last executing test programs: 23.308090821s ago: executing program 2 (id=2948): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r6, 0x0, 0x4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x23, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x45}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x1, 0xb, 0x9, 0xb, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x76}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x0, 0x400, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[r4], &(0x7f0000000380)=[{0x0, 0x1, 0xf, 0x8}, {0x5, 0x3, 0x3, 0x5}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000080)='./file0\x00', r9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 22.944120653s ago: executing program 2 (id=2949): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000800), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xc, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000001c0)=0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x97}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x2}, 0x94) 21.220267903s ago: executing program 2 (id=2956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040000) r3 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937a6", 0x13}], 0x2, 0x0, 0x0, 0x900}, 0x0) 20.882851873s ago: executing program 2 (id=2958): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYRES16=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840), 0x4}, 0x1c208, 0xac5d, 0x80, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x2160180, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x220, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x5, &(0x7f0000000940)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xffffffff, 0x71, 0x10, 0xb3}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x4}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000003eb74be0e7f4baea959e81104000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r9}, 0x94) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x61]}}, &(0x7f00000006c0)=""/192, 0x1c, 0xc0, 0x1, 0x103, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x21, 0x10, 0x6, 0x5, 0x4c05d, r3, 0x80, '\x00', r9, r10, 0x2, 0x2, 0x7295, 0x0, @value=r11}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000966f94f77000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)={0x1, 0x0, [0x0]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r1}, 0x18) 19.704354131s ago: executing program 2 (id=2963): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 19.447043237s ago: executing program 2 (id=2966): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4a400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x3, 0x40, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000300feff020037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xc, 0x42, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x109180, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r3, 0xb) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYBLOB="24a3934885bc", @ANYBLOB="1c000000000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0400000009000000020000000100000020900000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000100"/20, @ANYRES32, @ANYBLOB="f765149dab790a50f9423200420830b5a9f4c9254863e73d88e71e041c89994583656b4aa4abbd3a3574a708be3b5237edf54f24975ee41d6e6571e6e21e827f5ff327ec596c474bb3af"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) openat$cgroup_int(r8, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 4.359697526s ago: executing program 4 (id=3036): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/79, 0x4f}, {0x0}, {&(0x7f0000000580)=""/169, 0xa9}, {0x0}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/189, 0xbd}], 0x8}, 0x2040) r0 = socket$kcm(0x22, 0x2, 0x21) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000380)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x1, 0x89}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x80, 0x1, 0x1, 0x0, 0x100005d31, 0x84030, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x5200, 0x0, 0x0, 0x3, 0x9, 0x0, 0x3, 0x0, 0x800, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000c2b8280900017eb200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000680)="45f98d", 0xb, r4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x16, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc4e6, 0x0, 0x0, 0x0, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x0, 0x8, 0x9, 0x4882aab297d56019, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x5, 0xfffffffa, 0x80}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x4, 0x5, 0x7, 0x1}, {0x5, 0x1, 0xc, 0x8}, {0x4, 0x4, 0x9, 0xb}], 0x10, 0x7}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0xfc, 0x0, 0xfffffffffffffffe, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0, 0x6}, 0x106c13, 0x4, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffff9, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.538223284s ago: executing program 3 (id=3037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0xf, 0x1, 0x8e79, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.366462724s ago: executing program 4 (id=3040): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x400) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/288, 0x120}], 0x1, 0x0, 0xfffffffffffffd52}, 0x40011013) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x50) 