last executing test programs: 2.422124431s ago: executing program 4 (id=1676): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000009c0)="5c00000012006bab9e3fe3d86e17aa310f6b876c1d0000007ea608641626f3650400390038000a007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c53b5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@exit, @alu={0x4, 0x0, 0x8, 0x3, 0x2, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x44, &(0x7f0000000180)=""/68, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x1, 0x6, 0x7a0c9f531477e7}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) (async) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r6 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r6, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000980), &(0x7f0000000a40), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00), 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) (async) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8) close(r13) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%+9llu \x00'}, 0x20) (async) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x10, 0x11, &(0x7f0000000540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0xa}, @generic={0x2, 0x2, 0x4, 0xd6, 0x9}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @generic={0x81, 0xe, 0x9, 0x3, 0xffff}], &(0x7f0000000600)='GPL\x00', 0x3ff, 0xa3, &(0x7f00000007c0)=""/163, 0x0, 0x20, '\x00', r8, @sk_msg, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x4, 0x9}, 0x10, r10, r5, 0x7, &(0x7f0000000f40)=[r11, r13, r14, r15, r16, 0x1, r17], &(0x7f0000000f80)=[{0x5, 0x1, 0x4, 0xc}, {0x5, 0x5, 0x0, 0x1}, {0x5, 0x3, 0x0, 0x2}, {0x1, 0x5, 0x0, 0x2}, {0x0, 0x3, 0xa, 0x9}, {0x2, 0x3, 0x8}, {0x5, 0x2, 0xf, 0x8}], 0x10, 0x5}, 0x94) 2.269007415s ago: executing program 1 (id=1681): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) ioctl$TUNATTACHFILTER(r1, 0x801c581f, 0x0) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="110000000300000005000000ff7f000000280000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000400000000000000000000000000000000b0e85ec1eff3000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x4, [@fwd={0xa}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x8}]}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x2}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x6}, {0x1, 0x5}, {0x4, 0x31f}, {0x10, 0x7}, {0xa, 0x400}]}, @enum={0x8, 0x7, 0x0, 0x6, 0x4, [{0x8, 0xfffffbff}, {0x3, 0xe88}, {0x0, 0x4}, {0x9, 0x101}, {0x0, 0x401}, {0x9, 0xd}, {0x10}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000840)=""/245, 0xdc, 0xf5, 0x0, 0x8}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r8}, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r8}) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0xd, &(0x7f0000000000), 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xa28, 0xc4, &(0x7f0000000400)=""/196, 0x41000, 0x8, '\x00', r6, @fallback=0x1, r7, 0x8, &(0x7f0000000980)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0xc, 0x1, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000a80)=[r8, r10], &(0x7f0000000ac0), 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.118671689s ago: executing program 0 (id=1683): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r1, 0xd, 0x0, 0x92, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0]}, 0x40) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) socketpair(0x1e, 0x800, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000002d000b63717a3c4a7ad8985b0808aa78", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f0000001c40)={&(0x7f0000000600)=@isdn={0x22, 0x0, 0x6, 0x1, 0xfc}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000780)="9df97ba6998d6cffc9f61703ab4ba9c0273a9c72bd707bf0e119f751ac602ebbd8d27cb4fcf123653809ecb5899e7dbfcdb38cecfe7319fb3bb7e6ed", 0x3c}, {&(0x7f00000007c0)="b1904f071c01cbf1447e65da1d4c0715635bc8f3e7f41be1a0a7", 0x1a}, {&(0x7f0000000a00)="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", 0x1000}], 0x4, &(0x7f0000001a40)=[{0x38, 0x10e, 0xffffffff, "3fb1b1769dc963d677ca7967c4e9bf9f75e391978c6eaff09bae2238b8a595aa81d4"}, {0xe0, 0x6, 0x4, "bb4a2c0b4b27647d4912fe002a458a6edcee461cfb462d0c9088c118c897926356bd1ff6bd18236f3bc9ba8ef4ab08be1d14a8f423e93260666abca31583c78e50f7bfc3dc2feedeffa15074bd69a6ea4aacd7b74700826a10a0129bdf3eeb89a773eaa40007e29533c83bb72ea34c54a0af721eed7cbaf2e46198e537c8152e783ac604b2e624d0c1ba0f98830b468a3a34121737081489f35ca2606a70504ea292e6f2d33fbddd2d12def4cb3cdc1dd4e69416eb83df6cd4845719fed777f996812a267437d2617d407e2711"}, {0xb8, 0x10c, 0x2, "29ad643252e17ff1a30434f1a3ed3888161f3ef020917459df545182c80bd1a9968c73ba8cd94054e8ff3a03cea97ec14b93383a51b90f4c1ebb3743357168b264e2771aa962b09d3d7b8a54f4624cd619dc8234a521d507bf8830c05380adad969f56e2e609fbb68bb0de7b42ce8a30eeb0e9c6593d8cd8325e43982e1e5a5c7bb433c5e0310b0cfd02ee317615c76bf25d6b276d7a4d131f17d8b2dd11f7db3f791a"}, {0x30, 0x117, 0x9, "adfeb31511b3e22047385c8b3e243993bb5f2a1298751992116fa0eeccb66262"}], 0x200}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000800c00502902000000008100"/38], 0x0, 0x26}, 0x28) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 2.117844649s ago: executing program 2 (id=1684): r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000000000800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x50}, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r3, 0x1}, 0xc) close(r1) 2.08213245s ago: executing program 1 (id=1685): socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) close(r0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000da7b0000", @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x0, 0x9, 0x20841, 0x1, 0x7fffffff, '\x00', r7, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x2000, [{0x5, 0x5, 0x9}, {0x7, 0x1, 0x3}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x6}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @enum64={0xe, 0x3, 0x0, 0x13, 0x1, 0x4, [{0xc, 0x401, 0x10001}, {0x9, 0x4, 0x6d06}, {0x10, 0xff, 0x195b}]}, @enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x1, [{0xf, 0x6, 0x400}, {0x2, 0x0, 0xa}, {0xf, 0x7, 0x2}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x71]}}, &(0x7f0000000400)=""/41, 0xcb, 0x29, 0x1, 0xfffff000, 0x10000}, 0x28) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.926143003s ago: executing program 4 (id=1686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@base={0x11, 0x7fffffff, 0xfffff800, 0x3, 0x23bc0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t', @ANYRESDEC=r0, @ANYRES16], 0x50) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000b80)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc4, &(0x7f0000000a40)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac0000009500000000000000befc9476fc3cc2d79b393c47845a5746dee4c4041f20425c0070a0e7914b35686772fc48629cba002bb3b6ac334fdf7881afa5b67e74a399dd594d474b0c5cb71bda0c7250e5429c2f7e14fb93bf3710edab69fbf81504b2309afb0bf8d9a2a9b0fa245eca7a97c42d6d360e2ef8e3d5008e1910dda3e70e6cea5e3eeb90346b59609a1143ae892935063ac51311f720a76d"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x14000040) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x5, &(0x7f00000000c0)=r2, 0x55) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="ad0a0000e4ff0000611160000000000018000000000000000000000000e500009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x2, 0x3, 0x88, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r3, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000002c0)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000740)="f9d0c8f8da318e3f89d1f7f59fdea01264672e0cbf14f1fca3d520930f22b0ea107b8afdc18d33cfced57f0893a32685d16ebde68318488a85f895aacbe73529983b9b5d34d95860d3f492f22441b3a89c879f6d687ca9afe1ae5686d0b28e305983288c1c618e5d0e16451a3d4f22b47d07225211c8b0659bcb29f8a4bde9a2e6741bf77dbd483ebcb23ec7865d44c9126560c9565e4e8badc63c4b383289c93d0d897cf1600dc040deed6d3c858ff8413d94952993492a687cbc27172866c0ee3c7037acb071c4bc7a70b524439d00584c4df7496d73ffa7099cbd1efaa93d5fca9c45a38d3266de0ce7fee907c37b3163e0f5deed16", 0xf7}, {&(0x7f0000000840)="e09bbf74b91e8ef6c4a8e27e021e0228cc0241ba3e4f154c653a309ccb69e629a0da4cc8cb9e39d7b641d3abb8fa08a87204eac5945ab47a56b715e99d8fa459f24d3b4fc5b4839a4844a59acf9c3a37f5083b8cd03c631e433a28639dd9832db9bc14ff267c35dafee495899ac01302e5666305e29e48986bd50ea892aabbc6aaa2ea35c919f194bdf7c5ba3402d12773547fff615690", 0x97}], 0x2, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xe9, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x21}, 0xfffff433}, {@remote, 0x1}, {@empty, 0x81}, {@empty, 0x8}]}, @timestamp_addr={0x44, 0x10, 0xec, 0x1, 0xe, [{@private=0xa010100, 0x40}, {@broadcast, 0x7ff}, {@remote, 0xffff}]}, @end]}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r6, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}], 0xc0}, 0x4040810) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 1.906864524s ago: executing program 1 (id=1688): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000680)={0x20ffffff}, 0x8) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x96, 0x5, 0x0, 0x3, 0x0, 0x80000001, 0x10400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0xee, 0x80002}, 0x0, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5760, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000000), 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x40, @mcast2, 0x9}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="dbf60150abb60a892558a6bc4c22e3820c63953eb5231b85fe0b2e", 0x1b}, {&(0x7f0000000240)="12199cba70e4cd862cb53ee0ca61a49627361a0bbb56db896aafb3b7309b3391c5a88dc66c164f8a31029a56ec28bea18deb0851046e5a121467ef9690aeced1f60ffc", 0x43}, {0x0}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x260}, 0x40) close(r1) 1.820492646s ago: executing program 2 (id=1689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair(0x8, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.819972356s ago: executing program 0 (id=1690): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRES32], 0xffdd) 1.785542237s ago: executing program 3 (id=1691): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@call={0x85, 0x0, 0x0, 0x51}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x408) 1.750324178s ago: executing program 2 (id=1692): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x5, 0x2, 0x4, 0x0, 0x10, 0x6640, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x42, 0x2, @perf_bp={&(0x7f00000003c0)}, 0xa11, 0x5, 0x7, 0x7, 0x0, 0x4, 0x9, 0x0, 0x7, 0x0, 0x5ab}, r4, 0xb, r0, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x22, &(0x7f0000000200), 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9}, @generic={0x2, 0x8, 0x2, 0xfffc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000380)='GPL\x00', 0xc0, 0xc8, &(0x7f0000000480)=""/200, 0x40f00, 0x14, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x2, 0x8, 0x2}, 0x10, 0x2ddb3, r7, 0x6, 0x0, &(0x7f0000000740)=[{0x5, 0x1, 0x10, 0x1}, {0x0, 0x3, 0x8, 0x7}, {0x3, 0x5, 0x10, 0x7}, {0x1, 0x3, 0x2, 0x1}, {0x2, 0x2, 0xd, 0x5}, {0x0, 0x4, 0xc}], 0x10, 0x2}, 0x94) sendmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000240)="1400000033000b2f1bdc0f13b67e58c316920fd2", 0x14}], 0x1}, 0x448d0) 1.586793382s ago: executing program 3 (id=1693): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xff0}, 0x8) (async) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040)=r1, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000060000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 1.535607053s ago: executing program 3 (id=1694): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x5744935563dc1402) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) (rerun: 32) sendmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="8965edc5", 0x4}], 0x1}, 0x2004c004) (async, rerun: 32) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22100, 0x0) (rerun: 64) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x93090164484cccb9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000001, 0x8}, 0x1b, 0x0, 0x10000003, 0x1, 0x8, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe1000040004d3277fb080600017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="1400000015000b63d25a9a0f9de72a2e4a1d005b", 0x14}], 0x1}, 0x2000c884) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x7}, 0x80c4) 1.498739344s ago: executing program 4 (id=1695): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) r0 = socket$kcm(0x2, 0x4, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x25, 0x5, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.430647175s ago: executing program 0 (id=1696): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x56, 0xb2, &(0x7f0000000100)="9714003653a32434664d774087016b5b8be4961bd29920fb3ed7de3a0c99d28d8d0e2faabee5785b8a2c1e062fa85fd3563232c1f7acf9fc8241cdf9bf2aefb54bc4fd3ec47e4a378daf9adcf4fbf7db59b0bb6ae95b", &(0x7f0000000180)=""/178, 0x2, 0x0, 0x19, 0x47, &(0x7f0000000240)="7963e28a44d5cf0891defa0ae472dfb4914231ab793ba639ff", &(0x7f0000000280)="7a19db21bf435e3290014a715509535f8004040d7fc1de8e53e7c9d11a894a2e8352339131847168558e0a80b74656c9109a7adb8ecadccfecae4211c380ca7da7ca926879e379", 0x6, 0x0, 0x5}, 0x50) (async) r2 = socket$kcm(0x29, 0x1, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='memory.swap.max\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r5 = openat$cgroup_procs(r1, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 32) r6 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) recvmsg$kcm(r2, &(0x7f00000009c0)={&(0x7f00000004c0)=@nl=@proc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)=""/67, 0x43}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/162, 0xa2}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/22, 0x16}, {&(0x7f00000008c0)=""/71, 0x47}], 0x7}, 0x41) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000a00), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000a80)={'batadv_slave_0\x00', @broadcast}) (async) r8 = openat$cgroup_subtree(r1, &(0x7f0000000ac0), 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r1, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x0, '\x00', r9, r1, 0x0, 0x0, 0x3}, 0x50) openat$cgroup_type(r1, &(0x7f0000000c40), 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r1}, 0x8) (async, rerun: 64) r11 = perf_event_open$cgroup(&(0x7f0000000d00)={0x0, 0x80, 0xfa, 0x8, 0xa, 0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7df6, 0x1, @perf_bp={&(0x7f0000000cc0), 0x2}, 0x100604, 0xe, 0x1, 0x9, 0x1ff, 0x13, 0x1, 0x0, 0x2, 0x0, 0x9}, r4, 0xe, r1, 0x2) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@map=r10, 0x14, 0x1, 0x5, &(0x7f0000000d80)=[0x0], 0x1, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000ec0)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0x4df, '\x00', r9, r1, 0x5, 0x1, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0x18, r2}, 0x18) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@o_path={&(0x7f0000001000)='./file0\x00', 0x0, 0xe5fb6df8850ccfdd}, 0x18) r14 = syz_clone(0x100000, &(0x7f0000001100)="3362de0eff6a85484eba6385cb9267a19107a8e37c8b2dae33bf15bc476557779e5cad061923ac28dd516b0371f5a87292aadf9c9c4fa37bfa6528b8c2bdb5dfa3c3c2c6366f7c27817d090e40a4e123f4c5632b47eca2e5d24cbe2c966b7786706c271274689cf98f6fac0bed7ef8875c2be9c51c9582dd7473929235d4731bdb4df5c813a4bbb351d34a52d1d04df3d63b7293", 0x94, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="a8c060d376296381effb372f37c4530d9195f323c56e2986c68125dbcf06cc18cd0ee7d83edc80b78431b9ab64d897939bab361360f58d856a6482c34c507c33de2aa5612184c65cc8d85713cb122247f14ab8685851bca482e7ee9cd8100f5f356e7444f1780984d1fe3e512e5e0d8919b66caf726e97f15bcd147f6c0a0752f1f0c51f953113db103a1c0527f840f1f035d22ffe04da7ae371b1814ba91968c7eb9c97e048c14576aecd8773f84dcbdc35138a09ae3540409a4bd40222e073b6f6e34b0b73c331407f1df1b89fa01583cd34894f860a") r15 = perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x4, 0xa, 0x3, 0x5, 0x0, 0xe, 0x41, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x100, 0x5, 0x2, 0x4, 0x400, 0x9, 0x40, 0x0, 0x35c6}, r14, 0x10, r11, 0x8) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0x0) (async, rerun: 32) sendmsg$unix(r3, &(0x7f0000001540)={&(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000013c0)="7af42a05f7943d264519b38fff0d7abc66be9254867b3471c1ee0d4845f374b279c3037e17490f6acae6d1af568e7cb5f11c3e14acd238d49cd16f14d8d8847db7623439fa2a6db7b2fa4722c6b22f02ecb70c6ab839fe0780b7414547e36dd9ade2f170701c4630e93341cf37320366f79ab4e6814ad686e4226335b062cabbf457c43839d474fc2ae3028d65bb05b146d1d6052ad2d286c6d4352acdc4b7", 0x9f}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r5, r7, r13, 0xffffffffffffffff, r13, r6, r15, r8]}}], 0x50, 0x20000000}, 0x80) (rerun: 32) 1.429963165s ago: executing program 2 (id=1697): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x4004743b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 1.373882427s ago: executing program 3 (id=1698): socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) close(r0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000da7b0000", @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x0, 0x9, 0x20841, 0x1, 0x7fffffff, '\x00', r7, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @union={0xf, 0x2, 0x0, 0x5, 0x0, 0x2000, [{0x5, 0x5, 0x9}, {0x7, 0x1, 0x3}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x6}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @enum64={0xe, 0x3, 0x0, 0x13, 0x1, 0x4, [{0xc, 0x401, 0x10001}, {0x9, 0x4, 0x6d06}, {0x10, 0xff, 0x195b}]}, @enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x1, [{0xf, 0x6, 0x400}, {0x2, 0x0, 0xa}, {0xf, 0x7, 0x2}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x71]}}, &(0x7f0000000400)=""/41, 0xcb, 0x29, 0x1, 0xfffff000, 0x10000}, 0x28) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.330897528s ago: executing program 0 (id=1699): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007112330000000000950000000000000072b93e0ae20ddfc9e924efe904bd3379bd"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRESDEC, @ANYBLOB, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800253a029f29214b5c8802", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000007112330000000000950000000000000072b93e0ae20ddfc9e924efe904bd3379bd"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB, @ANYRESDEC, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800253a029f29214b5c8802", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) (async) 