last executing test programs: 10m38.235461179s ago: executing program 2 (id=2423): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc0201070b00100100000026000000", 0x13}], 0x2}, 0x0) 10m38.066611973s ago: executing program 2 (id=2426): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000009805ef9ee59035d500000085000000d00000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) 10m37.845300499s ago: executing program 2 (id=2428): socket$kcm(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x109002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0xf6303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x8}, 0x116048, 0x3, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x4e}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x7e, 0x8, 0x37, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x7e, 0x8, 0x37, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x35, '\x00', r4, r2, 0x3, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pI4 \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x67) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r4, r1, 0x5, 0x5, 0x5}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r4, r2, 0x3, 0x5, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', r4, r2, 0x3, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0x18, &(0x7f0000000780)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0x9, 0xb, 0xd7368e09a5935866, 0xfffffffffffffff4, 0x8}, @exit, @jmp={0x5, 0x1, 0x2, 0x3, 0xa, 0x4}], &(0x7f0000000840)='GPL\x00', 0x2, 0x8b, &(0x7f0000000880)=""/139, 0x41000, 0x0, '\x00', r4, @fallback=0x38, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x5, 0x10000, 0x7ff}, 0x10, r5, r0, 0x5, &(0x7f0000000c00)=[r7, r8, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000c40)=[{0x0, 0x5, 0xd, 0x6}, {0x4, 0x1, 0xf, 0x9}, {0x3, 0x4, 0x2, 0xb}, {0x5, 0x3, 0x9, 0x1}, {0x5, 0x5, 0xb, 0x8}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0x18, &(0x7f0000000780)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0x9, 0xb, 0xd7368e09a5935866, 0xfffffffffffffff4, 0x8}, @exit, @jmp={0x5, 0x1, 0x2, 0x3, 0xa, 0x4}], &(0x7f0000000840)='GPL\x00', 0x2, 0x8b, &(0x7f0000000880)=""/139, 0x41000, 0x0, '\x00', r4, @fallback=0x38, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x5, 0x10000, 0x7ff}, 0x10, r5, r0, 0x5, &(0x7f0000000c00)=[r7, r8, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000c40)=[{0x0, 0x5, 0xd, 0x6}, {0x4, 0x1, 0xf, 0x9}, {0x3, 0x4, 0x2, 0xb}, {0x5, 0x3, 0x9, 0x1}, {0x5, 0x5, 0xb, 0x8}], 0x10, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x4020940d, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x4020940d, &(0x7f0000000080)) 10m37.055241718s ago: executing program 2 (id=2430): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x53, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xfff, 0x6, 0xb800, r0, 0xd, '\x00', r1, r2, 0x1, 0x0, 0x0, 0x0, @value=r3}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000240)=@raw=[@alu={0x4, 0x1, 0x1, 0x9, 0xa, 0x6, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x79, &(0x7f0000000380)=""/121, 0x40f00, 0x0, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x4, 0x93}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000480)=[{0x0, 0x1, 0xd, 0x6}, {0x5, 0x1, 0xa, 0xb}, {0x4, 0x5, 0x5, 0x8}, {0x2, 0x3, 0x9, 0xc}, {0x4, 0x2, 0x1, 0xb}], 0x10, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r0, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x1c, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, [@alu={0x7, 0x1, 0x6, 0x8, 0xa, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x7, 0x9, 0xa, 0x6, 0xfffffffffffffff0}, @generic={0x2, 0x5, 0x8, 0x3ff, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000009c0)='GPL\x00', 0x8, 0x74, &(0x7f0000000a00)=""/116, 0x41100, 0x40, '\x00', r8, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x1, 0x8, 0x3ff}, 0x10, r7, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)=[r0, r4, r0, r4], &(0x7f0000000c00)=[{0x4, 0x4, 0x10, 0x5}, {0x1, 0x1, 0xe, 0xc}, {0x1, 0x4, 0xa, 0x3}, {0x4, 0x1, 0x1, 0x7}, {0x3, 0x3, 0x3, 0xa}, {0x5, 0x4, 0x7, 0x1}, {0x0, 0x1, 0xa, 0x7}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x2be5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@map=r4, 0x26, 0x0, 0xc, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d80)=[0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000e80)={@map=r0, r9, 0x33, 0x0, r5, @void, @value=r5, @void, @void, r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x8, 0x3, 0x0, 0x2000, r4, 0x7, '\x00', r8, r3, 0x1, 0x4, 0x3, 0x1}, 0x50) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f80)=@o_path={&(0x7f0000000f40)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r2, 0x20, &(0x7f0000001140)={&(0x7f0000000fc0)=""/126, 0x7e, 0x0, &(0x7f0000001040)=""/228, 0xe4}}, 0x10) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=r13, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) sendmsg$unix(r15, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001240)="2439e8a49bc5844cefb86fae742af7cc58707b09ab9b064ef5adad142d799456dc5d1d31c81c0cc8fcec5a104514d7728cf782e8c1e6e3fc8ed9f373b8dd97674aef2478b2a9ff6bab7f755f1378dddd313973428569f9ac752764ae3ea7d97dc5db6f09b85d18a75e4c0d8d096cff36de460f4b494b052305034a761d81cd5d70818ad1aed8f8336acdcd681a73054484d1466174ca78a3e555f1a345abd8a683606eabf263792455be7877fd2cb2574439cf91e7ab41865212bfab06032c5dfec731c51609b501555c66a2f6d4636dc700b15f7f16011e886c7a32b822cc0829", 0xe1}, {&(0x7f0000001340)="338859bf7b76e274ca959bc13de252860466a9776e1f3ae1b5a8cd6f7d0016428060c15ce7d6b0d00685e1857f6953d14d38300988db169dad9fa26be133f397c5b93e935f24574755307171d6cd095b62ca205d993cdd045b63d0f3420350cadca573ecf299605bdb216ee15798e860a091952d64e9f00a0abc0108b83ba1d5e9381fbedbc1a527fbb30bc60a43d6b7a37fd4b071aa17072eeb3f95fc5c7a84412af2a0572611fe1aa956e33066c923923defc538cca44124f86d0c30b1acfe55a86fc8ca6f749ff3f9a13233eae3ca725314ba8eaa892c3da6111a07ab75be6ecb474ad9cfdef3240cbf3a", 0xec}], 0x2, 0x0, 0x0, 0x40}, 0x8) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f00000014c0)=r12, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10001, '\x00', r1, r14, 0x2, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x20, 0x9, 0x2, 0x80000000, 0x40, 0x1, 0x80000000, '\x00', r1, r2, 0x5, 0x1}, 0x50) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000001600)={'veth1\x00'}) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001640)=r13, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r12, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x4, '\x00', r17, r16, 0x3, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001a00)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="1d4fb5bb83db76a256eda432905af5bcce5ed15b86223b1982fc6e118bbb562e6660fb704504d66d6b8e6bcc0a05af84e638c4d02b031201e0b52d83d769f40ee20c7ad016c0ecf9a0cfdd4921e1df11191adaa575ea4993683abbb5800d62bf0d8436b83675bb0a8fd9e779dd6a860e30a696561866519380aae45a981bfc3b6b1d1ea2667fd8d3da4dda9c38e9fc1546735e2261a5cbd59a9685d193a7fbcc41a3c2722955c5c49ab0b7b034e1be34c27463ec67d6431829c7044595a7a894f377a02e17bd4d8adf480bb5c1f00b1bac7f36e3e5d41eec4c92f46b8d53686fbb", 0xe1}, {&(0x7f0000001b40)="1fcbed23c9305a3fb6061f1bf757dbdeaaece527c2007c238620360d3d1c63a7de642fbc65132611db63e74d12321111414e3fe8a91154969ce7e5331c990e70e1770ed022e62f589207b92e9cd244640bf3648e60a53aa2270044833991530596a81918a8a5c751e241172589bcdaac794999d98790dfd77c81c86733a49a77fe09eedcaea7773fdba5ebe7a4e01c9bec38fe1683c31e33eacef19b7bba7c69f7a87039b7a81f832e4863", 0xab}, {&(0x7f0000001c00)="d87bbe6cdda360589216075d0f7d8e900d28fe13b56da9f076019d254f9612efcf7a2c2b2c630a3ea4e9188336a325f1911632354cab26cc", 0x38}, {&(0x7f0000001c40)="20a11b9a8eaf34c7559b3eebf63ecabf35df5768d0c53258d83f4ea8fa935d77945c3f8cec823902d735ec2e7c0f938e22fe240a45cbb78190e2c1483d23d0b6608603253ef67be34f3ccc525c664bd5ac3697a502f3d970f377a122e191d191bc3fc5cde306b5e4cad5c267dd", 0x6d}], 0x4, &(0x7f0000001d00)=[@ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xfe, [@remote, @dev={0xac, 0x14, 0x14, 0x1f}]}, @generic={0x82, 0xe, "ea2334753f775d88efebf0c6"}, @timestamp={0x44, 0x28, 0xb2, 0x0, 0x5, [0xff, 0x4, 0xf4, 0x7, 0xffff, 0x1, 0xa9, 0x3, 0x0]}, @noop, @rr={0x7, 0x3, 0x30}, @end, @cipso={0x86, 0x1d, 0x3, [{0x7, 0xc, "a5f60effe55d1a48a705"}, {0x5, 0xb, "82539f92674abc47aa"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x2, [0x16, 0x6b]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x82, 0xc, "8fc79bcf9ce62c43754c"}, @ssrr={0x89, 0x13, 0x9a, [@multicast1, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x14, 0x58, 0x1, 0x2, [{@multicast2, 0x9}, {@private=0xa010102, 0x5}]}, @timestamp_prespec={0x44, 0x44, 0x2a, 0x3, 0x6, [{@rand_addr=0x64010101, 0x7fff}, {@private=0xa010100, 0x72b}, {@multicast1, 0x8}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@multicast2, 0xfffffffd}, {@multicast2, 0x6}, {@private=0xa010100, 0x8}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0x5, "370448"}, {0x0, 0x2}, {0x7, 0x9, "cd33e0348c0125"}, {0x1, 0x3, "e7"}, {0x6, 0x10, "feb97f5b25a150453a0d21c6263e"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x24, 0x3, 0x8, [{@rand_addr=0x64010102, 0xb}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x54}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x3192}, {@broadcast, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}]}}}], 0x1b0}, 0x4000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f80)={{r10, 0xffffffffffffffff}, &(0x7f0000001f00), &(0x7f0000001f40)=r9}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002040)={r18, 0x58, &(0x7f0000001fc0)}, 0x10) r19 = socket$kcm(0x29, 0x7, 0x0) r20 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002080)={r6}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r19, 0x89e0, &(0x7f00000020c0)={r15, r20}) 10m36.893805602s ago: executing program 2 (id=2434): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0080002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x8, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x400, 0x101, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0xa, 0x2, 0x88) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000100)=0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a3, &(0x7f0000000080)) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x2, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0080002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x8, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x400, 0x101, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x9) (async) socket$kcm(0xa, 0x2, 0x88) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) (async) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000100)=0x1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a3, &(0x7f0000000080)) (async) close(r2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x2, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x0) (async) 10m36.539826471s ago: executing program 2 (id=2439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 10m20.688993463s ago: executing program 32 (id=2439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 8.176853867s ago: executing program 3 (id=5427): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xc2ba, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x8, 0x0, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) 7.709216289s ago: executing program 3 (id=5433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff63, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) close(r2) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffe85, 0x0, 0x0, &(0x7f0000000400)=""/21, 0x15}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000c00000000000000f9ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70289b827cce4bff5870000000000008500000083000000bf090000000000005509010000000000950000000000000018130000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0x86, &(0x7f0000000440)=""/134, 0x41100, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x6, 0x95cc, 0xffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r2, r2], &(0x7f00000005c0)=[{0x0, 0x5, 0x8, 0xb}, {0x5, 0x1, 0xe, 0x9}, {0x1, 0x5, 0xa, 0x1}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000140), &(0x7f00000006c0)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x60000000, 0xe, 0xff21, &(0x7f0000000100)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.694141104s ago: executing program 3 (id=5437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x1, 0x2, 0x1, 0x2f, 0x4ebed9126688378f}]}, &(0x7f0000000000)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 6.515943449s ago: executing program 3 (id=5439): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xfd70, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) (async, rerun: 64) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x6, 0x0, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000300)={&(0x7f00000000c0)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}, 0x10262) r5 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) (async) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 5.352228188s ago: executing program 1 (id=5448): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xca, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000041040a000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x50) close(r0) 5.160048232s ago: executing program 0 (id=5449): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000000000000007f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0xfffffffffffffe13, 0x43, 0x0, 0x0, 0x0, 0x0, 0x4000005}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e0011000140034788000360", 0x3e}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b0000000000000000"], 0xffffffffffffffc7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0xfffffffffffffdce}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b000000080000000000000f050001"], 0x0, 0x2f, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c"], 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x6}, 0x118016, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcbf1b7dc05bab38b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0xfffffffffffffeb3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES64=r7, @ANYRESDEC=r6, @ANYRES8=0x0, @ANYRESDEC=r3, @ANYRESOCT=r0, @ANYBLOB="c3aa7f38ea60d211bff17023f3eb4ff90fcc41418de1daf04dd8363a49971105e0df9dd55acd98df04a5bc102bf1990babf425f9a062e1e7cbcf9e26bf0f257cbafe00050a82dd1c055246855bc846c62b45048d2488596932930992119cd34fd181d35ca7090ec95d36e8f4de6fdcfe3a2cedf571758d3da025692782b193d33ad04a24733dcb19d52095926a", @ANYBLOB="25835fda2128a54df2a919b5c8dff2074023b6043dc9f8d9caa59cb57113e07af2de8b4a4c054fbe605ab8c132ea874eab064c5327aeaddf2f1e9903843c330e15c048420722828b29723e5ef00d996d7161bce89a11ebf78d3f41d8957b6d6f902b09e7a59861f6d5478762a9c40ae09acc6900605ee0d5c420dc50bf0ed64d10aa89846d8cdd480880c9ce499088577ebe10abb702896b4d5739aa10a2e7c4e0193d31d608935cf2f1c23e91040d1db1b601ba908142b20f11e69c3805abd63b118b1b7cfd757bb8a54953f2c18929bc3dda2c6d76382fd121087faaf3881fe5b40f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7efd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.797691011s ago: executing program 1 (id=5452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82b02, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/1, 0x1}, {&(0x7f0000001140)=""/209, 0xd1}], 0x3, &(0x7f0000001280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x100) r20 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001540)={0x0, r8}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@union={0x3, 0x3, 0x0, 0x5, 0x0, 0x6, [{0x1, 0x3, 0x9}, {0x9, 0x1, 0x3}, {0x1, 0x5, 0xfffffffc}]}, @enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x7, [{0xa, 0x1, 0x2}, {0x4, 0x3, 0x6}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x76, 0x0, 0x45, 0x1}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x70, 0x2}, @restrict={0xc, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x2e, 0x61]}}, &(0x7f00000014c0)=""/53, 0x9d, 0x35, 0x0, 0x19, 0x10000, @value=r20}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002640)={r17, &(0x7f0000001580)="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", &(0x7f0000002580)=""/132}, 0x20) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002680)={'team_slave_0\x00', 0x1000}) r21 = bpf$ITER_CREATE(0x21, &(0x7f00000026c0)={r19}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003a40)={0xffffffffffffffff}) r23 = openat$cgroup_ro(r16, &(0x7f0000003a80)='devices.list\x00', 0x0, 0x0) r24 = openat$cgroup_type(r6, &(0x7f0000003ac0), 0x2, 0x0) r25 = openat$cgroup_ro(r8, &(0x7f0000003b00)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$unix(r21, &(0x7f0000003bc0)={&(0x7f0000002700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000002780)="4d61fae8774018bedd8e2d2bcec0aab782b6855e083f455ae5056d46f70a34d62a3c5c3f2d2c1494ad3a8039f83f081890b42d4bae364bddb5ed18d060853843d4a6e3d7e5a3e7696b725565146d70ed89cfa67402247d3cff97a6c39e9e5c8ca9608feaa17b082fb4fb9d431363eaffd7dd7165b777474f9cb08e098c9fcf0e5f6b14712af1c69379c49366d885240f794f9c04431aa854", 0x98}, {&(0x7f0000002840)="1ca22aeda628d1ae9e2f470862f8221ae25b6944539434200f61569a05f67c5167891165fce49640db95c446b1e92173942d371ff7c2828bd67809485b4663c609756f27119e7adbf1eff9201fdf6186aa8933b86e2c7e11c3c3ab54e8fb3e7634c07e1c9ab408aee587e1b9b2e11f79c979f30e27f43c0122d7b43119f4e67ea239c684a5b9a3444e30e1ae7710dabaee5bde0d6d978b8651fe4aca64e48a38f57720f3741790402496789a1602", 0xae}, {&(0x7f0000002900)="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", 0xfc}, {&(0x7f0000002a00)="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", 0x1000}], 0x4, &(0x7f0000003b40)=[@rights={{0x1c, 0x1, 0x1, [r22, r23, r24]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r7, r25]}}], 0x58, 0x805}, 0x4000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004d80)={&(0x7f0000003c00)="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", &(0x7f0000004c00)=""/109, &(0x7f0000004c80)="7e2957e5fe073780f939e40cb28a0943b6a834f671ed72cf5c8883d9cf2789e36272b33ba019a118664f1c9c0b96d6c5ac28696eca03f7b821e5c87fe645ce5e3697f1c8ad3d4b1b7025444d6e57733f5f6338cc14cea1080f90022c476d513504301284b2b165bd2447115a2e3409f4fa5f516e48c3870d7d0c47575663a74c8704ac", &(0x7f0000004d40)="1c05ae1a0fd2e70bf21212882b6875108d35", 0x1294, r7, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000050c0)={r14, 0xe0, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000004e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004e80)=[0x0, 0x0], 0x0, 0x76, &(0x7f0000004ec0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004f00), &(0x7f0000004f40), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000004f80)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000005100)=@base={0x21, 0x9df, 0xfffffffd, 0xfffffff9, 0x2020, r2, 0x0, '\x00', r26, r17, 0x0, 0x3, 0x3}, 0x50) ioctl$TUNGETVNETHDRSZ(r18, 0x800454d7, &(0x7f0000005180)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000051c0)={r19}) r27 = bpf$ITER_CREATE(0x21, &(0x7f0000005200)={r21}, 0x8) r28 = bpf$MAP_CREATE(0x0, &(0x7f0000005240)=@base={0x14, 0x6, 0x0, 0x1, 0x10, r8, 0x180, '\x00', 0x0, r27, 0x4, 0x1, 0x5}, 0x50) r29 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000053c0)={0xffffffffffffffff, 0x10000, 0x8}, 0xc) r30 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005400)={0x2, 0x4, 0x8, 0x1, 0x80, r15, 0x8e, '\x00', r26, r23, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005500)=@bpf_ext={0x1c, 0xf, &(0x7f00000052c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x126, 0x0, 0x0, 0x0, 0x5c7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000005340)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005380)={0x3, 0x4, 0xe2a6, 0x8001}, 0x10, 0x15e6e, r7, 0x3, &(0x7f0000005480)=[r21, r29, r30, r21, r3, r28, r16, r3, r17], &(0x7f00000054c0)=[{0x2, 0x1, 0xc, 0x5}, {0x0, 0x4, 0xe, 0x9}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000056c0)={@map=r15, 0x33, 0x0, 0x2, &(0x7f00000055c0)=[0x0], 0x1, 0x0, &(0x7f0000005600)=[0x0, 0x0, 0x0], &(0x7f0000005640)=[0x0, 0x0, 0x0], &(0x7f0000005680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000005740)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005700)={@map=r30, r5, 