:00007f3cd69e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.208631][T15363] RAX: ffffffffffffffda RBX: 00007f3cd8a01fa0 RCX: 00007f3cd8788819 [ 469.216711][T15363] RDX: 0000100000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 469.224995][T15363] RBP: 00007f3cd881ec91 R08: 0000000000000000 R09: 0000000000000000 [ 469.233253][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.241988][T15363] R13: 00007f3cd8a02038 R14: 00007f3cd8a01fa0 R15: 00007ffdac031688 [ 469.250702][T15363] [ 470.319254][T15423] netlink: 'syz.4.3543': attribute type 9 has an invalid length. [ 470.349776][T15423] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3543'. [ 470.741162][T15430] netlink: 'syz.4.3543': attribute type 9 has an invalid length. [ 470.749729][T15430] netlink: 164032 bytes leftover after parsing attributes in process `syz.4.3543'. [ 470.927015][T15444] netlink: 'syz.3.3550': attribute type 10 has an invalid length. [ 471.230921][T15444] team0: Device xfrm0 is of different type [ 471.275643][T15450] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3552'. [ 471.304104][T15455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3554'. [ 471.558265][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.566399][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.614285][T15469] device bridge_slave_1 left promiscuous mode [ 471.637364][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.759599][T15469] device bridge_slave_0 left promiscuous mode [ 471.770216][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.144780][T15500] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3568'. [ 472.180868][T15500] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3568'. [ 472.313400][T15509] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 472.373163][T15509] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.3572'. [ 473.082147][T15538] netlink: 'syz.6.3583': attribute type 29 has an invalid length. [ 473.148779][T15538] netlink: 'syz.6.3583': attribute type 29 has an invalid length. [ 473.496181][T15553] device syzkaller0 entered promiscuous mode [ 473.983250][T15584] netlink: 55191 bytes leftover after parsing attributes in process `syz.4.3595'. [ 474.031192][T15584] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3595'. [ 474.105303][T15586] netlink: 'syz.3.3593': attribute type 5 has an invalid length. [ 474.123133][T15586] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3593'. [ 474.275278][T15588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3597'. [ 474.803528][T15617] netlink: 'syz.6.3603': attribute type 21 has an invalid length. [ 474.857518][T15619] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.3603'. [ 474.888971][T15616] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3604'. [ 474.937190][T15616] netlink: 20624 bytes leftover after parsing attributes in process `syz.1.3604'. [ 474.967842][T15616] tipc: Started in network mode [ 474.988357][T15616] tipc: Node identity d, cluster identity 46 [ 475.021762][T15616] tipc: Node number set to 13 [ 475.056494][T15615] delete_channel: no stack [ 475.699146][T15657] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3614'. [ 475.733454][T15658] netlink: 'syz.2.3615': attribute type 21 has an invalid length. [ 476.315959][T15671] netlink: 'syz.6.3619': attribute type 1 has an invalid length. [ 476.409717][T15671] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3619'. [ 476.605260][T15679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3621'. [ 477.789074][T15711] netlink: 'syz.2.3632': attribute type 10 has an invalid length. [ 478.341108][T15725] netlink: 'syz.6.3636': attribute type 10 has an invalid length. [ 478.411102][T15725] device bridge_slave_1 left promiscuous mode [ 478.445185][T15725] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.524534][T15732] netlink: 'syz.1.3637': attribute type 10 has an invalid length. [ 478.546814][T15732] device syz_tun entered promiscuous mode [ 478.592630][T15732] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 478.741081][T15731] netlink: 'syz.1.3637': attribute type 10 has an invalid length. [ 478.788542][T15731] netlink: 'syz.1.3637': attribute type 10 has an invalid length. [ 478.880378][T15737] netlink: 'syz.1.3637': attribute type 9 has an invalid length. [ 479.898953][T15785] netlink: 'syz.4.3655': attribute type 39 has an invalid length. [ 480.164052][T15798] __nla_validate_parse: 4 callbacks suppressed [ 480.164071][T15798] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3657'. [ 480.596045][T15806] netlink: 'syz.3.3663': attribute type 10 has an invalid length. [ 480.846032][T15806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.880417][T15806] team0: Port device bond0 added [ 480.899116][T15820] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.410212][T15843] netlink: 'syz.4.3676': attribute type 11 has an invalid length. [ 481.453738][T15843] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.3676'. [ 481.497990][T15843] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 481.554380][T15843] CPU: 1 PID: 15843 Comm: syz.4.3676 Not tainted syzkaller #0 [ 481.562256][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.572806][T15843] Call Trace: [ 481.576128][T15843] [ 481.579187][T15843] dump_stack_lvl+0x188/0x250 [ 481.584433][T15843] ? show_regs_print_info+0x20/0x20 [ 481.589760][T15843] ? load_image+0x400/0x400 [ 481.594388][T15843] sysfs_warn_dup+0x8a/0xa0 [ 481.599005][T15843] sysfs_do_create_link_sd+0xc0/0x110 [ 481.604628][T15843] device_add+0x7ed/0xfb0 [ 481.609274][T15843] wiphy_register+0x1e81/0x2c30 [ 481.614456][T15843] ? cfg80211_event_work+0x40/0x40 [ 481.619779][T15843] ? minstrel_ht_alloc+0x808/0x980 [ 481.625177][T15843] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 481.631538][T15843] ieee80211_register_hw+0x2aa1/0x3af0 [ 481.637045][T15843] ? ieee80211_tasklet_handler+0x20/0x20 [ 481.642938][T15843] ? rcu_is_watching+0x11/0xa0 [ 481.648004][T15843] ? memset+0x1e/0x40 [ 481.652017][T15843] ? hrtimer_init+0x10c/0x220 [ 481.656999][T15843] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 481.663431][T15843] hwsim_new_radio_nl+0xa6f/0xc40 [ 481.668765][T15843] genl_rcv_msg+0xcea/0xf90 [ 481.673407][T15843] ? genl_bind+0x380/0x380 [ 481.677935][T15843] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 481.683531][T15843] ? verify_lock_unused+0x140/0x140 [ 481.689302][T15843] ? kmalloc_large_node+0xf2/0x190 [ 481.694802][T15843] ? dev_queue_xmit+0x20/0x20 [ 481.700334][T15843] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 481.707503][T15843] netlink_rcv_skb+0x1f5/0x440 [ 481.712724][T15843] ? genl_bind+0x380/0x380 [ 481.717354][T15843] ? netlink_ack+0xb50/0xb50 [ 481.721968][T15843] ? __lock_acquire+0x7d10/0x7d10 [ 481.727230][T15843] ? down_read+0x1aa/0x2e0 [ 481.731672][T15843] genl_rcv+0x24/0x40 [ 481.736155][T15843] netlink_unicast+0x774/0x920 [ 481.741381][T15843] netlink_sendmsg+0x8ba/0xbe0 [ 481.746256][T15843] ? netlink_getsockopt+0x570/0x570 [ 481.752225][T15843] ? aa_sock_msg_perm+0x94/0x150 [ 481.757641][T15843] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 481.763132][T15843] ? security_socket_sendmsg+0x7c/0xa0 [ 481.768706][T15843] ? netlink_getsockopt+0x570/0x570 [ 481.773918][T15843] ____sys_sendmsg+0x5b7/0x8f0 [ 481.778838][T15843] ? __sys_sendmsg_sock+0x30/0x30 [ 481.784253][T15843] ? import_iovec+0x6f/0xa0 [ 481.789041][T15843] ___sys_sendmsg+0x236/0x2e0 [ 481.793934][T15843] ? __sys_sendmsg+0x2a0/0x2a0 [ 481.799251][T15843] ? percpu_counter_add_batch+0x13b/0x160 [ 481.805431][T15843] __se_sys_sendmsg+0x1af/0x290 [ 481.810333][T15843] ? __x64_sys_sendmsg+0x80/0x80 [ 481.815421][T15843] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 481.822183][T15843] ? lockdep_hardirqs_on+0x94/0x140 [ 481.827882][T15843] do_syscall_64+0x4c/0xa0 [ 481.833190][T15843] ? clear_bhb_loop+0x30/0x80 [ 481.838117][T15843] ? clear_bhb_loop+0x30/0x80 [ 481.842817][T15843] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.848996][T15843] RIP: 0033:0x7f689d503819 [ 481.853699][T15843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.874602][T15843] RSP: 002b:00007f689b75d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.884085][T15843] RAX: ffffffffffffffda RBX: 00007f689d77cfa0 RCX: 00007f689d503819 [ 481.892860][T15843] RDX: 0000000000000600 RSI: 0000200000000000 RDI: 0000000000000004 [ 481.900967][T15843] RBP: 00007f689d599c91 R08: 0000000000000000 R09: 0000000000000000 [ 481.909151][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.917838][T15843] R13: 00007f689d77d038 R14: 00007f689d77cfa0 R15: 00007ffd24a0f298 [ 481.926581][T15843] [ 482.415375][T15842] delete_channel: no stack [ 482.750417][T15870] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3683'. [ 482.775892][T15870] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 482.940062][T15880] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.3687'. [ 483.189053][T15884] netlink: 'syz.6.3688': attribute type 10 has an invalid length. [ 483.233030][T15884] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3688'. [ 483.251896][T15891] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3690'. [ 483.301300][T15891] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 483.913403][T15926] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.986515][T15933] device bridge_slave_0 left promiscuous mode [ 484.073219][T15933] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.251266][T15938] netlink: 'syz.2.3706': attribute type 10 has an invalid length. [ 484.432152][T15938] team0: Device xfrm0 is of different type [ 484.762259][T15943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3708'. [ 484.798384][T15955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 485.147504][T15973] netlink: 'syz.6.3719': attribute type 3 has an invalid length. [ 485.182022][T15975] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3720'. [ 485.193537][T15973] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3719'. [ 485.206497][T15978] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3721'. [ 485.239675][T15978] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3721'. [ 485.624792][T16003] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.3727'. [ 485.674421][T16006] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3730'. [ 485.712307][T16006] netlink: 174512 bytes leftover after parsing attributes in process `syz.1.3730'. [ 486.147990][T16010] mac80211_hwsim hwsim97 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.724062][T16044] device syzkaller0 entered promiscuous mode [ 486.769864][T16049] netlink: 'syz.2.3743': attribute type 4 has an invalid length. [ 486.782838][T16049] netlink: 'syz.2.3743': attribute type 3 has an invalid length. [ 486.800046][T16049] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.3743'. [ 487.194691][T16056] netlink: 'syz.4.3747': attribute type 10 has an invalid length. [ 487.254358][T16056] team0: Device wg1 is of different type [ 487.306580][T16063] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3748'. [ 487.691412][T16081] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3755'. [ 487.755960][T16087] tipc: Started in network mode [ 487.823289][T16087] tipc: Node identity d, cluster identity 46 [ 487.829713][T16087] tipc: Node number set to 13 [ 487.891114][T16084] delete_channel: no stack [ 488.252295][T16107] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 488.354709][ T8797] wlan1: Trigger new scan to find an IBSS to join [ 489.185130][T16130] netlink: 'syz.2.3771': attribute