1.289674109s ago: executing program 1 (id=1700): socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0xd2f7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xf, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r1, 0x0, 0x24044010) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a8d, 0x7, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x20000, 0x6, 0x2, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.2347158s ago: executing program 2 (id=1701): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8a37}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x5f, &(0x7f0000000200)=""/95, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x81}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x9030, 0x7f, 0xffffc000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24004800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x19, 0x4, 0x8, 0x2}, 0x50) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "9d467b1f4cfd8c642c13334c2a9f91732d13e85b10bdb7e8d20dd064e66a4278b3c76f275da083e92b3fdaae3b991ffc48ca221108c4d3aa523010eab68d95"}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000002b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={0xffffffffffffffff, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x0, 0x0, 0x81, 0x0, 0x0, 0x10, &(0x7f0000001980), 0x0, 0x0, 0x1b, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x79, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r5 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000004c0)=r7, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710426000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.23432891s ago: executing program 4 (id=1702): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/154, 0x9a, 0x0, &(0x7f0000000680)=""/57, 0x39}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085ffffff0e00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa, 0x40, 0x7, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, &(0x7f0000000300), 0x0}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x80}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x112}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x686, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc", 0xf}], 0x1}, 0x0) close(r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe80, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.149426082s ago: executing program 1 (id=1703): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x2, 0xfff}]}]}, {0x0, [0x30, 0x61, 0xe, 0x61, 0x2e]}}, &(0x7f0000001540)=""/4096, 0x33, 0x1000, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 397.193461ms ago: executing program 0 (id=1704): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x20040000) recvmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d300000080e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d2685"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x201000, 0x0, 0x0, 0x0, 0x0, 0x0) 382.888421ms ago: executing program 3 (id=1705): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e489", 0x5}], 0x1, 0x0, 0x0, 0x400c800}, 0x4000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000740)=""/201, 0x40, 0xc9, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000740)=""/201, 0x40, 0xc9, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000022, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000022, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 295.915763ms ago: executing program 1 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x4c02, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x37, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff95, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0xa) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) close(r5) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1}, 0x10020) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24c1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x41, 0x0, 0x8f00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x9}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r8, 0x0) close(r0) 249.232424ms ago: executing program 4 (id=1707): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x4100}, 0x8604, 0x4, 0x43a1bd76, 0x8, 0x9, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="98000000210081044e81f782db44b90402000000000300000000150010001800feff578d09000d2000000401a800ba0000000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b480ef88e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e", 0x98}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000f40300000000986145000000"]) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0x3, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01000020109b"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000080000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 198.479425ms ago: executing program 2 (id=1708): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x25, 0x5, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x80, 0x9, 0xcc, 0xa, 0x78, 0x0, 0x9, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x2, @perf_config_ext={0x3, 0x8}, 0x20, 0x1, 0xd, 0x6, 0x7, 0xb87d, 0x6d2, 0x0, 0x101, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r3, 0x8) (async) perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x80, 0x9, 0xcc, 0xa, 0x78, 0x0, 0x9, 0x1, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x2, @perf_config_ext={0x3, 0x8}, 0x20, 0x1, 0xd, 0x6, 0x7, 0xb87d, 0x6d2, 0x0, 0x101, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r3, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) (async) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900", 0x2a}], 0x1}, 0x24040000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1f, 0x3, 0x1, 0x4f55, 0x40c00, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r13 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r12}, &(0x7f0000000080), &(0x7f00000001c0)=r13}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r12, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x1, 0x3, 0x20, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xd6, &(0x7f00000009c0)=""/214, 0x40f00, 0x0, '\x00', r10, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x5, 0xb, 0x7ff}, 0x10, 0x100ae, r1, 0x2, &(0x7f0000000880)=[r11, r0, r12, r0, r0, r0, r0], &(0x7f00000008c0)=[{0x3, 0x2, 0xa, 0xa}, {0x1, 0x2, 0x10, 0x8}], 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r0}, &(0x7f0000001e40), &(0x7f0000001e80)=r14}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r0}, &(0x7f0000001e40), &(0x7f0000001e80)=r14}, 0x20) 122.509847ms ago: executing program 3 (id=1709): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='cpu<00||!') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<00||!') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x2a}, 0x28) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x2, 0x28}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) 62.618609ms ago: executing program 0 (id=1710): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007910000000000000630ae0ff000000009500000000000003"], &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0xf}, {0x5, 0x1}, {0xf, 0x4}, {0x7, 0x1}, {0x8}, {0x8, 0x3}, {0x2, 0x1}]}, @fwd={0x10}]}, {0x0, [0x5f, 0x61, 0x0, 0x6f, 0x0, 0x30, 0x0]}}, &(0x7f00000003c0)=""/32, 0x79, 0x20, 0x1, 0x3, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xe, &(0x7f0000000080)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000180)=""/133, 0x41100, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xd, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r0], &(0x7f00000005c0)=[{0x0, 0x1, 0x1, 0x7}, {0x0, 0x5, 0xd, 0xb}, {0x0, 0x2, 0x7}, {0x1, 0x2, 0x8, 0xa}, {0x5, 0x3, 0x4, 0x8}, {0x4, 0x5, 0x7, 0x2}, {0x0, 0x5, 0xe, 0x2}], 0x10, 0x7}, 0x94) 0s ago: executing program 4 (id=1711): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000680)={0x20ffffff}, 0x8) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x96, 0x5, 0x0, 0x3, 0x0, 0x80000001, 0x10400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0xee, 0x80002}, 0x0, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5760, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000000), 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x40, @mcast2, 0x9}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="dbf60150abb60a892558a6bc4c22e3820c63953eb5231b85fe0b2e", 0x1b}, {&(0x7f0000000240)="12199cba70e4cd862cb53ee0ca61a49627361a0bbb56db896aafb3b7309b3391c5a88dc66c164f8a31029a56ec28bea18deb0851046e5a121467ef9690aeced1f60ffc", 0x43}, {0x0}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x260}, 0x40) close(r1) kernel console output (not intermixed with test programs): link becomes ready [ 75.344768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.354309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.368860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.378496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.388085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.418067][ T4191] device veth0_macvtap entered promiscuous mode [ 75.463248][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.476425][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 75.488901][ T4191] device veth1_macvtap entered promiscuous mode [ 75.507644][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.524207][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.533633][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.542835][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.552846][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.562697][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 75.565868][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 75.570469][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.580588][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 75.584810][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.597779][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 75.599961][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.626383][ T4186] device veth0_macvtap entered promiscuous mode [ 75.640201][ T4195] device veth0_vlan entered promiscuous mode [ 75.654248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.666182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.679714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.696856][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.706957][ T4186] device veth1_macvtap entered promiscuous mode [ 75.729121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.744178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.753645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.764414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.773316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.782915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.791545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.804139][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.824154][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.834215][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.843626][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.852873][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.878551][ T4187] device veth0_vlan entered promiscuous mode [ 75.891867][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.908159][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.925673][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.936652][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.951631][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.970305][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.988576][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.009890][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.052270][ T4195] device veth1_vlan entered promiscuous mode [ 76.062517][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.074027][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.087500][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.100536][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.123556][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.137264][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.175914][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.194679][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.214154][ T4187] device veth1_vlan entered promiscuous mode [ 76.230861][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.242901][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.254597][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.268015][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.343654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.354378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.370801][ T4195] device veth0_macvtap entered promiscuous mode [ 76.409439][ T4195] device veth1_macvtap entered promiscuous mode [ 76.440929][ T4187] device veth0_macvtap entered promiscuous mode [ 76.457550][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.465876][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.474244][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.481840][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.483332][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.500312][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.511725][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.522461][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.553774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.568535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.581159][ T4187] device veth1_macvtap entered promiscuous mode [ 76.603895][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.624606][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.636936][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.660422][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.677167][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.702224][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.713923][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.725403][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.739746][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.752181][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.763743][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.778815][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.789130][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.800282][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.809695][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.821448][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.832520][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.858042][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.868406][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.884490][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.896061][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.922165][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.943094][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.959701][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.975037][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.989143][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.001302][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.017144][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.044117][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.053559][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.063672][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.084125][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.104005][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.117281][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.130939][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.142885][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153661][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.163139][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.188237][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.202398][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.213050][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.224090][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.240742][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.253222][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.271997][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.291053][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.303918][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.320462][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.331752][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.344332][ T4200] device veth0_vlan entered promiscuous mode [ 77.368915][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.371201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.383591][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.390336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.411014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.498654][ T4200] device veth1_vlan entered promiscuous mode [ 77.576065][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 77.636869][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 77.638090][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 77.668488][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.692187][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.711955][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 77.721031][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 77.738761][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.741511][ T4200] device veth0_macvtap entered promiscuous mode [ 77.769358][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.822202][ T4200] device veth1_macvtap entered promiscuous mode [ 77.840904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.841684][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.861981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.864089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.874761][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.897156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.940765][ T4273] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 77.962772][ T4273] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.014598][ T4273] device bond0 entered promiscuous mode [ 78.028084][ T4273] device bond_slave_0 entered promiscuous mode [ 78.034663][ T4273] device bond_slave_1 entered promiscuous mode [ 78.048550][ T4273] bridge0: port 3(bond0) entered blocking state [ 78.055282][ T4273] bridge0: port 3(bond0) entered disabled state [ 78.074553][ T4273] bridge0: port 3(bond0) entered blocking state [ 78.081185][ T4273] bridge0: port 3(bond0) entered forwarding state [ 78.085475][ C1] hrtimer: interrupt took 49851 ns [ 78.101898][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.121164][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.150477][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.162438][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.182136][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.194938][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.209472][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.222972][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.234542][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.245877][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.258578][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.294523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.312236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.325712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.349745][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.363346][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.382372][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.402346][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.413271][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.424939][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.435086][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.449035][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.463058][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.489220][ T4200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.499290][ T4200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.500238][ T1313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.511266][ T4200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.530307][ T4200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.557808][ T4284] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7'. [ 78.578300][ T1313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.578983][ T4287] netlink: 'syz.0.8': attribute type 3 has an invalid length. [ 78.604991][ T4283] netlink: 'syz.1.7': attribute type 4 has an invalid length. [ 78.625834][ T4287] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.643331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.653673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.662727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.705438][ T4291] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 78.753674][ T4291] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 78.863970][ T4289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.549919][ T4294] netlink: 'syz.0.9': attribute type 16 has an invalid length. [ 79.627225][ T4294] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9'. [ 79.870933][ T4284] syz.1.7 (4284) used greatest stack depth: 20560 bytes left [ 79.982875][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.025646][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.086979][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.343143][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.386905][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.531046][ T1313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.674912][ T4323] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 80.696260][ T4323] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15'. [ 80.720874][ T4323] device bond0 entered promiscuous mode [ 80.728987][ T4323] device bond_slave_0 entered promiscuous mode [ 80.777063][ T4323] device bond_slave_1 entered promiscuous mode [ 80.802077][ T4323] bridge0: port 3(bond0) entered blocking state [ 80.817170][ T4323] bridge0: port 3(bond0) entered disabled state [ 80.840573][ T4323] bridge0: port 3(bond0) entered blocking state [ 80.847649][ T4323] bridge0: port 3(bond0) entered forwarding state [ 80.953592][ T4331] netlink: 'syz.4.5': attribute type 6 has an invalid length. [ 80.977209][ T4331] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.5'. [ 81.103785][ T4333] device syzkaller0 entered promiscuous mode [ 81.193904][ T4338] netlink: 'syz.4.19': attribute type 12 has an invalid length. [ 81.213550][ T4338] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19'. [ 81.635088][ T4352] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.22'. [ 81.715218][ T4358] netlink: 'syz.0.22': attribute type 4 has an invalid length. [ 82.188020][ T4368] sctp: [Deprecated]: syz.4.28 (pid 4368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.188020][ T4368] Use struct sctp_sack_info instead [ 82.962618][ T4383] Zero length message leads to an empty skb [ 85.135972][ T4388] bridge0: port 3(batadv0) entered blocking state [ 85.146810][ T4388] bridge0: port 3(batadv0) entered disabled state [ 85.179210][ T4388] device batadv0 entered promiscuous mode [ 85.194064][ T4388] bridge0: port 3(batadv0) entered blocking state [ 85.201677][ T4388] bridge0: port 3(batadv0) entered forwarding state [ 85.377965][ T4396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 85.503320][ T4391] delete_channel: no stack [ 85.570131][ T4396] validate_nla: 1 callbacks suppressed [ 85.570151][ T4396] netlink: 'syz.4.36': attribute type 3 has an invalid length. [ 85.570815][ T4285] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 85.595326][ T4285] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 85.615935][ T4396] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.36'. [ 85.819402][ T4404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39'. [ 85.935749][ T4411] netlink: 14 bytes leftover after parsing attributes in process `syz.2.39'. [ 86.009197][ T4411] device hsr_slave_0 left promiscuous mode [ 86.034162][ T4411] device hsr_slave_1 left promiscuous mode [ 86.390556][ T4424] netlink: 'syz.4.44': attribute type 3 has an invalid length. [ 86.450127][ T4424] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.44'. [ 86.684644][ T23] cfg80211: failed to load regulatory.db [ 88.110167][ T4465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.55'. [ 91.553765][ T4492] netlink: 'syz.1.62': attribute type 11 has an invalid length. [ 91.565816][ T4492] netlink: 168 bytes leftover after parsing attributes in process `syz.1.62'. [ 91.802244][ T4501] netlink: 11559 bytes leftover after parsing attributes in process `syz.2.65'. [ 92.037456][ T4498] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.63'. [ 94.592972][ T4648] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 94.942427][ T4662] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 94.982356][ T4664] netlink: 'syz.1.89': attribute type 4 has an invalid length. [ 94.985638][ T4662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'. [ 95.003307][ T4664] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.89'. [ 95.041213][ T4662] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 95.075450][ T4662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.90'. [ 95.118028][ T4667] netlink: 'syz.1.89': attribute type 3 has an invalid length. [ 95.155618][ T4667] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.89'. [ 101.388380][ T4730] netlink: 'syz.0.108': attribute type 46 has an invalid length. [ 101.486212][ T4730] netlink: 2 bytes leftover after parsing attributes in process `syz.0.108'. [ 101.982663][ T4739] netlink: 'syz.2.110': attribute type 17 has an invalid length. [ 102.001776][ T4739] netlink: 148 bytes leftover after parsing attributes in process `syz.2.110'. [ 102.233401][ T4744] netlink: 'syz.0.112': attribute type 3 has an invalid length. [ 102.325874][ T4744] netlink: 132 bytes leftover after parsing attributes in process `syz.0.112'. [ 102.499532][ T4747] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 102.525645][ T4747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.113'. [ 102.571809][ T4747] batman_adv: batadv0: Adding interface: veth0_vlan [ 102.600829][ T4747] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.795645][ T4747] batman_adv: batadv0: Interface activated: veth0_vlan [ 103.011612][ T4739] syz.2.110 (4739) used greatest stack depth: 20464 bytes left [ 103.215054][ T4771] netlink: 'syz.3.120': attribute type 2 has an invalid length. [ 103.276079][ T4771] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.120'. [ 103.688456][ T4788] bridge0: port 3(batadv0) entered disabled state [ 103.695396][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.704032][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.776375][ T4783] bridge0: port 3(batadv0) entered blocking state [ 103.783335][ T4783] bridge0: port 3(batadv0) entered forwarding state [ 103.791681][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.802527][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.810813][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.818182][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.859308][ T4783] device bridge0 entered promiscuous mode [ 103.990213][ T4785] device syzkaller0 entered promiscuous mode [ 104.365620][ T4800] netlink: 'syz.0.128': attribute type 29 has an invalid length. [ 104.441236][ T4800] netlink: 188 bytes leftover after parsing attributes in process `syz.0.128'. [ 104.914225][ T4841] netlink: 'syz.4.136': attribute type 2 has an invalid length. [ 105.452791][ T4899] netlink: 'syz.1.138': attribute type 15 has an invalid length. [ 105.707574][ T4899] netlink: 'syz.1.138': attribute type 7 has an invalid length. [ 105.833805][ T4899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.138'. [ 106.256683][ T4916] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.143'. [ 106.662855][ T4941] netlink: 'syz.2.151': attribute type 3 has an invalid length. [ 106.722879][ T4941] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.151'. [ 107.723776][ T4978] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.161'. [ 108.849626][ T4604] tipc: Subscription rejected, illegal request [ 108.963738][ T4992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.128806][ T5019] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.173'. [ 109.472502][ T5037] netlink: 36 bytes leftover after parsing attributes in process `syz.3.176'. [ 109.560491][ T5037] : renamed from caif0 [ 109.827095][ T5037] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 109.870941][ T5038] netlink: 14 bytes leftover after parsing attributes in process `syz.0.180'. [ 110.025867][ T5051] netlink: 'syz.2.183': attribute type 21 has an invalid length. [ 110.048385][ T5051] netlink: 128 bytes leftover after parsing attributes in process `syz.2.183'. [ 110.080708][ T5051] netlink: 3 bytes leftover after parsing attributes in process `syz.2.183'. [ 110.198344][ T5053] syz.3.184[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.198607][ T5053] syz.3.184[5053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.325789][ T5056] netlink: 'syz.0.185': attribute type 4 has an invalid length. [ 110.583296][ T5062] netlink: 'syz.2.187': attribute type 15 has an invalid length. [ 110.604950][ T5062] netlink: 'syz.2.187': attribute type 7 has an invalid length. [ 110.642357][ T5062] netlink: 52 bytes leftover after parsing attributes in process `syz.2.187'. [ 110.678995][ T5060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.994151][ T5070] netlink: 'syz.3.189': attribute type 7 has an invalid length. [ 111.102933][ T5070] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.189'. [ 112.181929][ T5107] netlink: 128 bytes leftover after parsing attributes in process `syz.3.198'. [ 112.252384][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 112.325992][ T5107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.440934][ T5110] netlink: 64827 bytes leftover after parsing attributes in process `syz.2.201'. [ 112.481323][ T5110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.201'. [ 112.788793][ T5110] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 116.017022][ T5123] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 116.172340][ T5135] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.206'. [ 116.206447][ T5131] netlink: 'syz.1.205': attribute type 39 has an invalid length. [ 116.227421][ T5141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.206'. [ 116.542576][ T5135] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 116.573595][ T5135] CPU: 0 PID: 5135 Comm: syz.2.206 Not tainted syzkaller #0 [ 116.583077][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.593350][ T5135] Call Trace: [ 116.596770][ T5135] [ 116.599725][ T5135] dump_stack_lvl+0x188/0x250 [ 116.606090][ T5135] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.613444][ T5135] ? show_regs_print_info+0x20/0x20 [ 116.619882][ T5135] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.627455][ T5135] sysfs_warn_dup+0x8a/0xa0 [ 116.632379][ T5135] sysfs_do_create_link_sd+0xc0/0x110 [ 116.638139][ T5135] device_add+0x83b/0x1050 [ 116.642955][ T5135] wiphy_register+0x1e74/0x2c40 [ 116.649739][ T5135] ? cfg80211_event_work+0x40/0x40 [ 116.657891][ T5135] ? minstrel_ht_alloc+0x807/0x980 [ 116.664627][ T5135] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 116.671154][ T5135] ieee80211_register_hw+0x2a03/0x3a60 [ 116.678583][ T5135] ? ieee80211_register_hw+0xae1/0x3a60 [ 116.684948][ T5135] ? ieee80211_tasklet_handler+0x20/0x20 [ 116.690640][ T5135] ? rcu_is_watching+0x11/0xa0 [ 116.695750][ T5135] ? hrtimer_init+0x10c/0x220 [ 116.701202][ T5135] mac80211_hwsim_new_radio+0x209d/0x4050 [ 116.707910][ T5135] hwsim_new_radio_nl+0xa7d/0xc50 [ 116.713883][ T5135] genl_rcv_msg+0xd0b/0xfa0 [ 116.718699][ T5135] ? genl_bind+0x370/0x370 [ 116.723829][ T5135] ? __dev_queue_xmit+0x1b64/0x2e50 [ 116.729553][ T5135] ? verify_lock_unused+0x140/0x140 [ 116.735509][ T5135] ? perf_trace_lock+0xe4/0x390 [ 116.740969][ T5135] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 116.747835][ T5135] netlink_rcv_skb+0x1e9/0x430 [ 116.752653][ T5135] ? genl_bind+0x370/0x370 [ 116.757114][ T5135] ? netlink_ack+0xb10/0xb10 [ 116.761745][ T5135] ? down_read+0x1aa/0x2e0 [ 116.767406][ T5135] genl_rcv+0x24/0x40 [ 116.771508][ T5135] netlink_unicast+0x78f/0x940 [ 116.776361][ T5135] netlink_sendmsg+0x8ba/0xbe0 [ 116.781272][ T5135] ? netlink_getsockopt+0x570/0x570 [ 116.786846][ T5135] ? aa_sock_msg_perm+0x94/0x150 [ 116.792086][ T5135] ? apparmor_socket_sendmsg+0x88/0x230 [ 116.797668][ T5135] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 116.803737][ T5135] ? security_socket_sendmsg+0x7c/0xa0 [ 116.810062][ T5135] ? netlink_getsockopt+0x570/0x570 [ 116.815308][ T5135] ____sys_sendmsg+0x5be/0x8f0 [ 116.821514][ T5135] ? __sys_sendmsg_sock+0x30/0x30 [ 116.828530][ T5135] ? import_iovec+0x6f/0xa0 [ 116.835487][ T5135] ___sys_sendmsg+0x236/0x2e0 [ 116.840651][ T5135] ? __sys_sendmsg+0x290/0x290 [ 116.845783][ T5135] __se_sys_sendmsg+0x1b7/0x2a0 [ 116.850689][ T5135] ? __x64_sys_sendmsg+0x80/0x80 [ 116.856136][ T5135] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.862804][ T5135] ? lockdep_hardirqs_on+0x94/0x140 [ 116.869886][ T5135] do_syscall_64+0x4c/0xa0 [ 116.875414][ T5135] ? clear_bhb_loop+0x30/0x80 [ 116.880731][ T5135] ? clear_bhb_loop+0x30/0x80 [ 116.885541][ T5135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.891815][ T5135] RIP: 0033:0x7f99a99ed0d9 [ 116.896527][ T5135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.923259][ T5135] RSP: 002b:00007f99a7c45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.932419][ T5135] RAX: ffffffffffffffda RBX: 00007f99a9c74fa0 RCX: 00007f99a99ed0d9 [ 116.942436][ T5135] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 116.951348][ T5135] RBP: 00007f99a9a84024 R08: 0000000000000000 R09: 0000000000000000 [ 116.959520][ T5135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.967646][ T5135] R13: 00007f99a9c75038 R14: 00007f99a9c74fa0 R15: 00007fff716dfc08 [ 116.976877][ T5135] [ 117.388766][ T5158] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 117.466242][ T5158] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.213'. [ 118.265169][ T5169] syz.1.217 (5169) used greatest stack depth: 18960 bytes left [ 118.461641][ T5180] netlink: 'syz.3.221': attribute type 3 has an invalid length. [ 118.493441][ T5184] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 118.497139][ T5180] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 118.587526][ T5180] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.221'. [ 118.591112][ T5184] device hsr0 entered promiscuous mode [ 118.768355][ T4604] wlan1: Trigger new scan to find an IBSS to join [ 118.830219][ T5184] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 118.866121][ T5184] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 118.957342][ T5184] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 118.986054][ T5184] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 119.289885][ T5198] netlink: 'syz.0.226': attribute type 11 has an invalid length. [ 119.332736][ T5204] netlink: 'syz.3.228': attribute type 3 has an invalid length. [ 119.342424][ T5198] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 119.365594][ T5198] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 119.415881][ T5204] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 119.424751][ T5204] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.456601][ T5206] netlink: 2 bytes leftover after parsing attributes in process `syz.1.227'. [ 119.467112][ T5204] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.468570][ T5198] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.226'. [ 119.596585][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.623451][ T5204] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.677009][ T5206] bridge0: port 4(hsr0) entered blocking state [ 119.683034][ T5204] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.693660][ T5206] bridge0: port 4(hsr0) entered disabled state [ 119.726398][ T5206] bridge0: port 4(hsr0) entered blocking state [ 119.732947][ T5206] bridge0: port 4(hsr0) entered forwarding state [ 119.779472][ T5204] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.874283][ T5204] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.955288][ T5220] sock: sock_timestamping_bind_phc: sock not bind to device [ 120.164518][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 120.241815][ T5223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.027162][ T5264] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.539555][ T5292] validate_nla: 49 callbacks suppressed [ 121.539571][ T5292] netlink: 'syz.2.256': attribute type 2 has an invalid length. [ 121.605738][ T5296] netlink: 'syz.0.257': attribute type 21 has an invalid length. [ 121.677815][ T5290] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 121.952679][ T5311] netlink: 'syz.0.259': attribute type 11 has an invalid length. [ 123.465197][ T5364] __nla_validate_parse: 33 callbacks suppressed [ 123.465218][ T5364] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.274'. [ 123.589859][ T5364] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 123.762103][ T5369] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.275'. [ 123.795897][ T4615] wlan1: Trigger new scan to find an IBSS to join [ 123.999705][ T5379] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.278'. [ 124.055955][ T5379] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 124.117679][ T5379] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.278'. [ 124.453003][ T5385] netlink: 'syz.2.280': attribute type 4 has an invalid length. [ 124.735977][ T4615] wlan1: Creating new IBSS network, BSSID 82:c2:b7:ce:dd:b9 [ 125.368137][ T5404] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.285'. [ 125.668525][ T5404] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 125.732389][ T5404] CPU: 0 PID: 5404 Comm: syz.2.285 Not tainted syzkaller #0 [ 125.740566][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.754301][ T5404] Call Trace: [ 125.758056][ T5404] [ 125.762106][ T5404] dump_stack_lvl+0x188/0x250 [ 125.768409][ T5404] ? show_regs_print_info+0x20/0x20 [ 125.774925][ T5404] ? load_image+0x410/0x410 [ 125.780256][ T5404] sysfs_warn_dup+0x8a/0xa0 [ 125.785432][ T5404] sysfs_do_create_link_sd+0xc0/0x110 [ 125.792008][ T5404] device_add+0x83b/0x1050 [ 125.797453][ T5404] wiphy_register+0x1e74/0x2c40 [ 125.802838][ T5404] ? cfg80211_event_work+0x40/0x40 [ 125.808512][ T5404] ? minstrel_ht_alloc+0x807/0x980 [ 125.815057][ T5404] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 125.823848][ T5404] ieee80211_register_hw+0x2a03/0x3a60 [ 125.829857][ T5404] ? ieee80211_register_hw+0xae1/0x3a60 [ 125.836991][ T5404] ? ieee80211_tasklet_handler+0x20/0x20 [ 125.844300][ T5404] ? rcu_is_watching+0x11/0xa0 [ 125.850915][ T5404] ? hrtimer_init+0x10c/0x220 [ 125.857102][ T5404] mac80211_hwsim_new_radio+0x209d/0x4050 [ 125.863908][ T5404] hwsim_new_radio_nl+0xa7d/0xc50 [ 125.870721][ T5404] genl_rcv_msg+0xd0b/0xfa0 [ 125.875779][ T5404] ? genl_bind+0x370/0x370 [ 125.880247][ T5404] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 125.889165][ T5404] ? swake_up_one+0x6d/0x130 [ 125.894108][ T5404] ? verify_lock_unused+0x140/0x140 [ 125.900344][ T5404] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 125.907611][ T5404] ? perf_trace_lock+0x301/0x390 [ 125.914584][ T5404] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 125.922465][ T5404] netlink_rcv_skb+0x1e9/0x430 [ 125.928539][ T5404] ? genl_bind+0x370/0x370 [ 125.933805][ T5404] ? netlink_ack+0xb10/0xb10 [ 125.938728][ T5404] ? down_read+0x1aa/0x2e0 [ 125.944439][ T5404] genl_rcv+0x24/0x40 [ 125.949405][ T5404] netlink_unicast+0x78f/0x940 [ 125.954341][ T5404] netlink_sendmsg+0x8ba/0xbe0 [ 125.964017][ T5404] ? netlink_getsockopt+0x570/0x570 [ 125.973948][ T5404] ? aa_sock_msg_perm+0x94/0x150 [ 125.983891][ T5404] ? apparmor_socket_sendmsg+0x88/0x230 [ 125.992036][ T5404] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 125.998333][ T5404] ? security_socket_sendmsg+0x7c/0xa0 [ 126.005409][ T5404] ? netlink_getsockopt+0x570/0x570 [ 126.011815][ T5404] ____sys_sendmsg+0x5be/0x8f0 [ 126.018482][ T5404] ? __sys_sendmsg_sock+0x30/0x30 [ 126.027712][ T5404] ? import_iovec+0x6f/0xa0 [ 126.032660][ T5404] ___sys_sendmsg+0x236/0x2e0 [ 126.039943][ T5404] ? __sys_sendmsg+0x290/0x290 [ 126.046246][ T5404] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 126.052378][ T5404] __se_sys_sendmsg+0x1b7/0x2a0 [ 126.058117][ T5404] ? __x64_sys_sendmsg+0x80/0x80 [ 126.063563][ T5404] ? syscall_enter_from_user_mode+0x2a/0x70 [ 126.070867][ T5404] do_syscall_64+0x4c/0xa0 [ 126.075768][ T5404] ? clear_bhb_loop+0x30/0x80 [ 126.080910][ T5404] ? clear_bhb_loop+0x30/0x80 [ 126.086206][ T5404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.093783][ T5404] RIP: 0033:0x7f99a99ed0d9 [ 126.098327][ T5404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.125136][ T5404] RSP: 002b:00007f99a7c45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.133785][ T5404] RAX: ffffffffffffffda RBX: 00007f99a9c74fa0 RCX: 00007f99a99ed0d9 [ 126.141903][ T5404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 126.151912][ T5404] RBP: 00007f99a9a84024 R08: 0000000000000000 R09: 0000000000000000 [ 126.161602][ T5404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.171646][ T5404] R13: 00007f99a9c75038 R14: 00007f99a9c74fa0 R15: 00007fff716dfc08 [ 126.180636][ T5404] [ 126.433115][ T5413] netlink: 'syz.0.288': attribute type 4 has an invalid length. [ 126.456686][ T5413] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.288'. [ 127.209853][ T5440] netlink: 'syz.0.294': attribute type 9 has an invalid length. [ 127.255620][ T5440] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.294'. [ 127.299698][ T5439] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 127.357255][ T5439] netlink: 55 bytes leftover after parsing attributes in process `syz.4.295'. [ 128.149829][ T5441] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.294'. [ 128.181939][ T5446] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.294'. [ 128.557231][ T5457] netlink: 'syz.4.299': attribute type 3 has an invalid length. [ 128.594934][ T5457] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.299'. [ 128.911563][ T9] tipc: Subscription rejected, illegal request [ 130.342834][ T5521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.473337][ T5521] netlink: 14 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.522517][ T5527] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.318'. [ 130.819440][ T5521] device hsr_slave_0 left promiscuous mode [ 132.759988][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766694][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.870469][ T5521] device hsr_slave_1 left promiscuous mode [ 134.938919][ T5576] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.332'. [ 134.992409][ T5576] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 135.046214][ T5576] CPU: 0 PID: 5576 Comm: syz.2.332 Not tainted syzkaller #0 [ 135.053603][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.063705][ T5576] Call Trace: [ 135.067028][ T5576] [ 135.069986][ T5576] dump_stack_lvl+0x188/0x250 [ 135.074716][ T5576] ? show_regs_print_info+0x20/0x20 [ 135.079952][ T5576] ? load_image+0x410/0x410 [ 135.084557][ T5576] sysfs_warn_dup+0x8a/0xa0 [ 135.089097][ T5576] sysfs_do_create_link_sd+0xc0/0x110 [ 135.094519][ T5576] device_add+0x83b/0x1050 [ 135.098995][ T5576] wiphy_register+0x1e74/0x2c40 [ 135.103949][ T5576] ? cfg80211_event_work+0x40/0x40 [ 135.109097][ T5576] ? minstrel_ht_alloc+0x807/0x980 [ 135.114281][ T5576] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 135.120400][ T5576] ieee80211_register_hw+0x2a03/0x3a60 [ 135.125919][ T5576] ? ieee80211_register_hw+0xae1/0x3a60 [ 135.131549][ T5576] ? ieee80211_tasklet_handler+0x20/0x20 [ 135.137250][ T5576] ? rcu_is_watching+0x11/0xa0 [ 135.142439][ T5576] ? hrtimer_init+0x10c/0x220 [ 135.147182][ T5576] mac80211_hwsim_new_radio+0x209d/0x4050 [ 135.153013][ T5576] hwsim_new_radio_nl+0xa7d/0xc50 [ 135.158360][ T5576] genl_rcv_msg+0xd0b/0xfa0 [ 135.162947][ T5576] ? genl_bind+0x370/0x370 [ 135.167443][ T5576] ? __dev_queue_xmit+0x1b64/0x2e50 [ 135.172797][ T5576] ? verify_lock_unused+0x140/0x140 [ 135.178082][ T5576] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 135.183942][ T5576] ? perf_trace_lock+0x301/0x390 [ 135.189204][ T5576] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 135.195978][ T5576] netlink_rcv_skb+0x1e9/0x430 [ 135.201053][ T5576] ? genl_bind+0x370/0x370 [ 135.205622][ T5576] ? netlink_ack+0xb10/0xb10 [ 135.210304][ T5576] ? down_read+0x1aa/0x2e0 [ 135.214781][ T5576] genl_rcv+0x24/0x40 [ 135.218947][ T5576] netlink_unicast+0x78f/0x940 [ 135.223814][ T5576] netlink_sendmsg+0x8ba/0xbe0 [ 135.228678][ T5576] ? netlink_getsockopt+0x570/0x570 [ 135.233945][ T5576] ? aa_sock_msg_perm+0x94/0x150 [ 135.239453][ T5576] ? apparmor_socket_sendmsg+0x88/0x230 [ 135.245048][ T5576] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 135.250459][ T5576] ? security_socket_sendmsg+0x7c/0xa0 [ 135.256063][ T5576] ? netlink_getsockopt+0x570/0x570 [ 135.261323][ T5576] ____sys_sendmsg+0x5be/0x8f0 [ 135.266161][ T5576] ? __sys_sendmsg_sock+0x30/0x30 [ 135.271263][ T5576] ? import_iovec+0x6f/0xa0 [ 135.275821][ T5576] ___sys_sendmsg+0x236/0x2e0 [ 135.280594][ T5576] ? __sys_sendmsg+0x290/0x290 [ 135.285438][ T5576] ? trace_event_raw_event_lock+0x250/0x250 [ 135.291464][ T5576] __se_sys_sendmsg+0x1b7/0x2a0 [ 135.296387][ T5576] ? __x64_sys_sendmsg+0x80/0x80 [ 135.301474][ T5576] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.307865][ T5576] ? lockdep_hardirqs_on+0x94/0x140 [ 135.313260][ T5576] do_syscall_64+0x4c/0xa0 [ 135.317716][ T5576] ? clear_bhb_loop+0x30/0x80 [ 135.322433][ T5576] ? clear_bhb_loop+0x30/0x80 [ 135.327167][ T5576] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.333130][ T5576] RIP: 0033:0x7f99a99ed0d9 [ 135.337591][ T5576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.357230][ T5576] RSP: 002b:00007f99a7c24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.365699][ T5576] RAX: ffffffffffffffda RBX: 00007f99a9c75090 RCX: 00007f99a99ed0d9 [ 135.373718][ T5576] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 135.381731][ T5576] RBP: 00007f99a9a84024 R08: 0000000000000000 R09: 0000000000000000 [ 135.389746][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.397774][ T5576] R13: 00007f99a9c75128 R14: 00007f99a9c75090 R15: 00007fff716dfc08 [ 135.405851][ T5576] [ 136.156650][ T5589] netlink: 156 bytes leftover after parsing attributes in process `syz.1.336'. [ 137.470770][ T5595] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 137.503890][ T5603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.339'. [ 137.806519][ T5611] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 138.122406][ T5634] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.148758][ T5634] netlink: 1 bytes leftover after parsing attributes in process `syz.0.347'. [ 138.200671][ T5630] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.346'. [ 138.239432][ T5638] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.346'. [ 138.815264][ T5660] netlink: 'syz.0.352': attribute type 9 has an invalid length. [ 138.876944][ T5660] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.352'. [ 139.339948][ T5667] netlink: 'syz.3.357': attribute type 4 has an invalid length. [ 139.380419][ T5667] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.357'. [ 139.398380][ T5663] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.355'. [ 139.554076][ T5670] netlink: 'syz.3.357': attribute type 3 has an invalid length. [ 139.586035][ T5670] netlink: 152 bytes leftover after parsing attributes in process `syz.3.357'. [ 139.614402][ T5672] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 139.922808][ T5672] team0: Port device hsr_slave_0 added [ 140.476290][ T5706] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 140.565971][ T5706] team0: Device nlmon0 is of different type [ 140.730879][ T5725] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.373'. [ 141.218110][ T5746] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 141.275791][ T5746] netlink: 2 bytes leftover after parsing attributes in process `syz.0.380'. [ 141.308757][ T5746] device batadv_slave_1 entered promiscuous mode [ 141.327383][ T5746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.345767][ T5746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.479334][ T5756] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.379'. [ 141.543969][ T5756] netlink: zone id is out of range [ 141.547340][ T5758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.383'. [ 141.561175][ T5756] netlink: zone id is out of range [ 141.561214][ T5756] netlink: zone id is out of range [ 141.562467][ T5756] netlink: zone id is out of range [ 141.603852][ T5756] netlink: zone id is out of range [ 141.611503][ T5756] netlink: zone id is out of range [ 141.617687][ T5756] netlink: zone id is out of range [ 141.627097][ T5756] netlink: zone id is out of range [ 141.653024][ T5756] netlink: zone id is out of range [ 141.671275][ T5758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.383'. [ 141.687687][ T5756] netlink: zone id is out of range [ 141.701153][ T5760] delete_channel: no stack [ 141.729897][ T5760] delete_channel: no stack [ 141.834260][ T5762] netlink: 144 bytes leftover after parsing attributes in process `syz.2.385'. [ 142.052240][ T5775] netlink: 184 bytes leftover after parsing attributes in process `syz.3.389'. [ 142.424534][ T5795] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.446119][ T5795] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.465589][ T5795] netlink: 6 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.496124][ T5795] tc_dump_action: action bad kind [ 142.697493][ T5805] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 142.902437][ T5812] tc_dump_action: action bad kind [ 143.674752][ T5841] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 144.144497][ T5860] netlink: 'syz.2.414': attribute type 39 has an invalid length. [ 144.536150][ T5873] netlink: 'syz.2.418': attribute type 3 has an invalid length. [ 144.710501][ T5876] tap0: tun_chr_ioctl cmd 35111 [ 145.021839][ T5884] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 145.072485][ T5884] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 145.191855][ T5887] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 145.286548][ T5883] netlink: 'syz.1.421': attribute type 41 has an invalid length. [ 146.142277][ T5924] __nla_validate_parse: 7 callbacks suppressed [ 146.142297][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.4.433'. [ 147.116531][ T5948] netlink: 'syz.1.439': attribute type 16 has an invalid length. [ 147.161733][ T5948] netlink: 160 bytes leftover after parsing attributes in process `syz.1.439'. [ 147.204084][ T5956] netlink: 'syz.3.438': attribute type 19 has an invalid length. [ 147.321219][ T5956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.438'. [ 147.626321][ T5961] pim6reg: tun_chr_ioctl cmd 1074025677 [ 147.659677][ T5961] pim6reg: linktype set to 778 [ 147.782716][ T5971] netlink: 'syz.1.443': attribute type 15 has an invalid length. [ 147.821513][ T5971] netlink: 'syz.1.443': attribute type 7 has an invalid length. [ 148.749984][ T5980] netlink: 'syz.1.446': attribute type 19 has an invalid length. [ 148.765611][ T5980] netlink: 144 bytes leftover after parsing attributes in process `syz.1.446'. [ 149.167501][ T5988] : port 1(gretap0) entered blocking state [ 149.173754][ T5988] : port 1(gretap0) entered disabled state [ 149.228568][ T5988] device gretap0 entered promiscuous mode [ 149.505940][ T5994] netlink: 'syz.1.452': attribute type 10 has an invalid length. [ 149.515795][ T5994] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.452'. [ 149.826071][ T6016] netlink: 'syz.2.455': attribute type 19 has an invalid length. [ 149.833966][ T6016] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.455'. [ 152.458894][ T6043] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.461'. [ 152.526711][ T6043] net_ratelimit: 161 callbacks suppressed [ 152.526731][ T6043] netlink: zone id is out of range [ 152.596083][ T6043] netlink: zone id is out of range [ 152.643649][ T6043] netlink: zone id is out of range [ 152.666768][ T6043] netlink: zone id is out of range [ 152.702748][ T6043] netlink: zone id is out of range [ 152.723169][ T6043] netlink: zone id is out of range [ 152.743915][ T6043] netlink: zone id is out of range [ 152.775144][ T6046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.461'. [ 152.793026][ T6043] netlink: zone id is out of range [ 152.802403][ T6044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.463'. [ 152.821557][ T6043] netlink: zone id is out of range [ 152.828517][ T6043] netlink: zone id is out of range [ 153.144890][ T6052] netlink: 'syz.2.465': attribute type 9 has an invalid length. [ 153.215527][ T6052] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.465'. [ 153.882326][ T6063] netlink: 'syz.2.469': attribute type 3 has an invalid length. [ 153.966037][ T6063] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 154.076485][ T6063] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.469'. [ 154.738521][ T6078] device syzkaller0 entered promiscuous mode [ 154.783547][ T4622] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 156.020328][ T6118] netlink: 'syz.2.482': attribute type 21 has an invalid length. [ 156.036272][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 156.288757][ T6124] netlink: 'syz.2.484': attribute type 27 has an invalid length. [ 156.348013][ T6124] netlink: 'syz.2.484': attribute type 3 has an invalid length. [ 156.451880][ T6126] netlink: 'syz.1.483': attribute type 3 has an invalid length. [ 