0x37, 0x203c, 0x0, @void, @void, @value=r32, @void, r31}, 0x20) r33 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000005780)={0x0, 0x40, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005980)={0x11, 0x1b, &(0x7f00000057c0)=@raw=[@jmp={0x5, 0x1, 0xd, 0x2, 0x4, 0x4, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_fd={0x18, 0x4, 0x1, 0x0, r15}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r33}}, @alu={0x4, 0x0, 0x4, 0x0, 0xc, 0x0, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, r16}], &(0x7f00000058c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000005900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000005940)={0x1, 0x0, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.918548143s ago: executing program 0 (id=5455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e7a69a85411c531002b1b2c0f21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6da7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e7a69a85411c531002b1b2c0f21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6da7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x23) r0 = getpid() r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, @perf_config_ext={0x6, 0x1}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x2, 0x9, 0x0, 0x0, 0x12a5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x324, 0x6, 0x7, 0x0, 0xc44, 0x7, 0x0, 0x0, 0x80000001, 0x0, 0x4}, r0, 0x0, r1, 0x8) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x2, 0x9, 0x0, 0x0, 0x12a5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x324, 0x6, 0x7, 0x0, 0xc44, 0x7, 0x0, 0x0, 0x80000001, 0x0, 0x4}, r0, 0x0, r1, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x0, 0x8, 0xff, 0x0, 0x800, 0x70, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x271d, 0x2}, 0x2000, 0x7fffffff, 0x10, 0x4, 0x200, 0x35, 0xeeee, 0x0, 0xf, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r3, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r4 = socket$kcm(0x21, 0x2, 0x2) close(r4) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780)=0x1000000, &(0x7f00000007c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780)=0x1000000, &(0x7f00000007c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) 3.795557496s ago: executing program 5 (id=5456): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003", 0x39}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe551a250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x4180) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='((+-\'#-@\'-,)\x00') 3.417862525s ago: executing program 0 (id=5458): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd60e}, 0x10408b, 0xac5d, 0x0, 0x1, 0x10001, 0x5, 0x0, 0x0, 0x4000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0xe, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000740)=""/182, 0x27, 0xb6, 0x1, 0x7}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) socketpair(0x22, 0xa, 0x26, &(0x7f00000006c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r6, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7c, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1, 0x6, 0x5, 0x221, r2, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x49}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0xa, 0xa, 0x0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x86, &(0x7f00000004c0)=""/134, 0x41000, 0x14, '\x00', r9, @fallback=0x22, r5, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r4, 0x3, &(0x7f0000000880)=[r1, r2], &(0x7f00000008c0)=[{0x5, 0x1, 0xb, 0x7}, {0x0, 0x4, 0x1, 0x4}, {0x2, 0x4, 0xd, 0x5}], 0x10, 0xcb8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r11, 0x0, 0x30, 0x0, 0x5000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8004}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$sock(r1, &(0x7f0000000500)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ip6erspan0\x00'}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="a5f733e76b3b2ed170b673ee7712c5bdbd08c6f51e6122979cdd1b0060db6ffd3c0a79da0d5dc1ef33bea3cb999c077275439418e58dcff0c09cef5c2bbff0", 0x3f}], 0x1, &(0x7f0000000480)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x48}, 0x4000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8001}, 0x0, 0xba, 0xc2ba, 0x1, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f00", 0x16}], 0x1}, 0x20) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500054006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee0ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac02781245bd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x20) 1.953022681s ago: executing program 3 (id=5470): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc8000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffffbffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0xc, [@union={0x4, 0x9, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x4, 0x2}, {0x9, 0x1, 0x2}, {0xb, 0x5, 0x10}, {0x3, 0x1, 0xdbb}, {0x9, 0x2, 0x753236d0}, {0xa, 0x1, 0x4}, {0x4, 0x0, 0xff}, {0xe, 0x5, 0x5}, {0x7, 0x3, 0x5}]}, @ptr={0xb}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0xe, [{0xc, 0x1, 0x200}]}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x81, [{0xc, 0x5, 0x7f}, {0xe, 0x5, 0x101}, {0x0, 0x5, 0x2}, {0x2, 0x2, 0x8}]}, @func={0x1, 0x0, 0x0, 0xc, 0x5}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @struct={0xf, 0x4, 0x0, 0x4, 0x0, 0x7fffffff, [{0xe, 0x0, 0x7}, {0x8, 0x3, 0x3}, {0x8, 0x2, 0xffffffff}, {0x2, 0x1, 0x4}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x0, 0x2e, 0x61, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000c00)=""/48, 0x168, 0x30, 0x0, 0x9}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x10}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={0xffffffffffffffff, r7}, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 1.864530104s ago: executing program 4 (id=5471): r0 = socket$kcm(0x10, 0x2, 0x10) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x7, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0x8}, 0x4023, 0x8000, 0x8, 0x8, 0x81, 0x5eda, 0xf3, 0x0, 0xffffffbd, 0x0, 0x3fffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x4, 0x7, 0x4, 0x0, 0x3, 0x41, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0x8}, 0x4023, 0x8000, 0x8, 0x8, 0x81, 0x5eda, 0xf3, 0x0, 0xffffffbd, 0x0, 0x3fffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b05d25a806c8c6394f90324fc60100003000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.665426029s ago: executing program 0 (id=5472): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81f10e381b901a05, @perf_config_ext={0x4f8}, 0x1000, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xe5d}, 0x10c002, 0xac5d, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x56, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unlink(0x0) r1 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000300)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x2}}, 0x10, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}, {&(0x7f0000000400)="4ffc80fe7f0b48e0497f51ae7867768099357518cc717d08b37c6e05c3fe416837ea0ad5d872d87d7ca9fb71387de0aa039736a3bbd4bfd8a88c24c9d8e2506207ec508511b69713aa1ad28cd65ed1206cddbbd8c7ed9396", 0x58}], 0x5}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8920, &(0x7f0000000080)='H\\mh:E\x14\x9a\n\xee\xc9Vs\xf6;2\xc5\xc5G\bN\xf9)~\xb9-\t\xee\xbc4\xa7\xedA\xef\a\x98A\x03\x82\x85\xf3\x15\"\x13]\xff\x0e:\xd7\xd2\xda\xf6c\xd38\xc6k\xaa\x1f\x1c\x14\xe8\x80\xc1\xa6=Ab~\x04\x17\xb01`\x86\xe6p@\xc2\xaaZ+\x18z\xa6_\xef\x91*\xe2\xc5O\xafT\xb8\x1e!\xcc\xa52\x94U\xb08\xf7\xbe\xc4\xc4kD%{\xa3&\xe7Z,\x83\xa3\x9d8+6\x1d\xcf\xc2c\x1f\xa6S\xed\xabF;) \x87:wJlv\xf0\xa9t2cI\xa5\xa4\x1d*\x80\xb7\x01\x02\xe5\xfe\x8ap\xd0x\x92\xf5\xd7\x83\xf5n\xacE\xa6\x9fZ9\x97\xa1_\x8f9\x7f\xfe\xde\xfb ~\xfe]\'+\x96\xcf+\xbe\xb2\xe9\b\xf8N\x87#\xff\x8b\x8d\xc6_\x96\"\xfda\xca\x9b|mZ\xa0Nc\xad9\x88\x9c\x18\xed\xa3\xbfM\x9a\xe8\x82\xec{ N\xfb\x16\xa3z\n\xebV\xcaugL\xac\xa8Gs\xfb\x8e\xb3\xf9}\xf5S\xfb\x9fnKL\x00\x00\x00\x00\xd7\\T\r\xc2\xda\x19?\xfd\xd9\xc6\xab\b28a?\tR\xf0Pu\x0f\x19\x92\xfbpN!w\xe4Qc\x9d\x8ef\xb5c\xaa\x83\x80PC\xfc\a\xf6IJI\x01\xd5\rb\x06\xb9\x16\x00(\x14\xfe\xdc\x9f$cH\x1dS\x97<\x17\xca\xf2S4\x99%\n\xe91\x9c\xde\xc4\xe6.\x9f\x91\xdc\xc7Y\xbd\xec\xea\x9d\xad\xe9E\x14\x04\xd2SQdy\xc73\xdf\x8a3r\xf9\n\x1b3\x93\x97\xd7\x9b\xbdcR_{\xed\xb6\x04G\xdbhJ\x82r>\xd0\x04\x88e\xf1L\x04\x10\x06b\xea6') (async, rerun: 64) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) (async, rerun: 32) r4 = socket$kcm(0xa, 0x3, 0x3a) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (rerun: 32) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64) r6 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x8, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x1, 0x47}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)="513b5a9c0c0000fb4c4241fc055d4341c33b9824823abc54e587fe002bdaa55aaa1db6d56f8680a51fb35301306c13871d164a2f2e39aa8582dade0e3d838d0b5727fd6ba5b5c7006e9e92d89a98189bb7566883e135fea16e00bdc49aafd60d6615175b01daee95b919299668fd5e5c6f8e9ad25294bfab2b000289aa95a80039332e4f475c138123f65c1aa5aa94d4e47715a77b9efe0055a930ffe075803a7a55357955523daa27bc6aa377904f9a2094cdc6fe7dd3208bd71ca12d", 0xbd}], 0x1}, 0x40080) r7 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) 1.467765273s ago: executing program 1 (id=5473): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r1, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$kcm(r0, 0x0, 0x8084) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.315879417s ago: executing program 5 (id=5474): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) r1 = syz_clone(0x800, &(0x7f0000000080)="847e86086369f9587adfb9803f1e15a5ce5d6e4b5c8fa9fd399b43dec432a60717644e4c0beded035f8fb0b2909d201a9a4d250bd63c90ba5c00a81cb03f0e0c2df247a127f536fabb3b80fc1cd2510499a4765c7c50ffbcedfbe118f7b1f4a1cfd02728cb01aa91c7d71207a9e1acadb2eca4ca17ac3f9f9f33f9c9c6c62bbf5aaf40e71d4f1f1a61c508feb3571057f558071d7bd3c927aa20aa406d1f1b555e5ea0de7c6ad76466256a54019b2b21a8bb2219b96621229d2a946d7126c13bddd6d7c266d8", 0xc6, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="4061524fa229347bfd7123be75b5cda97d4e4befa591b10d8ae5ebb77ce6025f35bae422dd801bd144079763ecbc5694f99075c3d3222e7d449f6b4cf59edbedc5") syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/mnt\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 923.980117ms ago: executing program 1 (id=5475): r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x23, 0x0, 0x7, 0x6, 0x0, 0x4, 0x82040, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c1f, 0x2, @perf_config_ext={0x8001, 0x10000}, 0x1000, 0x1, 0x8, 0x7, 0x5, 0x0, 0x7ef1, 0x0, 0x80000001, 0x0, 0x200}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000ac0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0xdbd8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4783f283, 0x0, 0xffffff}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x25, 0x1, 0x0) r5 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f0000000080), 0x4) sendmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xdb326a46c50aeda5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x5}, r2, 0xffffffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r7, 0x8) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201", 0x15}], 0x1, 0x0, 0x0, 0x7400}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r9, 0x1f4, 0xd28, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) sendmsg(r8, &(0x7f0000000340)={&(0x7f0000000140)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="0701e54bc8c7391c6888bf3c26c4e6778f29d3cf5b3367a9788fcf77b35683ddb18a36e96dbff1bdfdadd8b2b99c136d886091d7578e5e8691ba3d578d8f3e269e0176b2a3c14cfe23d3f92dfb", 0x4d}], 0x1, &(0x7f0000000280)=[{0xb8, 0x108, 0x9, "fbdafac0da97ae7bb1452e92649897c78bcf8b3a22578c60a4cecee9d3b6d0095b88b80fccfc825a2ee34c7f0202d343659672ea0692af4b8b58ece28f845ba2fc64c75d2c73fddf0bbcc989970b1333f177b47e3de599febe26dff8bacc3b9b8e2860c0f0a48bf80d84a80a174cde284063aea98533b049273d0ea6d41ecc2152c15e173300bda3382ee1cb06f018574829a3a168378c9ee7df2bf398a4b32a7e"}], 0xb8}, 0x20010000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x80}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x3) 792.80324ms ago: executing program 5 (id=5476): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1c00000014006b030031a6080c00", 0xe}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000480), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000385efeb47b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 733.088581ms ago: executing program 4 (id=5477): perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) (async) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) r1 = syz_clone(0x82a03080, &(0x7f00000002c0)="5ee5bcc3d4b608b4125fb446288850da464b72700cc751a5e5d002092f9c4ef80d8dff208a7db6e001ce3e1cad7e10d20f31c084e9e8dc5fae04aa9ff625a6f7077f882d114701b9a3da7963c0b571a8be1e250954802755f3c797a7cce328a46fdacb7aca4b801f037a237805b26ecf0d83700f0d841bb6da496fa0c56da97183df94727ec3657c85c7b3e86fee89ce7e8e5ef7c02ee3f369a6459cc0cb0a27d6dcb08bc6ee9d66c5c9718ad792f1991d4b484c9f3caf654fd77694b343d33b5ac128e840089e5cc2ff84d228f283d134de5659628b0ee904188506b19833084f7a58e55bd21991719042", 0xeb, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="ac2132aec5662b3c5099dfd05d5b4c1e84d7632ce319ae23b4fcfdb799ab514fda6f9cbb819381e86d29ed157a1799abbb4ba8f2b9767bdccc1a1d55a93679d3fa4e29e0a24fee9166b3ede7ad1be8e12c174c7e9413ee1af96bd29474d6fe8e503d7a7755bc337200152546c07057ad239c5d84fae7a18aed55584bb3f8c04b82a232b7389d56f1411b0f1652ddd25b") r2 = perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0xf, 0xc, 0xc, 0x7f, 0x0, 0x8fe, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x3, 0x9}, 0x10, 0xffff, 0x9b, 0x0, 0xffffffffffffff52, 0xffffffff, 0x9, 0x0, 0xae9, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r0, 0x2) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x5, 0x88, 0x6, 0x7, 0x0, 0x800, 0x1084, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040)}, 0x500, 0x8, 0x6, 0x7, 0x100, 0x4, 0x101, 0x0, 0x2, 0x0, 0x9}, r1, 0x8, r2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6b106c6383c1919f}, 0x8b001, 0x0, 0xfffffffd, 0x5, 0x5, 0x0, 0x3, 0x0, 0xffffbffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 302.574092ms ago: executing program 4 (id=5478): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0xfffffffffffffcf7, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=5479): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000600)="d81ad37981be74", &(0x7f0000002e00)=""/4096}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000600)="d81ad37981be74", &(0x7f0000002e00)=""/4096}, 0x20) socket$kcm(0x10, 0x2, 0x4) (async) r8 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x5, 0x8044, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x1e08e, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x1) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x2e, 0x61]}}, 0x0, 0x38}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r6, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r6, @ANYBLOB="0200"/20, @ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="0000000004000000000000000000000000000000001f000000000000"], 0x50) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) (async) sendmsg$inet(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) kernel console output (not intermixed with test programs): _handler+0x20/0x20 [ 840.660987][T19702] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 840.666948][T19702] ? __debug_object_init+0xed/0x440 [ 840.672212][T19702] ? memset+0x1e/0x40 [ 840.676225][T19702] ? __hrtimer_init+0x189/0x270 [ 840.681114][T19702] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 840.686876][T19702] ? memcpy+0x3c/0x60 [ 840.690891][T19702] hwsim_new_radio_nl+0xab7/0xc90 [ 840.695954][T19702] genl_family_rcv_msg_doit+0x22f/0x350 [ 840.701534][T19702] ? end_current_label_crit_section+0x170/0x170 [ 840.707824][T19702] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 840.713753][T19702] ? bpf_lsm_capable+0x5/0x10 [ 840.718458][T19702] ? security_capable+0x85/0xb0 [ 840.723346][T19702] genl_rcv_msg+0x601/0x790 [ 840.727892][T19702] ? genl_bind+0x360/0x360 [ 840.732342][T19702] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 840.738714][T19702] netlink_rcv_skb+0x1ef/0x440 [ 840.743539][T19702] ? genl_bind+0x360/0x360 [ 840.747996][T19702] ? netlink_ack+0x1160/0x1160 [ 840.752792][T19702] ? down_read+0x1a8/0x2d0 [ 840.757239][T19702] genl_rcv+0x24/0x40 [ 840.761251][T19702] netlink_unicast+0x7ad/0x920 [ 840.766059][T19702] netlink_sendmsg+0x8ad/0xbd0 [ 840.770862][T19702] ? netlink_getsockopt+0x550/0x550 [ 840.776094][T19702] ? apparmor_socket_sendmsg+0x8a/0x330 [ 840.781679][T19702] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 840.786989][T19702] ? security_socket_sendmsg+0x7c/0xa0 [ 840.792480][T19702] ? netlink_getsockopt+0x550/0x550 [ 840.797708][T19702] ____sys_sendmsg+0x5ed/0x9a0 [ 840.802515][T19702] ? __sys_sendmsg_sock+0x30/0x30 [ 840.807570][T19702] ? __import_iovec+0x306/0x510 [ 840.812469][T19702] ? import_iovec+0x6f/0xa0 [ 840.817016][T19702] ___sys_sendmsg+0x2a2/0x360 [ 840.821721][T19702] ? handle_mm_fault+0x33f5/0x3d40 [ 840.826957][T19702] ? __sys_sendmsg+0x2a0/0x2a0 [ 840.831791][T19702] __se_sys_sendmsg+0x1c3/0x2b0 [ 840.836682][T19702] ? __x64_sys_sendmsg+0x80/0x80 [ 840.841658][T19702] ? lockdep_hardirqs_on+0x94/0x140 [ 840.846887][T19702] do_syscall_64+0x4c/0xa0 [ 840.851330][T19702] ? clear_bhb_loop+0x60/0xb0 [ 840.856034][T19702] ? clear_bhb_loop+0x60/0xb0 [ 840.860745][T19702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.866678][T19702] RIP: 0033:0x7f09e439e159 [ 840.871120][T19702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.890766][T19702] RSP: 002b:00007f09e52ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.899242][T19702] RAX: ffffffffffffffda RBX: 00007f09e4626450 RCX: 00007f09e439e159 [ 840.907238][T19702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 840.915236][T19702] RBP: 00007f09e443506b R08: 0000000000000000 R09: 0000000000000000 [ 840.923237][T19702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.931278][T19702] R13: 00007f09e46264e8 R14: 00007f09e4626450 R15: 00007ffc3ac2f408 [ 840.939297][T19702] [ 841.493989][T19718] netlink: 'syz.0.3667': attribute type 29 has an invalid length. [ 841.586056][T19718] netlink: 'syz.0.3667': attribute type 29 has an invalid length. [ 841.654795][T19723] netlink: 'syz.0.3667': attribute type 29 has an invalid length. [ 841.755795][T19713] netlink: 'syz.0.3667': attribute type 29 has an invalid length. [ 841.800895][T19713] netlink: 'syz.0.3667': attribute type 29 has an invalid length. [ 842.680548][T19746] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3677'. [ 842.701519][T19746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 842.786170][T19746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 842.911282][T19749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3677'. [ 842.932881][T19749] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 843.002657][T19749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 843.187027][T19755] netlink: 'syz.0.3678': attribute type 10 has an invalid length. [ 843.243997][T19755] team0: Device nlmon0 is of different type [ 844.417670][ T4287] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 844.594261][T19780] netlink: 'syz.3.3686': attribute type 3 has an invalid length. [ 844.691542][T19780] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3686'. [ 844.892363][T19801] netlink: 'syz.5.3692': attribute type 21 has an invalid length. [ 844.921035][T19801] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.3692'. [ 845.169836][T19801] netlink: 'syz.5.3692': attribute type 17 has an invalid length. [ 845.177914][T19801] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3692'. [ 845.760757][T19834] netlink: 'syz.1.3700': attribute type 29 has an invalid length. [ 845.778503][T19834] netlink: 'syz.1.3700': attribute type 29 has an invalid length. [ 845.798846][T19834] netlink: 'syz.1.3700': attribute type 29 has an invalid length. [ 845.818250][T19835] netlink: 'syz.1.3700': attribute type 29 has an invalid length. [ 845.828451][T19834] netlink: 