2.940300909s ago: executing program 3 (id=3042): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) close(0x3) 2.75221259s ago: executing program 1 (id=3043): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="8701000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d3ab2b71d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 2.74388854s ago: executing program 4 (id=3044): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) close(r4) 2.619139567s ago: executing program 0 (id=3045): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x81}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000f6ffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000", @ANYRES8], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x300, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0) 2.492486475s ago: executing program 1 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(r0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x80, 0xf7, 0x0, 0x5, 0x0, 0x8, 0xc000, 0xbaefc2a9497596cf, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x6}, 0x1000, 0x4356, 0x4, 0x1, 0xc, 0x8, 0x5, 0x0, 0x8, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 2.491949305s ago: executing program 3 (id=3047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x1}, 0x14105, 0x36, 0xfffffbff, 0x5, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 2.39945203s ago: executing program 4 (id=3048): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)='\x00', 0x1}], 0x1}, 0x41) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="03a19fdd75862fa826f663335d", 0xd}], 0x1}, 0x4804) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x2, 0x0, 0x5, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0xd}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000b1b8000000e9000000060000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x8, &(0x7f0000000040)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0xe, 0x3ff, 0x80000001, 0x9, 0x320, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1a, 0xa, &(0x7f00000010c0)=@raw=[@alu={0x4, 0x1, 0x1, 0x1, 0x4, 0x4, 0x10}, @jmp={0x5, 0x1, 0xc, 0x4, 0x7, 0xffffffffffffffe3, 0x1}, @generic={0x42, 0xb, 0x8, 0x4, 0x1}, @jmp={0x5, 0x0, 0x3, 0x7, 0x5, 0x6}, @map_fd={0x18, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @alu={0x4, 0x1, 0x8, 0x7, 0x0, 0x30, 0x8}], &(0x7f0000000f00)='syzkaller\x00', 0x4, 0x24, &(0x7f0000001140)=""/36, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001240)={0x1, 0x10, 0xa, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000002800)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4], &(0x7f0000002840)=[{0x3, 0x3, 0xa, 0x3}, {0x5, 0x3, 0xc, 0xc}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x5, 0x3}], 0x10, 0xc8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x53, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8b2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=0xffffffffffffffff, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000220c8fe2a68960a13de85c7ccac6041da8b4966c625521316554279471695384eadb18ba3df3f72e280ca8e4d937535af39211c5740d8de5cb5e6e51a42f423277bab47596e94245127ea0cf5866427d20955113b7b567fa48d37d259776ed3c5aa54ccfbc1cbfd50819605db9be74d7964747aeea540a31e6d6d4f29e69b3", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000300"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r5, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000b40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0xb, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x25}, @generic={0x2, 0x7, 0x7, 0x7a69, 0x1ff}, @map_val={0x18, 0x5, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, @alu={0x4, 0x0, 0xc, 0xb, 0xb, 0x30, 0x8}]}, &(0x7f0000000a00)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x4, 0xf, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000e00)=[{0x5, 0x1, 0x10}, {0x1, 0x5, 0x6, 0x7}, {0x0, 0x3, 0x3, 0x7}, {0x1, 0x3, 0x10, 0xb}], 0x10, 0x3}, 0x94) close(r8) r11 = socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x10140) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r11, @ANYRES32=r5, @ANYRES16=r9, @ANYRES64=r7], 0x20) r12 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r12, 0x84, 0x19, &(0x7f0000000000)=r14, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="2600000010000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e3527055d55b", @ANYRES64=r7], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0xb, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2f400}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xef}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000fc0)='GPL\x00', 0xff, 0xe0, &(0x7f00000012c0)=""/224, 0x40f00, 0x6384bb0c222efe82, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x1, 0x8, 0x3a8, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000014c0)=[0xffffffffffffffff, r14, r3], &(0x7f0000001500)=[{0x1, 0x5, 0xd, 0x7}, {0x4, 0x2, 0x1, 0x6}, {0x4, 0x2, 0xe}, {0x3, 0x3, 0xf, 0x2}, {0x1, 0x4, 0x9}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r15, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="cda00d356b351604387f8156a0ae2a94e67245d7532d19cb4d9306233226bd5d2bf1f213dd81330f3a9efa01f8e53e28cfc40a", 0x33}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r16, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}], 0x58}, 