156.496882][ T6126] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 156.576696][ T6126] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.483'. [ 157.016323][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.024227][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.095299][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.133675][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.194418][ T6156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.491'. [ 157.340897][ T6156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.491'. [ 157.406057][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.491'. [ 157.518048][ T6162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.491'. [ 158.345254][ T6192] Q6\bY4: renamed from lo [ 158.750487][ T6213] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 159.015137][ T6215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.508'. [ 159.097228][ T6226] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 159.105220][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.510'. [ 159.127803][ T6226] device dummy0 entered promiscuous mode [ 159.138612][ T6226] bridge0: port 5(dummy0) entered blocking state [ 159.148421][ T6226] bridge0: port 5(dummy0) entered disabled state [ 159.166589][ T6226] bridge0: port 5(dummy0) entered blocking state [ 159.174029][ T6226] bridge0: port 5(dummy0) entered forwarding state [ 159.351274][ T6230] netlink: 'syz.4.511': attribute type 21 has an invalid length. [ 159.366220][ T6230] netlink: 128 bytes leftover after parsing attributes in process `syz.4.511'. [ 159.389503][ T6230] netlink: 'syz.4.511': attribute type 3 has an invalid length. [ 159.403036][ T6230] netlink: 3 bytes leftover after parsing attributes in process `syz.4.511'. [ 159.932054][ T6244] netlink: 'syz.3.515': attribute type 19 has an invalid length. [ 160.008363][ T6244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.515'. [ 160.036750][ T6249] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.515'. [ 160.382186][ T6265] netlink: 10 bytes leftover after parsing attributes in process `syz.3.521'. [ 160.823896][ T6280] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 160.878913][ T6272] netlink: 'syz.4.524': attribute type 3 has an invalid length. [ 160.899179][ T6272] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.524'. [ 160.916134][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 160.938863][ T6280] device team0 entered promiscuous mode [ 160.944484][ T6280] device team_slave_0 entered promiscuous mode [ 160.972673][ T6280] device team_slave_1 entered promiscuous mode [ 160.982084][ T6280] device hsr_slave_0 entered promiscuous mode [ 161.000135][ T6280] bridge0: port 4(team0) entered blocking state [ 161.071346][ T6280] bridge0: port 4(team0) entered disabled state [ 161.122577][ T6280] bridge0: port 4(team0) entered blocking state [ 161.128979][ T6280] bridge0: port 4(team0) entered forwarding state [ 161.528998][ T6299] netlink: 'syz.0.531': attribute type 21 has an invalid length. [ 161.582839][ T6299] netlink: 'syz.0.531': attribute type 6 has an invalid length. [ 162.199678][ T6325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.759750][ T6343] __nla_validate_parse: 2 callbacks suppressed [ 162.759772][ T6343] netlink: 6 bytes leftover after parsing attributes in process `syz.3.541'. [ 162.924960][ T6343] net_ratelimit: 91 callbacks suppressed [ 162.924983][ T6343] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 163.199040][ T6347] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 163.239953][ T6347] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.543'. [ 163.419533][ T6356] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.546'. [ 163.430783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 163.507357][ T6358] device syzkaller0 entered promiscuous mode [ 163.757435][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.819987][ T6367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.550'. [ 163.982855][ T6372] validate_nla: 1 callbacks suppressed [ 163.982875][ T6372] netlink: 'syz.0.549': attribute type 29 has an invalid length. [ 164.127227][ T6372] netlink: 'syz.0.549': attribute type 29 has an invalid length. [ 164.531810][ T6377] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 164.616822][ T6385] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.554'. [ 164.660836][ T6385] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 164.681270][ T6385] openvswitch: netlink: Message has 1 unknown bytes. [ 168.457743][ T6418] netlink: 'syz.3.563': attribute type 21 has an invalid length. [ 168.506624][ T6418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.563'. [ 168.945486][ T6431] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.566'. [ 169.056351][ T6438] netlink: 'syz.2.568': attribute type 6 has an invalid length. [ 169.095097][ T6438] netlink: 168 bytes leftover after parsing attributes in process `syz.2.568'. [ 169.175042][ T6445] netlink: 26 bytes leftover after parsing attributes in process `syz.1.570'. [ 169.358442][ T6449] netlink: 'syz.0.571': attribute type 21 has an invalid length. [ 169.461919][ T6457] netlink: 'syz.3.573': attribute type 3 has an invalid length. [ 169.474056][ T6453] netlink: 64 bytes leftover after parsing attributes in process `syz.2.568'. [ 169.497616][ T6457] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.573'. [ 169.596240][ T6457] raw_sendmsg: syz.3.573 forgot to set AF_INET. Fix it! [ 170.114241][ T6471] netlink: 'syz.0.577': attribute type 21 has an invalid length. [ 170.122369][ T6471] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.577'. [ 170.231686][ T6474] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.578'. [ 170.323152][ T6481] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.581'. [ 170.596363][ T6487] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.583'. [ 171.056081][ T6511] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 171.082672][ T6511] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.099294][ T6511] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.113596][ T6511] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.126312][ T6511] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.162783][ T6511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.185407][ T6511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.200645][ T6511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.227301][ T6511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.271223][ T6511] team0: Port device geneve1 added [ 171.761024][ T6519] syz.4.590 (6519) used greatest stack depth: 14416 bytes left [ 174.724243][ T6541] netlink: 'syz.4.595': attribute type 4 has an invalid length. [ 174.780831][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.794328][ T6540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.068028][ T6553] __nla_validate_parse: 1 callbacks suppressed [ 175.068049][ T6553] netlink: 132 bytes leftover after parsing attributes in process `syz.4.598'. [ 175.144760][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.155909][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.173979][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.213334][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.007825][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 176.353174][ T6581] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.606'. [ 176.385972][ T6581] netlink: zone id is out of range [ 176.413459][ T6587] netlink: 'syz.2.606': attribute type 3 has an invalid length. [ 176.427615][ T6581] netlink: zone id is out of range [ 176.432978][ T6581] netlink: zone id is out of range [ 176.461170][ T6587] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.606'. [ 176.510421][ T6581] netlink: zone id is out of range [ 176.555650][ T6581] netlink: zone id is out of range [ 176.560809][ T6581] netlink: zone id is out of range [ 176.625609][ T6581] netlink: zone id is out of range [ 176.643950][ T6581] netlink: zone id is out of range [ 176.677908][ T6581] netlink: zone id is out of range [ 176.841434][ T6601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.610'. [ 177.029731][ T6612] netlink: 399 bytes leftover after parsing attributes in process `syz.2.613'. [ 178.360616][ T6663] netlink: 184 bytes leftover after parsing attributes in process `syz.2.625'. [ 178.642400][ T6671] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.627'. [ 178.708562][ T6671] netlink: 4093 bytes leftover after parsing attributes in process `syz.3.627'. [ 178.901332][ T6687] netlink: 'syz.1.630': attribute type 29 has an invalid length. [ 178.968952][ T6687] netlink: 'syz.1.630': attribute type 29 has an invalid length. [ 179.038695][ T6695] netlink: 'syz.3.633': attribute type 2 has an invalid length. [ 179.056094][ T6688] netlink: 'syz.1.630': attribute type 29 has an invalid length. [ 179.073248][ T6695] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 179.092526][ T6695] netlink: 9 bytes leftover after parsing attributes in process `syz.3.633'. [ 179.106934][ T6687] netlink: 'syz.1.630': attribute type 29 has an invalid length. [ 179.225779][ T6688] netlink: 'syz.1.630': attribute type 29 has an invalid length. [ 179.676549][ T6726] bridge0: port 3(bond0) entered disabled state [ 179.753103][ T6726] bridge0: port 3(bond0) entered disabled state [ 179.822745][ T6726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.860346][ T6726] device bond_slave_0 left promiscuous mode [ 179.954402][ T6726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.992617][ T6726] device bond_slave_1 left promiscuous mode [ 180.012875][ T6726] bond0 (unregistering): Released all slaves [ 180.265890][ T6753] netlink: 'syz.3.647': attribute type 21 has an invalid length. [ 180.353326][ T6753] __nla_validate_parse: 2 callbacks suppressed [ 180.353345][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.647'. [ 181.280610][ T6805] device wlan1 entered promiscuous mode [ 181.401748][ T6809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.664'. [ 181.664738][ T6824] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.667'. [ 181.992509][ T6832] device syzkaller0 entered promiscuous mode [ 182.013550][ T6836] sctp: [Deprecated]: syz.1.669 (pid 6836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.013550][ T6836] Use struct sctp_sack_info instead [ 182.393343][ T6855] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.677'. [ 182.480007][ T6863] netlink: 'syz.1.678': attribute type 9 has an invalid length. [ 182.518453][ T6863] netlink: 'syz.1.678': attribute type 23 has an invalid length. [ 182.553185][ T6863] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.678'. [ 182.620200][ T6867] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 182.661715][ T6867] device macvlan0 entered promiscuous mode [ 182.713094][ T6875] netlink: 'syz.4.682': attribute type 8 has an invalid length. [ 182.762458][ T6867] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 182.775326][ T6875] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.682'. [ 182.895832][ T6873] netlink: 'syz.2.683': attribute type 9 has an invalid length. [ 182.954232][ T6873] netlink: 165200 bytes leftover after parsing attributes in process `syz.2.683'. [ 182.975605][ T6887] netlink: 'syz.0.686': attribute type 21 has an invalid length. [ 183.003384][ T6887] netlink: 128 bytes leftover after parsing attributes in process `syz.0.686'. [ 183.031880][ T6887] netlink: 3 bytes leftover after parsing attributes in process `syz.0.686'. [ 183.056969][ T6888] netlink: 'syz.3.687': attribute type 2 has an invalid length. [ 183.088020][ T6884] device syzkaller0 left promiscuous mode [ 183.203345][ T6900] netlink: 'syz.0.690': attribute type 29 has an invalid length. [ 183.296718][ T6900] netlink: 'syz.0.690': attribute type 29 has an invalid length. [ 183.395763][ T6876] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.683'. [ 183.558147][ T6912] IPv6: Can't replace route, no match found [ 184.073387][ T6937] bridge0: port 3(bond0) entered blocking state [ 184.080467][ T6937] bridge0: port 3(bond0) entered disabled state [ 184.099209][ T6937] device bond0 entered promiscuous mode [ 184.114853][ T6937] device bond_slave_0 entered promiscuous mode [ 184.127348][ T6937] device bond_slave_1 entered promiscuous mode [ 184.144671][ T6937] bridge0: port 3(bond0) entered blocking state [ 184.151123][ T6937] bridge0: port 3(bond0) entered forwarding state [ 184.227482][ T6940] team0: Device nlmon0 is of different type [ 185.806773][ T6976] __nla_validate_parse: 4 callbacks suppressed [ 185.806792][ T6976] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.711'. [ 185.910923][ T6959] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.706'. [ 185.920463][ T4617] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 186.020178][ T6976] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 186.136786][ T6976] CPU: 1 PID: 6976 Comm: syz.1.711 Not tainted syzkaller #0 [ 186.144158][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.154259][ T6976] Call Trace: [ 186.157819][ T6976] [ 186.160774][ T6976] dump_stack_lvl+0x188/0x250 [ 186.167065][ T6976] ? show_regs_print_info+0x20/0x20 [ 186.174064][ T6976] ? load_image+0x410/0x410 [ 186.178687][ T6976] sysfs_warn_dup+0x8a/0xa0 [ 186.183216][ T6976] sysfs_do_create_link_sd+0xc0/0x110 [ 186.188664][ T6976] device_add+0x83b/0x1050 [ 186.193108][ T6976] wiphy_register+0x1e74/0x2c40 [ 186.198152][ T6976] ? cfg80211_event_work+0x40/0x40 [ 186.203292][ T6976] ? minstrel_ht_alloc+0x807/0x980 [ 186.208443][ T6976] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 186.214626][ T6976] ieee80211_register_hw+0x2a03/0x3a60 [ 186.220221][ T6976] ? ieee80211_register_hw+0xae1/0x3a60 [ 186.225799][ T6976] ? ieee80211_tasklet_handler+0x20/0x20 [ 186.231457][ T6976] ? rcu_is_watching+0x11/0xa0 [ 186.236395][ T6976] ? hrtimer_init+0x10c/0x220 [ 186.241101][ T6976] mac80211_hwsim_new_radio+0x209d/0x4050 [ 186.246884][ T6976] hwsim_new_radio_nl+0xa7d/0xc50 [ 186.252126][ T6976] genl_rcv_msg+0xd0b/0xfa0 [ 186.256745][ T6976] ? genl_bind+0x370/0x370 [ 186.261188][ T6976] ? __dev_queue_xmit+0x1b64/0x2e50 [ 186.266407][ T6976] ? verify_lock_unused+0x140/0x140 [ 186.271636][ T6976] ? perf_trace_lock+0xe4/0x390 [ 186.276505][ T6976] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 186.282981][ T6976] netlink_rcv_skb+0x1e9/0x430 [ 186.287773][ T6976] ? genl_bind+0x370/0x370 [ 186.292217][ T6976] ? netlink_ack+0xb10/0xb10 [ 186.296834][ T6976] ? down_read+0x1aa/0x2e0 [ 186.301269][ T6976] genl_rcv+0x24/0x40 [ 186.305255][ T6976] netlink_unicast+0x78f/0x940 [ 186.310051][ T6976] netlink_sendmsg+0x8ba/0xbe0 [ 186.314849][ T6976] ? netlink_getsockopt+0x570/0x570 [ 186.320070][ T6976] ? aa_sock_msg_perm+0x94/0x150 [ 186.325034][ T6976] ? apparmor_socket_sendmsg+0x88/0x230 [ 186.330612][ T6976] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 186.335923][ T6976] ? security_socket_sendmsg+0x7c/0xa0 [ 186.341433][ T6976] ? netlink_getsockopt+0x570/0x570 [ 186.346844][ T6976] ____sys_sendmsg+0x5be/0x8f0 [ 186.351648][ T6976] ? __sys_sendmsg_sock+0x30/0x30 [ 186.356981][ T6976] ? import_iovec+0x6f/0xa0 [ 186.361774][ T6976] ___sys_sendmsg+0x236/0x2e0 [ 186.366476][ T6976] ? __sys_sendmsg+0x290/0x290 [ 186.371330][ T6976] __se_sys_sendmsg+0x1b7/0x2a0 [ 186.376214][ T6976] ? __x64_sys_sendmsg+0x80/0x80 [ 186.381192][ T6976] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.387212][ T6976] ? lockdep_hardirqs_on+0x94/0x140 [ 186.392618][ T6976] do_syscall_64+0x4c/0xa0 [ 186.397053][ T6976] ? clear_bhb_loop+0x30/0x80 [ 186.401747][ T6976] ? clear_bhb_loop+0x30/0x80 [ 186.406440][ T6976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.412346][ T6976] RIP: 0033:0x7f49666cf0d9 [ 186.416787][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.436430][ T6976] RSP: 002b:00007f4964927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.444878][ T6976] RAX: ffffffffffffffda RBX: 00007f4966956fa0 RCX: 00007f49666cf0d9 [ 186.452884][ T6976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 186.460879][ T6976] RBP: 00007f4966766024 R08: 0000000000000000 R09: 0000000000000000 [ 186.468892][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.476915][ T6976] R13: 00007f4966957038 R14: 00007f4966956fa0 R15: 00007ffdd9a1afc8 [ 186.484944][ T6976] [ 187.137637][ T7010] netlink: 611 bytes leftover after parsing attributes in process `syz.3.721'. [ 187.631013][ T7039] IPv6: Can't replace route, no match found [ 187.935831][ T7053] validate_nla: 4 callbacks suppressed [ 187.935851][ T7053] netlink: 'syz.2.733': attribute type 2 has an invalid length. [ 188.167192][ T7053] netlink: 'syz.2.733': attribute type 2 has an invalid length. [ 188.190774][ T7058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.734'. [ 188.324228][ T7062] netlink: 132 bytes leftover after parsing attributes in process `syz.4.736'. [ 188.533539][ T7074] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.739'. [ 188.572586][ T7076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.740'. [ 188.695394][ T7074] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 188.788583][ T7074] CPU: 1 PID: 7074 Comm: syz.2.739 Not tainted syzkaller #0 [ 188.796101][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.806441][ T7074] Call Trace: [ 188.809731][ T7074] [ 188.812962][ T7074] dump_stack_lvl+0x188/0x250 [ 188.817661][ T7074] ? show_regs_print_info+0x20/0x20 [ 188.822880][ T7074] ? load_image+0x410/0x410 [ 188.827727][ T7074] sysfs_warn_dup+0x8a/0xa0 [ 188.832276][ T7074] sysfs_do_create_link_sd+0xc0/0x110 [ 188.837676][ T7074] device_add+0x83b/0x1050 [ 188.842206][ T7074] wiphy_register+0x1e74/0x2c40 [ 188.847091][ T7074] ? cfg80211_event_work+0x40/0x40 [ 188.852254][ T7074] ? minstrel_ht_alloc+0x807/0x980 [ 188.857396][ T7074] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 188.863486][ T7074] ieee80211_register_hw+0x2a03/0x3a60 [ 188.868974][ T7074] ? ieee80211_register_hw+0xae1/0x3a60 [ 188.874572][ T7074] ? ieee80211_tasklet_handler+0x20/0x20 [ 188.880245][ T7074] ? rcu_is_watching+0x11/0xa0 [ 188.885035][ T7074] ? hrtimer_init+0x10c/0x220 [ 188.889736][ T7074] mac80211_hwsim_new_radio+0x209d/0x4050 [ 188.895508][ T7074] hwsim_new_radio_nl+0xa7d/0xc50 [ 188.900574][ T7074] genl_rcv_msg+0xd0b/0xfa0 [ 188.905121][ T7074] ? genl_bind+0x370/0x370 [ 188.909565][ T7074] ? __dev_queue_xmit+0x1b64/0x2e50 [ 188.914794][ T7074] ? verify_lock_unused+0x140/0x140 [ 188.920051][ T7074] ? dev_queue_xmit+0x20/0x20 [ 188.924755][ T7074] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 188.931124][ T7074] netlink_rcv_skb+0x1e9/0x430 [ 188.935937][ T7074] ? genl_bind+0x370/0x370 [ 188.940375][ T7074] ? netlink_ack+0xb10/0xb10 [ 188.945166][ T7074] ? down_read+0x1aa/0x2e0 [ 188.949863][ T7074] genl_rcv+0x24/0x40 [ 188.954376][ T7074] netlink_unicast+0x78f/0x940 [ 188.963471][ T7074] netlink_sendmsg+0x8ba/0xbe0 [ 188.968380][ T7074] ? netlink_getsockopt+0x570/0x570 [ 188.973708][ T7074] ? aa_sock_msg_perm+0x94/0x150 [ 188.978673][ T7074] ? apparmor_socket_sendmsg+0x88/0x230 [ 188.984433][ T7074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 188.989761][ T7074] ? security_socket_sendmsg+0x7c/0xa0 [ 188.995344][ T7074] ? netlink_getsockopt+0x570/0x570 [ 189.000573][ T7074] ____sys_sendmsg+0x5be/0x8f0 [ 189.005387][ T7074] ? __sys_sendmsg_sock+0x30/0x30 [ 189.010444][ T7074] ? import_iovec+0x6f/0xa0 [ 189.015022][ T7074] ___sys_sendmsg+0x236/0x2e0 [ 189.019730][ T7074] ? __sys_sendmsg+0x290/0x290 [ 189.024561][ T7074] __se_sys_sendmsg+0x1b7/0x2a0 [ 189.029428][ T7074] ? __x64_sys_sendmsg+0x80/0x80 [ 189.034382][ T7074] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 189.040401][ T7074] ? lockdep_hardirqs_on+0x94/0x140 [ 189.045714][ T7074] do_syscall_64+0x4c/0xa0 [ 189.050146][ T7074] ? clear_bhb_loop+0x30/0x80 [ 189.054872][ T7074] ? clear_bhb_loop+0x30/0x80 [ 189.059667][ T7074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.065593][ T7074] RIP: 0033:0x7f99a99ed0d9 [ 189.070025][ T7074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.089837][ T7074] RSP: 002b:00007f99a7c24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.098836][ T7074] RAX: ffffffffffffffda RBX: 00007f99a9c75090 RCX: 00007f99a99ed0d9 [ 189.106839][ T7074] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 189.114922][ T7074] RBP: 00007f99a9a84024 R08: 0000000000000000 R09: 0000000000000000 [ 189.123009][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.131744][ T7074] R13: 00007f99a9c75128 R14: 00007f99a9c75090 R15: 00007fff716dfc08 [ 189.139875][ T7074] [ 189.211035][ T7089] device wlan1 left promiscuous mode [ 189.586213][ T7097] device syzkaller0 entered promiscuous mode [ 189.816221][ T7113] netlink: 'syz.3.752': attribute type 3 has an invalid length. [ 189.855954][ T7113] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 189.912196][ T7113] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.752'. [ 190.009790][ T7118] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 190.076032][ T7118] netlink: 'syz.4.753': attribute type 8 has an invalid length. [ 190.083795][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.753'. [ 190.233707][ T7119] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 190.274368][ T7119] netlink: 'syz.4.753': attribute type 8 has an invalid length. [ 190.302902][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.4.753'. [ 190.443325][ T7123] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 190.528000][ T7131] netlink: 'syz.1.757': attribute type 10 has an invalid length. [ 192.593334][ T7177] __nla_validate_parse: 3 callbacks suppressed [ 192.593352][ T7177] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.765'. [ 193.723734][ T7252] netlink: 830 bytes leftover after parsing attributes in process `syz.3.790'. [ 193.936097][ T7263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.793'. [ 193.994373][ T7262] netlink: 68 bytes leftover after parsing attributes in process `syz.3.793'. [ 194.127928][ T7268] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.795'. [ 194.202696][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211337][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.405845][ T7272] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.798'. [ 194.581864][ T7284] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.800'. [ 194.596776][ T7286] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.800'. [ 194.795180][ T7294] validate_nla: 1 callbacks suppressed [ 194.795199][ T7294] netlink: 'syz.1.803': attribute type 3 has an invalid length. [ 194.883407][ T7298] netlink: 'syz.3.805': attribute type 13 has an invalid length. [ 194.890145][ T7294] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 194.919601][ T7294] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.803'. [ 194.946085][ T7298] netlink: 148 bytes leftover after parsing attributes in process `syz.3.805'. [ 195.127948][ T7322] netlink: 'syz.4.811': attribute type 3 has an invalid length. [ 195.146697][ T7322] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 195.979423][ T7368] device syzkaller0 entered promiscuous mode [ 196.005584][ T7386] pimreg1: tun_chr_ioctl cmd 1074025677 [ 196.021846][ T7386] pimreg1: linktype set to 768 [ 196.277601][ T4884] Bluetooth: hci1: command 0x0406 tx timeout [ 196.283667][ T4884] Bluetooth: hci0: command 0x0406 tx timeout [ 196.335585][ T4884] Bluetooth: hci4: command 0x0406 tx timeout [ 196.341696][ T4884] Bluetooth: hci2: command 0x0406 tx timeout [ 196.351157][ T7412] device syzkaller0 entered promiscuous mode [ 196.379464][ T4884] Bluetooth: hci3: command 0x0406 tx timeout [ 196.469050][ T7416] netlink: 'syz.1.837': attribute type 29 has an invalid length. [ 196.486350][ T7416] netlink: 'syz.1.837': attribute type 29 has an invalid length. [ 196.686236][ T7430] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 196.749116][ T7430] net_ratelimit: 240 callbacks suppressed [ 196.749132][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.877324][ T7442] netlink: 'syz.4.844': attribute type 29 has an invalid length. [ 197.343574][ T7459] netlink: 'syz.3.848': attribute type 29 has an invalid length. [ 197.404313][ T7459] netlink: 'syz.3.848': attribute type 29 has an invalid length. [ 197.668782][ T7472] __nla_validate_parse: 9 callbacks suppressed [ 197.668816][ T7472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.851'. [ 197.804518][ T7489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.856'. [ 197.833656][ T7489] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.856'. [ 198.185062][ T7514] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.861'. [ 198.315632][ T7524] netlink: 152 bytes leftover after parsing attributes in process `syz.2.863'. [ 198.455298][ T7530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.864'. [ 199.015086][ T7578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.875'. [ 199.056478][ T7574] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.875'. [ 199.123362][ T4615] tipc: Subscription rejected, illegal request [ 199.490358][ T7595] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.881'. [ 199.595404][ T7601] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.881'. [ 199.688291][ T7601] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 200.579740][ T7627] validate_nla: 8 callbacks suppressed [ 200.581190][ T7627] netlink: 'syz.0.889': attribute type 39 has an invalid length. [ 202.070612][ T7673] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 202.097215][ T7673] device team0 entered promiscuous mode [ 202.113503][ T7673] device team_slave_0 entered promiscuous mode [ 202.131031][ T7673] device team_slave_1 entered promiscuous mode [ 202.151403][ T7673] bridge0: port 4(team0) entered blocking state [ 202.174085][ T7673] bridge0: port 4(team0) entered disabled state [ 202.210260][ T7673] bridge0: port 4(team0) entered blocking state [ 202.216922][ T7673] bridge0: port 4(team0) entered forwarding state [ 202.464588][ T7685] netlink: 'syz.4.903': attribute type 6 has an invalid length. [ 202.723560][ T7693] netlink: 'syz.0.907': attribute type 8 has an invalid length. [ 202.767700][ T7693] __nla_validate_parse: 6 callbacks suppressed [ 202.767717][ T7693] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.907'. [ 202.917366][ T7701] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.911'. [ 202.948630][ T7701] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 202.972604][ T7699] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 202.986709][ T7701] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.007447][ T7699] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.910'. [ 203.199099][ T7709] tap0: tun_chr_ioctl cmd 1074025675 [ 203.212931][ T7709] tap0: persist enabled [ 203.255831][ T7709] tap0: tun_chr_ioctl cmd 1074025675 [ 203.261165][ T7709] tap0: persist enabled [ 203.359779][ T7715] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 203.408899][ T7715] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.913'. [ 203.456116][ T7715] openvswitch: netlink: Message has 4 unknown bytes. [ 203.631397][ T7725] netlink: 'syz.0.916': attribute type 2 has an invalid length. [ 203.655435][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.676312][ T7725] netlink: 119 bytes leftover after parsing attributes in process `syz.0.916'. [ 203.788889][ T7729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 203.903529][ T7729] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 204.043370][ T7734] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.919'. [ 204.402352][ T7750] netlink: 'syz.1.923': attribute type 9 has an invalid length. [ 204.475553][ T7750] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.923'. [ 204.713315][ T7766] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.926'. [ 205.288802][ T7798] netlink: 'syz.3.933': attribute type 3 has an invalid length. [ 205.741584][ T7817] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 205.798657][ T7817] netlink: 'syz.0.939': attribute type 29 has an invalid length. [ 206.431478][ T7836] netlink: 'syz.0.944': attribute type 22 has an invalid length. [ 206.692670][ T7856] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 206.880939][ T7854] device syzkaller0 entered promiscuous mode [ 206.896429][ T7864] netlink: 'syz.0.952': attribute type 21 has an invalid length. [ 206.922439][ T7864] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.981660][ T7864] IPv6: Can't replace route, no match found [ 207.538480][ T7903] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 207.801521][ T7907] device syzkaller0 entered promiscuous mode [ 207.829510][ T7919] tap0: tun_chr_ioctl cmd 2147767520 [ 207.835051][ T7915] __nla_validate_parse: 5 callbacks suppressed [ 207.835086][ T7915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.966'. [ 208.384026][ T7939] netlink: 'syz.0.974': attribute type 11 has an invalid length. [ 208.422790][ T7939] netlink: 168 bytes leftover after parsing attributes in process `syz.0.974'. [ 208.532915][ T7942] netlink: 'syz.2.973': attribute type 9 has an invalid length. [ 208.562993][ T7942] netlink: 80128 bytes leftover after parsing attributes in process `syz.2.973'. [ 208.895091][ T7950] netlink: 'syz.0.977': attribute type 3 has an invalid length. [ 208.912425][ T7950] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.977'. [ 208.934432][ T7950] netlink: 'syz.0.977': attribute type 21 has an invalid length. [ 208.952829][ T7950] netlink: 156 bytes leftover after parsing attributes in process `syz.0.977'. [ 209.601006][ T7986] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 209.625641][ T7986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.986'. [ 209.676013][ T7986] device dummy0 entered promiscuous mode [ 209.721664][ T7986] bridge0: port 5(dummy0) entered blocking state [ 209.763112][ T7986] bridge0: port 5(dummy0) entered disabled state [ 209.822615][ T7986] bridge0: port 5(dummy0) entered blocking state [ 209.829099][ T7986] bridge0: port 5(dummy0) entered forwarding state [ 210.740602][ T8034] TCP: TCP_TX_DELAY enabled [ 210.844943][ T8042] validate_nla: 1 callbacks suppressed [ 210.844960][ T8042] netlink: 'syz.2.999': attribute type 21 has an invalid length. [ 210.860357][ T8040] netlink: 'syz.0.997': attribute type 2 has an invalid length. [ 210.889334][ T8040] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 210.907836][ T8042] netlink: 152 bytes leftover after parsing attributes in process `syz.2.999'. [ 210.921845][ T8040] netlink: 'syz.0.997': attribute type 6 has an invalid length. [ 210.949311][ T8040] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.997'. [ 211.364831][ T8067] device syzkaller0 entered promiscuous mode [ 211.394843][ T8072] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 211.524390][ T8072] team0: Device nlmon0 is of different type [ 211.912827][ T8092] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1011'. [ 212.070922][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.109773][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.180726][ T8102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.197595][ T8102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.384464][ T8116] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 212.598233][ T8125] netlink: 'syz.4.1020': attribute type 3 has an invalid length. [ 212.633448][ T8125] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 212.708434][ T8130] : port 1(erspan0) entered blocking state [ 212.733639][ T8130] : port 1(erspan0) entered disabled state [ 212.769495][ T8130] device erspan0 entered promiscuous mode [ 212.821264][ T8137] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1024'. [ 213.148989][ T8160] netlink: 'syz.2.1030': attribute type 10 has an invalid length. [ 213.307567][ T8160] team0: Device wg1 is of different type [ 213.386072][ T8165] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.1032'. [ 213.439429][ T8167] device syzkaller0 left promiscuous mode [ 213.531721][ T8175] netlink: 'syz.4.1033': attribute type 17 has an invalid length. [ 213.554677][ T8179] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1036'. [ 213.603468][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 213.671444][ T8179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.762269][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1034'. [ 213.928795][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.977480][ T8193] device bridge_slave_1 left promiscuous mode [ 213.984127][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.033969][ T8193] device bridge_slave_1 entered promiscuous mode [ 214.069552][ T8193] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 214.137851][ C1] Illegal XDP return value 16128, expect packet loss! [ 214.210369][ T8211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1047'. [ 215.742293][ T8289] netlink: 8221 bytes leftover after parsing attributes in process `syz.2.1064'. [ 216.044963][ T8305] validate_nla: 2 callbacks suppressed [ 216.044995][ T8305] netlink: 'syz.3.1070': attribute type 3 has an invalid length. [ 216.075660][ T8305] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1070'. [ 216.104368][ T8303] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1069'. [ 216.141173][ T8307] netlink: 'syz.3.1070': attribute type 13 has an invalid length. [ 216.167606][ T8307] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1070'. [ 216.382600][ T8318] syz.4.1075[8318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.383270][ T8318] syz.4.1075[8318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.505797][ T8322] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1076'. [ 216.536161][ T8324] syz.4.1075[8324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.536262][ T8324] syz.4.1075[8324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.798524][ T8351] netlink: 'syz.2.1082': attribute type 2 has an invalid length. [ 217.917413][ T8351] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.1082'. [ 217.948003][ T8354] netlink: 'syz.0.1083': attribute type 9 has an invalid length. [ 218.153005][ T8358] netlink: 'syz.0.1083': attribute type 9 has an invalid length. [ 218.588948][ T8374] netlink: 'syz.4.1088': attribute type 10 has an invalid length. [ 219.241689][ T8374] bridge0: port 3(bond0) entered disabled state [ 219.270188][ T8374] device bond0 left promiscuous mode [ 219.279857][ T8374] device bond_slave_0 left promiscuous mode [ 219.291704][ T8374] device bond_slave_1 left promiscuous mode [ 219.308747][ T8374] bridge0: port 3(bond0) entered disabled state [ 219.384884][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.395930][ T8374] device bond0 entered promiscuous mode [ 219.401620][ T8374] device bond_slave_0 entered promiscuous mode [ 219.409642][ T8374] device bond_slave_1 entered promiscuous mode [ 219.418038][ T8374] team0: Port device bond0 added [ 219.428052][ T8379] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 219.898754][ T8407] bond0: (slave macvlan0): Releasing backup interface [ 219.945394][ T8417] netlink: 'syz.1.1100': attribute type 39 has an invalid length. [ 219.981796][ T8419] __nla_validate_parse: 3 callbacks suppressed [ 219.981811][ T8419] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1101'. [ 220.233755][ T8434] netlink: 'syz.0.1106': attribute type 8 has an invalid length. [ 220.294042][ T8434] netlink: 'syz.0.1106': attribute type 6 has an invalid length. [ 220.342616][ T8434] netlink: 198884 bytes leftover after parsing attributes in process `syz.0.1106'. [ 220.635135][ T8469] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1114'. [ 220.669148][ T8469] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1114'. [ 220.709115][ T8462] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1114'. [ 221.177649][ T8483] pim6reg: tun_chr_ioctl cmd 1074025677 [ 221.183459][ T8483] pim6reg: linktype set to 778 [ 221.184133][ T8498] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.1122'. [ 221.537093][ T8508] validate_nla: 3 callbacks suppressed [ 221.537139][ T8508] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 221.590019][ T8527] netlink: 'syz.4.1130': attribute type 10 has an invalid length. [ 221.961386][ T8527] device geneve1 entered promiscuous mode [ 222.013377][ T8527] team0: Port device geneve1 added [ 222.082651][ T8540] sctp: [Deprecated]: syz.1.1133 (pid 8540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.082651][ T8540] Use struct sctp_sack_info instead [ 222.261421][ T8537] device syzkaller0 entered promiscuous mode [ 222.700062][ T8572] IPv6: Can't replace route, no match found [ 223.359228][ T8610] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1153'. [ 223.423295][ T8614] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1155'. [ 223.467637][ T8614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1155'. [ 223.505425][ T8614] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 223.572646][ T8635] netlink: 'syz.1.1161': attribute type 13 has an invalid length. [ 223.595516][ T8635] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1161'. [ 223.759674][ T8647] device veth1_macvtap left promiscuous mode [ 223.828140][ T8647] device veth1_macvtap entered promiscuous mode [ 223.840727][ T8642] sock: sock_set_timeout: `syz.0.1162' (pid 8642) tries to set negative timeout [ 223.865183][ T8647] device macsec0 entered promiscuous mode [ 224.011280][ T8652] netlink: 'syz.2.1167': attribute type 41 has an invalid length. [ 224.035176][ T8652] netlink: 'syz.2.1167': attribute type 4 has an invalid length. [ 224.095760][ T8652] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 224.519065][ T8682] netlink: 'syz.2.1176': attribute type 13 has an invalid length. [ 224.594180][ T8682] erspan0: refused to change device tx_queue_len [ 224.799139][ T8699] pim6reg: tun_chr_ioctl cmd 1074025677 [ 224.804955][ T8699] pim6reg: linktype set to 823 [ 224.831933][ T8703] netlink: 'syz.3.1182': attribute type 9 has an invalid length. [ 224.904698][ T8701] netlink: 'syz.2.1183': attribute type 9 has an invalid length. [ 224.925204][ T8707] netlink: 'syz.3.1182': attribute type 9 has an invalid length. [ 225.303103][ T8734] __nla_validate_parse: 6 callbacks suppressed [ 225.303135][ T8734] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1189'. [ 225.528524][ T8746] netlink: 'syz.2.1196': attribute type 29 has an invalid length. [ 225.590129][ T8739] ref_ctr_offset mismatch. inode: 0x554 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 225.611576][ T8746] device macvlan0 entered promiscuous mode [ 225.694265][ T8746] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 225.825401][ T8751] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1197'. [ 225.825828][ T8750] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1198'. [ 225.879988][ T8750] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1198'. [ 226.526791][ T8779] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1205'. [ 226.674357][ T8789] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1207'. [ 226.846413][ T8803] validate_nla: 7 callbacks suppressed [ 226.846445][ T8803] netlink: 'syz.1.1211': attribute type 27 has an invalid length. [ 226.928559][ T8803] netlink: 'syz.1.1211': attribute type 25 has an invalid length. [ 226.945307][ T8802] netlink: 'syz.1.1211': attribute type 27 has an invalid length. [ 226.959464][ T8802] netlink: 'syz.1.1211': attribute type 25 has an invalid length. [ 226.982550][ T8813] syzkaller0: refused to change device tx_queue_len [ 227.097930][ T8819] netlink: 207220 bytes leftover after parsing attributes in process `syz.0.1216'. [ 227.150455][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.585600][ T8839] netlink: 'syz.1.1221': attribute type 3 has an invalid length. [ 227.656103][ T8839] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 227.695862][ T8839] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1221'. [ 228.020352][ T8868] netlink: 'syz.4.1228': attribute type 10 has an invalid length. [ 228.106580][ T8868] device wlan1 entered promiscuous mode [ 228.122648][ T8868] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.148008][ T8871] netlink: 'syz.0.1229': attribute type 11 has an invalid length. [ 228.361194][ T8875] netlink: 'syz.4.1230': attribute type 9 has an invalid length. [ 228.378606][ T8875] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1230'. [ 228.929934][ T8886] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.1234'. [ 229.156056][ T8901] netlink: 'syz.4.1238': attribute type 10 has an invalid length. [ 229.601364][ T8916] ref_ctr_offset mismatch. inode: 0x56b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 232.259408][ T8936] netlink: 'syz.4.1248': attribute type 17 has an invalid length. [ 232.325814][ T8936] netlink: 'syz.4.1248': attribute type 16 has an invalid length. [ 232.387478][ T8936] __nla_validate_parse: 3 callbacks suppressed [ 232.387494][ T8936] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1248'. [ 232.648731][ T8944] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 232.664416][ T8944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1250'. [ 233.775773][ T8979] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 234.018617][ T8984] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 234.034918][ T8989] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1251'. [ 234.460904][ T8995] device sit0 entered promiscuous mode [ 236.860312][ T9035] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.1271'. [ 237.017099][ T9046] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1274'. [ 237.197632][ T9053] netlink: 'syz.4.1275': attribute type 11 has an invalid length. [ 237.251910][ T9053] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 237.294018][ T9053] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 237.331784][ T9053] netlink: 'syz.4.1275': attribute type 2 has an invalid length. [ 237.351746][ T9053] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.1275'. [ 239.836597][ T9034] bridge0: port 4(team0) entered disabled state [ 239.843496][ T9034] bridge0: port 3(batadv0) entered disabled state [ 239.850233][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.857486][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.881272][ T9034] device bridge0 left promiscuous mode [ 239.928844][ T9064] netlink: 'syz.4.1278': attribute type 1 has an invalid length. [ 239.937004][ T9038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1273'. [ 239.937136][ T9064] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1278'. [ 239.961531][ T9047] bridge0: port 4(team0) entered blocking state [ 239.967911][ T9047] bridge0: port 4(team0) entered forwarding state [ 239.974553][ T9047] bridge0: port 3(batadv0) entered blocking state [ 239.981083][ T9047] bridge0: port 3(batadv0) entered forwarding state [ 239.987904][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.995023][ T9047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.002588][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.009785][ T9047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.046841][ T9068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 240.066919][ T9047] device bridge0 entered promiscuous mode [ 240.084417][ T9049] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.268844][ T9085] netlink: 'syz.0.1284': attribute type 25 has an invalid length. [ 240.289987][ T9085] netlink: 'syz.0.1284': attribute type 9 has an invalid length. [ 240.308994][ T9085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1284'. [ 240.562321][ T9107] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 240.682849][ T9110] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1293'. [ 240.803221][ T9122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1296'. [ 240.911729][ T9122] netlink: 'syz.4.1296': attribute type 21 has an invalid length. [ 240.929988][ T9138] device sit0 left promiscuous mode [ 241.089860][ T9147] netlink: 'syz.1.1302': attribute type 3 has an invalid length. [ 241.112439][ T9145] device sit0 entered promiscuous mode [ 241.266189][ T9158] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1305'. [ 241.565366][ T9175] netlink: 'syz.2.1310': attribute type 9 has an invalid length. [ 241.593765][ T9175] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1310'. [ 241.714140][ T9180] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1312'. [ 241.731234][ T9180] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 242.177819][ T9195] netlink: 'syz.3.1316': attribute type 10 has an invalid length. [ 242.204268][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1316'. [ 242.240328][ T9195] device team0 entered promiscuous mode [ 242.267398][ T9195] device team_slave_0 entered promiscuous mode [ 242.310496][ T9195] device team_slave_1 entered promiscuous mode [ 242.338408][ T9195] device geneve1 entered promiscuous mode [ 242.354687][ T9195] bridge0: port 3(team0) entered blocking state [ 242.373044][ T9195] bridge0: port 3(team0) entered disabled state [ 242.418284][ T9195] bridge0: port 3(team0) entered blocking state [ 242.424945][ T9195] bridge0: port 3(team0) entered forwarding state [ 242.462571][ T9211] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1318'. [ 242.699263][ T9229] sctp: [Deprecated]: syz.2.1324 (pid 9229) Use of int in max_burst socket option deprecated. [ 242.699263][ T9229] Use struct sctp_assoc_value instead [ 242.810493][ T9233] netlink: 'syz.1.1326': attribute type 21 has an invalid length. [ 244.451205][ T9313] netlink: 'syz.4.1348': attribute type 3 has an invalid length. [ 244.505144][ T9304] delete_channel: no stack [ 244.551057][ T9313] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.590281][ T9317] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 244.697603][ T9323] netlink: 'syz.2.1351': attribute type 2 has an invalid length. [ 244.707887][ T9314] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.739206][ T9323] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 245.017537][ T9331] netlink: 'syz.1.1353': attribute type 12 has an invalid length. [ 245.025410][ T9331] __nla_validate_parse: 2 callbacks suppressed [ 245.025428][ T9331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1353'. [ 245.237516][ T9339] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1356'. [ 245.899396][ T9358] netlink: 'syz.3.1360': attribute type 9 has an invalid length. [ 245.978888][ T9358] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1360'. [ 246.181276][ T9357] netlink: 'syz.3.1360': attribute type 9 has an invalid length. [ 246.228862][ T9357] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1360'. [ 247.169880][ T9407] netlink: 'syz.0.1373': attribute type 2 has an invalid length. [ 247.199344][ T9407] netlink: 'syz.0.1373': attribute type 8 has an invalid length. [ 247.225455][ T9407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1373'. [ 247.255173][ T9404] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1370'. [ 247.270305][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1373'. [ 247.398384][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.433420][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1377'. [ 247.473836][ T9423] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1378'. [ 247.648511][ T9440] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1383'. [ 249.590340][ T9502] validate_nla: 7 callbacks suppressed [ 249.590373][ T9502] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 249.638524][ T9502] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 249.975099][ T9531] netlink: 'syz.0.1412': attribute type 27 has an invalid length. [ 249.989331][ T9531] netlink: 'syz.0.1412': attribute type 25 has an invalid length. [ 250.024591][ T9531] netlink: 'syz.0.1412': attribute type 1 has an invalid length. [ 250.054779][ T9531] __nla_validate_parse: 12 callbacks suppressed [ 250.054796][ T9531] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1412'. [ 250.085512][ T9534] delete_channel: no stack [ 250.536809][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1417'. [ 250.720218][ T9560] netlink: 'syz.1.1420': attribute type 4 has an invalid length. [ 250.728722][ T9560] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1420'. [ 251.228330][ T9606] netlink: 'syz.1.1434': attribute type 21 has an invalid length. [ 251.529288][ T9624] device sit0 entered promiscuous mode [ 251.710259][ T9626] netlink: 'syz.3.1440': attribute type 3 has an invalid length. [ 251.723851][ T9626] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1440'. [ 251.822648][ T9626] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 251.941408][ T9626] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 252.222798][ T9657] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 252.260476][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1447'. [ 252.291498][ T9657] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.350656][ T9657] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 252.380185][ T9657] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 252.413363][ T9657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.542179][ T9661] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 252.558260][ T9661] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1446'. [ 252.723898][ T9671] tap0: tun_chr_ioctl cmd 1074025680 [ 252.838794][ T9671] tap0: tun_chr_ioctl cmd 1074812117 [ 252.853133][ T9673] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1452'. [ 253.223849][ T9685] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1455'. [ 253.343352][ T9689] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1457'. [ 253.385130][ T9691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1458'. [ 253.408894][ T9691] device caif0 entered promiscuous mode [ 253.414590][ T9691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.461015][ T9709] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 254.506915][ T9709] CPU: 0 PID: 9709 Comm: syz.2.1463 Not tainted syzkaller #0 [ 254.514329][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.524396][ T9709] Call Trace: [ 254.527709][ T9709] [ 254.530646][ T9709] dump_stack_lvl+0x188/0x250 [ 254.535340][ T9709] ? show_regs_print_info+0x20/0x20 [ 254.540572][ T9709] ? load_image+0x410/0x410 [ 254.545079][ T9709] sysfs_warn_dup+0x8a/0xa0 [ 254.549575][ T9709] sysfs_do_create_link_sd+0xc0/0x110 [ 254.554938][ T9709] device_add+0x83b/0x1050 [ 254.559349][ T9709] wiphy_register+0x1e74/0x2c40 [ 254.564207][ T9709] ? cfg80211_event_work+0x40/0x40 [ 254.569308][ T9709] ? minstrel_ht_alloc+0x807/0x980 [ 254.574417][ T9709] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 254.580480][ T9709] ieee80211_register_hw+0x2a03/0x3a60 [ 254.585936][ T9709] ? ieee80211_register_hw+0xae1/0x3a60 [ 254.591478][ T9709] ? ieee80211_tasklet_handler+0x20/0x20 [ 254.597109][ T9709] ? rcu_is_watching+0x11/0xa0 [ 254.601867][ T9709] ? hrtimer_init+0x10c/0x220 [ 254.606543][ T9709] mac80211_hwsim_new_radio+0x209d/0x4050 [ 254.612271][ T9709] hwsim_new_radio_nl+0xa7d/0xc50 [ 254.617302][ T9709] genl_rcv_msg+0xd0b/0xfa0 [ 254.621898][ T9709] ? genl_bind+0x370/0x370 [ 254.626307][ T9709] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 254.632539][ T9709] ? rcu_nmi_exit+0x6f/0xf0 [ 254.637033][ T9709] ? verify_lock_unused+0x140/0x140 [ 254.642226][ T9709] ? verify_lock_unused+0x140/0x140 [ 254.647431][ T9709] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.653403][ T9709] ? lock_chain_count+0x20/0x20 [ 254.658249][ T9709] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 254.664580][ T9709] netlink_rcv_skb+0x1e9/0x430 [ 254.669336][ T9709] ? genl_bind+0x370/0x370 [ 254.673755][ T9709] ? netlink_ack+0xb10/0xb10 [ 254.678359][ T9709] ? down_read+0x1aa/0x2e0 [ 254.682798][ T9709] genl_rcv+0x24/0x40 [ 254.686783][ T9709] netlink_unicast+0x78f/0x940 [ 254.691576][ T9709] netlink_sendmsg+0x8ba/0xbe0 [ 254.696344][ T9709] ? netlink_getsockopt+0x570/0x570 [ 254.701537][ T9709] ? aa_sock_msg_perm+0x94/0x150 [ 254.706469][ T9709] ? apparmor_socket_sendmsg+0x88/0x230 [ 254.712010][ T9709] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 254.717292][ T9709] ? security_socket_sendmsg+0x7c/0xa0 [ 254.722744][ T9709] ? netlink_getsockopt+0x570/0x570 [ 254.727934][ T9709] ____sys_sendmsg+0x5be/0x8f0 [ 254.732798][ T9709] ? __sys_sendmsg_sock+0x30/0x30 [ 254.737952][ T9709] ? import_iovec+0x6f/0xa0 [ 254.742459][ T9709] ___sys_sendmsg+0x236/0x2e0 [ 254.747142][ T9709] ? __sys_sendmsg+0x290/0x290 [ 254.751939][ T9709] __se_sys_sendmsg+0x1b7/0x2a0 [ 254.756823][ T9709] ? __x64_sys_sendmsg+0x80/0x80 [ 254.761765][ T9709] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.767751][ T9709] ? lockdep_hardirqs_on+0x94/0x140 [ 254.772948][ T9709] do_syscall_64+0x4c/0xa0 [ 254.777357][ T9709] ? clear_bhb_loop+0x30/0x80 [ 254.782024][ T9709] ? clear_bhb_loop+0x30/0x80 [ 254.786688][ T9709] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.792576][ T9709] RIP: 0033:0x7f99a99ed0d9 [ 254.796982][ T9709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.816722][ T9709] RSP: 002b:00007f99a7c24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.825147][ T9709] RAX: ffffffffffffffda RBX: 00007f99a9c75090 RCX: 00007f99a99ed0d9 [ 254.833117][ T9709] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 254.841079][ T9709] RBP: 00007f99a9a84024 R08: 0000000000000000 R09: 0000000000000000 [ 254.849062][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.857114][ T9709] R13: 00007f99a9c75128 R14: 00007f99a9c75090 R15: 00007fff716dfc08 [ 254.865105][ T9709] [ 255.064411][ T9733] validate_nla: 9 callbacks suppressed [ 255.064454][ T9733] netlink: 'syz.1.1464': attribute type 10 has an invalid length. [ 255.066014][ T9735] __nla_validate_parse: 3 callbacks suppressed [ 255.066026][ T9735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1472'. [ 255.099668][ T9735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1472'. [ 255.128091][ T9739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1472'. [ 255.315001][ T9745] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1474'. [ 255.637327][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643715][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.798576][ T9770] netlink: 'syz.1.1480': attribute type 2 has an invalid length. [ 255.822569][ T9770] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1480'. [ 255.868652][ T9770] bridge0: port 5(dummy0) entered disabled state [ 255.903041][ T9770] bridge0: port 5(dummy0) entered disabled state [ 255.968971][ T9777] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1480'. [ 256.038309][ T9777] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.1480'. [ 256.358307][ T9791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1486'. [ 257.283556][ T9814] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1491'. [ 257.451029][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.463574][ T9819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.526324][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.535058][ T9819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.672755][ T9821] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1495'. [ 258.179722][ T9851] netlink: 'syz.1.1504': attribute type 11 has an invalid length. [ 258.624456][ T9884] netlink: 'syz.1.1513': attribute type 16 has an invalid length. [ 258.982022][ T9896] Q6\bY4: renamed from lo [ 259.166137][ T9905] device hsr_slave_0 left promiscuous mode [ 259.225816][ T9905] device hsr_slave_1 left promiscuous mode [ 259.308548][ T9905] bridge0: port 4(hsr0) entered disabled state [ 259.419967][ T9905] bridge0: port 4(hsr0) entered disabled state [ 259.626068][ T9902] tipc: Started in network mode [ 259.631606][ T9902] tipc: Node identity e, cluster identity 4711 [ 259.639497][ T9902] tipc: Node number set to 14 [ 259.645824][ T9910] netlink: 'syz.4.1523': attribute type 28 has an invalid length. [ 259.706040][ T9912] tap0: tun_chr_ioctl cmd 1074025677 [ 259.724077][ T9912] tap0: linktype set to 776 [ 259.977756][ T9924] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 260.214851][ T9933] netlink: 'syz.4.1531': attribute type 3 has an invalid length. [ 260.221769][ T9935] netlink: 'syz.4.1531': attribute type 3 has an invalid length. [ 260.252095][ T9935] __nla_validate_parse: 8 callbacks suppressed [ 260.252110][ T9935] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1531'. [ 260.277858][ T9933] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1531'. [ 260.440675][ T9941] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 260.469077][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.481595][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.500136][ T9941] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 260.793934][ T9944] Q6\bY4: renamed from lo [ 261.280134][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 261.717206][ T9985] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1543'. [ 261.732186][ T9990] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1544'. [ 261.814586][ T9990] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.1544'. [ 261.855820][ T9990] tipc: Started in network mode [ 261.882783][ T9990] tipc: Node identity e, cluster identity 4711 [ 261.914151][ T9990] tipc: Node number set to 14 [ 262.166678][ T9995] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1555'. [ 262.714658][T10008] device syzkaller0 entered promiscuous mode [ 262.799682][ T4874] syzkaller0: tun_net_xmit 48 [ 263.559786][T10021] netlink: 'syz.3.1551': attribute type 41 has an invalid length. [ 263.604552][T10021] netlink: 'syz.3.1551': attribute type 41 has an invalid length. [ 263.654117][T10024] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.1553'. [ 263.818485][T10024] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 264.031319][T10027] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1554'. [ 264.205947][T10032] netlink: 375 bytes leftover after parsing attributes in process `syz.1.1557'. [ 264.884480][T10022] ip6_tunnel: non-ECT from fe08:fff5:0000:0200:875a:6596:9ff5:7b00 with DS=0x31 [ 264.957321][T10044] netlink: 'syz.3.1559': attribute type 10 has an invalid length. [ 264.999428][T10044] netlink: 'syz.3.1559': attribute type 21 has an invalid length. [ 265.406678][T10051] netlink: 'syz.3.1562': attribute type 10 has an invalid length. [ 265.461002][T10051] __nla_validate_parse: 2 callbacks suppressed [ 265.461021][T10051] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1562'. [ 265.558810][T10051] device bond0 entered promiscuous mode [ 265.618109][T10051] device bond_slave_0 entered promiscuous mode [ 265.677150][T10051] device bond_slave_1 entered promiscuous mode [ 265.718982][T10051] device netdevsim0 entered promiscuous mode [ 265.759141][T10051] bridge0: port 2(bond0) entered blocking state [ 265.804903][T10051] bridge0: port 2(bond0) entered disabled state [ 265.859315][T10051] bridge0: port 2(bond0) entered blocking state [ 265.865719][T10051] bridge0: port 2(bond0) entered forwarding state [ 269.588966][T10091] netlink: 'syz.4.1573': attribute type 3 has an invalid length. [ 269.636875][T10091] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1573'. [ 270.477790][T10149] netlink: 64771 bytes leftover after parsing attributes in process `syz.1.1577'. [ 270.499539][T10150] Q6\bY4: renamed from lo [ 270.524622][T10152] netlink: 'syz.4.1579': attribute type 29 has an invalid length. [ 270.548193][T10153] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1578'. [ 270.581022][T10152] netlink: 'syz.4.1579': attribute type 29 has an invalid length. [ 270.642946][T10161] netlink: 'syz.4.1579': attribute type 29 has an invalid length. [ 270.693557][T10152] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1579'. [ 270.780521][T10154] netlink: 'syz.4.1579': attribute type 29 has an invalid length. [ 270.941164][T10166] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1582'. [ 271.100169][T10175] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 271.135598][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1584'. [ 271.443193][T10175] netlink: 'syz.4.1584': attribute type 10 has an invalid length. [ 271.454685][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1584'. [ 271.481765][T10177] netlink: 'syz.4.1584': attribute type 2 has an invalid length. [ 272.045719][T10189] netlink: 'syz.4.1588': attribute type 6 has an invalid length. [ 272.075860][T10189] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1588'. [ 272.158410][T10199] netlink: 'syz.0.1591': attribute type 4 has an invalid length. [ 272.254088][T10189] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1588'. [ 272.779936][T10216] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1595'. [ 272.832109][T10216] bridge0: port 3(bond0) entered disabled state [ 272.883918][T10216] bridge0: port 3(bond0) entered disabled state [ 272.959246][T10216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.057646][T10216] device bond_slave_0 left promiscuous mode [ 273.157773][T10216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.224685][T10216] device bond_slave_1 left promiscuous mode [ 273.351581][T10216] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 273.389407][T10216] device bridge_slave_1 left promiscuous mode [ 273.507965][T10216] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 273.627439][T10216] bond0 (unregistering): Released all slaves [ 273.730664][T10241] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1602'. [ 274.542506][T10267] netlink: 'syz.3.1609': attribute type 6 has an invalid length. [ 275.055350][T10276] delete_channel: no stack [ 275.290105][T10288] syzkaller0: tun_chr_ioctl cmd 9217 [ 276.123247][T10310] __nla_validate_parse: 6 callbacks suppressed [ 276.123281][T10310] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1621'. [ 276.289986][T10307] netlink: 189104 bytes leftover after parsing attributes in process `syz.3.1622'. [ 276.319031][T10302] validate_nla: 2 callbacks suppressed [ 276.319065][T10302] netlink: 'syz.0.1631': attribute type 6 has an invalid length. [ 276.417459][T10302] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1631'. [ 276.952482][T10302] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1631'. [ 277.147909][T10332] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1629'. [ 277.266194][T10328] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1628'. [ 277.800976][T10352] netlink: 'syz.3.1635': attribute type 10 has an invalid length. [ 277.967823][T10352] bond0: (slave netdevsim0): Releasing backup interface [ 278.076636][T10352] device netdevsim0 left promiscuous mode [ 278.135241][T10358] netlink: 'syz.0.1636': attribute type 10 has an invalid length. [ 278.252530][T10358] bridge0: port 4(team0) entered disabled state [ 278.304640][T10358] bridge0: port 4(team0) entered disabled state [ 278.348522][T10358] device team_slave_0 left promiscuous mode [ 278.453984][T10358] team0 (unregistering): Port device team_slave_0 removed [ 278.514890][T10358] device team_slave_1 left promiscuous mode [ 278.556458][T10358] team0 (unregistering): Port device team_slave_1 removed [ 278.564147][T10358] device hsr_slave_0 left promiscuous mode [ 278.689668][T10358] team0 (unregistering): Port device hsr_slave_0 removed [ 279.219237][T10373] netlink: 189104 bytes leftover after parsing attributes in process `syz.0.1639'. [ 279.825585][T10380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1643'. [ 279.887388][T10380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1643'. [ 279.959314][T10381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1643'. [ 284.610584][T10389] netlink: 'syz.1.1644': attribute type 6 has an invalid length. [ 284.637187][T10389] __nla_validate_parse: 1 callbacks suppressed [ 284.637224][T10389] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1644'. [ 285.043097][T10405] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1644'. [ 288.706076][T10430] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1664'. [ 290.105729][T10447] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 292.085699][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.176141][T10447] device bridge_slave_1 left promiscuous mode [ 292.182507][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.214741][T10447] device bridge_slave_1 entered promiscuous mode [ 292.248378][T10447] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 292.267294][T10452] netlink: 'syz.2.1661': attribute type 2 has an invalid length. [ 292.289206][T10452] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 292.314703][T10452] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1661'. [ 292.346011][T10455] netlink: 'syz.3.1665': attribute type 11 has an invalid length. [ 292.386395][T10455] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1665'. [ 292.900752][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 293.297299][T10499] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 293.419911][T10499] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 293.919650][T10529] netlink: 'syz.4.1686': attribute type 2 has an invalid length. [ 294.428654][T10573] device veth1_macvtap left promiscuous mode [ 294.481564][T10581] device veth1_macvtap entered promiscuous mode [ 294.493031][T10581] device macsec0 entered promiscuous mode [ 294.510453][T10579] netlink: 'syz.4.1702': attribute type 10 has an invalid length. [ 294.547283][T10579] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1702'. [ 295.334473][T10579] team0: Port device bond0 removed [ 295.355130][T10579] bridge0: port 2(bond0) entered blocking state [ 295.361950][T10579] bridge0: port 2(bond0) entered disabled state [ 295.369864][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.380858][T10583] netlink: 'syz.2.1701': attribute type 10 has an invalid length. [ 295.459865][T10600] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1707'. [ 295.686664][T10605] ------------[ cut here ]------------ [ 295.692193][T10605] WARNING: CPU: 0 PID: 10605 at kernel/events/core.c:6688 perf_pending_task+0x353/0x480 [ 295.702109][T10605] Modules linked in: [ 295.706051][T10605] CPU: 0 PID: 10605 Comm: syz.2.1708 Not tainted syzkaller #0 [ 295.713531][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.723746][T10605] RIP: 0010:perf_pending_task+0x353/0x480 [ 295.729642][T10605] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 8c c8 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 295.749352][T10605] RSP: 0018:ffffc900034cf9c0 EFLAGS: 00010293 [ 295.755450][T10605] RAX: ffffffff819ab4a3 RBX: ffff888075ad0a48 RCX: ffff88807b549dc0 [ 295.763598][T10605] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 295.771662][T10605] RBP: ffff888075ad0818 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 295.779709][T10605] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffff88807b549dc0 [ 295.787754][T10605] R13: ffff88805fa9f158 R14: 0000000000000000 R15: 1ffff1100eb5a103 [ 295.795799][T10605] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 295.804769][T10605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.811422][T10605] CR2: 00007f3913de9000 CR3: 00000000772d1000 CR4: 00000000003506f0 [ 295.819462][T10605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.827498][T10605] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 295.835537][T10605] Call Trace: [ 295.838829][T10605] [ 295.841774][T10605] task_work_run+0x125/0x1a0 [ 295.846457][T10605] do_exit+0x635/0x2110 [ 295.850630][T10605] ? preempt_schedule+0xbc/0xd0 [ 295.855557][T10605] ? put_task_struct+0x80/0x80 [ 295.860382][T10605] ? preempt_schedule_common+0xa5/0xd0 [ 295.865908][T10605] ? preempt_schedule+0xbc/0xd0 [ 295.870789][T10605] do_group_exit+0x12c/0x2f0 [ 295.875399][T10605] get_signal+0x7eb/0x12e0 [ 295.879935][T10605] arch_do_signal_or_restart+0xe6/0x12a0 [ 295.885649][T10605] ? futex_exit_release+0x1c0/0x1c0 [ 295.890993][T10605] ? get_sigframe_size+0x10/0x10 [ 295.896023][T10605] ? __context_tracking_exit+0x4c/0x80 [ 295.901515][T10605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 295.907593][T10605] ? exit_to_user_mode_loop+0x3b/0x130 [ 295.913105][T10605] exit_to_user_mode_loop+0x9e/0x130 [ 295.918484][T10605] exit_to_user_mode_prepare+0xee/0x180 [ 295.924058][T10605] syscall_exit_to_user_mode+0x16/0x40 [ 295.929611][T10605] do_syscall_64+0x58/0xa0 [ 295.934052][T10605] ? clear_bhb_loop+0x30/0x80 [ 295.938825][T10605] ? clear_bhb_loop+0x30/0x80 [ 295.943526][T10605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.949521][T10605] RIP: 0033:0x7f99a99ed0d9 [ 295.954071][T10605] Code: Unable to access opcode bytes at RIP 0x7f99a99ed0af. [ 295.961529][T10605] RSP: 002b:00007f99a7c240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.970008][T10605] RAX: fffffffffffffe00 RBX: 00007f99a9c75098 RCX: 00007f99a99ed0d9 [ 295.978065][T10605] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99a9c75098 [ 295.986102][T10605] RBP: 00007f99a9c75090 R08: 0000000000000000 R09: 0000000000000000 [ 295.994274][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.002347][T10605] R13: 00007f99a9c75128 R14: 00007fff716dfb20 R15: 00007fff716dfc08 [ 296.010422][T10605] [ 296.013606][T10605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 296.020896][T10605] CPU: 0 PID: 10605 Comm: syz.2.1708 Not tainted syzkaller #0 [ 296.028375][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.038423][T10605] Call Trace: [ 296.041696][T10605] [ 296.044730][T10605] dump_stack_lvl+0x188/0x250 [ 296.049410][T10605] ? show_regs_print_info+0x20/0x20 [ 296.054710][T10605] ? load_image+0x410/0x410 [ 296.059216][T10605] panic+0x2f8/0x850 [ 296.063108][T10605] ? bpf_jit_dump+0xd0/0xd0 [ 296.067632][T10605] ? perf_pending_task+0x353/0x480 [ 296.072738][T10605] __warn+0x248/0x2b0 [ 296.076711][T10605] ? perf_pending_task+0x353/0x480 [ 296.081871][T10605] report_bug+0x1b9/0x2e0 [ 296.086196][T10605] handle_bug+0x3a/0x70 [ 296.090342][T10605] exc_invalid_op+0x16/0x40 [ 296.094833][T10605] asm_exc_invalid_op+0x16/0x20 [ 296.099775][T10605] RIP: 0010:perf_pending_task+0x353/0x480 [ 296.105577][T10605] Code: e8 92 4a de ff 84 db 75 10 e8 29 48 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 19 48 de ff e8 8c c8 65 ff eb e9 e8 0d 48 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 296.125176][T10605] RSP: 0018:ffffc900034cf9c0 EFLAGS: 00010293 [ 296.131259][T10605] RAX: ffffffff819ab4a3 RBX: ffff888075ad0a48 RCX: ffff88807b549dc0 [ 296.139243][T10605] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 296.147206][T10605] RBP: ffff888075ad0818 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 296.155175][T10605] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffff88807b549dc0 [ 296.163157][T10605] R13: ffff88805fa9f158 R14: 0000000000000000 R15: 1ffff1100eb5a103 [ 296.171224][T10605] ? perf_pending_task+0x353/0x480 [ 296.176349][T10605] task_work_run+0x125/0x1a0 [ 296.180941][T10605] do_exit+0x635/0x2110 [ 296.185091][T10605] ? preempt_schedule+0xbc/0xd0 [ 296.190334][T10605] ? put_task_struct+0x80/0x80 [ 296.195095][T10605] ? preempt_schedule_common+0xa5/0xd0 [ 296.200897][T10605] ? preempt_schedule+0xbc/0xd0 [ 296.206273][T10605] do_group_exit+0x12c/0x2f0 [ 296.210884][T10605] get_signal+0x7eb/0x12e0 [ 296.215317][T10605] arch_do_signal_or_restart+0xe6/0x12a0 [ 296.220967][T10605] ? futex_exit_release+0x1c0/0x1c0 [ 296.226165][T10605] ? get_sigframe_size+0x10/0x10 [ 296.231099][T10605] ? __context_tracking_exit+0x4c/0x80 [ 296.236587][T10605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.242658][T10605] ? exit_to_user_mode_loop+0x3b/0x130 [ 296.248415][T10605] exit_to_user_mode_loop+0x9e/0x130 [ 296.253713][T10605] exit_to_user_mode_prepare+0xee/0x180 [ 296.259439][T10605] syscall_exit_to_user_mode+0x16/0x40 [ 296.265014][T10605] do_syscall_64+0x58/0xa0 [ 296.269466][T10605] ? clear_bhb_loop+0x30/0x80 [ 296.274158][T10605] ? clear_bhb_loop+0x30/0x80 [ 296.278844][T10605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.284748][T10605] RIP: 0033:0x7f99a99ed0d9 [ 296.289160][T10605] Code: Unable to access opcode bytes at RIP 0x7f99a99ed0af. [ 296.296521][T10605] RSP: 002b:00007f99a7c240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.304938][T10605] RAX: fffffffffffffe00 RBX: 00007f99a9c75098 RCX: 00007f99a99ed0d9 [ 296.313090][T10605] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99a9c75098 [ 296.321092][T10605] RBP: 00007f99a9c75090 R08: 0000000000000000 R09: 0000000000000000 [ 296.329071][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.337042][T10605] R13: 00007f99a9c75128 R14: 00007fff716dfb20 R15: 00007fff716dfc08 [ 296.345056][T10605] [ 296.348343][T10605] Kernel Offset: disabled [ 296.352669][T10605] Rebooting in 86400 seconds..