'syz.1.3700': attribute type 29 has an invalid length. [ 846.173407][T19839] netlink: 'syz.1.3711': attribute type 13 has an invalid length. [ 846.221253][T19839] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3711'. [ 846.676599][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 847.056861][T19868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3705'. [ 847.088497][T19868] device hsr_slave_0 left promiscuous mode [ 847.192347][T19868] device hsr_slave_1 left promiscuous mode [ 847.969942][T19886] netlink: 'syz.5.3709': attribute type 11 has an invalid length. [ 851.082507][T19954] ¥: port 1(team0) entered blocking state [ 851.097742][T19954] ¥: port 1(team0) entered disabled state [ 851.154709][T19954] device team0 entered promiscuous mode [ 851.167606][T19954] device team_slave_0 entered promiscuous mode [ 851.180515][T19954] device team_slave_1 entered promiscuous mode [ 851.304589][T19958] device team0 left promiscuous mode [ 851.309977][T19958] device team_slave_0 left promiscuous mode [ 851.359559][T19958] device team_slave_1 left promiscuous mode [ 851.381766][T19958] ¥: port 1(team0) entered disabled state [ 851.433673][T19968] netlink: 16046 bytes leftover after parsing attributes in process `syz.5.3729'. [ 858.535139][T20017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3741'. [ 858.629770][T20017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3741'. [ 858.705511][T20020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3741'. [ 859.800270][T20040] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3747'. [ 859.882758][T20042] validate_nla: 1 callbacks suppressed [ 859.882781][T20042] netlink: 'syz.4.3747': attribute type 3 has an invalid length. [ 859.908693][T20037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3746'. [ 859.952858][T20042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3747'. [ 860.180867][T20051] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3749'. [ 860.919062][T20075] netlink: 'syz.3.3755': attribute type 1 has an invalid length. [ 860.940789][T20075] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3755'. [ 860.954918][T20073] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3753'. [ 860.977635][T20073] netlink: 'syz.1.3753': attribute type 2 has an invalid length. [ 861.007145][T20073] netlink: 'syz.1.3753': attribute type 8 has an invalid length. [ 861.031251][T20073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3753'. [ 861.329297][T20090] netlink: 'syz.1.3759': attribute type 3 has an invalid length. [ 861.834459][T20097] device syzkaller0 entered promiscuous mode [ 861.852943][T20097] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 862.313757][T20111] netlink: 'syz.4.3767': attribute type 11 has an invalid length. [ 862.372136][T20111] netlink: 'syz.4.3767': attribute type 11 has an invalid length. [ 862.570263][T20120] netlink: 'syz.5.3768': attribute type 9 has an invalid length. [ 863.085418][T20138] netlink: 'syz.3.3772': attribute type 21 has an invalid length. [ 863.133897][T20138] netlink: 'syz.3.3772': attribute type 4 has an invalid length. [ 863.183381][T20138] netlink: 'syz.3.3772': attribute type 5 has an invalid length. [ 863.837610][T20153] __nla_validate_parse: 8 callbacks suppressed [ 863.837629][T20153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3775'. [ 864.661674][T20180] netlink: 'syz.5.3781': attribute type 10 has an invalid length. [ 864.842181][T20180] bridge0: port 3(hsr0) entered disabled state [ 864.931543][T20180] device hsr0 left promiscuous mode [ 864.962180][T20180] bridge0: port 3(hsr0) entered disabled state [ 864.979800][T20180] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 865.204047][T20190] netlink: 'syz.4.3783': attribute type 10 has an invalid length. [ 865.244779][T20190] device veth0_vlan left promiscuous mode [ 865.270222][T20190] device veth0_vlan entered promiscuous mode [ 865.608627][T20190] team0: Device veth0_vlan failed to register rx_handler [ 866.102791][T20191] delete_channel: no stack [ 866.270596][T20194] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3785'. [ 866.513806][T20211] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3789'. [ 866.697609][T20212] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.3790'. [ 866.740721][T20216] netlink: 'syz.5.3792': attribute type 10 has an invalid length. [ 866.784515][T20212] sctp: [Deprecated]: syz.3.3790 (pid 20212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 866.784515][T20212] Use struct sctp_sack_info instead [ 866.811705][T20216] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3792'. [ 866.841472][T20216] device dummy0 entered promiscuous mode [ 866.857753][T20216] bridge0: port 3(dummy0) entered blocking state [ 866.891558][T20216] bridge0: port 3(dummy0) entered disabled state [ 866.923286][T20216] bridge0: port 3(dummy0) entered blocking state [ 866.929848][T20216] bridge0: port 3(dummy0) entered forwarding state [ 866.986474][T20223] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3790'. [ 867.075635][T20225] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3793'. [ 867.096312][T20223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.186875][T20223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.240292][T20223] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 867.275303][T20223] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 867.429498][T20223] bond0 (unregistering): Released all slaves [ 867.458361][T20217] netlink: 'syz.4.3789': attribute type 13 has an invalid length. [ 867.467882][T20217] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3789'. [ 868.035216][T20250] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3798'. [ 868.403763][T20262] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3801'. [ 868.504257][T20266] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 869.421893][T20264] netlink: 'syz.1.3799': attribute type 10 has an invalid length. [ 869.451798][T20268] delete_channel: no stack [ 869.499707][T20264] team0: Port device netdevsim0 removed [ 869.527561][T20262] __nla_validate_parse: 1 callbacks suppressed [ 869.527580][T20262] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3801'. [ 869.574727][T20260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3801'. [ 869.631484][T20267] netlink: 'syz.4.3801': attribute type 10 has an invalid length. [ 869.661190][T20267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3801'. [ 869.703502][T20267] device team0 entered promiscuous mode [ 869.709390][T20267] device team_slave_0 entered promiscuous mode [ 869.722971][T20267] device team_slave_1 entered promiscuous mode [ 869.734973][T20267] bridge0: port 3(team0) entered blocking state [ 869.741924][T20267] bridge0: port 3(team0) entered disabled state [ 869.752170][T20267] bridge0: port 3(team0) entered blocking state [ 869.758544][T20267] bridge0: port 3(team0) entered forwarding state [ 869.776733][T20270] netlink: 'syz.4.3801': attribute type 12 has an invalid length. [ 869.791813][T20270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3801'. [ 869.820890][T20280] netlink: 'syz.3.3804': attribute type 2 has an invalid length. [ 869.881359][T20280] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 869.889190][T20280] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3804'. [ 869.920166][T20272] netlink: 'syz.5.3802': attribute type 10 has an invalid length. [ 870.148507][T20289] netlink: 'syz.4.3807': attribute type 25 has an invalid length. [ 870.184054][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.190482][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.694303][T20304] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3811'. [ 872.073212][T20323] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.3814'. [ 872.188456][T20323] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3814'. [ 872.357992][T20327] validate_nla: 1 callbacks suppressed [ 872.358032][T20327] netlink: 'syz.3.3818': attribute type 22 has an invalid length. [ 872.447814][T20327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 873.070202][T20335] netlink: 'syz.1.3820': attribute type 10 has an invalid length. [ 873.133770][T20345] netlink: 'syz.5.3821': attribute type 29 has an invalid length. [ 873.198912][T20345] netlink: 'syz.5.3821': attribute type 29 has an invalid length. [ 873.265769][T20347] netlink: 'syz.5.3821': attribute type 29 has an invalid length. [ 873.333452][T20345] netlink: 'syz.5.3821': attribute type 29 has an invalid length. [ 873.422147][T20352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3823'. [ 873.497264][T20347] netlink: 'syz.5.3821': attribute type 29 has an invalid length. [ 876.594655][T20416] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3839'. [ 877.547753][T20459] netlink: 'syz.3.3847': attribute type 10 has an invalid length. [ 877.904962][T20467] sctp: [Deprecated]: syz.1.3848 (pid 20467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.904962][T20467] Use struct sctp_sack_info instead [ 878.821934][T20481] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3853'. [ 879.196613][T20492] netlink: 'syz.5.3856': attribute type 10 has an invalid length. [ 879.330902][T20492] team0: Device wg1 is of different type [ 879.762346][T20510] netlink: 'syz.0.3861': attribute type 3 has an invalid length. [ 879.842498][T20510] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3861'. [ 880.395144][T20520] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3865'. [ 880.616066][T20527] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3868'. [ 880.645617][T20527] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 880.683369][T20527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 880.758411][T20534] netlink: 'syz.0.3869': attribute type 25 has an invalid length. [ 880.786550][T20539] syz.1.3870[20539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 880.819938][T20534] netlink: 'syz.0.3869': attribute type 29 has an invalid length. [ 880.907084][T20535] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3869'. [ 880.984899][T20534] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3869'. [ 881.285249][T20548] device syzkaller0 entered promiscuous mode [ 885.262015][T20557] netlink: 'syz.5.3875': attribute type 10 has an invalid length. [ 885.279483][T20557] bridge0: port 3(dummy0) entered disabled state [ 885.289667][T20557] device dummy0 left promiscuous mode [ 885.299253][T20557] bridge0: port 3(dummy0) entered disabled state [ 885.367575][T20583] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3881'. [ 885.390172][T20583] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 885.418465][T20583] CPU: 0 PID: 20583 Comm: syz.3.3881 Not tainted syzkaller #0 [ 885.426028][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.436138][T20583] Call Trace: [ 885.439460][T20583] [ 885.442435][T20583] dump_stack_lvl+0x188/0x24e [ 885.447170][T20583] ? show_regs_print_info+0x12/0x12 [ 885.452419][T20583] ? load_image+0x410/0x410 [ 885.456997][T20583] sysfs_warn_dup+0x8a/0xa0 [ 885.461562][T20583] sysfs_do_create_link_sd+0xc0/0x110 [ 885.466990][T20583] device_add+0x83b/0x1050 [ 885.471469][T20583] wiphy_register+0x1d8b/0x2aa0 [ 885.476387][T20583] ? cfg80211_event_work+0x40/0x40 [ 885.481553][T20583] ? minstrel_ht_alloc+0x894/0xa20 [ 885.486726][T20583] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 885.492855][T20583] ieee80211_register_hw+0x2e33/0x3b00 [ 885.498387][T20583] ? ieee80211_register_hw+0xf61/0x3b00 [ 885.504025][T20583] ? ieee80211_register_hw+0xf61/0x3b00 [ 885.509635][T20583] ? ieee80211_tasklet_handler+0x20/0x20 [ 885.515316][T20583] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 885.521258][T20583] ? __debug_object_init+0xed/0x440 [ 885.526515][T20583] ? memset+0x1e/0x40 [ 885.530540][T20583] ? __hrtimer_init+0x189/0x270 [ 885.535448][T20583] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 885.541219][T20583] ? memcpy+0x3c/0x60 [ 885.545241][T20583] hwsim_new_radio_nl+0xab7/0xc90 [ 885.550308][T20583] genl_family_rcv_msg_doit+0x22f/0x350 [ 885.555887][T20583] ? end_current_label_crit_section+0x170/0x170 [ 885.562173][T20583] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 885.568101][T20583] ? bpf_lsm_capable+0x5/0x10 [ 885.572816][T20583] ? security_capable+0x85/0xb0 [ 885.577721][T20583] genl_rcv_msg+0x601/0x790 [ 885.582269][T20583] ? genl_bind+0x360/0x360 [ 885.586720][T20583] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 885.593094][T20583] netlink_rcv_skb+0x1ef/0x440 [ 885.597891][T20583] ? genl_bind+0x360/0x360 [ 885.602343][T20583] ? netlink_ack+0x1160/0x1160 [ 885.607147][T20583] ? down_read+0x1a8/0x2d0 [ 885.611640][T20583] genl_rcv+0x24/0x40 [ 885.615661][T20583] netlink_unicast+0x7ad/0x920 [ 885.620466][T20583] netlink_sendmsg+0x8ad/0xbd0 [ 885.625264][T20583] ? netlink_getsockopt+0x550/0x550 [ 885.630497][T20583] ? apparmor_socket_sendmsg+0x8a/0x330 [ 885.636081][T20583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 885.641394][T20583] ? security_socket_sendmsg+0x7c/0xa0 [ 885.646886][T20583] ? netlink_getsockopt+0x550/0x550 [ 885.652124][T20583] ____sys_sendmsg+0x5ed/0x9a0 [ 885.656942][T20583] ? __sys_sendmsg_sock+0x30/0x30 [ 885.661989][T20583] ? __import_iovec+0x306/0x510 [ 885.666885][T20583] ? import_iovec+0x6f/0xa0 [ 885.671427][T20583] ___sys_sendmsg+0x2a2/0x360 [ 885.676146][T20583] ? __sys_sendmsg+0x2a0/0x2a0 [ 885.680978][T20583] __se_sys_sendmsg+0x1c3/0x2b0 [ 885.685862][T20583] ? __x64_sys_sendmsg+0x80/0x80 [ 885.690844][T20583] ? lockdep_hardirqs_on+0x94/0x140 [ 885.696081][T20583] do_syscall_64+0x4c/0xa0 [ 885.700530][T20583] ? clear_bhb_loop+0x60/0xb0 [ 885.705234][T20583] ? clear_bhb_loop+0x60/0xb0 [ 885.709947][T20583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.715872][T20583] RIP: 0033:0x7f09e439e159 [ 885.720314][T20583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.739956][T20583] RSP: 002b:00007f09e5330028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.748404][T20583] RAX: ffffffffffffffda RBX: 00007f09e4626090 RCX: 00007f09e439e159 [ 885.756399][T20583] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 885.764414][T20583] RBP: 00007f09e443506b R08: 0000000000000000 R09: 0000000000000000 [ 885.772410][T20583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.780402][T20583] R13: 00007f09e4626128 R14: 00007f09e4626090 R15: 00007ffc3ac2f408 [ 885.788414][T20583] [ 885.960614][T20590] netlink: 'syz.1.3882': attribute type 22 has an invalid length. [ 885.978093][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 886.211566][T20600] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3886'. [ 886.579233][T20610] netlink: 'syz.4.3888': attribute type 3 has an invalid length. [ 886.600485][T20610] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3888'. [ 886.682951][T20612] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3889'. [ 887.669918][T20632] netlink: 'syz.4.3894': attribute type 10 has an invalid length. [ 887.816149][T20632] device dummy0 entered promiscuous mode [ 887.831927][T20632] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 887.937176][T20640] sctp: [Deprecated]: syz.1.3895 (pid 20640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 887.937176][T20640] Use struct sctp_sack_info instead [ 888.204871][T20655] netlink: 'syz.3.3899': attribute type 10 has an invalid length. [ 888.577507][T20664] netlink: 'syz.5.3900': attribute type 10 has an invalid length. [ 888.725341][T20664] team0: Port device geneve1 added [ 889.730626][T20693] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3908'. [ 889.880377][T20693] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.3908'. [ 890.010824][T20693] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3908'. [ 890.092439][T20700] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 890.219040][T20700] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 890.234985][T20708] device syzkaller0 left promiscuous mode [ 890.284683][T20701] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 890.381858][T20711] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 890.435101][T20700] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 890.475530][T20713] netlink: 'syz.1.3911': attribute type 29 has an invalid length. [ 890.777683][T20726] netlink: 143932 bytes leftover after parsing attributes in process `syz.5.3914'. [ 890.804298][ T49] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 890.888915][T20728] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3914'. [ 890.892519][T20726] netlink: zone id is out of range [ 890.997916][T20726] netlink: zone id is out of range [ 891.084277][T20726] netlink: zone id is out of range [ 891.137874][T20726] netlink: zone id is out of range [ 891.213777][T20726] netlink: zone id is out of range [ 891.280455][T20726] netlink: zone id is out of range [ 891.342396][T20726] netlink: zone id is out of range [ 891.386880][T20726] netlink: zone id is out of range [ 891.441361][T20726] netlink: zone id is out of range [ 891.446606][T20726] netlink: zone id is out of range [ 891.952862][T20763] netlink: 'syz.4.3923': attribute type 21 has an invalid length. [ 891.982711][T20768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3921'. [ 892.422928][T20768] device bond0 left promiscuous mode [ 892.456806][T20768] device bond_slave_0 left promiscuous mode [ 892.491427][T20768] device bond_slave_1 left promiscuous mode [ 892.528965][T20768] : port 1(bond0) entered disabled state [ 892.644295][T20768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.867816][T20768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.929682][T20768] bond0 (unregistering): Released all slaves [ 893.641468][T20795] netlink: 'syz.1.3928': attribute type 13 has an invalid length. [ 893.659232][T20795] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.3928'. [ 893.740741][T20798] netlink: 'syz.1.3928': attribute type 13 has an invalid length. [ 893.783027][T20798] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.3928'. [ 894.858266][T20820] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3935'. [ 895.204337][T20829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3936'. [ 896.573741][T20860] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3940'. [ 896.839576][T20860] team0: Port device team_slave_0 removed [ 897.026267][T20872] netlink: 'syz.1.3942': attribute type 10 has an invalid length. [ 897.061651][T20869] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3943'. [ 897.135628][T20873] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3943'. [ 897.191233][T20873] net_ratelimit: 3544 callbacks suppressed [ 897.191255][T20873] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 897.437168][T20878] netlink: 755 bytes leftover after parsing attributes in process `syz.4.3945'. [ 901.451408][T20908] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3949'. [ 901.508995][T20908] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3949'. [ 901.600188][T20908] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3949'. [ 901.683412][T20907] netlink: 'syz.5.3951': attribute type 19 has an invalid length. [ 901.713486][T20907] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3951'. [ 903.679810][T20937] sctp: [Deprecated]: syz.1.3959 (pid 20937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.679810][T20937] Use struct sctp_sack_info instead [ 903.792472][T20941] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.3960'. [ 905.157445][T20950] bridge0: port 2(ip6gretap0) entered blocking state [ 905.316474][T20950] bridge0: port 2(ip6gretap0) entered disabled state [ 905.467293][T20950] device ip6gretap0 entered promiscuous mode [ 905.552472][T20950] bridge0: port 2(ip6gretap0) entered blocking state [ 905.559435][T20950] bridge0: port 2(ip6gretap0) entered forwarding state [ 905.707824][T20957] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3963'. [ 906.463032][T20976] netlink: 'syz.5.3966': attribute type 10 has an invalid length. [ 906.525211][T20976] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3966'. [ 906.594245][T20976] netlink: 'syz.5.3966': attribute type 10 has an invalid length. [ 906.629073][T20976] team0: Port device wlan1 added [ 907.534266][T20996] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.3971'. [ 907.865196][T20995] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3969'. [ 908.022523][T20995] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3969'. [ 908.077209][T20995] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3969'. [ 908.168395][T21004] netlink: 'syz.0.3973': attribute type 16 has an invalid length. [ 908.197069][T21004] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3973'. [ 908.722501][T21011] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.3974'. [ 910.915265][T21031] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3977'. [ 911.708349][T21050] netlink: 'syz.3.3984': attribute type 41 has an invalid length. [ 912.119963][T21056] netlink: 'syz.1.3986': attribute type 2 has an invalid length. [ 912.149275][T21056] netlink: 'syz.1.3986': attribute type 1 has an invalid length. [ 912.172676][T21056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3986'. [ 915.124372][T21074] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3988'. [ 915.201398][T21074] netlink: 6324 bytes leftover after parsing attributes in process `syz.5.3988'. [ 915.225272][T21074] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3988'. [ 916.442842][T21095] netlink: 'syz.1.3996': attribute type 11 has an invalid length. [ 916.479375][T21095] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3996'. [ 916.545451][T21098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.457226][T21101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3997'. [ 921.521549][T21171] netlink: 'syz.5.4014': attribute type 2 has an invalid length. [ 921.543491][T21171] netlink: 'syz.5.4014': attribute type 1 has an invalid length. [ 921.577901][T21171] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.4014'. [ 922.332994][T21191] netlink: 'syz.5.4017': attribute type 3 has an invalid length. [ 922.437972][T21191] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4017'. [ 922.535579][T21187] netlink: 'syz.0.4019': attribute type 10 has an invalid length. [ 922.584631][T21195] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4021'. [ 922.720260][T21178] netlink: 'syz.5.4017': attribute type 21 has an invalid length. [ 922.814981][T21178] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4017'. [ 922.868591][T21178] netlink: 'syz.5.4017': attribute type 4 has an invalid length. [ 922.881444][T21178] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4017'. [ 922.911282][T21185] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 922.970263][T21201] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4023'. [ 923.086372][T21203] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4024'. [ 923.141942][T21209] netlink: 'syz.5.4025': attribute type 10 has an invalid length. [ 923.163330][T21209] team0: Device hsr_slave_0 failed to register rx_handler [ 923.345812][T21218] device sit0 entered promiscuous mode [ 926.724502][T21246] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4033'. [ 927.846888][T21276] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4040'. [ 928.389998][T21284] netlink: 'syz.3.4042': attribute type 21 has an invalid length. [ 928.419894][T21284] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4042'. [ 928.457367][T21284] netlink: 'syz.3.4042': attribute type 4 has an invalid length. [ 928.481798][T21284] netlink: 'syz.3.4042': attribute type 3 has an invalid length. [ 928.506737][T21284] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4042'. [ 928.639869][T21293] netlink: 'syz.5.4043': attribute type 10 has an invalid length. [ 928.698994][T21294] netlink: 'syz.4.4045': attribute type 1 has an invalid length. [ 928.771346][T21294] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4045'. [ 929.137344][T21298] netlink: 'syz.4.4045': attribute type 33 has an invalid length. [ 929.150172][T21298] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4045'. [ 929.176567][T21300] netlink: 'syz.4.4045': attribute type 21 has an invalid length. [ 929.201244][T21300] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.4045'. [ 929.395201][T21307] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4048'. [ 929.415413][T21307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 929.436619][T21307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 929.497453][T21305] device sit0 entered promiscuous mode [ 930.230004][T21317] netlink: 'syz.0.4049': attribute type 21 has an invalid length. [ 930.265560][T21317] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4049'. [ 930.636020][T21344] netlink: 'syz.0.4056': attribute type 4 has an invalid length. [ 930.920580][T21344] device syzkaller0 entered promiscuous mode [ 931.625956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.632605][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.483445][T21361] netlink: 'syz.5.4060': attribute type 10 has an invalid length. [ 934.509419][T21380] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4063'. [ 934.706960][T21389] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.4066'. [ 934.709925][T21386] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.4066'. [ 935.427385][T21396] bridge0: port 3(team0) entered blocking state [ 935.452354][T21396] bridge0: port 3(team0) entered disabled state [ 935.496376][T21396] device team0 entered promiscuous mode [ 935.512433][T21396] device team_slave_0 entered promiscuous mode [ 935.524846][T21396] device team_slave_1 entered promiscuous mode [ 935.558276][T21396] bridge0: port 3(team0) entered blocking state [ 935.564989][T21396] bridge0: port 3(team0) entered forwarding state [ 935.690566][T21401] device sit0 entered promiscuous mode [ 935.939109][T21413] netlink: 'syz.0.4070': attribute type 29 has an invalid length. [ 936.070543][T21413] netlink: 'syz.0.4070': attribute type 29 has an invalid length. [ 936.223270][T21428] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4073'. [ 937.482644][T21467] netlink: 'syz.1.4084': attribute type 21 has an invalid length. [ 937.506579][T21467] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4084'. [ 937.567772][T21467] netlink: 'syz.1.4084': attribute type 3 has an invalid length. [ 937.599234][T21467] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4084'. [ 937.722231][T21474] netlink: 'syz.0.4087': attribute type 10 has an invalid length. [ 937.842135][T21474] bridge0: port 3(team0) entered disabled state [ 937.848769][T21474] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.856401][T21474] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.895010][T21474] team0: Device bridge0 is already an upper device of the team interface [ 938.015159][T21479] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4089'. [ 938.036345][T21479] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4089'. [ 938.056058][T21480] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4089'. [ 938.056557][T21478] netlink: 'syz.5.4088': attribute type 27 has an invalid length. [ 938.084787][T21478] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4088'. [ 938.418820][T21507] netlink: 'syz.3.4095': attribute type 21 has an invalid length. [ 938.450635][T21507] netlink: 'syz.3.4095': attribute type 1 has an invalid length. [ 939.374600][T21548] delete_channel: no stack [ 939.384931][T21545] tun0: tun_chr_ioctl cmd 2148553947 [ 939.392189][T21548] delete_channel: no stack [ 939.851842][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 939.878786][T21566] __nla_validate_parse: 2 callbacks suppressed [ 939.878804][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 939.973296][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.017803][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.062431][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.109151][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.167688][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.218369][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.405034][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.413574][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.423719][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.432856][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.448310][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.456846][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.477602][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.531454][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.592407][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.600322][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 940.630697][T21566] netlink: 'syz.5.4108': attribute type 21 has an invalid length. [ 940.649330][T21566] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4108'. [ 944.941614][T21695] validate_nla: 57 callbacks suppressed [ 944.941638][T21695] netlink: 'syz.0.4139': attribute type 39 has an invalid length. [ 945.162820][T21706] __nla_validate_parse: 62 callbacks suppressed [ 945.162908][T21706] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4144'. [ 945.394572][T21711] netlink: 'syz.3.4142': attribute type 3 has an invalid length. [ 945.438112][T21711] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4142'. [ 945.976779][T21727] netlink: 'syz.5.4149': attribute type 10 has an invalid length. [ 946.000209][T21727] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4149'. [ 946.056167][T21727] netlink: 'syz.5.4149': attribute type 10 has an invalid length. [ 946.468734][T21753] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4156'. [ 946.560644][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 946.588843][T21742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.793991][T21776] device syzkaller0 entered promiscuous mode [ 948.124804][T21794] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4166'. [ 948.174618][T21794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 948.273525][T21794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.049572][T21805] netlink: 'syz.5.4168': attribute type 2 has an invalid length. [ 952.057883][T21805] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4168'. [ 952.266876][T21835] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4175'. [ 952.574724][T21853] netlink: 'syz.5.4179': attribute type 1 has an invalid length. [ 952.610459][T21853] netlink: 'syz.5.4179': attribute type 4 has an invalid length. [ 952.622154][T21853] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4179'. [ 953.074473][T21871] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4183'. [ 953.865419][T21895] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4187'. [ 953.979688][T21897] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.4189'. [ 954.072028][T21899] netlink: 'syz.0.4190': attribute type 21 has an invalid length. [ 954.090818][T21899] netlink: 'syz.0.4190': attribute type 2 has an invalid length. [ 955.124138][T21928] netlink: 'syz.5.4197': attribute type 29 has an invalid length. [ 955.154751][T21928] netlink: 'syz.5.4197': attribute type 29 has an invalid length. [ 955.192548][T21932] netlink: 'syz.5.4197': attribute type 29 has an invalid length. [ 955.260643][T21934] netlink: 'syz.5.4197': attribute type 29 has an invalid length. [ 955.324311][T21928] netlink: 'syz.5.4197': attribute type 29 has an invalid length. [ 955.960847][T21957] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4203'. [ 956.127993][T21961] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4204'. [ 956.187510][T21963] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4204'. [ 956.686304][T21986] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4210'. [ 957.255106][T22016] validate_nla: 3 callbacks suppressed [ 957.255126][T22016] netlink: 'syz.4.4218': attribute type 17 has an invalid length. [ 957.285601][T22016] __nla_validate_parse: 1 callbacks suppressed [ 957.285625][T22016] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4218'. [ 957.362482][T22016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 957.398856][T22016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 958.219638][T22049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4224'. [ 958.516577][T22053] netlink: 'syz.4.4225': attribute type 1 has an invalid length. [ 958.537443][T22053] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4225'. [ 960.078881][T22081] netlink: 'syz.3.4231': attribute type 2 has an invalid length. [ 961.574322][T22116] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4238'. [ 961.620398][T22117] netlink: 'syz.5.4238': attribute type 10 has an invalid length. [ 962.131104][T22119] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4239'. [ 962.283161][T22119] netlink: 'syz.5.4239': attribute type 4 has an invalid length. [ 963.130787][T22143] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4247'. [ 963.252898][T22141] netlink: 'syz.1.4246': attribute type 21 has an invalid length. [ 963.281475][T22141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4246'. [ 963.603248][T22153] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4250'. [ 963.912205][T22161] netlink: 'syz.4.4252': attribute type 11 has an invalid length. [ 963.920144][T22161] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4252'. [ 964.039695][T22162] netlink: 'syz.4.4252': attribute type 11 has an invalid length. [ 964.090334][T22162] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4252'. [ 964.193741][T22166] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4254'. [ 964.244386][T22166] netlink: 'syz.0.4254': attribute type 11 has an invalid length. [ 964.277467][T22166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4254'. [ 964.694800][T22170] netlink: 'syz.3.4255': attribute type 29 has an invalid length. [ 964.705801][T22160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.768660][T22170] netlink: 'syz.3.4255': attribute type 29 has an invalid length. [ 964.792173][T22171] netlink: 'syz.3.4255': attribute type 29 has an invalid length. [ 964.953264][T22188] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4259'. [ 964.981306][T22188] tc_dump_action: action bad kind [ 965.213431][T22196] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.4261'. [ 965.515005][T22197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4263'. [ 965.743372][T22209] device pim6reg1 entered promiscuous mode [ 966.251377][T22215] netlink: 'syz.0.4268': attribute type 21 has an invalid length. [ 966.908663][T22226] netlink: 'syz.5.4271': attribute type 3 has an invalid length. [ 966.962554][T22230] netlink: 'syz.5.4271': attribute type 3 has an invalid length. [ 966.968264][T22228] netlink: 'syz.5.4271': attribute type 3 has an invalid length. [ 968.357408][T22272] netlink: 'syz.3.4285': attribute type 21 has an invalid length. [ 968.376799][T22272] __nla_validate_parse: 11 callbacks suppressed [ 968.376827][T22272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4285'. [ 968.743232][T22276] netlink: 'syz.0.4286': attribute type 21 has an invalid length. [ 971.514339][T22300] netlink: 'syz.1.4293': attribute type 33 has an invalid length. [ 971.522719][T22300] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4293'. [ 971.782732][T22317] netlink: 'syz.1.4297': attribute type 21 has an invalid length. [ 971.790689][T22317] netlink: 'syz.1.4297': attribute type 6 has an invalid length. [ 971.860454][T22317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4297'. [ 972.865171][T22338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4303'. [ 973.933463][T22355] device syzkaller0 entered promiscuous mode [ 974.362856][T22365] netlink: 'syz.3.4309': attribute type 21 has an invalid length. [ 974.383948][T22365] netlink: 'syz.3.4309': attribute type 6 has an invalid length. [ 974.409221][T22368] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4311'. [ 974.426631][T22365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4309'. [ 974.471653][T22368] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4311'. [ 974.531785][T22368] netlink: 'syz.4.4311': attribute type 11 has an invalid length. [ 974.539752][T22368] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4311'. [ 974.569731][T22370] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4311'. [ 974.624926][T22366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.063224][T22383] netlink: 'syz.5.4313': attribute type 2 has an invalid length. [ 975.139173][T22383] netlink: 'syz.5.4313': attribute type 8 has an invalid length. [ 975.226852][T22383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4313'. [ 975.403481][T22385] netlink: 'syz.5.4313': attribute type 2 has an invalid length. [ 975.440336][T22385] netlink: 'syz.5.4313': attribute type 8 has an invalid length. [ 975.478088][T22385] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4313'. [ 975.508433][T22388] netlink: 'syz.4.4317': attribute type 10 has an invalid length. [ 975.530727][T22388] device veth0_vlan left promiscuous mode [ 975.575162][T22388] device veth0_vlan entered promiscuous mode [ 975.689753][T22388] team0: Device veth0_vlan failed to register rx_handler [ 975.915326][T22396] netlink: 'syz.3.4318': attribute type 1 has an invalid length. [ 976.056343][T22407] netlink: 'syz.0.4320': attribute type 7 has an invalid length. [ 976.419912][T22414] netlink: 'syz.5.4322': attribute type 10 has an invalid length. [ 976.646158][T22421] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4325'. [ 978.149556][T22448] device veth0_vlan left promiscuous mode [ 978.247142][T22448] device veth0_vlan entered promiscuous mode [ 978.584235][T22448] team0: Device veth0_vlan failed to register rx_handler [ 978.809647][ T49] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 978.947012][T22454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4334'. [ 979.909985][T22482] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4343'. [ 980.372698][T22500] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4349'. [ 980.419027][T22502] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4350'. [ 980.450362][T22502] validate_nla: 1 callbacks suppressed [ 980.450389][T22502] netlink: 'syz.4.4350': attribute type 21 has an invalid length. [ 980.492987][T22503] delete_channel: no stack [ 980.500695][T22502] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4350'. [ 980.526217][T22502] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 980.560829][T22502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.695203][T22510] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4353'. [ 980.799166][T22514] netlink: 'syz.0.4355': attribute type 21 has an invalid length. [ 980.826674][T22514] netlink: 'syz.0.4355': attribute type 1 has an invalid length. [ 980.853679][T22514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4355'. [ 980.877914][T22509] netlink: 'syz.3.4353': attribute type 41 has an invalid length. [ 982.161506][T22533] netlink: 'syz.0.4361': attribute type 10 has an invalid length. [ 982.190138][T22533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4361'. [ 982.219630][T22533] device dummy0 entered promiscuous mode [ 982.231611][T22533] bridge0: port 4(dummy0) entered blocking state [ 982.269018][T22533] bridge0: port 4(dummy0) entered disabled state [ 982.386739][T22538] netlink: 'syz.3.4362': attribute type 3 has an invalid length. [ 982.421600][T22537] netlink: 'syz.5.4363': attribute type 10 has an invalid length. [ 982.465140][T22538] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4362'. [ 982.499010][T22537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.703700][T22537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.655941][T22547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.681456][T22547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.711339][T22547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.718857][T22547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.856509][T22554] netlink: 'syz.3.4367': attribute type 25 has an invalid length. [ 986.869391][T22554] netlink: 'syz.3.4367': attribute type 29 has an invalid length. [ 987.170731][T22583] netlink: 'syz.3.4373': attribute type 10 has an invalid