0x4000000) 2.288185087s ago: executing program 0 (id=3049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x2160) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', r3, 0x4000, r0}, 0x18) 2.268891888s ago: executing program 1 (id=3050): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000000c0), 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x33c, '\x00', 0x0, 0xffffffffffffffff, 0xfffffff5, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6aa}, [@call={0x85, 0x0, 0x0, 0x14}, @call={0x85, 0x0, 0x0, 0x57}, @jmp={0x5, 0x0, 0x0, 0x6, 0x8, 0xfffffffffffffff4, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x1, 0x0, 0x8, 0x3, 0xc, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}]}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x6, 0x9, 0x4, 0x800}, 0x10, 0x1638d, r0, 0x7, &(0x7f0000000980)=[r2, r5, r1, r2, r1, r1], &(0x7f0000000b00)=[{0x4, 0x3, 0x2}, {0x3, 0x3, 0xa, 0xa}, {0x1, 0x2, 0xc, 0x3}, {0x3, 0x4, 0xc}, {0x4, 0x1, 0xb, 0x7}, {0x1, 0x7fff, 0x5, 0x1}, {0x0, 0x4, 0x1}], 0x10, 0xad}, 0x94) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r4) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r6 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x80044944, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5d8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x2, 0xb, 0x4, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0xc, 0xb, 0x18406e88a3ee9a99, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x66a543a30c39cdf, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0xe, 0x1}], 0x10, 0xeaf1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0x0, 0x5a, 0xc3, &(0x7f00000003c0)="399f5567cfd55bb5f97f87216f27e1d4a2db0be28a051d67050cdab6dd2fc30190e4f6c6ddd4298095a9d5752ab4bce54ed4aa5e9d4ce70d8259ddef1ece8cfe4f3a9cd4b0db3585200ade0400f958a91190d95960ec160abe31", &(0x7f0000000440)=""/195, 0x75, 0x0, 0x6f, 0xb4, &(0x7f0000000540)="bf41b7fa268ee6c41f01db82e8fafbf7d8ca70b04ed855d8afd4b1ee898369beae93fb408e9dcfcb8a63226b41ef4c2fc0d3f45fc9dfa2a88cd31fc486608fbe2de8bf1a974e13dfbc57376be28c0363c9fcb3a6e48d25b8329e8a34045ad5983a6ca01e16e2874a524375255e399b", &(0x7f00000005c0)="d1dd5b912bf81d00fc601d87fd0b830e3a3505cff7a0d70b357b04d43fd7628dbcfa9277308044e2dd37d01e393182689ad3438a33fc187d028482c0f5861bf9da9681b11f0f008a0267ee9dd36b84706410e2cab7fa904e77486e1b7c0f434a222226f4b364ff386cd9e885ac284362b1a4068868e7eb930921634913b1ac2aa4de6b22e32d29f106c4a748031f04ee25f99f2fb7ffcbbbfcb8fe53eb5872b5097f74b14b3088ef44785ce750e99e0b901f8182", 0x2, 0x0, 0x9}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.030448832s ago: executing program 0 (id=3051): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x3, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./cgroup/../file0/file0/file0\x00', 0x0, 0x14}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @generic={0xfa, 0x4, 0x0, 0x98, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x1, '\x00', r2, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xd, 0x10000, 0x8}, 0x10, r3, r4, 0x5, &(0x7f0000000300)=[r5], &(0x7f0000000340)=[{0x0, 0x2, 0x10, 0x9}, {0x2, 0x4, 0x4, 0x3}, {0x4, 0x3, 0x9, 0xa}, {0x0, 0x3, 0x9, 0x2}, {0x2, 0x1, 0x10, 0xc}], 0x10, 0x1}, 0x94) r6 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r0, 0x12) 1.539729741s ago: executing program 0 (id=3052): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080200000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000039000000000000c8a22de41a523dc0bf07439a39420d97e49bfa8d8ba92af3ef0f1722752f96559b78311701d86717dc8161cba43b1b9aefa00e237f96133c336ed0cdd44e79a2a94206f14c860c4e38c283811842", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x12) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000009"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r10, r11}, 0xc) (async) openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) openat$cgroup_int(r6, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a00)={r5, &(0x7f0000000900)="b160171a92c963bb499fe41cae8601d603419dce959d4aa4b36613393f8f9d6d5a7a9196025744b1afea3f9518ab500c0a886eb9b63fb5850142befacdc7af12a4d8b1a52d99efb46dea6343c5aae9080c6d85f6eefea51f112540c12e3b7c2f553d496e6778a63e1c44ddb3fd440f60ce92674f3af365ec5ebc90c615bcbf4e03c3ba93580564c3f4893aea618ace4afafa2348dc09b50bbf05eb651cfd29ec1fb222242190525f77fe2ac1241b927600d427357958b8cf3133e603ba33af94c97aec556ea48dd6ae10c074a1b236bc5ead6dbe93bd38c7c711702a97c40f0129e642a9647fe1a6241d1dab401d59ab71c5c275067c780814"}, 0x20) (async) recvmsg(r3, &(0x7f00000008c0)={&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000740)=""/222, 0xde}, {&(0x7f0000000840)=""/77, 0x4d}], 0x3}, 0x40002140) write$cgroup_subtree(r8, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000a80)={0x4, 0x35, 0x4, 0xf, 0x1, 0x5, 0x0, 0x3fb, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x28cd, 0x8a}, 0x2000, 0xffffffffffffffec, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x7, 0x0, 0x5}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61, 0x0, 0x0, 0x20}, {0x6}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 1.422187238s ago: executing program 1 (id=3053): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x854}, 0x182, 0x3, 0x0, 0x8, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x200000000100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x8b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4108, 