type 1 has an invalid length. [ 489.755287][T16136] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 489.875679][T16136] device geneve0 entered promiscuous mode [ 490.069115][T16136] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 490.989522][T16177] __nla_validate_parse: 7 callbacks suppressed [ 490.989549][T16177] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3786'. [ 491.197698][T16175] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 491.576777][T16193] netlink: 'syz.2.3791': attribute type 10 has an invalid length. [ 491.801547][T16208] netlink: 'syz.4.3793': attribute type 4 has an invalid length. [ 491.844939][T16208] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3793'. [ 493.313257][ T8817] wlan1: Trigger new scan to find an IBSS to join [ 493.375410][T16246] netlink: 'syz.1.3808': attribute type 39 has an invalid length. [ 493.461626][T16242] netlink: 'syz.6.3805': attribute type 3 has an invalid length. [ 493.519090][T16242] netlink: 'syz.6.3805': attribute type 1 has an invalid length. [ 493.793246][T16242] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.3805'. [ 494.371389][ T8806] wlan1: Creating new IBSS network, BSSID 52:54:97:3f:d1:b7 [ 494.514405][T16296] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.3823'. [ 494.709949][T16296] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.3823'. [ 495.279491][T16328] netlink: 'syz.6.3833': attribute type 11 has an invalid length. [ 495.339877][T16328] netlink: 184116 bytes leftover after parsing attributes in process `syz.6.3833'. [ 495.425826][T16328] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 495.531143][T16328] CPU: 1 PID: 16328 Comm: syz.6.3833 Not tainted syzkaller #0 [ 495.538878][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 495.549083][T16328] Call Trace: [ 495.552409][T16328] [ 495.555487][T16328] dump_stack_lvl+0x188/0x250 [ 495.560424][T16328] ? show_regs_print_info+0x20/0x20 [ 495.565941][T16328] ? load_image+0x400/0x400 [ 495.570544][T16328] sysfs_warn_dup+0x8a/0xa0 [ 495.575358][T16328] sysfs_do_create_link_sd+0xc0/0x110 [ 495.580872][T16328] device_add+0x7ed/0xfb0 [ 495.585322][T16328] wiphy_register+0x1e81/0x2c30 [ 495.590384][T16328] ? cfg80211_event_work+0x40/0x40 [ 495.595805][T16328] ? minstrel_ht_alloc+0x808/0x980 [ 495.601077][T16328] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 495.607303][T16328] ieee80211_register_hw+0x2aa1/0x3af0 [ 495.612904][T16328] ? ieee80211_tasklet_handler+0x20/0x20 [ 495.618777][T16328] ? rcu_is_watching+0x11/0xa0 [ 495.623849][T16328] ? memset+0x1e/0x40 [ 495.627962][T16328] ? hrtimer_init+0x10c/0x220 [ 495.632875][T16328] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 495.638924][T16328] hwsim_new_radio_nl+0xa6f/0xc40 [ 495.644530][T16328] genl_rcv_msg+0xcea/0xf90 [ 495.649344][T16328] ? genl_bind+0x380/0x380 [ 495.654243][T16328] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 495.659591][T16328] ? verify_lock_unused+0x140/0x140 [ 495.665095][T16328] ? kmalloc_large_node+0xf2/0x190 [ 495.670301][T16328] ? dev_queue_xmit+0x20/0x20 [ 495.675044][T16328] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 495.681783][T16328] netlink_rcv_skb+0x1f5/0x440 [ 495.686609][T16328] ? genl_bind+0x380/0x380 [ 495.691296][T16328] ? netlink_ack+0xb50/0xb50 [ 495.695949][T16328] ? __lock_acquire+0x7d10/0x7d10 [ 495.701057][T16328] ? down_read+0x1aa/0x2e0 [ 495.705635][T16328] genl_rcv+0x24/0x40 [ 495.709689][T16328] netlink_unicast+0x774/0x920 [ 495.714632][T16328] netlink_sendmsg+0x8ba/0xbe0 [ 495.720187][T16328] ? netlink_getsockopt+0x570/0x570 [ 495.725991][T16328] ? aa_sock_msg_perm+0x94/0x150 [ 495.731450][T16328] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 495.736881][T16328] ? security_socket_sendmsg+0x7c/0xa0 [ 495.742865][T16328] ? netlink_getsockopt+0x570/0x570 [ 495.748106][T16328] ____sys_sendmsg+0x5b7/0x8f0 [ 495.753393][T16328] ? __sys_sendmsg_sock+0x30/0x30 [ 495.758962][T16328] ? import_iovec+0x6f/0xa0 [ 495.763796][T16328] ___sys_sendmsg+0x236/0x2e0 [ 495.768599][T16328] ? __sys_sendmsg+0x2a0/0x2a0 [ 495.773645][T16328] ? percpu_counter_add_batch+0x13b/0x160 [ 495.779617][T16328] __se_sys_sendmsg+0x1af/0x290 [ 495.784708][T16328] ? __x64_sys_sendmsg+0x80/0x80 [ 495.789966][T16328] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 495.796136][T16328] ? lockdep_hardirqs_on+0x94/0x140 [ 495.801572][T16328] do_syscall_64+0x4c/0xa0 [ 495.806195][T16328] ? clear_bhb_loop+0x30/0x80 [ 495.811138][T16328] ? clear_bhb_loop+0x30/0x80 [ 495.815868][T16328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.822003][T16328] RIP: 0033:0x7f3cd8788819 [ 495.826572][T16328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.846664][T16328] RSP: 002b:00007f3cd69e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.855751][T16328] RAX: ffffffffffffffda RBX: 00007f3cd8a01fa0 RCX: 00007f3cd8788819 [ 495.864121][T16328] RDX: 0000000000000700 RSI: 0000200000000000 RDI: 0000000000000004 [ 495.872392][T16328] RBP: 00007f3cd881ec91 R08: 0000000000000000 R09: 0000000000000000 [ 495.880865][T16328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.889275][T16328] R13: 00007f3cd8a02038 R14: 00007f3cd8a01fa0 R15: 00007ffdac031688 [ 495.897654][T16328] [ 495.965051][T16340] netlink: 'syz.3.3834': attribute type 21 has an invalid length. [ 495.983496][T16340] netlink: 'syz.3.3834': attribute type 6 has an invalid length. [ 496.038719][T16340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3834'. [ 496.226038][T16343] delete_channel: no stack [ 496.507259][T16353] netlink: 'syz.6.3839': attribute type 10 has an invalid length. [ 496.547843][T16353] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3839'. [ 496.576818][T16357] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 496.593458][T16357] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 496.615768][T16357] device veth0_to_bridge entered promiscuous mode [ 496.949328][T16368] netlink: 'syz.3.3844': attribute type 4 has an invalid length. [ 496.966934][T16370] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3845'. [ 496.979489][T16368] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3844'. [ 497.093381][T16370] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 498.208504][T16408] netlink: 'syz.4.3859': attribute type 10 has an invalid length. [ 498.329404][T16408] team0: Device xfrm0 is of different type [ 498.656498][T16405] netlink: 'syz.1.3857': attribute type 10 has an invalid length. [ 498.861105][T16405] team0: Device wg1 is of different type [ 498.888371][T16416] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3861'. [ 498.933511][T16419] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3862'. [ 499.061064][T16424] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.3864'. [ 499.507042][T16446] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3873'. [ 499.550121][T16446] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3873'. [ 500.351213][T16491] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3890'. [ 500.866271][T16500] device syzkaller0 entered promiscuous mode [ 500.930282][T16496] netlink: 'syz.3.3893': attribute type 9 has an invalid length. [ 501.325119][T16517] __nla_validate_parse: 4 callbacks suppressed [ 501.325139][T16517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3899'. [ 501.689485][T16534] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3904'. [ 501.897616][T16537] netlink: 'syz.6.3906': attribute type 32 has an invalid length. [ 501.946741][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.953363][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.053028][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'. [ 502.068014][T16545] delete_channel: no stack [ 503.187307][T16587] netlink: 'syz.4.3920': attribute type 1 has an invalid length. [ 503.218372][T16587] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3920'. [ 503.296882][T16591] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3922'. [ 503.324763][T16589] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3921'. [ 503.485907][T16602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3925'. [ 503.741572][T16606] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3928'. [ 504.034250][T10401] Bluetooth: hci0: command 0x0406 tx timeout [ 504.181576][T16638] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 504.472561][T16647] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.3939'. [ 504.605288][T16652] netlink: 'syz.1.3941': attribute type 4 has an invalid length. [ 504.619524][T16653] netlink: 'syz.1.3941': attribute type 4 has an invalid length. [ 504.628426][T16652] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.3941'. [ 504.739273][T16657] netlink: 'syz.4.3942': attribute type 10 has an invalid length. [ 505.235713][T16671] netlink: 'syz.2.3947': attribute type 10 has an invalid length. [ 505.484529][T16671] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 505.823022][T16700] netlink: 'syz.3.3956': attribute type 39 has an invalid length. [ 506.043334][T16700] device hsr_slave_1 left promiscuous mode [ 506.199341][T16705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 506.399262][T16718] __nla_validate_parse: 3 callbacks suppressed [ 506.399283][T16718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3962'. [ 507.097304][T16747] netlink: 'syz.4.3971': attribute type 21 has an invalid length. [ 508.403476][T16781] delete_channel: no stack [ 508.856192][T16814] netlink: 'syz.2.3991': attribute type 11 has an invalid length. [ 509.085599][T16820] netlink: 'syz.4.3993': attribute type 10 has an invalid length. [ 509.113489][T16820] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3993'. [ 509.251776][T16825] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3995'. [ 509.312060][T16825] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 509.352974][T16825] CPU: 0 PID: 16825 Comm: syz.1.3995 Not tainted syzkaller #0 [ 509.361102][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 509.371374][T16825] Call Trace: [ 509.374805][T16825] [ 509.378167][T16825] dump_stack_lvl+0x188/0x250 [ 509.383313][T16825] ? show_regs_print_info+0x20/0x20 [ 509.388705][T16825] ? load_image+0x400/0x400 [ 509.393658][T16825] sysfs_warn_dup+0x8a/0xa0 [ 509.398570][T16825] sysfs_do_create_link_sd+0xc0/0x110 [ 509.404292][T16825] device_add+0x7ed/0xfb0 [ 509.408646][T16825] wiphy_register+0x1e81/0x2c30 [ 509.413585][T16825] ? cfg80211_event_work+0x40/0x40 [ 509.418996][T16825] ? minstrel_ht_alloc+0x808/0x980 [ 509.424333][T16825] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 509.430897][T16825] ieee80211_register_hw+0x2aa1/0x3af0 [ 509.436910][T16825] ? ieee80211_tasklet_handler+0x20/0x20 [ 509.442706][T16825] ? rcu_is_watching+0x11/0xa0 [ 509.447530][T16825] ? memset+0x1e/0x40 [ 509.451741][T16825] ? hrtimer_init+0x10c/0x220 [ 509.456646][T16825] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 509.462528][T16825] hwsim_new_radio_nl+0xa6f/0xc40 [ 509.467707][T16825] genl_rcv_msg+0xcea/0xf90 [ 509.472366][T16825] ? genl_bind+0x380/0x380 [ 509.476840][T16825] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 509.482082][T16825] ? verify_lock_unused+0x140/0x140 [ 509.487354][T16825] ? kmalloc_large_node+0xf2/0x190 [ 509.492613][T16825] ? dev_queue_xmit+0x20/0x20 [ 509.497339][T16825] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 509.504170][T16825] netlink_rcv_skb+0x1f5/0x440 [ 509.509063][T16825] ? genl_bind+0x380/0x380 [ 509.513511][T16825] ? netlink_ack+0xb50/0xb50 [ 509.518346][T16825] ? __lock_acquire+0x7d10/0x7d10 [ 509.523673][T16825] ? down_read+0x1aa/0x2e0 [ 509.528209][T16825] genl_rcv+0x24/0x40 [ 509.532300][T16825] netlink_unicast+0x774/0x920 [ 509.537204][T16825] netlink_sendmsg+0x8ba/0xbe0 [ 509.541986][T16825] ? netlink_getsockopt+0x570/0x570 [ 509.547376][T16825] ? aa_sock_msg_perm+0x94/0x150 [ 509.552479][T16825] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 509.557778][T16825] ? security_socket_sendmsg+0x7c/0xa0 [ 509.563245][T16825] ? netlink_getsockopt+0x570/0x570 [ 509.568626][T16825] ____sys_sendmsg+0x5b7/0x8f0 [ 509.573524][T16825] ? __sys_sendmsg_sock+0x30/0x30 [ 509.578753][T16825] ? import_iovec+0x6f/0xa0 [ 509.583637][T16825] ___sys_sendmsg+0x236/0x2e0 [ 509.588477][T16825] ? __sys_sendmsg+0x2a0/0x2a0 [ 509.593276][T16825] ? percpu_counter_add_batch+0x13b/0x160 [ 509.599117][T16825] __se_sys_sendmsg+0x1af/0x290 [ 509.604193][T16825] ? __x64_sys_sendmsg+0x80/0x80 [ 509.609325][T16825] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 509.615431][T16825] ? lockdep_hardirqs_on+0x94/0x140 [ 509.620826][T16825] do_syscall_64+0x4c/0xa0 [ 509.625341][T16825] ? clear_bhb_loop+0x30/0x80 [ 509.630024][T16825] ? clear_bhb_loop+0x30/0x80 [ 509.634826][T16825] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.640837][T16825] RIP: 0033:0x7fcf07a77819 [ 509.645736][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.666154][T16825] RSP: 002b:00007fcf05cd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.674952][T16825] RAX: ffffffffffffffda RBX: 00007fcf07cf0fa0 RCX: 00007fcf07a77819 [ 509.683023][T16825] RDX: 0300000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 509.691089][T16825] RBP: 00007fcf07b0dc91 R08: 0000000000000000 R09: 0000000000000000 [ 509.699162][T16825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.707274][T16825] R13: 00007fcf07cf1038 R14: 00007fcf07cf0fa0 R15: 00007fff68da35f8 [ 509.715459][T16825] [ 510.053724][T16847] netlink: 'syz.3.4003': attribute type 10 has an invalid length. [ 510.226006][T16847] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 510.720139][T16873] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.4011'. [ 510.745641][T16877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4012'. [ 510.825907][T16870] netlink: 'syz.6.4010': attribute type 10 has an invalid length. [ 511.471779][T16870] team0: Device xfrm0 is of different type [ 511.829582][T16907] netlink: 'syz.1.4023': attribute type 1 has an invalid length. [ 511.839274][T16907] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.4023'. [ 512.073556][T16916] netlink: 'syz.6.4027': attribute type 4 has an invalid length. [ 512.084207][T16912] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4025'. [ 512.126652][T16916] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4027'. [ 512.132065][T16920] netlink: 'syz.6.4027': attribute type 8 has an invalid length. [ 512.156725][T16912] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.4025'. [ 512.177496][T16920] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4027'. [ 512.332763][T16916] netlink: 'syz.6.4027': attribute type 3 has an invalid length. [ 512.366438][T16916] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4027'. [ 512.376405][ T8801] wlan1: Trigger new scan to find an IBSS to join [ 512.982937][T16950] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4037'. [ 514.240337][T16966] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.4044'. [ 514.276098][T16973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4045'. [ 514.528455][T16976] device syzkaller0 entered promiscuous mode [ 515.353432][T17007] netlink: 'syz.4.4056': attribute type 32 has an invalid length. [ 515.580173][T17011] delete_channel: no stack [ 515.881891][T17023] raw_sendmsg: syz.4.4060 forgot to set AF_INET. Fix it! [ 516.409286][T17038] netlink: 'syz.1.4069': attribute type 1 has an invalid length. [ 516.429341][T17038] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4069'. [ 517.116021][T17065] __nla_validate_parse: 2 callbacks suppressed [ 517.116044][T17065] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4077'. [ 517.276103][T17063] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4078'. [ 517.305625][ T8801] wlan1: Trigger new scan to find an IBSS to join [ 517.318344][T17073] netlink: 'syz.3.4077': attribute type 7 has an invalid length. [ 517.332999][T17073] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 517.441183][T17073] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4077'. [ 517.605307][T17085] netlink: 'syz.2.4082': attribute type 10 has an invalid length. [ 517.921837][T17101] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.4088'. [ 518.059048][T17103] netlink: 'syz.2.4089': attribute type 10 has an invalid length. [ 518.197285][ T8813] wlan1: Creating new IBSS network, BSSID d6:51:6f:5c:96:41 [ 519.162559][T17148] netlink: 'syz.4.4104': attribute type 39 has an invalid length. [ 519.212717][T17146] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 519.388933][T10405] Bluetooth: hci1: command 0x0406 tx timeout [ 520.022033][T17184] netlink: 'syz.2.4117': attribute type 33 has an invalid length. [ 520.061796][T17184] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4117'. [ 522.077330][T17238] netlink: 'syz.1.4133': attribute type 11 has an invalid length. [ 522.088121][T17238] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.4133'. [ 522.130126][T17238] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 522.148646][T17238] CPU: 1 PID: 17238 Comm: syz.1.4133 Not tainted syzkaller #0 [ 522.156628][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 522.166827][T17238] Call Trace: [ 522.170134][T17238] [ 522.173280][T17238] dump_stack_lvl+0x188/0x250 [ 522.178264][T17238] ? show_regs_print_info+0x20/0x20 [ 522.183575][T17238] ? load_image+0x400/0x400 [ 522.188138][T17238] sysfs_warn_dup+0x8a/0xa0 [ 522.192748][T17238] sysfs_do_create_link_sd+0xc0/0x110 [ 522.198338][T17238] device_add+0x7ed/0xfb0 [ 522.202997][T17238] wiphy_register+0x1e81/0x2c30 [ 522.207979][T17238] ? cfg80211_event_work+0x40/0x40 [ 522.213113][T17238] ? minstrel_ht_alloc+0x808/0x980 [ 522.218454][T17238] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 522.224657][T17238] ieee80211_register_hw+0x2aa1/0x3af0 [ 522.230418][T17238] ? ieee80211_tasklet_handler+0x20/0x20 [ 522.236334][T17238] ? rcu_is_watching+0x11/0xa0 [ 522.241470][T17238] ? memset+0x1e/0x40 [ 522.245692][T17238] ? hrtimer_init+0x10c/0x220 [ 522.250395][T17238] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 522.256241][T17238] hwsim_new_radio_nl+0xa6f/0xc40 [ 522.261950][T17238] genl_rcv_msg+0xcea/0xf90 [ 522.266608][T17238] ? lock_chain_count+0x20/0x20 [ 522.271771][T17238] ? genl_bind+0x380/0x380 [ 522.276321][T17238] ? verify_lock_unused+0x140/0x140 [ 522.281544][T17238] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 522.288452][T17238] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 522.295093][T17238] netlink_rcv_skb+0x1f5/0x440 [ 522.300065][T17238] ? genl_bind+0x380/0x380 [ 522.304628][T17238] ? netlink_ack+0xb50/0xb50 [ 522.309255][T17238] ? __lock_acquire+0x7d10/0x7d10 [ 522.314590][T17238] ? down_read+0x1aa/0x2e0 [ 522.319243][T17238] genl_rcv+0x24/0x40 [ 522.323247][T17238] netlink_unicast+0x774/0x920 [ 522.328042][T17238] netlink_sendmsg+0x8ba/0xbe0 [ 522.332933][T17238] ? netlink_getsockopt+0x570/0x570 [ 522.338241][T17238] ? aa_sock_msg_perm+0x94/0x150 [ 522.343375][T17238] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 522.348688][T17238] ? security_socket_sendmsg+0x7c/0xa0 [ 522.354441][T17238] ? netlink_getsockopt+0x570/0x570 [ 522.359761][T17238] ____sys_sendmsg+0x5b7/0x8f0 [ 522.364918][T17238] ? __sys_sendmsg_sock+0x30/0x30 [ 522.369973][T17238] ? import_iovec+0x6f/0xa0 [ 522.374688][T17238] ___sys_sendmsg+0x236/0x2e0 [ 522.379569][T17238] ? __sys_sendmsg+0x2a0/0x2a0 [ 522.384719][T17238] ? percpu_counter_add_batch+0x13b/0x160 [ 522.390594][T17238] __se_sys_sendmsg+0x1af/0x290 [ 522.395912][T17238] ? __x64_sys_sendmsg+0x80/0x80 [ 522.401079][T17238] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 522.407094][T17238] ? lockdep_hardirqs_on+0x94/0x140 [ 522.412403][T17238] do_syscall_64+0x4c/0xa0 [ 522.416838][T17238] ? clear_bhb_loop+0x30/0x80 [ 522.421638][T17238] ? clear_bhb_loop+0x30/0x80 [ 522.426435][T17238] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 522.432552][T17238] RIP: 0033:0x7fcf07a77819 [ 522.437069][T17238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.456873][T17238] RSP: 002b:00007fcf05cd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.465456][T17238] RAX: ffffffffffffffda RBX: 00007fcf07cf0fa0 RCX: 00007fcf07a77819 [ 522.473628][T17238] RDX: 0000000000000a00 RSI: 0000200000000000 RDI: 0000000000000004 [ 522.481831][T17238] RBP: 00007fcf07b0dc91 R08: 0000000000000000 R09: 0000000000000000 [ 522.490337][T17238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.498818][T17238] R13: 00007fcf07cf1038 R14: 00007fcf07cf0fa0 R15: 00007fff68da35f8 [ 522.507393][T17238] [ 522.864354][T17237] delete_channel: no stack [ 523.058446][T17256] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 523.123170][T17256] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 523.154647][T17256] device veth0_to_bridge entered promiscuous mode [ 523.414341][T17263] netlink: 'syz.1.4141': attribute type 10 has an invalid length. [ 523.432492][T17263] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4141'. [ 523.881346][T17287] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4149'. [ 523.894500][T17287] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 523.907895][T17287] CPU: 0 PID: 17287 Comm: syz.3.4149 Not tainted syzkaller #0 [ 523.915855][T17287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 523.926284][T17287] Call Trace: [ 523.929583][T17287] [ 523.932536][T17287] dump_stack_lvl+0x188/0x250 [ 523.937505][T17287] ? show_regs_print_info+0x20/0x20 [ 523.942830][T17287] ? load_image+0x400/0x400 [ 523.947467][T17287] sysfs_warn_dup+0x8a/0xa0 [ 523.952297][T17287] sysfs_do_create_link_sd+0xc0/0x110 [ 523.958187][T17287] device_add+0x7ed/0xfb0 [ 523.962654][T17287] wiphy_register+0x1e81/0x2c30 [ 523.967813][T17287] ? cfg80211_event_work+0x40/0x40 [ 523.973229][T17287] ? minstrel_ht_alloc+0x808/0x980 [ 523.978453][T17287] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 523.984926][T17287] ieee80211_register_hw+0x2aa1/0x3af0 [ 523.990504][T17287] ? ieee80211_tasklet_handler+0x20/0x20 [ 523.996611][T17287] ? rcu_is_watching+0x11/0xa0 [ 524.001410][T17287] ? memset+0x1e/0x40 [ 524.005412][T17287] ? hrtimer_init+0x10c/0x220 [ 524.010274][T17287] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 524.016378][T17287] hwsim_new_radio_nl+0xa6f/0xc40 [ 524.021867][T17287] genl_rcv_msg+0xcea/0xf90 [ 524.026393][T17287] ? genl_bind+0x380/0x380 [ 524.030827][T17287] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 524.036914][T17287] ? lock_chain_count+0x20/0x20 [ 524.041866][T17287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 524.048135][T17287] ? lockdep_hardirqs_on+0x94/0x140 [ 524.053715][T17287] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 524.060227][T17287] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 524.066764][T17287] ? lock_acquire+0x208/0x400 [ 524.071547][T17287] netlink_rcv_skb+0x1f5/0x440 [ 524.076510][T17287] ? genl_bind+0x380/0x380 [ 524.081461][T17287] ? netlink_ack+0xb50/0xb50 [ 524.086152][T17287] ? __lock_acquire+0x7d10/0x7d10 [ 524.091287][T17287] ? down_read+0x1aa/0x2e0 [ 524.095815][T17287] genl_rcv+0x24/0x40 [ 