length. [ 987.180018][T22579] delete_channel: no stack [ 987.252962][T22586] veth1_to_bridge: mtu less than device minimum [ 989.452021][T22632] bridge0: port 4(batadv0) entered blocking state [ 989.458683][T22632] bridge0: port 4(batadv0) entered disabled state [ 989.537790][T22632] device batadv0 entered promiscuous mode [ 989.668180][ T4967] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 989.678091][ T4967] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 989.698012][T22632] bridge0: port 4(batadv0) entered blocking state [ 989.704825][T22632] bridge0: port 4(batadv0) entered forwarding state [ 989.911627][T22635] netlink: 'syz.5.4386': attribute type 10 has an invalid length. [ 990.239904][T22635] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.272662][T22635] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.288072][T22635] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.300136][T22635] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.658528][T22659] netlink: 'syz.3.4390': attribute type 10 has an invalid length. [ 990.714243][T22659] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.742929][T22659] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.771328][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4392'. [ 990.773052][T22659] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.898130][T22659] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.260569][T22659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.296400][T22659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.322551][T22659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.342541][T22659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.414385][T22659] team0: Port device geneve1 added [ 991.436433][T22677] netlink: 'syz.4.4396': attribute type 10 has an invalid length. [ 991.481286][T22677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4396'. [ 991.790640][T22676] netlink: 'syz.5.4395': attribute type 39 has an invalid length. [ 992.148111][T22695] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4402'. [ 992.217982][T22695] openvswitch: netlink: Message has 6 unknown bytes. [ 992.668337][T22697] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4403'. [ 992.683865][T22702] netlink: 'syz.0.4402': attribute type 2 has an invalid length. [ 992.704115][T22702] netlink: 'syz.0.4402': attribute type 5 has an invalid length. [ 993.073780][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.080265][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.365530][T22739] device syzkaller0 entered promiscuous mode [ 994.866385][T22775] netlink: 'syz.4.4418': attribute type 10 has an invalid length. [ 995.673135][T22775] device geneve1 entered promiscuous mode [ 995.680237][T22775] team0: Port device geneve1 added [ 995.888222][T22795] netlink: 'syz.1.4425': attribute type 39 has an invalid length. [ 995.939655][T22791] netlink: 'syz.5.4424': attribute type 10 has an invalid length. [ 995.959288][T22791] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4424'. [ 996.000483][T22799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4427'. [ 996.227273][T22811] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 996.280468][T22817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4431'. [ 996.303810][T22817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4431'. [ 996.354201][T22817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4431'. [ 996.818648][T22831] netlink: 'syz.1.4434': attribute type 10 has an invalid length. [ 996.834933][T22833] netlink: 'syz.3.4436': attribute type 3 has an invalid length. [ 996.853131][T22831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4434'. [ 996.937031][T22833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4436'. [ 996.981527][T22831] netlink: 'syz.1.4434': attribute type 10 has an invalid length. [ 996.989437][T22831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4434'. [ 997.531661][T22854] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4441'. [ 997.595252][T22850] netlink: 'syz.4.4440': attribute type 39 has an invalid length. [ 997.819169][ T4970] tipc: Subscription rejected, illegal request [ 1000.641283][T22861] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1000.646413][T22871] sctp: [Deprecated]: syz.5.4444 (pid 22871) Use of int in maxseg socket option. [ 1000.646413][T22871] Use struct sctp_assoc_value instead [ 1000.666798][T22865] netlink: 'syz.0.4442': attribute type 2 has an invalid length. [ 1000.690411][T22865] netlink: 'syz.0.4442': attribute type 8 has an invalid length. [ 1000.933809][T22880] netlink: 'syz.4.4446': attribute type 29 has an invalid length. [ 1001.021435][T22880] netlink: 'syz.4.4446': attribute type 29 has an invalid length. [ 1001.029655][T22881] netlink: 'syz.4.4446': attribute type 29 has an invalid length. [ 1001.085462][T22885] netlink: 'syz.4.4446': attribute type 29 has an invalid length. [ 1001.413972][T22883] -: renamed from syzkaller0 [ 1001.701779][T22899] netlink: 'syz.1.4453': attribute type 4 has an invalid length. [ 1001.735721][T22899] __nla_validate_parse: 1 callbacks suppressed [ 1001.735755][T22899] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1002.550694][T22921] tc_dump_action: action bad kind [ 1002.581253][T22913] netlink: 'syz.1.4456': attribute type 10 has an invalid length. [ 1002.637851][T22917] tc_dump_action: action bad kind [ 1003.099860][T22930] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4459'. [ 1003.334842][T22936] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1003.481309][T22942] netlink: 'syz.3.4463': attribute type 10 has an invalid length. [ 1003.538844][T22942] team0: Device vxcan1 is of different type [ 1003.784366][T22954] delete_channel: no stack [ 1004.103748][T22969] netlink: 'syz.5.4466': attribute type 13 has an invalid length. [ 1004.116640][T22969] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4466'. [ 1004.135701][T22969] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1004.366811][T22979] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1004.436141][T22979] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1004.467399][T22980] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1004.996764][T22995] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1005.010582][T23000] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4475'. [ 1005.069839][T23002] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1005.089040][T23002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1005.126233][T23002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1005.460661][T23012] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1005.537782][T23012] CPU: 1 PID: 23012 Comm: syz.5.4479 Not tainted syzkaller #0 [ 1005.545343][T23012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1005.555444][T23012] Call Trace: [ 1005.558764][T23012] [ 1005.561738][T23012] dump_stack_lvl+0x188/0x24e [ 1005.566476][T23012] ? show_regs_print_info+0x12/0x12 [ 1005.571723][T23012] ? load_image+0x410/0x410 [ 1005.576314][T23012] sysfs_warn_dup+0x8a/0xa0 [ 1005.580908][T23012] sysfs_do_create_link_sd+0xc0/0x110 [ 1005.586351][T23012] device_add+0x83b/0x1050 [ 1005.590833][T23012] wiphy_register+0x1d8b/0x2aa0 [ 1005.595785][T23012] ? cfg80211_event_work+0x40/0x40 [ 1005.600955][T23012] ? minstrel_ht_alloc+0x894/0xa20 [ 1005.606132][T23012] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1005.612325][T23012] ieee80211_register_hw+0x2e33/0x3b00 [ 1005.617857][T23012] ? ieee80211_register_hw+0xf61/0x3b00 [ 1005.623448][T23012] ? ieee80211_register_hw+0xf61/0x3b00 [ 1005.629052][T23012] ? ieee80211_tasklet_handler+0x20/0x20 [ 1005.634729][T23012] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1005.640673][T23012] ? __debug_object_init+0xed/0x440 [ 1005.645936][T23012] ? memset+0x1e/0x40 [ 1005.649967][T23012] ? __hrtimer_init+0x189/0x270 [ 1005.654864][T23012] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1005.660646][T23012] ? memcpy+0x3c/0x60 [ 1005.664687][T23012] hwsim_new_radio_nl+0xab7/0xc90 [ 1005.669790][T23012] genl_family_rcv_msg_doit+0x22f/0x350 [ 1005.675376][T23012] ? end_current_label_crit_section+0x170/0x170 [ 1005.681673][T23012] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1005.687635][T23012] ? bpf_lsm_capable+0x5/0x10 [ 1005.692370][T23012] ? security_capable+0x85/0xb0 [ 1005.697280][T23012] genl_rcv_msg+0x601/0x790 [ 1005.701837][T23012] ? lock_chain_count+0x20/0x20 [ 1005.706761][T23012] ? genl_bind+0x360/0x360 [ 1005.711232][T23012] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1005.717623][T23012] netlink_rcv_skb+0x1ef/0x440 [ 1005.722440][T23012] ? genl_bind+0x360/0x360 [ 1005.726913][T23012] ? netlink_ack+0x1160/0x1160 [ 1005.731793][T23012] ? down_read+0x1a8/0x2d0 [ 1005.736271][T23012] genl_rcv+0x24/0x40 [ 1005.740307][T23012] netlink_unicast+0x7ad/0x920 [ 1005.745136][T23012] netlink_sendmsg+0x8ad/0xbd0 [ 1005.749958][T23012] ? netlink_getsockopt+0x550/0x550 [ 1005.755205][T23012] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1005.760833][T23012] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1005.766170][T23012] ? security_socket_sendmsg+0x7c/0xa0 [ 1005.771684][T23012] ? netlink_getsockopt+0x550/0x550 [ 1005.776931][T23012] ____sys_sendmsg+0x5ed/0x9a0 [ 1005.781753][T23012] ? __sys_sendmsg_sock+0x30/0x30 [ 1005.786824][T23012] ? __import_iovec+0x306/0x510 [ 1005.791748][T23012] ? import_iovec+0x6f/0xa0 [ 1005.796310][T23012] ___sys_sendmsg+0x2a2/0x360 [ 1005.801047][T23012] ? __sys_sendmsg+0x2a0/0x2a0 [ 1005.805907][T23012] __se_sys_sendmsg+0x1c3/0x2b0 [ 1005.810814][T23012] ? __x64_sys_sendmsg+0x80/0x80 [ 1005.815818][T23012] ? lockdep_hardirqs_on+0x94/0x140 [ 1005.821093][T23012] do_syscall_64+0x4c/0xa0 [ 1005.825552][T23012] ? clear_bhb_loop+0x60/0xb0 [ 1005.830276][T23012] ? clear_bhb_loop+0x60/0xb0 [ 1005.835002][T23012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1005.840939][T23012] RIP: 0033:0x7f95b659e159 [ 1005.845399][T23012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.865060][T23012] RSP: 002b:00007f95b747f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.873534][T23012] RAX: ffffffffffffffda RBX: 00007f95b6825fa0 RCX: 00007f95b659e159 [ 1005.881554][T23012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000087 [ 1005.889577][T23012] RBP: 00007f95b663506b R08: 0000000000000000 R09: 0000000000000000 [ 1005.897591][T23012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.905605][T23012] R13: 00007f95b6826038 R14: 00007f95b6825fa0 R15: 00007fffd21fa3a8 [ 1005.913651][T23012] [ 1006.919129][T23043] __nla_validate_parse: 6 callbacks suppressed [ 1006.919157][T23043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4482'. [ 1007.303707][T23062] netlink: 271 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1007.326925][T23064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1007.371447][T23064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1007.436718][T23065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1010.936249][T23173] validate_nla: 7 callbacks suppressed [ 1010.936289][T23173] netlink: 'syz.5.4511': attribute type 1 has an invalid length. [ 1010.962168][T23169] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 1011.011616][T23169] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 1011.061262][T23169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4510'. [ 1011.374802][T23193] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4514'. [ 1012.452756][T23224] netlink: 'syz.0.4522': attribute type 2 has an invalid length. [ 1013.454074][T23231] netlink: 'syz.3.4525': attribute type 10 has an invalid length. [ 1013.774032][T23231] team0: Port device wlan1 added [ 1015.011512][T23267] netlink: 'syz.0.4544': attribute type 21 has an invalid length. [ 1015.068661][T23267] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4544'. [ 1015.191662][T23267] netlink: 'syz.0.4544': attribute type 4 has an invalid length. [ 1015.215484][T23267] netlink: 'syz.0.4544': attribute type 5 has an invalid length. [ 1015.271199][T23267] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4544'. [ 1015.448615][T23270] netlink: 'syz.4.4533': attribute type 10 has an invalid length. [ 1017.226607][T23308] netlink: 'syz.0.4541': attribute type 12 has an invalid length. [ 1017.270225][T23308] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1018.807527][T23309] netlink: 'syz.0.4541': attribute type 2 has an invalid length. [ 1018.816578][T23309] netlink: 'syz.0.4541': attribute type 8 has an invalid length. [ 1018.825130][T23309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1018.836202][T23319] netlink: 'syz.0.4541': attribute type 2 has an invalid length. [ 1018.851137][T23319] netlink: 'syz.0.4541': attribute type 8 has an invalid length. [ 1018.863203][T23312] netlink: 'syz.4.4539': attribute type 7 has an invalid length. [ 1018.871416][T23319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1018.998921][T23312] netlink: 'syz.4.4539': attribute type 7 has an invalid length. [ 1019.184181][T23312] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.4539'. [ 1020.556932][T23330] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4545'. [ 1021.121898][T23348] : port 1(ip6gretap0) entered blocking state [ 1021.138779][T23348] : port 1(ip6gretap0) entered disabled state [ 1021.155535][T23351] netlink: 'syz.4.4550': attribute type 2 has an invalid length. [ 1021.172343][T23348] device ip6gretap0 entered promiscuous mode [ 1021.189516][T23351] netlink: 'syz.4.4550': attribute type 1 has an invalid length. [ 1021.230785][T23352] device ip6gretap0 left promiscuous mode [ 1021.241307][T23351] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.4550'. [ 1021.252997][T23352] : port 1(ip6gretap0) entered disabled state [ 1021.349517][T23351] netlink: 'syz.4.4550': attribute type 3 has an invalid length. [ 1021.366910][T23351] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4550'. [ 1026.003650][T23387] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1028.087890][T23388] netlink: 'syz.3.4558': attribute type 10 has an invalid length. [ 1028.096528][T23388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4558'. [ 1028.105877][T23388] device team0 entered promiscuous mode [ 1028.111751][T23388] device team_slave_1 entered promiscuous mode [ 1028.118842][T23388] device geneve1 entered promiscuous mode [ 1028.130155][T23388] device wlan1 entered promiscuous mode [ 1028.138055][T23388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1028.151916][T23388] bridge0: port 3(team0) entered blocking state [ 1028.158359][T23388] bridge0: port 3(team0) entered disabled state [ 1028.172132][T23388] bridge0: port 3(team0) entered blocking state [ 1028.178602][T23388] bridge0: port 3(team0) entered listening state [ 1028.212215][T23388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1029.223241][T23416] netlink: 'syz.1.4560': attribute type 29 has an invalid length. [ 1029.257836][T23416] netlink: 'syz.1.4560': attribute type 29 has an invalid length. [ 1029.283812][T23419] netlink: 'syz.1.4560': attribute type 29 has an invalid length. [ 1029.335078][T23416] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1029.360669][T23416] syzkaller1: linktype set to 786 [ 1029.397463][T23418] netlink: 'syz.5.4567': attribute type 2 has an invalid length. [ 1029.585703][T23427] netlink: 'syz.0.4569': attribute type 29 has an invalid length. [ 1029.609113][T23427] netlink: 'syz.0.4569': attribute type 3 has an invalid length. [ 1029.645781][T23427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1030.138888][T23444] netlink: 'syz.3.4573': attribute type 2 has an invalid length. [ 1030.255613][T23448] netlink: 'syz.0.4574': attribute type 12 has an invalid length. [ 1030.277646][T23448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4574'. [ 1030.328273][T23451] netlink: 'syz.3.4575': attribute type 2 has an invalid length. [ 1032.689263][T23472] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.4580'. [ 1033.788930][T23507] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4587'. [ 1035.050437][T23537] sock: sock_timestamping_bind_phc: sock not bind to device [ 1038.420849][T23566] tipc: Started in network mode [ 1038.434866][T23566] tipc: Node identity 9215a268, cluster identity 4711 [ 1038.452643][T23566] tipc: Node number set to 2450891368 [ 1038.616072][T23568] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4603'. [ 1038.839629][T23579] validate_nla: 2 callbacks suppressed [ 1038.839672][T23579] netlink: 'syz.1.4606': attribute type 4 has an invalid length. [ 1038.860508][T23579] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4606'. [ 1038.947721][T23585] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1038.957715][T23584] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1038.983628][T23584] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1039.011417][T23584] CPU: 0 PID: 23584 Comm: syz.3.4608 Not tainted syzkaller #0 [ 1039.019036][T23584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1039.029152][T23584] Call Trace: [ 1039.032477][T23584] [ 1039.035453][T23584] dump_stack_lvl+0x188/0x24e [ 1039.040196][T23584] ? show_regs_print_info+0x12/0x12 [ 1039.045456][T23584] ? load_image+0x410/0x410 [ 1039.050041][T23584] sysfs_warn_dup+0x8a/0xa0 [ 1039.054634][T23584] sysfs_do_create_link_sd+0xc0/0x110 [ 1039.060092][T23584] device_add+0x83b/0x1050 [ 1039.064588][T23584] wiphy_register+0x1d8b/0x2aa0 [ 1039.069525][T23584] ? cfg80211_event_work+0x40/0x40 [ 1039.074704][T23584] ? minstrel_ht_alloc+0x894/0xa20 [ 1039.079879][T23584] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1039.086014][T23584] ieee80211_register_hw+0x2e33/0x3b00 [ 1039.091540][T23584] ? ieee80211_register_hw+0xf61/0x3b00 [ 1039.097143][T23584] ? ieee80211_register_hw+0xf61/0x3b00 [ 1039.102763][T23584] ? ieee80211_tasklet_handler+0x20/0x20 [ 1039.108460][T23584] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1039.114417][T23584] ? __debug_object_init+0xed/0x440 [ 1039.119677][T23584] ? memset+0x1e/0x40 [ 1039.123718][T23584] ? __hrtimer_init+0x189/0x270 [ 1039.128609][T23584] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1039.134371][T23584] ? memcpy+0x3c/0x60 [ 1039.138389][T23584] hwsim_new_radio_nl+0xab7/0xc90 [ 1039.143461][T23584] genl_family_rcv_msg_doit+0x22f/0x350 [ 1039.149035][T23584] ? end_current_label_crit_section+0x170/0x170 [ 1039.155310][T23584] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1039.161240][T23584] ? bpf_lsm_capable+0x5/0x10 [ 1039.165958][T23584] ? security_capable+0x85/0xb0 [ 1039.170858][T23584] genl_rcv_msg+0x601/0x790 [ 1039.175420][T23584] ? genl_bind+0x360/0x360 [ 1039.179888][T23584] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1039.186263][T23584] netlink_rcv_skb+0x1ef/0x440 [ 1039.191062][T23584] ? genl_bind+0x360/0x360 [ 1039.195510][T23584] ? netlink_ack+0x1160/0x1160 [ 1039.200314][T23584] ? down_read+0x1a8/0x2d0 [ 1039.204764][T23584] genl_rcv+0x24/0x40 [ 1039.208783][T23584] netlink_unicast+0x7ad/0x920 [ 1039.213584][T23584] netlink_sendmsg+0x8ad/0xbd0 [ 1039.218385][T23584] ? netlink_getsockopt+0x550/0x550 [ 1039.223619][T23584] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1039.229209][T23584] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1039.234526][T23584] ? security_socket_sendmsg+0x7c/0xa0 [ 1039.240042][T23584] ? netlink_getsockopt+0x550/0x550 [ 1039.245275][T23584] ____sys_sendmsg+0x5ed/0x9a0 [ 1039.250076][T23584] ? __sys_sendmsg_sock+0x30/0x30 [ 1039.255136][T23584] ? __import_iovec+0x306/0x510 [ 1039.260041][T23584] ? import_iovec+0x6f/0xa0 [ 1039.264589][T23584] ___sys_sendmsg+0x2a2/0x360 [ 1039.269302][T23584] ? __sys_sendmsg+0x2a0/0x2a0 [ 1039.274138][T23584] __se_sys_sendmsg+0x1c3/0x2b0 [ 1039.279053][T23584] ? __x64_sys_sendmsg+0x80/0x80 [ 1039.284037][T23584] ? lockdep_hardirqs_on+0x94/0x140 [ 1039.289274][T23584] do_syscall_64+0x4c/0xa0 [ 1039.293726][T23584] ? clear_bhb_loop+0x60/0xb0 [ 1039.298436][T23584] ? clear_bhb_loop+0x60/0xb0 [ 1039.303145][T23584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.309066][T23584] RIP: 0033:0x7f09e439e159 [ 