524.099812][T17287] netlink_unicast+0x774/0x920 [ 524.104696][T17287] netlink_sendmsg+0x8ba/0xbe0 [ 524.110077][T17287] ? netlink_getsockopt+0x570/0x570 [ 524.115574][T17287] ? aa_sock_msg_perm+0x94/0x150 [ 524.120812][T17287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 524.126305][T17287] ? security_socket_sendmsg+0x7c/0xa0 [ 524.132211][T17287] ? netlink_getsockopt+0x570/0x570 [ 524.138178][T17287] ____sys_sendmsg+0x5b7/0x8f0 [ 524.143151][T17287] ? __sys_sendmsg_sock+0x30/0x30 [ 524.148638][T17287] ? import_iovec+0x6f/0xa0 [ 524.153332][T17287] ___sys_sendmsg+0x236/0x2e0 [ 524.158211][T17287] ? __sys_sendmsg+0x2a0/0x2a0 [ 524.163270][T17287] ? percpu_counter_add_batch+0x13b/0x160 [ 524.169107][T17287] __se_sys_sendmsg+0x1af/0x290 [ 524.174303][T17287] ? __x64_sys_sendmsg+0x80/0x80 [ 524.179432][T17287] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 524.185444][T17287] ? lockdep_hardirqs_on+0x94/0x140 [ 524.191311][T17287] do_syscall_64+0x4c/0xa0 [ 524.195734][T17287] ? clear_bhb_loop+0x30/0x80 [ 524.200439][T17287] ? clear_bhb_loop+0x30/0x80 [ 524.205355][T17287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 524.211521][T17287] RIP: 0033:0x7fddf7113819 [ 524.216151][T17287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.236211][T17287] RSP: 002b:00007fddf536d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.244811][T17287] RAX: ffffffffffffffda RBX: 00007fddf738cfa0 RCX: 00007fddf7113819 [ 524.253494][T17287] RDX: 0400000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 524.261564][T17287] RBP: 00007fddf71a9c91 R08: 0000000000000000 R09: 0000000000000000 [ 524.269714][T17287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.277804][T17287] R13: 00007fddf738d038 R14: 00007fddf738cfa0 R15: 00007ffe2a956188 [ 524.286342][T17287] [ 524.695169][T17306] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4156'. [ 524.764376][T17307] netlink: 'syz.3.4158': attribute type 21 has an invalid length. [ 524.843219][T17307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4158'. [ 524.871755][T17307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4158'. [ 524.988789][T17317] netlink: 'syz.2.4161': attribute type 10 has an invalid length. [ 525.078874][T17317] team0: Device xfrm0 is of different type [ 525.938266][T17361] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4177'. [ 525.977508][T17361] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.4177'. [ 527.191411][T17397] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.4188'. [ 527.656317][T17408] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4192'. [ 527.805299][T17413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4194'. [ 528.415639][T17419] device syzkaller0 entered promiscuous mode [ 529.197380][T17454] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4205'. [ 529.489331][T17452] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4204'. [ 529.526032][T17454] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.4205'. [ 529.558622][T17453] delete_channel: no stack [ 529.638541][T10403] Bluetooth: hci2: command 0x0406 tx timeout [ 530.392751][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4211'. [ 530.608232][T17479] netlink: 'syz.1.4211': attribute type 2 has an invalid length. [ 530.704717][T17479] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4211'. [ 531.193471][T17485] netlink: 'syz.1.4211': attribute type 10 has an invalid length. [ 531.201899][T17485] device veth0_vlan left promiscuous mode [ 531.240061][T17485] device veth0_vlan entered promiscuous mode [ 531.270140][T17485] team0: Device veth0_vlan failed to register rx_handler [ 531.450003][T17500] netlink: 'syz.3.4217': attribute type 1 has an invalid length. [ 531.460410][T17500] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4217'. [ 531.483846][T17506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4219'. [ 531.546254][T17505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 532.018545][T17513] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4220'. [ 532.269615][T17525] netlink: 'syz.3.4227': attribute type 21 has an invalid length. [ 532.384594][T17525] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4227'. [ 532.432513][T17523] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4226'. [ 532.844451][T17537] netlink: 'syz.1.4231': attribute type 10 has an invalid length. [ 533.348985][T17550] netlink: 'syz.1.4236': attribute type 10 has an invalid length. [ 534.394949][T17591] netlink: 'syz.4.4248': attribute type 39 has an invalid length. [ 536.961448][T17656] netlink: 'syz.3.4268': attribute type 4 has an invalid length. [ 537.043105][T17656] __nla_validate_parse: 1 callbacks suppressed [ 537.043126][T17656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4268'. [ 537.123106][T17653] netlink: 'syz.3.4268': attribute type 4 has an invalid length. [ 537.138389][T17653] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4268'. [ 538.007313][T17695] netlink: 'syz.2.4280': attribute type 11 has an invalid length. [ 538.052335][T17695] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4280'. [ 538.123449][T17695] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 538.131920][T17695] CPU: 1 PID: 17695 Comm: syz.2.4280 Not tainted syzkaller #0 [ 538.139577][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.149969][T17695] Call Trace: [ 538.153277][T17695] [ 538.156328][T17695] dump_stack_lvl+0x188/0x250 [ 538.161134][T17695] ? show_regs_print_info+0x20/0x20 [ 538.166369][T17695] ? load_image+0x400/0x400 [ 538.171005][T17695] sysfs_warn_dup+0x8a/0xa0 [ 538.176078][T17695] sysfs_do_create_link_sd+0xc0/0x110 [ 538.181566][T17695] device_add+0x7ed/0xfb0 [ 538.185938][T17695] wiphy_register+0x1e81/0x2c30 [ 538.190937][T17695] ? cfg80211_event_work+0x40/0x40 [ 538.196633][T17695] ? minstrel_ht_alloc+0x808/0x980 [ 538.201886][T17695] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 538.208188][T17695] ieee80211_register_hw+0x2aa1/0x3af0 [ 538.214068][T17695] ? ieee80211_tasklet_handler+0x20/0x20 [ 538.219992][T17695] ? rcu_is_watching+0x11/0xa0 [ 538.224893][T17695] ? memset+0x1e/0x40 [ 538.229038][T17695] ? hrtimer_init+0x10c/0x220 [ 538.233955][T17695] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 538.239849][T17695] hwsim_new_radio_nl+0xa6f/0xc40 [ 538.244956][T17695] genl_rcv_msg+0xcea/0xf90 [ 538.249899][T17695] ? genl_bind+0x380/0x380 [ 538.254813][T17695] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 538.260300][T17695] ? verify_lock_unused+0x140/0x140 [ 538.265806][T17695] ? kmalloc_large_node+0xf2/0x190 [ 538.271575][T17695] ? dev_queue_xmit+0x20/0x20 [ 538.276380][T17695] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 538.283312][T17695] netlink_rcv_skb+0x1f5/0x440 [ 538.288279][T17695] ? genl_bind+0x380/0x380 [ 538.292734][T17695] ? netlink_ack+0xb50/0xb50 [ 538.297529][T17695] ? __lock_acquire+0x7d10/0x7d10 [ 538.302815][T17695] ? down_read+0x1aa/0x2e0 [ 538.307361][T17695] genl_rcv+0x24/0x40 [ 538.311456][T17695] netlink_unicast+0x774/0x920 [ 538.316334][T17695] netlink_sendmsg+0x8ba/0xbe0 [ 538.321390][T17695] ? netlink_getsockopt+0x570/0x570 [ 538.326614][T17695] ? aa_sock_msg_perm+0x94/0x150 [ 538.331949][T17695] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 538.337308][T17695] ? security_socket_sendmsg+0x7c/0xa0 [ 538.343052][T17695] ? netlink_getsockopt+0x570/0x570 [ 538.348561][T17695] ____sys_sendmsg+0x5b7/0x8f0 [ 538.353651][T17695] ? __sys_sendmsg_sock+0x30/0x30 [ 538.358973][T17695] ? import_iovec+0x6f/0xa0 [ 538.363503][T17695] ___sys_sendmsg+0x236/0x2e0 [ 538.368577][T17695] ? __sys_sendmsg+0x2a0/0x2a0 [ 538.373550][T17695] ? percpu_counter_add_batch+0x13b/0x160 [ 538.379696][T17695] __se_sys_sendmsg+0x1af/0x290 [ 538.384834][T17695] ? __x64_sys_sendmsg+0x80/0x80 [ 538.389882][T17695] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 538.396333][T17695] ? lockdep_hardirqs_on+0x94/0x140 [ 538.401846][T17695] do_syscall_64+0x4c/0xa0 [ 538.406368][T17695] ? clear_bhb_loop+0x30/0x80 [ 538.411239][T17695] ? clear_bhb_loop+0x30/0x80 [ 538.416295][T17695] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.422322][T17695] RIP: 0033:0x7f24ecbf6819 [ 538.427039][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.447286][T17695] RSP: 002b:00007f24eae50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.456453][T17695] RAX: ffffffffffffffda RBX: 00007f24ece6ffa0 RCX: 00007f24ecbf6819 [ 538.465357][T17695] RDX: 0000000000000e00 RSI: 0000200000000000 RDI: 0000000000000004 [ 538.473709][T17695] RBP: 00007f24ecc8cc91 R08: 0000000000000000 R09: 0000000000000000 [ 538.482263][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.490534][T17695] R13: 00007f24ece70038 R14: 00007f24ece6ffa0 R15: 00007fffe702b168 [ 538.498877][T17695] [ 538.729158][T17719] tap0: tun_chr_ioctl cmd 21731 [ 538.769613][T17720] netlink: 'syz.1.4287': attribute type 10 has an invalid length. [ 538.823208][T17720] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4287'. [ 538.975332][T17693] delete_channel: no stack [ 539.402746][T17738] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4292'. [ 539.455740][T17736] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4291'. [ 539.653488][T17738] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 539.664388][T17738] CPU: 0 PID: 17738 Comm: syz.6.4292 Not tainted syzkaller #0 [ 539.672178][T17738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 539.682786][T17738] Call Trace: [ 539.686187][T17738] [ 539.689423][T17738] dump_stack_lvl+0x188/0x250 [ 539.694557][T17738] ? show_regs_print_info+0x20/0x20 [ 539.700244][T17738] ? load_image+0x400/0x400 [ 539.704890][T17738] sysfs_warn_dup+0x8a/0xa0 [ 539.709817][T17738] sysfs_do_create_link_sd+0xc0/0x110 [ 539.715321][T17738] device_add+0x7ed/0xfb0 [ 539.719800][T17738] wiphy_register+0x1e81/0x2c30 [ 539.724979][T17738] ? cfg80211_event_work+0x40/0x40 [ 539.730308][T17738] ? minstrel_ht_alloc+0x808/0x980 [ 539.735470][T17738] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 539.741929][T17738] ieee80211_register_hw+0x2aa1/0x3af0 [ 539.747459][T17738] ? ieee80211_tasklet_handler+0x20/0x20 [ 539.753239][T17738] ? rcu_is_watching+0x11/0xa0 [ 539.758676][T17738] ? memset+0x1e/0x40 [ 539.763052][T17738] ? hrtimer_init+0x10c/0x220 [ 539.768014][T17738] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 539.774005][T17738] hwsim_new_radio_nl+0xa6f/0xc40 [ 539.779289][T17738] genl_rcv_msg+0xcea/0xf90 [ 539.784273][T17738] ? genl_bind+0x380/0x380 [ 539.789105][T17738] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 539.794529][T17738] ? verify_lock_unused+0x140/0x140 [ 539.800426][T17738] ? kmalloc_large_node+0xf2/0x190 [ 539.805921][T17738] ? dev_queue_xmit+0x20/0x20 [ 539.810765][T17738] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 539.817677][T17738] netlink_rcv_skb+0x1f5/0x440 [ 539.822494][T17738] ? genl_bind+0x380/0x380 [ 539.827430][T17738] ? netlink_ack+0xb50/0xb50 [ 539.832351][T17738] ? __lock_acquire+0x7d10/0x7d10 [ 539.837594][T17738] ? down_read+0x1aa/0x2e0 [ 539.842129][T17738] genl_rcv+0x24/0x40 [ 539.846224][T17738] netlink_unicast+0x774/0x920 [ 539.851188][T17738] netlink_sendmsg+0x8ba/0xbe0 [ 539.856000][T17738] ? netlink_getsockopt+0x570/0x570 [ 539.861308][T17738] ? aa_sock_msg_perm+0x94/0x150 [ 539.866437][T17738] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 539.872463][T17738] ? security_socket_sendmsg+0x7c/0xa0 [ 539.878421][T17738] ? netlink_getsockopt+0x570/0x570 [ 539.884109][T17738] ____sys_sendmsg+0x5b7/0x8f0 [ 539.889458][T17738] ? __sys_sendmsg_sock+0x30/0x30 [ 539.894615][T17738] ? import_iovec+0x6f/0xa0 [ 539.899626][T17738] ___sys_sendmsg+0x236/0x2e0 [ 539.904525][T17738] ? __sys_sendmsg+0x2a0/0x2a0 [ 539.909503][T17738] ? percpu_counter_add_batch+0x13b/0x160 [ 539.915580][T17738] __se_sys_sendmsg+0x1af/0x290 [ 539.920811][T17738] ? __x64_sys_sendmsg+0x80/0x80 [ 539.925776][T17738] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 539.932162][T17738] ? lockdep_hardirqs_on+0x94/0x140 [ 539.938003][T17738] do_syscall_64+0x4c/0xa0 [ 539.942691][T17738] ? clear_bhb_loop+0x30/0x80 [ 539.947910][T17738] ? clear_bhb_loop+0x30/0x80 [ 539.953053][T17738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.959235][T17738] RIP: 0033:0x7f3cd8788819 [ 539.964362][T17738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.985565][T17738] RSP: 002b:00007f3cd69e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.994366][T17738] RAX: ffffffffffffffda RBX: 00007f3cd8a01fa0 RCX: 00007f3cd8788819 [ 540.003084][T17738] RDX: 0500000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 540.011257][T17738] RBP: 00007f3cd881ec91 R08: 0000000000000000 R09: 0000000000000000 [ 540.019498][T17738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.027666][T17738] R13: 00007f3cd8a02038 R14: 00007f3cd8a01fa0 R15: 00007ffdac031688 [ 540.035787][T17738] [ 540.067464][T17745] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4291'. [ 540.183492][T17750] netlink: 'syz.1.4297': attribute type 46 has an invalid length. [ 540.409622][T17759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4301'. [ 540.489710][T17764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4299'. [ 540.683787][T17772] netlink: 'syz.1.4303': attribute type 10 has an invalid length. [ 540.961737][T17772] team0: Device xfrm0 is of different type [ 541.635159][T17809] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4318'. [ 542.493568][T17857] __nla_validate_parse: 1 callbacks suppressed [ 542.493591][T17857] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4333'. [ 543.183365][T17882] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4343'. [ 543.312088][T17884] device syzkaller0 entered promiscuous mode [ 543.341925][T17882] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.4343'. [ 543.377969][T17881] delete_channel: no stack [ 544.176243][T17908] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4348'. [ 544.551012][T17926] FAULT_INJECTION: forcing a failure. [ 544.551012][T17926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.675027][T17926] CPU: 0 PID: 17926 Comm: syz.6.4355 Not tainted syzkaller #0 [ 544.682926][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 544.693548][T17926] Call Trace: [ 544.696873][T17926] [ 544.699944][T17926] dump_stack_lvl+0x188/0x250 [ 544.704767][T17926] ? show_regs_print_info+0x20/0x20 [ 544.710094][T17926] ? load_image+0x400/0x400 [ 544.714748][T17926] ? __lock_acquire+0x7d10/0x7d10 [ 544.719921][T17926] should_fail+0x38c/0x4c0 [ 544.724482][T17926] _copy_from_user+0x2e/0x170 [ 544.729208][T17926] __sys_bpf+0x26d/0x6f0 [ 544.733497][T17926] ? bpf_link_show_fdinfo+0x380/0x380 [ 544.739070][T17926] __x64_sys_bpf+0x78/0x90 [ 544.743710][T17926] do_syscall_64+0x4c/0xa0 [ 544.748344][T17926] ? clear_bhb_loop+0x30/0x80 [ 544.753325][T17926] ? clear_bhb_loop+0x30/0x80 [ 544.758306][T17926] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 544.764758][T17926] RIP: 0033:0x7f3cd8788819 [ 544.769297][T17926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.790294][T17926] RSP: 002b:00007f3cd69c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.798804][T17926] RAX: ffffffffffffffda RBX: 00007f3cd8a02090 RCX: 00007f3cd8788819 [ 544.806995][T17926] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 544.815970][T17926] RBP: 00007f3cd69c1090 R08: 0000000000000000 R09: 0000000000000000 [ 544.824421][T17926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.832847][T17926] R13: 00007f3cd8a02128 R14: 00007f3cd8a02090 R15: 00007ffdac031688 [ 544.841009][T17926] [ 544.994524][T10401] Bluetooth: hci3: command 0x0406 tx timeout [ 545.300268][T17940] netlink: 'syz.4.4357': attribute type 22 has an invalid length. [ 545.320318][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 545.494388][T17947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4361'. [ 545.661113][T17950] netlink: 'syz.6.4362': attribute type 1 has an invalid length. [ 545.681198][T17950] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4362'. [ 545.831991][T17957] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 545.838579][T17957] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 546.198223][T17978] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4369'. [ 546.580999][T17994] netlink: 'syz.6.4375': attribute type 10 has an invalid length. [ 546.666028][T17999] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4378'. [ 546.981038][T18011] netlink: 'syz.6.4381': attribute type 10 has an invalid length. [ 547.197469][T18017] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4385'. [ 547.926199][T18053] netlink: 'syz.6.4395': attribute type 39 has an invalid length. [ 548.292627][ T8797] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 549.326106][T18104] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.4409'. [ 549.383502][T18104] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.4409'. [ 550.543633][T18171] netlink: 'syz.6.4431': attribute type 10 has an invalid length. [ 550.648490][T18171] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4431'. [ 550.843042][T18181] netlink: 'syz.6.4435': attribute type 11 has an invalid length. [ 550.862748][T18181] netlink: 184116 bytes leftover after parsing attributes in process `syz.6.4435'. [ 550.912391][T18181] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 551.032864][T18181] CPU: 0 PID: 18181 Comm: syz.6.4435 Not tainted syzkaller #0 [ 551.041128][T18181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 551.051712][T18181] Call Trace: [ 551.055110][T18181] [ 551.058481][T18181] dump_stack_lvl+0x188/0x250 [ 551.063196][T18181] ? show_regs_print_info+0x20/0x20 [ 551.068459][T18181] ? load_image+0x400/0x400 [ 551.073241][T18181] sysfs_warn_dup+0x8a/0xa0 [ 551.077943][T18181] sysfs_do_create_link_sd+0xc0/0x110 [ 551.083546][T18181] device_add+0x7ed/0xfb0 [ 551.088446][T18181] wiphy_register+0x1e81/0x2c30 [ 551.093720][T18181] ? cfg80211_event_work+0x40/0x40 [ 551.099042][T18181] ? minstrel_ht_alloc+0x808/0x980 [ 551.104464][T18181] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 551.111360][T18181] ieee80211_register_hw+0x2aa1/0x3af0 [ 551.116990][T18181] ? ieee80211_tasklet_handler+0x20/0x20 [ 551.122845][T18181] ? rcu_is_watching+0x11/0xa0 [ 551.127996][T18181] ? memset+0x1e/0x40 [ 551.132228][T18181] ? hrtimer_init+0x10c/0x220 [ 551.137037][T18181] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 551.143116][T18181] hwsim_new_radio_nl+0xa6f/0xc40 [ 551.148341][T18181] genl_rcv_msg+0xcea/0xf90 [ 551.153289][T18181] ? genl_bind+0x380/0x380 [ 551.157927][T18181] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 551.163903][T18181] ? verify_lock_unused+0x140/0x140 [ 551.169354][T18181] ? kmalloc_large_node+0xf2/0x190 [ 551.174608][T18181] ? dev_queue_xmit+0x20/0x20 [ 551.179535][T18181] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 551.186273][T18181] netlink_rcv_skb+0x1f5/0x440 [ 551.191161][T18181] ? genl_bind+0x380/0x380 [ 551.195818][T18181] ? netlink_ack+0xb50/0xb50 [ 551.200789][T18181] ? __lock_acquire+0x7d10/0x7d10 [ 551.206025][T18181] ? down_read+0x1aa/0x2e0 [ 551.210844][T18181] genl_rcv+0x24/0x40 [ 551.214862][T18181] netlink_unicast+0x774/0x920 [ 551.219747][T18181] netlink_sendmsg+0x8ba/0xbe0 [ 551.224792][T18181] ? netlink_getsockopt+0x570/0x570 [ 551.230112][T18181] ? aa_sock_msg_perm+0x94/0x150 [ 551.235377][T18181] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 551.241054][T18181] ? security_socket_sendmsg+0x7c/0xa0 [ 551.246913][T18181] ? netlink_getsockopt+0x570/0x570 [ 551.252433][T18181] ____sys_sendmsg+0x5b7/0x8f0 [ 551.257730][T18181] ? __sys_sendmsg_sock+0x30/0x30 [ 551.263196][T18181] ? import_iovec+0x6f/0xa0 [ 551.267848][T18181] ___sys_sendmsg+0x236/0x2e0 [ 551.272678][T18181] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.277534][T18181] __se_sys_sendmsg+0x1af/0x290 [ 551.282436][T18181] ? __x64_sys_sendmsg+0x80/0x80 [ 551.288024][T18181] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 551.294453][T18181] ? lockdep_hardirqs_on+0x94/0x140 [ 551.300044][T18181] do_syscall_64+0x4c/0xa0 [ 551.304582][T18181] ? clear_bhb_loop+0x30/0x80 [ 551.309579][T18181] ? clear_bhb_loop+0x30/0x80 [ 551.314376][T18181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 551.320667][T18181] RIP: 0033:0x7f3cd8788819 [ 551.325224][T18181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.345662][T18181] RSP: 002b:00007f3cd69e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.354287][T18181] RAX: ffffffffffffffda RBX: 00007f3cd8a01fa0 RCX: 00007f3cd8788819 [ 551.362684][T18181] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004 [ 551.370962][T18181] RBP: 00007f3cd881ec91 R08: 0000000000000000 R09: 0000000000000000 [ 551.379752][T18181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.388038][T18181] R13: 00007f3cd8a02038 R14: 00007f3cd8a01fa0 R15: 00007ffdac031688 [ 551.396251][T18181] [ 551.485004][T18196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4439'. [ 551.512721][T18178] delete_channel: no stack [ 551.601838][T18207] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4444'. [ 551.720636][T18207] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 551.750970][T18207] CPU: 1 PID: 18207 Comm: syz.3.4444 Not tainted syzkaller #0 [ 551.758792][T18207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 551.769063][T18207] Call Trace: [ 551.772372][T18207] [ 551.775323][T18207] dump_stack_lvl+0x188/0x250 [ 551.780118][T18207] ? show_regs_print_info+0x20/0x20 [ 551.785525][T18207] ? load_image+0x400/0x400 [ 551.790070][T18207] sysfs_warn_dup+0x8a/0xa0 [ 551.794774][T18207] sysfs_do_create_link_sd+0xc0/0x110 [ 551.800171][T18207] device_add+0x7ed/0xfb0 [ 551.804627][T18207] wiphy_register+0x1e81/0x2c30 [ 551.809776][T18207] ? cfg80211_event_work+0x40/0x40 [ 551.815016][T18207] ? minstrel_ht_alloc+0x808/0x980 [ 551.820446][T18207] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 551.827085][T18207] ieee80211_register_hw+0x2aa1/0x3af0 [ 551.833121][T18207] ? ieee80211_tasklet_handler+0x20/0x20 [ 551.838793][T18207] ? rcu_is_watching+0x11/0xa0 [ 551.843671][T18207] ? memset+0x1e/0x40 [ 551.847682][T18207] ? hrtimer_init+0x10c/0x220 [ 551.852393][T18207] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 551.858351][T18207] hwsim_new_radio_nl+0xa6f/0xc40 [ 551.863513][T18207] genl_rcv_msg+0xcea/0xf90 [ 551.868343][T18207] ? genl_bind+0x380/0x380 [ 551.873233][T18207] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 551.878457][T18207] ? verify_lock_unused+0x140/0x140 [ 551.884237][T18207] ? kmalloc_large_node+0xf2/0x190 [ 551.889378][T18207] ? dev_queue_xmit+0x20/0x20 [ 551.894267][T18207] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 551.901121][T18207] netlink_rcv_skb+0x1f5/0x440 [ 551.905939][T18207] ? genl_bind+0x380/0x380 [ 551.910484][T18207] ? netlink_ack+0xb50/0xb50 [ 551.915569][T18207] ? __lock_acquire+0x7d10/0x7d10 [ 551.920912][T18207] ? down_read+0x1aa/0x2e0 [ 551.925980][T18207] genl_rcv+0x24/0x40 [ 551.930375][T18207] netlink_unicast+0x774/0x920 [ 551.935179][T18207] netlink_sendmsg+0x8ba/0xbe0 [ 551.940072][T18207] ? netlink_getsockopt+0x570/0x570 [ 551.945858][T18207] ? aa_sock_msg_perm+0x94/0x150 [ 551.950949][T18207] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 551.956625][T18207] ? security_socket_sendmsg+0x7c/0xa0 [ 551.962331][T18207] ? netlink_getsockopt+0x570/0x570 [ 551.967834][T18207] ____sys_sendmsg+0x5b7/0x8f0 [ 551.973051][T18207] ? __sys_sendmsg_sock+0x30/0x30 [ 551.978377][T18207] ? import_iovec+0x6f/0xa0 [ 551.983035][T18207] ___sys_sendmsg+0x236/0x2e0 [ 551.988027][T18207] ? __sys_sendmsg+0x2a0/0x2a0 [ 551.993001][T18207] ? percpu_counter_add_batch+0x13b/0x160 [ 551.999760][T18207] __se_sys_sendmsg+0x1af/0x290 [ 552.005049][T18207] ? __x64_sys_sendmsg+0x80/0x80 [ 552.010130][T18207] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 552.016410][T18207] ? lockdep_hardirqs_on+0x94/0x140 [ 552.021740][T18207] do_syscall_64+0x4c/0xa0 [ 552.026361][T18207] ? clear_bhb_loop+0x30/0x80 [ 552.031333][T18207] ? clear_bhb_loop+0x30/0x80 [ 552.036260][T18207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 552.042371][T18207] RIP: 0033:0x7fddf7113819 [ 552.046817][T18207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.067163][T18207] RSP: 002b:00007fddf536d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.075700][T18207] RAX: ffffffffffffffda RBX: 00007fddf738cfa0 RCX: 00007fddf7113819 [ 552.084059][T18207] RDX: 0600000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 552.092586][T18207] RBP: 00007fddf71a9c91 R08: 0000000000000000 R09: 0000000000000000 [ 552.101320][T18207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.109727][T18207] R13: 00007fddf738d038 R14: 00007fddf738cfa0 R15: 00007ffe2a956188 [ 552.118200][T18207] [ 552.323420][T18224] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4448'. [ 552.570477][T18237] netlink: 'syz.6.4453': attribute type 10 has an invalid length. [ 552.731378][T18237] team0: Device xfrm0 is of different type [ 553.358318][T18271] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.4464'. [ 553.431477][T18271] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.4464'. [ 553.614374][T18281] netlink: 'syz.2.4468': attribute type 10 has an invalid length. [ 553.685395][T18281] team0: Device ipvlan1 failed to register rx_handler [ 553.897514][T18298] netlink: 'syz.6.4471': attribute type 1 has an invalid length. [ 553.953069][T18298] netlink: 'syz.6.4471': attribute type 3 has an invalid length. [ 554.032500][T18298] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4471'. [ 554.499791][T18313] netlink: 'syz.3.4480': attribute type 1 has an invalid length. [ 554.563100][T18313] __nla_validate_parse: 1 callbacks suppressed [ 554.563145][T18313] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4480'. [ 555.027694][T18340] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4489'. [ 555.148280][T18340] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.4489'. [ 555.192546][T18336] delete_channel: no stack [ 555.287858][T18348] device syzkaller0 entered promiscuous mode [ 555.640457][T18372] netlink: 'syz.2.4497': attribute type 1 has an invalid length. [ 555.654297][T18372] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4497'. [ 555.925452][T18389] FAULT_INJECTION: forcing a failure. [ 555.925452][T18389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.958899][T18389] CPU: 0 PID: 18389 Comm: syz.4.4500 Not tainted syzkaller #0 [ 555.966747][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 555.977493][T18389] Call Trace: [ 555.981271][T18389] [ 555.984317][T18389] dump_stack_lvl+0x188/0x250 [ 555.989119][T18389] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 555.995602][T18389] ? show_regs_print_info+0x20/0x20 [ 556.001113][T18389] ? load_image+0x400/0x400 [ 556.005837][T18389] should_fail+0x38c/0x4c0 [ 556.010416][T18389] strncpy_from_user+0x32/0x360 [ 556.015668][T18389] bpf_prog_load+0x1f0/0x1510 [ 556.020587][T18389] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 556.026792][T18389] ? map_freeze+0x350/0x350 [ 556.031360][T18389] ? rcu_is_watching+0x11/0xa0 [ 556.036560][T18389] ? __sys_bpf+0x2c4/0x6f0 [ 556.041036][T18389] __sys_bpf+0x532/0x6f0 [ 556.045656][T18389] ? bpf_link_show_fdinfo+0x380/0x380 [ 556.051527][T18389] __x64_sys_bpf+0x78/0x90 [ 556.056148][T18389] do_syscall_64+0x4c/0xa0 [ 556.060589][T18389] ? clear_bhb_loop+0x30/0x80 [ 556.065690][T18389] ? clear_bhb_loop+0x30/0x80 [ 556.070826][T18389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.076898][T18389] RIP: 0033:0x7f689d503819 [ 556.081534][T18389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.101536][T18389] RSP: 002b:00007f689b73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.109979][T18389] RAX: ffffffffffffffda RBX: 00007f689d77d090 RCX: 00007f689d503819 [ 556.118153][T18389] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 556.126932][T18389] RBP: 00007f689b73c090 R08: 0000000000000000 R09: 0000000000000000 [ 556.135307][T18389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.143486][T18389] R13: 00007f689d77d128 R14: 00007f689d77d090 R15: 00007ffd24a0f298 [ 556.151856][T18389] [ 556.230195][T18400] netlink: 'syz.3.4505': attribute type 21 has an invalid length. [ 556.238741][T18400] netlink: 'syz.3.4505': attribute type 4 has an invalid length. [ 556.247432][T18400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4505'. [ 556.371953][T18405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4507'. [ 556.471523][T18408] netlink: 'syz.1.4508': attribute type 3 has an invalid length. [ 556.482569][T18408] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4508'. [ 556.684424][T18414] netlink: 'syz.1.4510': attribute type 1 has an invalid length. [ 556.717023][T18414] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4510'. [ 557.192361][T18423] netlink: 'syz.6.4514': attribute type 1 has an invalid length. [ 557.328248][T18423] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4514'. [ 558.013275][T18444] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4520'. [ 558.170911][T18459] netlink: 'syz.1.4524': attribute type 10 has an invalid length. [ 558.595360][T18473] netlink: 'syz.1.4530': attribute type 10 has an invalid length. [ 558.620490][T18473] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 561.531090][T18538] netlink: 'syz.1.4551': attribute type 39 has an invalid length. [ 563.396755][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.403375][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.637995][T18585] netlink: 'syz.6.4563': attribute type 9 has an invalid length. [ 563.734155][T18585] __nla_validate_parse: 2 callbacks suppressed [ 563.734176][T18585] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4563'. [ 564.057606][T18592] netlink: 'syz.6.4563': attribute type 9 has an invalid length. [ 564.108707][T18592] netlink: 164032 bytes leftover after parsing attributes in process `syz.6.4563'. [ 564.920441][T18634] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4582'. [ 564.997952][T18639] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 565.025813][T18639] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 565.047139][T18639] device veth0_to_bridge entered promiscuous mode [ 565.167590][T18644] netlink: 'syz.4.4585': attribute type 10 has an invalid length. [ 565.220163][T18644] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4585'. [ 565.308973][T18644] device bond0 entered promiscuous mode [ 565.336927][T18644] device bond_slave_0 entered promiscuous mode [ 565.402919][T18644] device bond_slave_1 entered promiscuous mode [ 565.474137][T18650] netlink: 'syz.3.4588': attribute type 10 has an invalid length. [ 565.499294][T18650] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4588'. [ 566.180617][T18669] device wlan0 entered promiscuous mode [ 566.216101][T18669] netlink: 'syz.6.4593': attribute type 9 has an invalid length. [ 566.295677][T18669] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4593'. [ 566.632628][T18694] netlink: 'syz.2.4601': attribute type 10 has an invalid length. [ 566.645487][T18694] device veth0_macvtap left promiscuous mode [ 566.848696][T18704] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4606'. [ 566.893874][T18700] netlink: 'syz.4.4603': attribute type 10 has an invalid length. [ 566.902189][T18700] device veth0_vlan left promiscuous mode [ 566.973776][T18700] device veth0_vlan entered promiscuous mode [ 567.003845][T18700] team0: Device veth0_vlan failed to register rx_handler [ 567.159981][T18718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 567.319378][T18718] netlink: 'syz.2.4610': attribute type 10 has an invalid length. [ 567.321027][T18720] netlink: 'syz.3.4611': attribute type 9 has an invalid length. [ 567.337506][T18718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4610'. [ 567.348539][T18720] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4611'. [ 567.358816][T18718] device dummy0 entered promiscuous mode [ 567.366278][T18718] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 567.567653][T18724] netlink: 'syz.3.4611': attribute type 9 has an invalid length. [ 567.601724][T18724] netlink: 164032 bytes leftover after parsing attributes in process `syz.3.4611'. [ 567.654944][T18733] netlink: 'syz.6.4622': attribute type 10 has an invalid length. [ 567.820436][T18733] device veth0_vlan left promiscuous mode [ 567.864280][T18733] device veth0_vlan entered promiscuous mode [ 567.900294][T18733] team0: Device veth0_vlan failed to register rx_handler [ 568.203860][T18741] netlink: 'syz.1.4614': attribute type 11 has an invalid length. [ 568.253648][T18741] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 568.281451][T18741] CPU: 1 PID: 18741 Comm: syz.1.4614 Not tainted syzkaller #0 [ 568.289324][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 568.299947][T18741] Call Trace: [ 568.303272][T18741] [ 568.306582][T18741] dump_stack_lvl+0x188/0x250 [ 568.311486][T18741] ? show_regs_print_info+0x20/0x20 [ 568.316937][T18741] ? load_image+0x400/0x400 [ 568.321802][T18741] sysfs_warn_dup+0x8a/0xa0 [ 568.326554][T18741] sysfs_do_create_link_sd+0xc0/0x110 [ 568.332146][T18741] device_add+0x7ed/0xfb0 [ 568.336687][T18741] wiphy_register+0x1e81/0x2c30 [ 568.341862][T18741] ? cfg80211_event_work+0x40/0x40 [ 568.347096][T18741] ? minstrel_ht_alloc+0x808/0x980 [ 568.352338][T18741] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 568.358552][T18741] ieee80211_register_hw+0x2aa1/0x3af0 [ 568.364146][T18741] ? ieee80211_tasklet_handler+0x20/0x20 [ 568.369986][T18741] ? rcu_is_watching+0x11/0xa0 [ 568.374876][T18741] ? memset+0x1e/0x40 [ 568.379112][T18741] ? hrtimer_init+0x10c/0x220 [ 568.384083][T18741] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 568.390161][T18741] hwsim_new_radio_nl+0xa6f/0xc40 [ 568.395433][T18741] genl_rcv_msg+0xcea/0xf90 [ 568.399983][T18741] ? genl_bind+0x380/0x380 [ 568.404689][T18741] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 568.410002][T18741] ? verify_lock_unused+0x140/0x140 [ 568.415331][T18741] ? perf_trace_lock_acquire+0xed/0x3e0 [ 568.421446][T18741] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 568.428230][T18741] ? kmalloc_large_node+0xf2/0x190 [ 568.433362][T18741] ? dev_queue_xmit+0x20/0x20 [ 568.438153][T18741] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 568.445014][T18741] netlink_rcv_skb+0x1f5/0x440 [ 568.449973][T18741] ? genl_bind+0x380/0x380 [ 568.454604][T18741] ? netlink_ack+0xb50/0xb50 [ 568.459301][T18741] ? __lock_acquire+0x7d10/0x7d10 [ 568.464440][T18741] ? down_read+0x1aa/0x2e0 [ 568.468889][T18741] genl_rcv+0x24/0x40 [ 