1039.313511][T23584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.333192][T23584] RSP: 002b:00007f09e5351028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.341643][T23584] RAX: ffffffffffffffda RBX: 00007f09e4625fa0 RCX: 00007f09e439e159 [ 1039.349665][T23584] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1039.357671][T23584] RBP: 00007f09e443506b R08: 0000000000000000 R09: 0000000000000000 [ 1039.365677][T23584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.373677][T23584] R13: 00007f09e4626038 R14: 00007f09e4625fa0 R15: 00007ffc3ac2f408 [ 1039.381691][T23584] [ 1039.533270][T23599] netlink: 'syz.1.4611': attribute type 2 has an invalid length. [ 1039.551280][T23599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1040.080261][T23628] netlink: 'syz.1.4619': attribute type 21 has an invalid length. [ 1041.041450][T23666] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1041.463635][T23679] netlink: 'syz.0.4633': attribute type 19 has an invalid length. [ 1041.491486][T23679] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4633'. [ 1042.190280][T23693] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4636'. [ 1043.632692][ C1] bridge0: port 3(team0) entered learning state [ 1044.338895][T23757] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4650'. [ 1044.782297][T23764] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4651'. [ 1048.604912][T23805] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1049.029475][T23824] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1050.095063][T23856] netlink: 'syz.0.4674': attribute type 29 has an invalid length. [ 1050.144440][T23856] netlink: 'syz.0.4674': attribute type 29 has an invalid length. [ 1050.194106][T23859] netlink: 'syz.0.4674': attribute type 29 has an invalid length. [ 1050.501499][T23856] netlink: 'syz.0.4674': attribute type 29 has an invalid length. [ 1050.894482][T23883] netlink: 'syz.5.4677': attribute type 7 has an invalid length. [ 1051.075617][T23891] netlink: 'syz.5.4681': attribute type 29 has an invalid length. [ 1051.094386][T23891] netlink: 'syz.5.4681': attribute type 29 has an invalid length. [ 1051.132772][T23892] netlink: 'syz.5.4681': attribute type 29 has an invalid length. [ 1051.708234][T23913] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4684'. [ 1051.807410][T23913] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1053.038409][T23939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.088926][T23939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.178141][T23945] netlink: 'syz.5.4694': attribute type 27 has an invalid length. [ 1053.207612][T23939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.233022][T23945] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1053.262520][T23946] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1053.359930][T23939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.413322][T23949] netlink: 'syz.0.4697': attribute type 27 has an invalid length. [ 1053.439307][T23949] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1053.555840][T23946] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1053.587721][T23945] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1053.640582][T23950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1053.784258][T23956] delete_channel: no stack [ 1053.846311][T23960] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1053.942206][T23965] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1054.503291][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.509780][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.792102][T23972] device hsr_slave_0 entered promiscuous mode [ 1054.841687][T23972] team0: Port device hsr_slave_0 added [ 1054.860260][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1055.108386][T23990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4704'. [ 1056.017684][T24015] validate_nla: 3 callbacks suppressed [ 1056.017705][T24015] netlink: 'syz.0.4711': attribute type 21 has an invalid length. [ 1056.592823][T24041] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1056.965354][T24039] netlink: 'syz.1.4715': attribute type 21 has an invalid length. [ 1056.993711][T24039] __nla_validate_parse: 3 callbacks suppressed [ 1056.993733][T24039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1057.330150][T24047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4717'. [ 1058.646779][T24082] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4728'. [ 1058.712523][T24082] netlink: 'syz.4.4728': attribute type 1 has an invalid length. [ 1058.735086][T24086] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1058.831304][T24086] bridge_slave_1: default FDB implementation only supports local addresses [ 1058.982672][ C1] bridge0: port 3(team0) entered forwarding state [ 1058.989417][ C1] bridge0: topology change detected, propagating [ 1059.079754][T24086] netlink: 'syz.5.4729': attribute type 15 has an invalid length. [ 1059.139670][T24086] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4729'. [ 1059.246543][T24090] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4730'. [ 1059.261542][T24090] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1059.742534][T24113] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.4736'. [ 1059.800523][T24119] netlink: 'syz.0.4737': attribute type 10 has an invalid length. [ 1059.964910][T24122] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4739'. [ 1060.484577][T24136] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4740'. [ 1061.557437][T24149] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1061.715496][T24149] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1061.820845][T24157] netlink: 'syz.3.4747': attribute type 2 has an invalid length. [ 1061.849004][T24157] netlink: 'syz.3.4747': attribute type 1 has an invalid length. [ 1062.097458][T24170] __nla_validate_parse: 1 callbacks suppressed [ 1062.097500][T24170] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1063.596296][T24200] ¥: port 1(team0) entered blocking state [ 1063.607223][T24200] ¥: port 1(team0) entered disabled state [ 1063.615147][T24200] device team0 entered promiscuous mode [ 1063.620869][T24200] device team_slave_0 entered promiscuous mode [ 1063.640467][T24200] device team_slave_1 entered promiscuous mode [ 1063.679775][T24200] device geneve1 entered promiscuous mode [ 1063.705118][T24200] device wlan1 entered promiscuous mode [ 1063.747848][T24202] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1063.790909][T24193] device team0 left promiscuous mode [ 1063.800251][T24193] device team_slave_0 left promiscuous mode [ 1063.844712][T24193] device team_slave_1 left promiscuous mode [ 1063.866674][T24193] device geneve1 left promiscuous mode [ 1063.909407][T24193] device wlan1 left promiscuous mode [ 1064.011082][T24193] ¥: port 1(team0) entered disabled state [ 1065.935693][T24258] netlink: 'syz.5.4770': attribute type 2 has an invalid length. [ 1065.993840][T24258] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1066.098376][T24269] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4773'. [ 1066.408129][T24284] netlink: 'syz.4.4778': attribute type 1 has an invalid length. [ 1066.418776][T24286] netlink: 'syz.3.4777': attribute type 19 has an invalid length. [ 1066.449868][T24284] netlink: 'syz.4.4778': attribute type 3 has an invalid length. [ 1066.451907][T24286] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4777'. [ 1066.494014][T24284] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1069.421819][T24302] netlink: 'syz.0.4782': attribute type 3 has an invalid length. [ 1069.436979][T24302] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1069.465559][T24307] netlink: 'syz.4.4785': attribute type 3 has an invalid length. [ 1069.510358][T24307] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4785'. [ 1070.004348][T24331] netlink: 'syz.4.4791': attribute type 10 has an invalid length. [ 1070.151664][T24331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.429063][T24331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.787962][T24331] device batadv_slave_0 entered promiscuous mode [ 1070.851851][T24331] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1070.917809][T24343] netlink: 'syz.3.4793': attribute type 10 has an invalid length. [ 1071.903906][T24364] netlink: 'syz.1.4799': attribute type 21 has an invalid length. [ 1071.924840][T24364] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1073.528501][T24420] syz_tun: tun_net_xmit 86 [ 1074.282944][T24443] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1074.581240][ C0] syz_tun: tun_net_xmit 86 [ 1075.624315][ C0] syz_tun: tun_net_xmit 86 [ 1076.509552][T24492] netlink: 'syz.5.4830': attribute type 1 has an invalid length. [ 1076.536459][T24492] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.4830'. [ 1077.038647][T24512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4835'. [ 1077.083880][T24513] netlink: 'syz.4.4835': attribute type 12 has an invalid length. [ 1077.111460][T24513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4835'. [ 1077.203446][T24517] netlink: 'syz.0.4836': attribute type 21 has an invalid length. [ 1077.215508][T24517] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4836'. [ 1077.424255][T24533] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4840'. [ 1077.451997][T24533] device hsr_slave_0 left promiscuous mode [ 1077.469381][T24533] device hsr_slave_1 left promiscuous mode [ 1077.840632][T24548] netlink: 'syz.3.4842': attribute type 16 has an invalid length. [ 1077.917082][T24548] netlink: 'syz.3.4842': attribute type 3 has an invalid length. [ 1078.007445][T24548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1078.719918][T24550] netlink: 'syz.4.4844': attribute type 2 has an invalid length. [ 1079.047272][T24571] netlink: 'syz.4.4849': attribute type 29 has an invalid length. [ 1079.084947][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4849'. [ 1079.131678][T24572] netlink: 'syz.4.4849': attribute type 3 has an invalid length. [ 1079.150116][T24571] netlink: 'syz.4.4849': attribute type 29 has an invalid length. [ 1079.185619][T24572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4849'. [ 1079.195845][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4849'. [ 1079.839324][T24589] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4856'. [ 1080.083541][T24605] netlink: 'syz.1.4857': attribute type 10 has an invalid length. [ 1083.880523][T24630] __nla_validate_parse: 1 callbacks suppressed [ 1083.880542][T24630] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1084.344844][T24629] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1084.787226][T24631] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4860'. [ 1085.538449][T24663] netlink: 'syz.1.4867': attribute type 3 has an invalid length. [ 1085.541894][T24664] netlink: 'syz.1.4867': attribute type 3 has an invalid length. [ 1085.648008][T24662] netlink: 'syz.1.4867': attribute type 3 has an invalid length. [ 1085.691090][T24664] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4867'. [ 1085.703330][T24663] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4867'. [ 1085.724377][T24662] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4867'. [ 1088.952961][T24679] netlink: 47251 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1089.027121][T24679] netlink: 'syz.1.4871': attribute type 15 has an invalid length. [ 1089.047094][T24679] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4871'. [ 1090.139236][T24691] delete_channel: no stack [ 1090.855156][T24704] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1092.971351][T24732] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1093.129567][T24736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1093.164539][T24736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1093.193038][T24740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1093.206922][T24736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4886'. [ 1094.240611][T24746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1094.256121][T24746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1094.265821][T24746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1094.277701][T24746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1094.288549][T24746] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1094.296754][T24746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1094.837887][T24751] netlink: 'syz.5.4889': attribute type 11 has an invalid length. [ 1094.924367][T24751] netlink: 191644 bytes leftover after parsing attributes in process `syz.5.4889'. [ 1095.078252][T24743] chnl_net:caif_netlink_parms(): no params data found [ 1095.335301][T24743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.342727][T24743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.351645][T24743] device bridge_slave_0 entered promiscuous mode [ 1095.361306][T24743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.368638][T24743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.377518][T24743] device bridge_slave_1 entered promiscuous mode [ 1095.388483][T24773] netlink: 'syz.5.4894': attribute type 1 has an invalid length. [ 1095.512417][T24743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.525771][T24743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.592976][T24743] team0: Port device team_slave_0 added [ 1095.628425][T24743] team0: Port device team_slave_1 added [ 1095.706034][T24743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.742539][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.804471][T24743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.835145][T24793] netlink: 'syz.0.4900': attribute type 19 has an invalid length. [ 1095.857703][T24793] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1095.901898][T24792] netlink: 'syz.5.4901': attribute type 10 has an invalid length. [ 1095.919400][T24792] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4901'. [ 1095.938943][T24792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.946384][T24792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.955033][T24792] device bridge0 left promiscuous mode [ 1095.974377][T24743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.991351][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.051101][T24743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.117144][T24803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4902'. [ 1096.265510][T13363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.341397][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 1096.540443][T13363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.619884][T24743] device hsr_slave_0 entered promiscuous mode [ 1096.644446][T24743] device hsr_slave_1 entered promiscuous mode [ 1096.659139][T24743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.697597][T24743] Cannot create hsr debugfs directory [ 1096.816256][T13363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.889342][T24844] netlink: 'syz.5.4910': attribute type 11 has an invalid length. [ 1096.912890][T24844] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4910'. [ 1096.943519][T13363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.787328][T24841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.228023][T13363] tipc: Left network mode [ 1098.375664][T13363] bridge0: port 2(ip6gretap0) entered disabled state [ 1098.431351][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 1098.574671][T24882] netlink: 'syz.4.4923': attribute type 29 has an invalid length. [ 1098.656179][T13363] device ip6gretap0 left promiscuous mode [ 1098.669192][T13363] bridge0: port 2(ip6gretap0) entered disabled state [ 1098.681600][T24892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1098.938016][T24882] netlink: 'syz.4.4923': attribute type 29 has an invalid length. [ 1098.966921][T24893] netlink: 'syz.0.4922': attribute type 10 has an invalid length. [ 1099.083148][T24893] device team0 left promiscuous mode [ 1099.088728][T24893] device team_slave_0 left promiscuous mode [ 1099.115672][T24893] device team_slave_1 left promiscuous mode [ 1099.130148][T24893] bridge0: port 3(team0) entered disabled state [ 1099.148948][T24892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1099.189773][T24898] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1099.232235][T24894] netlink: 'syz.3.4921': attribute type 39 has an invalid length. [ 1099.527167][T24890] netlink: 'syz.4.4923': attribute type 29 has an invalid length. [ 1099.549787][T24909] netlink: 'syz.0.4924': attribute type 29 has an invalid length. [ 1099.795780][T24909] netlink: 'syz.0.4924': attribute type 29 has an invalid length. [ 1099.882134][T24916] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4926'. [ 1100.511397][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 1100.838737][T24926] validate_nla: 1 callbacks suppressed [ 1100.838778][T24926] netlink: 'syz.0.4928': attribute type 13 has an invalid length. [ 1100.861291][T24926] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.4928'. [ 1100.881451][T24928] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4929'. [ 1100.890568][T24928] tc_dump_action: action bad kind [ 1101.520937][T24743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1101.536881][T24743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1101.568817][T24743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1101.600257][T24743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1102.595326][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 1102.734345][T24743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.775022][T24966] device syzkaller0 left promiscuous mode [ 1102.841746][T24743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.849231][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1102.867652][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1102.890797][T24976] syz_tun: tun_net_xmit 86 [ 1102.917912][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1102.942578][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1102.964484][T13339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.971920][T13339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.991602][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.016398][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.051824][T13339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.059058][T13339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.086094][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.140247][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.172130][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1103.191761][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1103.223290][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.245079][T24981] netlink: 'syz.3.4936': attribute type 19 has an invalid length. [ 1103.263312][T24981] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4936'. [ 1103.314292][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.346442][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.396324][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.434824][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1103.467694][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1103.498331][T24982] netlink: 'syz.0.4937': attribute type 10 has an invalid length. [ 1103.581651][T24982] device dummy0 left promiscuous mode [ 1103.589802][T24982] bridge0: port 4(dummy0) entered disabled state [ 1103.624957][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1103.649619][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1103.685375][T24993] device ip6gre0 entered promiscuous mode [ 1103.755040][T24743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.778962][T24999] netlink: 'syz.5.4943': attribute type 10 has an invalid length. [ 1103.941554][ C1] syz_tun: tun_net_xmit 86 [ 1104.797712][T13363] device vlan0 left promiscuous mode [ 1104.827565][T13363] À: port 1(vlan0) entered disabled state [ 1104.879415][T13363] device hsr_slave_1 left promiscuous mode [ 1104.904711][T13363] device ÿÿÿÿÿÿ left promiscuous mode [ 