568.472894][T18741] netlink_unicast+0x774/0x920 [ 568.477779][T18741] netlink_sendmsg+0x8ba/0xbe0 [ 568.482572][T18741] ? netlink_getsockopt+0x570/0x570 [ 568.487790][T18741] ? aa_sock_msg_perm+0x94/0x150 [ 568.492761][T18741] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 568.498067][T18741] ? security_socket_sendmsg+0x7c/0xa0 [ 568.503652][T18741] ? netlink_getsockopt+0x570/0x570 [ 568.509193][T18741] ____sys_sendmsg+0x5b7/0x8f0 [ 568.514097][T18741] ? __sys_sendmsg_sock+0x30/0x30 [ 568.519172][T18741] ? import_iovec+0x6f/0xa0 [ 568.523890][T18741] ___sys_sendmsg+0x236/0x2e0 [ 568.528601][T18741] ? __sys_sendmsg+0x2a0/0x2a0 [ 568.533518][T18741] __se_sys_sendmsg+0x1af/0x290 [ 568.538623][T18741] ? __x64_sys_sendmsg+0x80/0x80 [ 568.543637][T18741] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 568.549661][T18741] ? lockdep_hardirqs_on+0x94/0x140 [ 568.554976][T18741] do_syscall_64+0x4c/0xa0 [ 568.559501][T18741] ? clear_bhb_loop+0x30/0x80 [ 568.564381][T18741] ? clear_bhb_loop+0x30/0x80 [ 568.569175][T18741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 568.575086][T18741] RIP: 0033:0x7fcf07a77819 [ 568.579519][T18741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.599594][T18741] RSP: 002b:00007fcf05cd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.608775][T18741] RAX: ffffffffffffffda RBX: 00007fcf07cf0fa0 RCX: 00007fcf07a77819 [ 568.617061][T18741] RDX: 0000000000003f00 RSI: 0000200000000000 RDI: 0000000000000004 [ 568.625402][T18741] RBP: 00007fcf07b0dc91 R08: 0000000000000000 R09: 0000000000000000 [ 568.634036][T18741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.642561][T18741] R13: 00007fcf07cf1038 R14: 00007fcf07cf0fa0 R15: 00007fff68da35f8 [ 568.651042][T18741] [ 568.779245][T18740] delete_channel: no stack [ 569.268924][T18764] __nla_validate_parse: 2 callbacks suppressed [ 569.268945][T18764] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4621'. [ 569.324694][T18764] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 569.443431][T18764] CPU: 0 PID: 18764 Comm: syz.2.4621 Not tainted syzkaller #0 [ 569.451485][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 569.461927][T18764] Call Trace: [ 569.465394][T18764] [ 569.468818][T18764] dump_stack_lvl+0x188/0x250 [ 569.474149][T18764] ? show_regs_print_info+0x20/0x20 [ 569.479574][T18764] ? load_image+0x400/0x400 [ 569.484408][T18764] sysfs_warn_dup+0x8a/0xa0 [ 569.488975][T18764] sysfs_do_create_link_sd+0xc0/0x110 [ 569.494491][T18764] device_add+0x7ed/0xfb0 [ 569.498877][T18764] wiphy_register+0x1e81/0x2c30 [ 569.504063][T18764] ? cfg80211_event_work+0x40/0x40 [ 569.509224][T18764] ? minstrel_ht_alloc+0x808/0x980 [ 569.514392][T18764] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 569.521453][T18764] ieee80211_register_hw+0x2aa1/0x3af0 [ 569.527669][T18764] ? ieee80211_tasklet_handler+0x20/0x20 [ 569.533970][T18764] ? rcu_is_watching+0x11/0xa0 [ 569.538804][T18764] ? memset+0x1e/0x40 [ 569.542835][T18764] ? hrtimer_init+0x10c/0x220 [ 569.547826][T18764] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 569.553696][T18764] hwsim_new_radio_nl+0xa6f/0xc40 [ 569.559046][T18764] genl_rcv_msg+0xcea/0xf90 [ 569.563643][T18764] ? genl_bind+0x380/0x380 [ 569.568256][T18764] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 569.573663][T18764] ? verify_lock_unused+0x140/0x140 [ 569.579179][T18764] ? perf_trace_lock+0xe4/0x390 [ 569.584319][T18764] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 569.591165][T18764] netlink_rcv_skb+0x1f5/0x440 [ 569.596389][T18764] ? genl_bind+0x380/0x380 [ 569.601198][T18764] ? netlink_ack+0xb50/0xb50 [ 569.605994][T18764] ? __lock_acquire+0x7d10/0x7d10 [ 569.611157][T18764] ? down_read+0x1aa/0x2e0 [ 569.615689][T18764] genl_rcv+0x24/0x40 [ 569.619893][T18764] netlink_unicast+0x774/0x920 [ 569.624794][T18764] netlink_sendmsg+0x8ba/0xbe0 [ 569.630103][T18764] ? netlink_getsockopt+0x570/0x570 [ 569.635328][T18764] ? aa_sock_msg_perm+0x94/0x150 [ 569.640376][T18764] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 569.645800][T18764] ? security_socket_sendmsg+0x7c/0xa0 [ 569.651559][T18764] ? netlink_getsockopt+0x570/0x570 [ 569.657040][T18764] ____sys_sendmsg+0x5b7/0x8f0 [ 569.662208][T18764] ? __sys_sendmsg_sock+0x30/0x30 [ 569.667282][T18764] ? import_iovec+0x6f/0xa0 [ 569.671910][T18764] ___sys_sendmsg+0x236/0x2e0 [ 569.677251][T18764] ? __sys_sendmsg+0x2a0/0x2a0 [ 569.682151][T18764] ? trace_event_raw_event_lock+0x270/0x270 [ 569.688391][T18764] __se_sys_sendmsg+0x1af/0x290 [ 569.693475][T18764] ? __x64_sys_sendmsg+0x80/0x80 [ 569.698647][T18764] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 569.704933][T18764] ? lockdep_hardirqs_on+0x94/0x140 [ 569.710154][T18764] do_syscall_64+0x4c/0xa0 [ 569.714690][T18764] ? clear_bhb_loop+0x30/0x80 [ 569.719386][T18764] ? clear_bhb_loop+0x30/0x80 [ 569.724458][T18764] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 569.730481][T18764] RIP: 0033:0x7f24ecbf6819 [ 569.734933][T18764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.755215][T18764] RSP: 002b:00007f24eae50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.763840][T18764] RAX: ffffffffffffffda RBX: 00007f24ece6ffa0 RCX: 00007f24ecbf6819 [ 569.772008][T18764] RDX: 0700000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 569.780268][T18764] RBP: 00007f24ecc8cc91 R08: 0000000000000000 R09: 0000000000000000 [ 569.788867][T18764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.797213][T18764] R13: 00007f24ece70038 R14: 00007f24ece6ffa0 R15: 00007fffe702b168 [ 569.805330][T18764] [ 570.153583][T18788] netlink: 'syz.6.4628': attribute type 40 has an invalid length. [ 570.337090][T18800] netlink: 'syz.1.4630': attribute type 21 has an invalid length. [ 570.487420][T18799] netlink: 'syz.3.4631': attribute type 10 has an invalid length. [ 570.910932][T18799] device veth0_vlan left promiscuous mode [ 570.991688][T18815] netlink: 'syz.1.4639': attribute type 29 has an invalid length. [ 571.000160][T18799] device veth0_vlan entered promiscuous mode [ 571.000813][T18815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4639'. [ 571.179905][T18799] team0: Device veth0_vlan failed to register rx_handler [ 571.323225][T18815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4639'. [ 571.460363][T18826] team0: Device xfrm0 is of different type [ 571.653682][T18846] validate_nla: 2 callbacks suppressed [ 571.653703][T18846] netlink: 'syz.6.4649': attribute type 11 has an invalid length. [ 571.706982][T18846] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4649'. [ 571.805379][T18849] netlink: 'syz.4.4650': attribute type 21 has an invalid length. [ 572.366035][T18867] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4655'. [ 572.423241][T18867] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.4655'. [ 572.704473][T18883] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4660'. [ 572.806315][T18879] netlink: 'syz.2.4659': attribute type 10 has an invalid length. [ 573.450556][T18879] device veth0_vlan left promiscuous mode [ 573.506452][T18879] device veth0_vlan entered promiscuous mode [ 573.540674][T18879] team0: Device veth0_vlan failed to register rx_handler [ 573.611184][T18902] netlink: 'syz.6.4667': attribute type 6 has an invalid length. [ 573.649147][T18905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4668'. [ 573.707564][T18908] netlink: 'syz.1.4669': attribute type 39 has an invalid length. [ 574.835370][T18951] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4680'. [ 574.868783][T18951] netlink: 20624 bytes leftover after parsing attributes in process `syz.3.4680'. [ 574.981302][T18951] tipc: Started in network mode [ 574.991605][T18951] tipc: Node identity d, cluster identity 46 [ 575.011808][T18951] tipc: Node number set to 13 [ 575.088158][T18941] delete_channel: no stack [ 575.340477][T18960] netlink: 'syz.1.4683': attribute type 10 has an invalid length. [ 575.362317][T18960] device veth0_vlan left promiscuous mode [ 575.469739][T18960] device veth0_vlan entered promiscuous mode [ 575.590814][T18960] team0: Device veth0_vlan failed to register rx_handler [ 575.705225][ T4231] Bluetooth: hci4: command 0x0406 tx timeout [ 576.159863][T18978] device syzkaller0 entered promiscuous mode [ 576.644002][T19001] device syzkaller0 entered promiscuous mode [ 578.276625][T19023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4697'. [ 578.478571][T19017] netlink: 'syz.3.4696': attribute type 21 has an invalid length. [ 578.513306][T19028] netlink: 'syz.2.4699': attribute type 29 has an invalid length. [ 578.545864][T19025] FAULT_INJECTION: forcing a failure. [ 578.545864][T19025] name failslab, interval 1, probability 0, space 0, times 0 [ 578.569383][T19025] CPU: 0 PID: 19025 Comm: syz.1.4698 Not tainted syzkaller #0 [ 578.577195][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 578.587531][T19025] Call Trace: [ 578.590890][T19025] [ 578.593857][T19025] dump_stack_lvl+0x188/0x250 [ 578.598770][T19025] ? show_regs_print_info+0x20/0x20 [ 578.604118][T19025] ? load_image+0x400/0x400 [ 578.608885][T19025] ? __might_sleep+0xf0/0xf0 [ 578.613519][T19025] ? __lock_acquire+0x7d10/0x7d10 [ 578.618601][T19025] should_fail+0x38c/0x4c0 [ 578.623339][T19025] should_failslab+0x5/0x20 [ 578.628370][T19025] slab_pre_alloc_hook+0x51/0xc0 [ 578.629943][T19028] netlink: 'syz.2.4699': attribute type 29 has an invalid length. [ 578.633809][T19025] kmem_cache_alloc_node_trace+0x4a/0x300 [ 578.633839][T19025] ? __get_vm_area_node+0x119/0x2d0 [ 578.633862][T19025] ? lock_chain_count+0x20/0x20 [ 578.658890][T19025] __get_vm_area_node+0x119/0x2d0 [ 578.664261][T19025] __vmalloc_node_range+0xef/0x8b0 [ 578.669773][T19025] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 578.675474][T19025] ? end_current_label_crit_section+0x170/0x170 [ 578.681957][T19025] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 578.687757][T19025] __vmalloc+0x76/0x80 [ 578.691986][T19025] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 578.697770][T19025] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 578.703379][T19025] bpf_prog_alloc+0x1a/0x1e0 [ 578.708099][T19025] bpf_prog_load+0x7c6/0x1510 [ 578.713144][T19025] ? map_freeze+0x350/0x350 [ 578.717867][T19025] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 578.724749][T19025] ? lockdep_hardirqs_on+0x94/0x140 [ 578.730265][T19025] ? audit_tree_destroy_watch+0x20/0x20 [ 578.736017][T19025] ? security_bpf+0x7a/0xa0 [ 578.740822][T19025] __sys_bpf+0x532/0x6f0 [ 578.745105][T19025] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 578.751907][T19025] ? bpf_link_show_fdinfo+0x380/0x380 [ 578.757516][T19025] ? rcu_nmi_exit+0x6f/0xf0 [ 578.762175][T19025] ? vtime_user_exit+0x2c8/0x3e0 [ 578.767338][T19025] __x64_sys_bpf+0x78/0x90 [ 578.772360][T19025] do_syscall_64+0x4c/0xa0 [ 578.777098][T19025] ? clear_bhb_loop+0x30/0x80 [ 578.781903][T19025] ? clear_bhb_loop+0x30/0x80 [ 578.786767][T19025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 578.792880][T19025] RIP: 0033:0x7fcf07a77819 [ 578.797621][T19025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.818277][T19025] RSP: 002b:00007fcf05cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.826780][T19025] RAX: ffffffffffffffda RBX: 00007fcf07cf1090 RCX: 00007fcf07a77819 [ 578.835404][T19025] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 578.843616][T19025] RBP: 00007fcf05cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 578.852058][T19025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.860411][T19025] R13: 00007fcf07cf1128 