1104.924006][T13363] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 1104.987001][T13363] device veth1_macvtap left promiscuous mode [ 1104.993569][ C1] syz_tun: tun_net_xmit 86 [ 1105.013772][T13363] device veth0_macvtap left promiscuous mode [ 1105.035430][T13363] device veth1_vlan left promiscuous mode [ 1105.057325][T13363] device veth0_vlan left promiscuous mode [ 1106.335136][T13363] team0 (unregistering): Port device team_slave_1 removed [ 1106.438001][T13363] team0 (unregistering): Port device team_slave_0 removed [ 1107.410784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.421337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.461392][T24743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.601390][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.625569][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.898253][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.909996][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.920166][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.930674][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.955032][T24743] device veth0_vlan entered promiscuous mode [ 1108.016717][T24743] device veth1_vlan entered promiscuous mode [ 1108.070166][T25041] netlink: 'syz.3.4950': attribute type 10 has an invalid length. [ 1108.099405][T25041] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4950'. [ 1108.124299][T25041] bridge0: port 3(team0) entered disabled state [ 1108.131251][T25041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.138698][T25041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.298136][T25045] netlink: 17275 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1108.392634][T24743] device veth0_macvtap entered promiscuous mode [ 1108.400724][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.514101][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1108.567322][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.625633][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.724050][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.774869][T24743] device veth1_macvtap entered promiscuous mode [ 1108.903493][T24743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.961238][T24743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.007209][T25057] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1109.027123][T24743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.068684][T24743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.132997][T24743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.147721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1109.181908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1109.289052][T24743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.326322][T24743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.366958][T24743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.421219][T24743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.474426][T24743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.510196][T24743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.540246][T24743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.568432][T24743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.588560][T24743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.618481][T24743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.636535][T24743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.661957][T24743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.678679][T24743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.705886][T25041] netlink: 'syz.3.4950': attribute type 21 has an invalid length. [ 1109.717919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.736453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.977597][T25071] netlink: 'syz.0.4959': attribute type 39 has an invalid length. [ 1109.998079][T25073] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1110.074848][T13339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.091142][T13339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.119061][T13338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1110.164232][T13339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.198886][T13339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.221374][T13339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1110.284946][T25085] netlink: 'syz.3.4963': attribute type 29 has an invalid length. [ 1110.313902][T25085] netlink: 'syz.3.4963': attribute type 29 has an invalid length. [ 1110.950216][T25098] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1111.013972][T25098] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1113.165870][T25146] netlink: 'syz.3.4980': attribute type 10 has an invalid length. [ 1113.207703][T25146] device vxcan1 entered promiscuous mode [ 1113.228478][T25146] team0: Device vxcan1 is of different type [ 1113.347731][T25160] netlink: 'syz.5.4983': attribute type 28 has an invalid length. [ 1113.380781][T25160] netlink: 'syz.5.4983': attribute type 29 has an invalid length. [ 1113.402410][T25160] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4983'. [ 1113.452141][T25162] device sit0 entered promiscuous mode [ 1114.573754][T25178] netlink: 'syz.0.4989': attribute type 10 has an invalid length. [ 1114.598871][T25178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4989'. [ 1114.652374][T25178] netlink: 'syz.0.4989': attribute type 10 has an invalid length. [ 1114.692318][T25178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4989'. [ 1114.869827][T25188] netlink: 'syz.3.4991': attribute type 3 has an invalid length. [ 1114.881232][T25191] netlink: 'syz.3.4991': attribute type 3 has an invalid length. [ 1114.928545][T25191] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4991'. [ 1114.969953][T25205] netlink: 'syz.1.4993': attribute type 3 has an invalid length. [ 1114.973618][T25188] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4991'. [ 1115.021379][T25205] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1115.053047][T25205] netlink: 'syz.1.4993': attribute type 3 has an invalid length. [ 1115.082649][T25205] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1115.122051][T25208] netlink: 'syz.1.4993': attribute type 3 has an invalid length. [ 1115.140150][T25208] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1115.646103][T25228] IPv6: NLM_F_CREATE should be specified when creating new route [ 1115.696337][T25228] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4997'. [ 1115.959743][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.966191][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.378911][T25251] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1116.485120][T25257] device 0 entered promiscuous mode [ 1117.951697][T25272] device syzkaller0 entered promiscuous mode [ 1121.300864][T25300] validate_nla: 3 callbacks suppressed [ 1121.300877][T25300] netlink: 'syz.3.5016': attribute type 10 has an invalid length. [ 1121.326087][T25300] device team0 left promiscuous mode [ 1121.331757][T25300] device team_slave_1 left promiscuous mode [ 1121.337829][T25300] device geneve1 left promiscuous mode [ 1121.343541][T25300] device wlan1 left promiscuous mode [ 1121.348983][T25300] device hsr_slave_0 left promiscuous mode [ 1121.355424][T25300] bridge0: port 3(team0) entered disabled state [ 1121.364779][T25300] team0: Cannot enslave team device to itself [ 1121.757579][T25331] netlink: 'syz.3.5024': attribute type 15 has an invalid length. [ 1121.803783][T25331] netlink: 'syz.3.5024': attribute type 7 has an invalid length. [ 1121.813799][T25333] device syzkaller0 entered promiscuous mode [ 1122.024263][T25350] netlink: 'syz.5.5027': attribute type 10 has an invalid length. [ 1122.051895][T25350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5027'. [ 1122.087781][T25350] device ipvlan1 entered promiscuous mode [ 1122.110402][T25350] bridge0: port 3(ipvlan1) entered blocking state [ 1122.131639][T25350] bridge0: port 3(ipvlan1) entered disabled state [ 1122.158843][T25350] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1122.447277][T25356] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1122.723469][T25362] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1122.734054][T25363] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5031'. [ 1123.145886][T25376] netlink: 'syz.1.5036': attribute type 10 has an invalid length. [ 1123.172679][T25376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1123.228524][T25376] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1123.890216][T25404] netlink: 'syz.3.5043': attribute type 10 has an invalid length. [ 1124.463367][T25405] netlink: 'syz.0.5044': attribute type 2 has an invalid length. [ 1124.492374][T25405] netlink: 'syz.0.5044': attribute type 1 has an invalid length. [ 1124.539940][T25405] netlink: 198412 bytes leftover after parsing attributes in process `syz.0.5044'. [ 1125.383725][T25406] netlink: 'syz.3.5043': attribute type 10 has an invalid length. [ 1126.290513][T25422] netlink: 'syz.3.5047': attribute type 12 has an invalid length. [ 1126.316908][T25422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5047'. [ 1126.467265][T25436] netlink: 'syz.5.5048': attribute type 39 has an invalid length. [ 1127.219208][T25464] netlink: 'syz.5.5053': attribute type 10 has an invalid length. [ 1127.276018][T25464] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5053'. [ 1127.373975][T25464] bridge0: port 3(veth0_vlan) entered blocking state [ 1127.442896][T25464] bridge0: port 3(veth0_vlan) entered disabled state [ 1127.584794][T25464] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1127.723391][T25462] device syzkaller0 entered promiscuous mode [ 1128.154467][T25493] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5061'. [ 1129.091990][T25512] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5068'. [ 1130.276617][T25541] netlink: 'syz.5.5075': attribute type 3 has an invalid length. [ 1130.304862][T25541] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5075'. [ 1132.792157][T25558] netlink: 'syz.4.5080': attribute type 3 has an invalid length. [ 1132.841185][T25558] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.5080'. [ 1133.009752][T25567] netlink: 'syz.0.5082': attribute type 1 has an invalid length. [ 1133.052047][T25567] netlink: 'syz.0.5082': attribute type 2 has an invalid length. [ 1133.070151][T25567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5082'. [ 1135.036914][T25614] netlink: 'syz.4.5096': attribute type 21 has an invalid length. [ 1135.060575][T25612] netlink: 'syz.0.5094': attribute type 19 has an invalid length. [ 1135.192112][T25623] netlink: 'syz.3.5095': attribute type 7 has an invalid length. [ 1135.440119][T25629] netlink: 'syz.5.5099': attribute type 1 has an invalid length. [ 1135.503273][T25629] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.5099'. [ 1135.675728][T25641] netlink: 'syz.4.5102': attribute type 4 has an invalid length. [ 1135.736047][T25641] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1137.479415][T25684] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5115'. [ 1138.134373][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1138.174160][T25697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1138.207462][T25696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1138.248595][T25699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1141.393747][T25753] netlink: 'syz.1.5130': attribute type 10 has an invalid length. [ 1141.444385][T25753] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1141.737956][T25764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5134'. [ 1141.858541][T25771] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.5136'. [ 1141.879416][T25771] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5136'. [ 1141.937174][T25776] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5136'. [ 1141.959008][T25757] netlink: 'syz.5.5131': attribute type 2 has an invalid length. [ 1141.981520][T25757] netlink: 'syz.5.5131': attribute type 3 has an invalid length. [ 1142.048362][T25778] netlink: 'syz.0.5137': attribute type 10 has an invalid length. [ 1142.070835][T25757] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5131'. [ 1143.448300][T25815] netlink: 'syz.5.5147': attribute type 7 has an invalid length. [ 1143.464750][T25815] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5147'. [ 1143.673925][T25823] netlink: 'syz.1.5150': attribute type 27 has an invalid length. [ 1143.683955][T25823] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1143.752252][T25826] netlink: 'syz.3.5151': attribute type 29 has an invalid length. [ 1143.770761][T25826] netlink: 'syz.3.5151': attribute type 29 has an invalid length. [ 1143.823867][T25827] netlink: 'syz.3.5151': attribute type 29 has an invalid length. [ 1143.882711][T25826] netlink: 'syz.3.5151': attribute type 2 has an invalid length. [ 1143.903500][T25826] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1145.443447][T25871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5165'. [ 1145.583101][T25880] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5166'. [ 1145.615204][T25879] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1145.860920][T25887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1145.874089][T13364] tipc: Subscription rejected, illegal request [ 1145.894588][T25887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1145.925051][T25890] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1145.947283][T25890] syzkaller1: linktype set to 0 [ 1146.011720][T25894] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1146.039671][T25894] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1147.099822][T25911] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1147.828903][T25945] validate_nla: 8 callbacks suppressed [ 1147.828925][T25945] netlink: 'syz.4.5185': attribute type 29 has an invalid length. [ 1147.939274][T25945] netlink: 'syz.4.5185': attribute type 29 has an invalid length. [ 1148.026466][T25951] netlink: 'syz.4.5185': attribute type 29 has an invalid length. [ 1148.028743][T25954] netlink: 'syz.4.5185': attribute type 2 has an invalid length. [ 1148.619474][T25972] netlink: 'syz.1.5191': attribute type 3 has an invalid length. [ 1148.661647][T25972] __nla_validate_parse: 3 callbacks suppressed [ 1148.661667][T25972] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1149.225055][T25992] netlink: 'syz.0.5198': attribute type 16 has an invalid length. [ 1149.312475][T25992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5198'. [ 1149.588906][ T49] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 1149.689752][T26010] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.5203'. [ 1149.774503][T26010] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1150.142809][T26026] netlink: 'syz.0.5208': attribute type 10 has an invalid length. [ 1150.166470][T26026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1150.189168][T26026] device veth0_vlan left promiscuous mode [ 1150.214403][T26026] device veth0_vlan entered promiscuous mode [ 1150.344629][T26026] bridge0: port 3(veth0_vlan) entered blocking state [ 1150.383012][T26026] bridge0: port 3(veth0_vlan) entered disabled state [ 1150.433221][T26026] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1150.468315][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.483140][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.492298][T13364] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.513251][T26027] netlink: 8843 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1150.741580][T26040] device pim6reg1 entered promiscuous mode [ 1150.901275][T13363] wlan1: Trigger new scan to find an IBSS to join [ 1151.579067][T26060] netlink: 'syz.0.5219': attribute type 10 has an invalid length. [ 1151.606646][T26060] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5219'. [ 1151.910522][T26075] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1151.969351][ T49] Bluetooth: hci5: ISO packet for unknown connection handle 3092 [ 1151.997896][T26081] netlink: 'syz.5.5224': attribute type 3 has an invalid length. [ 1152.111266][T26081] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5224'. [ 1152.438280][T26091] netlink: 'syz.3.5227': attribute type 10 has an invalid length. [ 1152.501506][T26091] team0: Device wg1 is of different type [ 1152.623447][T26096] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1152.734268][T26096] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1152.753382][T26101] device syzkaller0 entered promiscuous mode [ 1152.789227][T26101] bridge0: mtu less than device minimum [ 1153.433693][T26118] validate_nla: 1 callbacks suppressed [ 1153.433715][T26118] netlink: 'syz.5.5233': attribute type 10 has an invalid length. [ 1153.489071][T26121] netlink: 'syz.3.5232': attribute type 27 has an invalid length. [ 1153.950539][T11492] wlan1: Trigger new scan to find an IBSS to join [ 1154.206626][T26146] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.5243'. [ 1154.227974][T26149] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1154.272453][T26148] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1154.632682][T26158] netlink: 'syz.5.5246': attribute type 39 has an invalid length. [ 1154.949135][T13352] wlan1: Creating new IBSS network, BSSID e2:7d:24:34:68:90 [ 1154.960809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1155.766542][T26179] netlink: 'syz.0.5253': attribute type 10 has an invalid length. [ 1155.957902][T26179] team0: Device wg1 is of different type [ 1156.670236][T26199] netlink: 'syz.5.5259': attribute type 13 has an invalid length. [ 1156.691554][T26199] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1156.735001][T26199] netlink: 'syz.5.5259': attribute type 2 has an invalid length. [ 1156.784757][T26199] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1157.902437][T26198] device syzkaller0 entered promiscuous mode [ 1157.954116][T26212] netlink: 'syz.1.5261': attribute type 10 has an invalid length. [ 1157.988072][T26212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5261'. [ 1157.998286][T26212] bridge0: port 3(veth0_vlan) entered blocking state [ 1158.037971][T26212] bridge0: port 3(veth0_vlan) entered disabled state [ 1158.047111][T26212] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1162.113580][ T49] Bluetooth: hci0: ISO packet for unknown connection handle 3327 [ 1169.509415][T26286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5284'. [ 1169.633088][T26283] netlink: 'syz.4.5284': attribute type 10 has an invalid length. [ 1169.655185][T26283] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5284'. [ 1169.681418][T26283] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1169.742417][T11492] bridge0: port 3(team0) entered disabled state [ 1169.842263][T26294] netlink: 'syz.0.5287': attribute type 10 has an invalid length. [ 1169.859782][T26294] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5287'. [ 1170.570467][T26321] netlink: 'syz.5.5294': attribute type 21 has an invalid length. [ 1170.585579][T26321] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5294'. [ 1171.085227][T26341] netlink: 'syz.3.5299': attribute type 21 has an invalid length. [ 1171.117479][T26341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5299'. [ 1171.152849][T26341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5299'. [ 1171.188033][T26353] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.5303'. [ 1171.254124][ T49] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1173.668892][T26404] delete_channel: no stack [ 1173.739127][T26404] delete_channel: no stack [ 1173.784830][T26404] delete_channel: no stack [ 1173.789484][T26404] delete_channel: no stack [ 1173.810827][T26404] delete_channel: no stack [ 1173.816244][T26404] delete_channel: no stack [ 1173.820884][T26404] delete_channel: no stack [ 1173.854993][T26404] delete_channel: no stack [ 1173.859788][T26404] delete_channel: no stack [ 1174.036777][T26404] delete_channel: no stack [ 1174.043326][T26404] delete_channel: no stack [ 1174.049318][T26404] delete_channel: no stack [ 