R14: 00007fcf07cf1090 R15: 00007fff68da35f8 [ 578.868430][T19025] [ 579.124109][T19025] syz.1.4698: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 579.253379][T19025] CPU: 1 PID: 19025 Comm: syz.1.4698 Not tainted syzkaller #0 [ 579.261685][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.271963][T19025] Call Trace: [ 579.272241][T19022] ------------[ cut here ]------------ [ 579.275358][T19025] [ 579.275371][T19025] dump_stack_lvl+0x188/0x250 [ 579.275400][T19025] ? rcu_lock_release+0x5/0x20 [ 579.275423][T19025] ? show_regs_print_info+0x20/0x20 [ 579.275448][T19025] ? load_image+0x400/0x400 [ 579.281148][T19022] WARNING: CPU: 0 PID: 19022 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 579.284150][T19025] warn_alloc+0x243/0x320 [ 579.284184][T19025] ? zone_watermark_ok_safe+0x240/0x240 [ 579.284217][T19025] ? __get_vm_area_node+0x2b5/0x2d0 [ 579.284247][T19025] __vmalloc_node_range+0x2b1/0x8b0 [ 579.284268][T19025] ? end_current_label_crit_section+0x170/0x170 [ 579.284304][T19025] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 579.284328][T19025] __vmalloc+0x76/0x80 [ 579.284350][T19025] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 579.284375][T19025] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 579.289327][T19022] Modules linked in: [ 579.294551][T19025] bpf_prog_alloc+0x1a/0x1e0 [ 579.294582][T19025] bpf_prog_load+0x7c6/0x1510 [ 579.294616][T19025] ? map_freeze+0x350/0x350 [ 579.294638][T19025] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.294662][T19025] ? lockdep_hardirqs_on+0x94/0x140 [ 579.294700][T19025] ? audit_tree_destroy_watch+0x20/0x20 [ 579.294725][T19025] ? security_bpf+0x7a/0xa0 [ 579.294760][T19025] __sys_bpf+0x532/0x6f0 [ 579.294779][T19025] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 579.294805][T19025] ? bpf_link_show_fdinfo+0x380/0x380 [ 579.300272][T19022] [ 579.305035][T19025] ? rcu_nmi_exit+0x6f/0xf0 [ 579.305071][T19025] ? vtime_user_exit+0x2c8/0x3e0 [ 579.305105][T19025] __x64_sys_bpf+0x78/0x90 [ 579.316032][T19022] CPU: 0 PID: 19022 Comm: syz.2.4699 Not tainted syzkaller #0 [ 579.320625][T19025] do_syscall_64+0x4c/0xa0 [ 579.320651][T19025] ? clear_bhb_loop+0x30/0x80 [ 579.320670][T19025] ? clear_bhb_loop+0x30/0x80 [ 579.320690][T19025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.320711][T19025] RIP: 0033:0x7fcf07a77819 [ 579.320733][T19025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.320761][T19025] RSP: 002b:00007fcf05cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.320787][T19025] RAX: ffffffffffffffda RBX: 00007fcf07cf1090 RCX: 00007fcf07a77819 [ 579.320803][T19025] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 579.320818][T19025] RBP: 00007fcf05cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 579.320833][T19025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.320848][T19025] R13: 00007fcf07cf1128 R14: 00007fcf07cf1090 R15: 00007fff68da35f8 [ 579.320894][T19025] [ 579.499459][T19025] Mem-Info: [ 579.502969][T19022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.502987][T19022] RIP: 0010:perf_pending_task+0x358/0x470 [ 579.503022][T19022] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 579.536032][T19025] active_anon:301 inactive_anon:8420 isolated_anon:0 [ 579.536032][T19025] active_file:21157 inactive_file:37974 isolated_file:0 [ 579.536032][T19025] unevictable:768 dirty:51 writeback:0 [ 579.536032][T19025] slab_reclaimable:21160 slab_unreclaimable:97932 [ 579.536032][T19025] mapped:29445 shmem:2313 pagetables:724 bounce:0 [ 579.536032][T19025] kernel_misc_reclaimable:0 [ 579.536032][T19025] free:1366349 free_pcp:9319 free_cma:0 [ 579.544335][T19022] RSP: 0018:ffffc900031cf9d8 EFLAGS: 00010293 [ 579.544361][T19022] RAX: ffffffff819ad468 RBX: ffff8880274575b8 RCX: ffff88807e1e8000 [ 579.544379][T19022] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 579.544394][T19022] RBP: 0000000000000001 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 579.544410][T19022] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffff88807e1e8000 [ 579.544426][T19022] R13: ffff888074503958 R14: ffff888027457388 R15: 1ffff11004e8ae71 [ 579.544443][T19022] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 579.544463][T19022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.544478][T19022] CR2: 00007f24eae50990 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 579.544506][T19022] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.544521][T19022] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 579.720483][T19022] Call Trace: [ 579.722864][T19025] Node 0 active_anon:1172kB inactive_anon:33172kB active_file:84424kB inactive_file:151896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117780kB dirty:204kB writeback:0kB shmem:7176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11084kB pagetables:2896kB all_unreclaimable? no [ 579.723927][T19022] [ 579.759439][T19022] task_work_run+0x125/0x1a0 [ 579.761886][T19025] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 579.764206][T19022] do_exit+0x626/0x20c0 [ 579.798451][T19022] ? rcu_nmi_exit+0x6f/0xf0 [ 579.800223][T19025] Node 0 [ 579.803131][T19022] ? put_task_struct+0x80/0x80 [ 579.803480][T19025] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.806165][T19022] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 579.811114][T19025] lowmem_reserve[]: [ 579.837666][T19022] ? lock_chain_count+0x20/0x20 [ 579.837704][T19022] ? _raw_spin_lock_irq+0xb7/0xf0 [ 579.837729][T19022] do_group_exit+0x12e/0x300 [ 579.837752][T19022] ? lockdep_hardirqs_on+0x94/0x140 [ 579.837780][T19022] get_signal+0x6ca/0x12c0 [ 579.837825][T19022] arch_do_signal_or_restart+0xe7/0x12c0 [ 579.837856][T19022] ? create_io_thread+0x180/0x180 [ 579.852233][T19025] 0 [ 579.853108][T19022] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 579.858494][T19025] 2539 [ 579.863142][T19022] ? get_sigframe_size+0x10/0x10 [ 579.863173][T19022] ? rcu_nmi_exit+0x6f/0xf0 [ 579.863216][T19022] ? exit_to_user_mode_loop+0x3b/0x130 [ 579.863241][T19022] exit_to_user_mode_loop+0x9e/0x130 [ 579.873789][T19025] 2540 [ 579.879098][T19022] exit_to_user_mode_prepare+0xee/0x180 [ 579.879129][T19022] syscall_exit_to_user_mode+0x16/0x40 [ 579.884742][T19025] 2540 [ 579.887108][T19022] do_syscall_64+0x58/0xa0 [ 579.887133][T19022] ? clear_bhb_loop+0x30/0x80 [ 579.899634][T19025] 2540 [ 579.901334][T19022] ? clear_bhb_loop+0x30/0x80 [ 579.901365][T19022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.906387][T19025] [ 579.911587][T19022] RIP: 0033:0x7f24ecbf6819 [ 579.911613][T19022] Code: Unable to access opcode bytes at RIP 0x7f24ecbf67ef. [ 579.911625][T19022] RSP: 002b:00007f24eae4ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 579.911652][T19022] RAX: 0000000000000350 RBX: 00007f24ece6ffa0 RCX: 00007f24ecbf6819 [ 579.911668][T19022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 579.923919][T19025] Node 0 [ 579.925974][T19022] RBP: 00007f24ecc8cc91 R08: 0000000000000000 R09: 0000000000000000 [ 579.932184][T19025] DMA32 free:1524436kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1172kB inactive_anon:33172kB active_file:84424kB inactive_file:151896kB unevictable:1536kB writepending:204kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:40312kB local_pcp:19476kB free_cma:0kB [ 579.935087][T19022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 579.941051][T19025] lowmem_reserve[]: [ 579.944735][T19022] R13: 00007f24ece70038 R14: 00007f24ece6ffa0 R15: 00007fffe702b168 [ 579.944775][T19022] [ 579.944787][T19022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.944799][T19022] CPU: 0 PID: 19022 Comm: syz.2.4699 Not tainted syzkaller #0 [ 579.944821][T19022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.944834][T19022] Call Trace: [ 579.944843][T19022] [ 579.944852][T19022] dump_stack_lvl+0x188/0x250 [ 579.955121][T19025] 0 [ 579.959602][T19022] ? show_regs_print_info+0x20/0x20 [ 579.959637][T19022] ? load_image+0x400/0x400 [ 579.959670][T19022] panic+0x2e5/0x810 [ 579.962200][T19025] 0 [ 579.966434][T19022] ? bpf_jit_dump+0xd0/0xd0 [ 579.966474][T19022] ? perf_pending_task+0x358/0x470 [ 579.966501][T19022] __warn+0x248/0x2b0 [ 579.975224][T19025] 0 [ 579.983286][T19022] ? perf_pending_task+0x358/0x470 [ 579.983318][T19022] report_bug+0x1b7/0x2e0 [ 579.983348][T19022] handle_bug+0x3a/0x70 [ 579.992157][T19025] 0 [ 579.999728][T19022] exc_invalid_op+0x16/0x40 [ 579.999755][T19022] asm_exc_invalid_op+0x16/0x20 [ 579.999776][T19022] RIP: 0010:perf_pending_task+0x358/0x470 [ 579.999801][T19022] Code: ff 84 db 75 14 e8 c8 4c de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 4c de ff e8 d7 a8 65 ff eb e5 e8 a8 4c de ff <0f> 0b e9 f3 fe ff ff e8 9c 4c de ff 48 c7 c7 a0 43 3a 8c 4c 89 f6 [ 579.999819][T19022] RSP: 0018:ffffc900031cf9d8 EFLAGS: 00010293 [ 579.999839][T19022] RAX: ffffffff819ad468 RBX: ffff8880274575b8 RCX: ffff88807e1e8000 [ 579.999855][T19022] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 579.999870][T19022] RBP: 0000000000000001 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 579.999885][T19022] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffff88807e1e8000 [ 579.999901][T19022] R13: ffff888074503958 R14: ffff888027457388 R15: 1ffff11004e8ae71 [ 579.999925][T19022] ? perf_pending_task+0x358/0x470 [ 579.999955][T19022] ? perf_pending_task+0x358/0x470 [ 579.999983][T19022] task_work_run+0x125/0x1a0 [ 580.000010][T19022] do_exit+0x626/0x20c0 [ 580.000032][T19022] ? rcu_nmi_exit+0x6f/0xf0 [ 580.012066][T19025] 0 [ 580.041777][T19022] ? put_task_struct+0x80/0x80 [ 580.041816][T19022] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 580.041844][T19022] ? lock_chain_count+0x20/0x20 [ 580.041868][T19022] ? _raw_spin_lock_irq+0xb7/0xf0 [ 580.041892][T19022] do_group_exit+0x12e/0x300 [ 580.041913][T19022] ? lockdep_hardirqs_on+0x94/0x140 [ 580.041939][T19022] get_signal+0x6ca/0x12c0 [ 580.041978][T19022] arch_do_signal_or_restart+0xe7/0x12c0 [ 580.042006][T19022] ? create_io_thread+0x180/0x180 [ 580.042030][T19022] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 580.042059][T19022] ? get_sigframe_size+0x10/0x10 [ 580.042093][T19022] ? rcu_nmi_exit+0x6f/0xf0 [ 580.042140][T19022] ? exit_to_user_mode_loop+0x3b/0x130 [ 580.051939][T19025] [ 580.054400][T19022] exit_to_user_mode_loop+0x9e/0x130 [ 580.054458][T19022] exit_to_user_mode_prepare+0xee/0x180 [ 580.054481][T19022] syscall_exit_to_user_mode+0x16/0x40 [ 580.069743][T19025] Node 0 [ 580.073491][T19022] do_syscall_64+0x58/0xa0 [ 580.073517][T19022] ? clear_bhb_loop+0x30/0x80 [ 580.073534][T19022] ? clear_bhb_loop+0x30/0x80 [ 580.073557][T19022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 580.073579][T19022] RIP: 0033:0x7f24ecbf6819 [ 580.073598][T19022] Code: Unable to access opcode bytes at RIP 0x7f24ecbf67ef. [ 580.073610][T19022] RSP: 002b:00007f24eae4ffd8 EFLAGS: 00000206 [ 580.082037][T19025] Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 580.091576][T19022] ORIG_RAX: 0000000000000038 [ 580.091591][T19022] RAX: 0000000000000350 RBX: 00007f24ece6ffa0 RCX: 00007f24ecbf6819 [ 580.091607][T19022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 580.091620][T19022] RBP: 00007f24ecc8cc91 R08: 0000000000000000 R09: 0000000000000000 [ 580.091634][T19022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.091648][T19022] R13: 00007f24ece70038 R14: 00007f24ece6ffa0 R15: 00007fffe702b168 [ 580.096072][T19025] lowmem_reserve[]: [ 580.098174][T19022] [ 580.103207][T19022] Kernel Offset: disabled [ 580.475956][T19022] Rebooting in 86400 seconds..