1174.068020][T26404] delete_channel: no stack [ 1174.088836][T26404] delete_channel: no stack [ 1174.095792][T26404] delete_channel: no stack [ 1174.100455][T26404] delete_channel: no stack [ 1174.148503][T26404] delete_channel: no stack [ 1174.162511][T26404] delete_channel: no stack [ 1174.167132][T26404] delete_channel: no stack [ 1174.200887][T26404] delete_channel: no stack [ 1174.223725][T26404] delete_channel: no stack [ 1174.228357][T26404] delete_channel: no stack [ 1174.250327][T26404] delete_channel: no stack [ 1174.260313][T26404] delete_channel: no stack [ 1174.286696][T26404] delete_channel: no stack [ 1174.299198][T26404] delete_channel: no stack [ 1174.307262][T26404] delete_channel: no stack [ 1174.318251][T26404] delete_channel: no stack [ 1174.339114][T26404] delete_channel: no stack [ 1174.347043][T26404] delete_channel: no stack [ 1174.363995][T26404] delete_channel: no stack [ 1174.368641][T26404] delete_channel: no stack [ 1174.386919][T26404] delete_channel: no stack [ 1174.661187][T26449] can: request_module (can-proto-4) failed. [ 1175.272702][T26470] netlink: 'syz.4.5333': attribute type 3 has an invalid length. [ 1175.297762][T26470] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5333'. [ 1175.341249][T26473] netlink: 'syz.1.5332': attribute type 7 has an invalid length. [ 1175.492995][T26479] netlink: 'syz.3.5334': attribute type 3 has an invalid length. [ 1175.637871][T26479] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1177.394389][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.400902][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.982018][T26508] netlink: 'syz.4.5340': attribute type 10 has an invalid length. [ 1178.990128][T26508] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5340'. [ 1181.686597][T26515] netlink: 'syz.5.5341': attribute type 21 has an invalid length. [ 1181.704681][T26515] netlink: 'syz.5.5341': attribute type 6 has an invalid length. [ 1181.726905][T26515] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1181.906161][T26517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1181.973707][T26519] netlink: 'syz.0.5342': attribute type 39 has an invalid length. [ 1182.385800][T26537] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.5349'. [ 1182.444472][T26537] netlink: zone id is out of range [ 1182.460477][T26537] netlink: zone id is out of range [ 1182.481218][T26537] netlink: zone id is out of range [ 1182.488723][T26537] netlink: zone id is out of range [ 1182.521147][T26537] netlink: zone id is out of range [ 1182.535332][T26537] netlink: zone id is out of range [ 1182.540602][T26537] netlink: zone id is out of range [ 1182.551032][T26537] netlink: zone id is out of range [ 1182.557756][T26537] netlink: zone id is out of range [ 1182.563399][T26537] netlink: zone id is out of range [ 1182.860569][T26553] netlink: 'syz.1.5353': attribute type 21 has an invalid length. [ 1182.901446][T26553] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1182.910597][T26553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1183.148500][T26565] netlink: 'syz.0.5354': attribute type 10 has an invalid length. [ 1183.353084][T26571] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5358'. [ 1183.430260][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1183.560485][T26575] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5359'. [ 1183.604009][T26577] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5359'. [ 1183.845671][T26598] netlink: 'syz.4.5363': attribute type 9 has an invalid length. [ 1183.882874][T26598] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5363'. [ 1184.009042][T26603] netlink: 'syz.4.5363': attribute type 9 has an invalid length. [ 1184.096850][T26603] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5363'. [ 1184.278564][T26623] device wlan1 entered promiscuous mode [ 1184.296614][T13358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1184.433413][T26628] netlink: 'syz.5.5369': attribute type 21 has an invalid length. [ 1185.487928][T26634] netlink: 'syz.0.5372': attribute type 29 has an invalid length. [ 1185.502924][T26634] netlink: 'syz.0.5372': attribute type 29 has an invalid length. [ 1186.993399][T11492] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1187.196349][T26697] __nla_validate_parse: 4 callbacks suppressed [ 1187.196371][T26697] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.5389'. [ 1187.611394][T26705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5392'. [ 1187.648035][T26705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5392'. [ 1187.660359][T26705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5392'. [ 1187.872557][T26707] validate_nla: 7 callbacks suppressed [ 1187.872583][T26707] netlink: 'syz.5.5393': attribute type 3 has an invalid length. [ 1187.942619][T26707] netlink: 'syz.5.5393': attribute type 153 has an invalid length. [ 1187.944926][T26716] delete_channel: no stack [ 1187.955586][T26707] netlink: 85736 bytes leftover after parsing attributes in process `syz.5.5393'. [ 1188.226090][T26723] netlink: 'syz.1.5398': attribute type 10 has an invalid length. [ 1188.250306][T26729] netlink: 'syz.5.5401': attribute type 3 has an invalid length. [ 1188.293755][T26729] netlink: 'syz.5.5401': attribute type 4 has an invalid length. [ 1188.313270][T26729] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5401'. [ 1189.200600][T26743] netlink: 'syz.0.5403': attribute type 10 has an invalid length. [ 1189.225832][T26743] netlink: 'syz.0.5403': attribute type 19 has an invalid length. [ 1189.240433][T26743] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5403'. [ 1189.452168][T26756] netlink: 'syz.1.5407': attribute type 10 has an invalid length. [ 1189.498140][T26756] team0: Port device netdevsim0 added [ 1189.605075][T26762] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5409'. [ 1190.223492][T26777] netlink: 'syz.0.5414': attribute type 9 has an invalid length. [ 1190.298834][T26777] netlink: 375 bytes leftover after parsing attributes in process `syz.0.5414'. [ 1190.915874][T26796] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5419'. [ 1191.691768][T26798] netlink: 'syz.4.5420': attribute type 4 has an invalid length. [ 1192.631214][T26813] __nla_validate_parse: 1 callbacks suppressed [ 1192.631236][T26813] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5424'. [ 1192.950648][T26819] sctp: [Deprecated]: syz.5.5428 (pid 26819) Use of int in maxseg socket option. [ 1192.950648][T26819] Use struct sctp_assoc_value instead [ 1193.703099][ T49] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 1193.723968][T26848] netlink: 'syz.5.5434': attribute type 3 has an invalid length. [ 1193.732355][ T3599] syz_tun: tun_net_xmit 90 [ 1193.746387][T26848] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5434'. [ 1193.901890][ T3599] syz_tun: tun_net_xmit 90 [ 1194.244969][T26855] netlink: 'syz.0.5436': attribute type 21 has an invalid length. [ 1194.276862][T26855] netlink: 'syz.0.5436': attribute type 23 has an invalid length. [ 1194.289346][T26855] netlink: 'syz.0.5436': attribute type 25 has an invalid length. [ 1194.334311][T26855] netlink: 'syz.0.5436': attribute type 27 has an invalid length. [ 1194.361224][T26855] netlink: 'syz.0.5436': attribute type 28 has an invalid length. [ 1194.369550][T26855] netlink: 'syz.0.5436': attribute type 29 has an invalid length. [ 1194.401000][T26855] netlink: 'syz.0.5436': attribute type 30 has an invalid length. [ 1196.034930][T26909] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.5449'. [ 1196.078756][T26906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1196.086587][T26906] IPv6: NLM_F_CREATE should be set when creating new route [ 1196.096154][T26906] IPv6: NLM_F_CREATE should be set when creating new route [ 1196.104722][T26906] IPv6: NLM_F_CREATE should be set when creating new route [ 1196.150644][T26908] netlink: 'syz.5.5450': attribute type 2 has an invalid length. [ 1196.159644][T26908] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5450'. [ 1197.279578][T26930] netlink: 'syz.5.5456': attribute type 1 has an invalid length. [ 1198.213853][T26950] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1198.611308][T26955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5464'. [ 1198.882310][T26970] validate_nla: 1 callbacks suppressed [ 1198.882333][T26970] netlink: 'syz.5.5467': attribute type 10 has an invalid length. [ 1198.922189][T26972] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5469'. [ 1198.922218][T26970] device veth1_macvtap left promiscuous mode [ 1198.979893][T26965] delete_channel: no stack [ 1199.599298][T26988] netlink: 'syz.4.5471': attribute type 1 has an invalid length. [ 1199.691393][T26988] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5471'. [ 1200.476348][T27006] netlink: 'syz.5.5476': attribute type 10 has an invalid length. [ 1200.492499][T27006] device macvlan0 left promiscuous mode [ 1200.517476][T27006] team0: Port device macvlan0 added [ 1201.704984][ T27] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 1201.729544][ T27] Not tainted syzkaller #0 [ 1201.747587][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1201.775013][ T27] task:rcu_tasks_kthre state:D stack:27120 pid:12 ppid:2 flags:0x00004000 [ 1201.809281][ T27] Call Trace: [ 1201.823073][ T27] [ 1201.830710][ T27] __schedule+0x107f/0x4030 [ 1201.851188][ T27] ? release_firmware_map_entry+0x187/0x187 [ 1201.871114][ T27] schedule+0xb9/0x180 [ 1201.885588][ T27] schedule_timeout+0xbd/0x2d0 [ 1201.901871][ T27] ? console_conditional_schedule+0x40/0x40 [ 1201.924828][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1201.946919][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 1201.966782][ T27] ? lock_chain_count+0x20/0x20 [ 1201.982262][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1202.000283][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1202.019679][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1202.038811][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1202.058023][ T27] ? wait_for_completion+0x26f/0x590 [ 1202.078024][ T27] wait_for_completion+0x2c2/0x590 [ 1202.095844][ T27] ? io_schedule+0xd0/0xd0 [ 1202.110284][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1202.127384][ T27] ? debug_object_active_state+0x6b/0x380 [ 1202.133866][ T27] __synchronize_srcu+0x2b3/0x350 [ 1202.139086][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1202.145180][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 1202.151132][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 1202.156862][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1202.162626][ T27] ? synchronize_srcu+0x18f/0x1b0 [ 1202.167843][ T27] rcu_tasks_wait_gp+0x49f/0xac0 [ 1202.172994][ T27] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 1202.178280][ T27] ? lock_chain_count+0x20/0x20 [ 1202.183452][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1202.189527][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1202.194963][ T27] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 1202.200507][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1202.206646][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1202.211721][ T27] rcu_tasks_one_gp+0xd27/0xef0 [ 1202.217034][ T27] ? rcu_tasks_one_gp+0xe5/0xef0 [ 1202.222230][ T27] rcu_tasks_kthread+0x6e/0x90 [ 1202.227194][ T27] kthread+0x29d/0x330 [ 1202.231741][ T27] ? rcu_tasks_postgp+0x10/0x10 [ 1202.242405][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1202.247422][ T27] ret_from_fork+0x1f/0x30 [ 1202.256306][ T27] [ 1202.265561][ T27] [ 1202.265561][ T27] Showing all locks held in the system: [ 1202.274613][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1202.280070][ T27] #0: ffffffff8cb2e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1202.290782][ T27] 1 lock held by rcu_tasks_trace/13: [ 1202.306417][ T27] #0: ffffffff8cb2ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 1202.317706][ T27] 3 locks held by kworker/1:0/22: [ 1202.323180][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.333832][ T27] #1: ffffc900001c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.344437][ T27] #2: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1202.364420][ T27] 1 lock held by khungtaskd/27: [ 1202.369504][ T27] #0: ffffffff8cb2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1202.379757][ T27] 2 locks held by klogd/3628: [ 1202.385770][ T27] #0: ffff8880b8e3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 1202.396172][ T27] #1: ffffffff8cc191c0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 1202.409722][ T27] 2 locks held by getty/4029: [ 1202.414697][ T27] #0: ffff88814d721098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1202.430094][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 1202.442864][ T27] 2 locks held by kworker/u4:30/11492: [ 1202.448492][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.467889][ T27] #1: ffffc9000501fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.479272][ T27] 3 locks held by kworker/u4:42/13338: [ 1202.491287][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.502782][ T27] #1: ffffc9000537fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.518499][ T27] #2: ffffffff8cb33578 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 1202.536675][ T27] 3 locks held by kworker/u4:56/13352: [ 1202.542339][ T27] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.559798][ T27] #1: ffffc9000546fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.578991][ T27] #2: ffffffff8cb33440 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0 [ 1202.591982][ T27] 2 locks held by kworker/0:6/26083: [ 1202.597337][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.614811][ T27] #1: ffffc90004817d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1202.629486][ T27] 1 lock held by syz.3.5470/26976: [ 1202.639488][ T27] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1202.650548][ T27] 1 lock held by syz.0.5472/26981: [ 1202.660454][ T27] #0: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 1202.672472][ T27] 2 locks held by syz.1.5475/26998: [ 1202.677752][ T27] #0: ffffffff96c8b1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0 [ 1202.694107][ T27] #1: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 1202.706023][ T27] 2 locks held by syz.1.5475/26999: [ 1202.715037][ T27] #0: ffffffff96c8b1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0 [ 1202.727011][ T27] #1: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 1202.740471][ T27] 2 locks held by syz.5.5476/27004: [ 1202.754797][ T27] #0: ffffffff96c8b1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0 [ 1202.765993][ T27] #1: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 1202.780200][ T27] 2 locks held by syz.4.5477/27005: [ 1202.786777][ T27] 2 locks held by syz.4.5479/27011: [ 1202.794121][ T27] #0: ffffffff96c8b1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0 [ 1202.803867][ T27] #1: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 1202.813316][ T27] 2 locks held by syz.4.5479/27012: [ 1202.818592][ T27] #0: ffffffff96c8b1a8 (&pmus_srcu){....}-{0:0}, at: perf_event_alloc+0xb28/0x21e0 [ 1202.829229][ T27] #1: ffffffff8cb82ba8 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x4c/0x2d0 [ 1202.838897][ T27] [ 1202.857690][ T27] ============================================= [ 1202.857690][ T27] [ 1202.881005][ T27] NMI backtrace for cpu 1 [ 1202.885423][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1202.892656][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1202.902743][ T27] Call Trace: [ 1202.906043][ T27] [ 1202.909012][ T27] dump_stack_lvl+0x188/0x24e [ 1202.913724][ T27] ? irq_work_queue+0xb8/0x140 [ 1202.918523][ T27] ? show_regs_print_info+0x12/0x12 [ 1202.923869][ T27] ? load_image+0x410/0x410 [ 1202.928433][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1202.933199][ T27] ? printk_sprint+0x460/0x460 [ 1202.938040][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1202.943020][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1202.949210][ T27] ? _printk+0xda/0x130 [ 1202.953404][ T27] ? load_image+0x410/0x410 [ 1202.957951][ T27] ? load_image+0x410/0x410 [ 1202.962499][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1202.968600][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1202.974772][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1202.980788][ T27] watchdog+0xf0e/0xf50 [ 1202.985026][ T27] ? watchdog+0x1ed/0xf50 [ 1202.989416][ T27] kthread+0x29d/0x330 [ 1202.993514][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1202.998591][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1203.003234][ T27] ret_from_fork+0x1f/0x30 [ 1203.007714][ T27] [ 1203.012547][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1203.017828][ C0] NMI backtrace for cpu 0 [ 1203.017840][ C0] CPU: 0 PID: 13338 Comm: kworker/u4:42 Not tainted syzkaller #0 [ 1203.017858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.017869][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1203.017984][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x4/0xe0 [ 1203.018009][ C0] Code: 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 c3 0f 1f 44 00 00 48 8b 46 08 <48> 8d 48 ff 48 89 c2 48 31 ca 48 39 ca 0f 86 c3 00 00 00 f3 48 0f [ 1203.018025][ C0] RSP: 0018:ffffc9000537fb28 EFLAGS: 00000206 [ 1203.018039][ C0] RAX: 0000000000000008 RBX: 00000000000000c0 RCX: dffffc0000000000 [ 1203.018052][ C0] RDX: 0000000000000000 RSI: ffffffff8dd58a40 RDI: 000000000000002e [ 1203.018063][ C0] RBP: 000000000000002e R08: ffff8880284b0000 R09: 0000000000000003 [ 1203.018075][ C0] R10: 000000000000002e R11: 0000000000000000 R12: 00000000000000c8 [ 1203.018085][ C0] R13: 0000000000000003 R14: ffffffff8b2c8dc0 R15: 000000000000002e [ 1203.018097][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1203.018113][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1203.018124][ C0] CR2: 00005555745604e8 CR3: 000000002e8b5000 CR4: 00000000003506f0 [ 1203.018140][ C0] DR0: 0100000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1203.018152][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1203.018164][ C0] Call Trace: [ 1203.018169][ C0] [ 1203.018175][ C0] in_aton+0x5c/0x440 [ 1203.018202][ C0] nsim_dev_trap_report_work+0x457/0xa80 [ 1203.018236][ C0] ? process_one_work+0x7b4/0x1160 [ 1203.018258][ C0] process_one_work+0x8ab/0x1160 [ 1203.018287][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1203.018311][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1203.018338][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1203.018366][ C0] ? wq_worker_running+0x97/0x190 [ 1203.018384][ C0] worker_thread+0xaf5/0x12a0 [ 1203.018434][ C0] kthread+0x29d/0x330 [ 1203.018447][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1203.018466][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1203.018481][ C0] ret_from_fork+0x1f/0x30 [ 1203.018512][ C0] [ 1203.245341][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1203.252266][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1203.259531][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.269631][ T27] Call Trace: [ 1203.272945][ T27] [ 1203.275914][ T27] dump_stack_lvl+0x188/0x24e [ 1203.280636][ T27] ? memcpy+0x3c/0x60 [ 1203.284661][ T27] ? show_regs_print_info+0x12/0x12 [ 1203.289905][ T27] ? load_image+0x410/0x410 [ 1203.294480][ T27] panic+0x2d3/0x710 [ 1203.298431][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1203.304127][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1203.308683][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1203.314295][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1203.320520][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1203.326723][ T27] watchdog+0xf4d/0xf50 [ 1203.330929][ T27] ? watchdog+0x1ed/0xf50 [ 1203.335308][ T27] kthread+0x29d/0x330 [ 1203.339422][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1203.344497][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1203.349133][ T27] ret_from_fork+0x1f/0x30 [ 1203.353659][ T27] [ 1203.357350][ T27] Kernel Offset: disabled [ 1203.361696][ T27] Rebooting in 86400 seconds..