0x7, 0x0, 0x9, 0xf8, 0x0, 0x1003}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000fc0f000005"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x9000, 0x0, 0xfffffffe, 0x1, 0xa, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916340000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) (async) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x5) 1.319415814s ago: executing program 4 (id=3054): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@ifindex, 0x22, 0x0, 0x936c, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001280)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)={@cgroup=r2, r0, 0x2c, 0x1020, 0x0, @void, @void, @void, @value=r3, r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/2245], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000900000000000000fdffffff180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000f00fffffff50000", 0x5dc}], 0x1}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x2, 0x18}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000540)={'batadv_slave_0\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0xc9, &(0x7f0000000140)=""/201, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x2, 0xdb8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r8], &(0x7f00000003c0)=[{0x3, 0x3, 0x9, 0xa}, {0x2, 0x5, 0x9, 0x4}, {0x2, 0x5, 0x2, 0x5}, {0x3, 0x4, 0x10, 0x1}, {0x1, 0x1, 0x3, 0x7}, {0x5, 0x5, 0x0, 0x9}], 0x10, 0x800000}, 0x94) 1.224339649s ago: executing program 3 (id=3055): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000008001000000023164200000000000000000000d4f0f36f"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0x5e, 0x0, &(0x7f00000003c0)="b9ff43076003008cb89e08f086dd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.189260171s ago: executing program 1 (id=3056): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000a00)=""/152, 0x0, 0x98, 0x0, 0xfffffff9}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) socket$kcm(0x18, 0x7, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0xcab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x41, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)}], 0x1}, 0x20000054) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) recvmsg$kcm(r1, &(0x7f0000000b80)={&(0x7f0000000500)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/177, 0xb1}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000940)=""/93, 0x5d}], 0x9, &(0x7f00000006c0)}, 0x40010020) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xd}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000700)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000180000000000000000900000018120000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000181b0000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0xc, 0x80000001, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) (async) socket$kcm(0x2, 0x922000000001, 0x106) 1.119459545s ago: executing program 0 (id=3057): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) close(r4) 555.728218ms ago: executing program 3 (id=3058): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x34) close(0x3) 225.133287ms ago: executing program 1 (id=3059): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000001000000000000007000000000000000000000000005f3e00"], 0x0, 0x30}, 0x20) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x0, 0x2a, 0x1e, &(0x7f00000002c0)="2dbcff4e9f960f1961f74c66578fe90346eb4006b908474ee7b284ba3e8ef0360c312d5cb5eb25b7547f", &(0x7f0000000300)=""/30, 0xfffffff7, 0x0, 0x1000, 0x93, &(0x7f0000000340)="5c3fcffbc1e3615e16890a9ccf9f102d9deb9af7e88e3bd7c9deebceec8e4d2728e22497ecfada94a0ec028cafbccb54bc2888a12ef3d9859a4f5764cae13b1864ff5b0d604cd913614a2a34d9aeb104dee183fe08181eb9704781d64334b9b2eef5506826b411d9c47b8683192bc5135ec83d0ad0b1e77e617fd97aeeb2e48135da12d0b49b83e89855f903cb639dd859bc9b52629369744dd41c2459b4c32097880304ea87cf810b323e7550170c988d7da2b7dd669a693b45f5de49d4e4e2fafd0e89e39b9d076d68c184d991abcdd43aaaf1a1c952b2c9c0bd3e1a743a98a982362fae6756ace38ced1e0b018e68d83631fe3e98025822867fbd5e3d4028b3ad325d28b0f3c916d4cce4097284700e7271b482d73ac9313e9e02d6f4550759dfedc460b6befdd87c1936fdd0dd09a5948fbfe982bf585ba6704f728e5389a13a18a1408e30636f9385d3d58558fe732936780bb581d1c7882a923a5300c08e5002491d505db5aae8cc267bc23876fe3faef3588a1abfb41be5eb9da36a4425da6945dd5b9734f1fd135c57965a6314411e970ecd001baa2aef57c64515be414f7408e7c9bb646ae50c3485c19bd80598305f4001de786a1a5673da772be1c6c55cb77a5e74844dd57ce79b32adeb77b27d62b689e541e38b95e8fcdd71907344f12a1baf9f0a2066df82f63b1a73229f3d1a4b3b22e75d582721c8b2fe7869a0b230056e13b54d2ab8bcac74738dd0cb023085b0e0273d25bca820ddf8b29cd2c75abd4472f1345b6b5b022494eb167241e411c70e4de7dcc205770389e551f37c4244a4c04e4891b2a17dce443eaf598f9778b7ac7c8a89a1aef837c4b43e4324f75b6d14975ad125fa324b819dac2948ead85928269495b6b9b5c8ea605822d79aee331ebaabb7a794a769f8276cad7b9739b6e031834961de3d93afbe63704f7fe4e7e16166d45ec806784af49fc44d7d2105822cacebbc50683f748ace5601571451daa2f3f09d6f9ea08b89a903cf2d6861dcd604264f6b9a7fb4e3c5898231fe39717e97dd8e604c9ab6cb4c0f9754bd8423ecdf3c8a3836b95cb2fc25a328a21abc2d199bcd7839d54b8cf60b588f979fd84efb4309019091566e8bde55e5cc23b74d90fea99539ccaacdec47c369240ff73cb1f19a86cf3dbd3d6e4da2ef4c6873f1dad5fbce06056b621b82f2bada47fde3d4c74f11dfbef7f7ece1b6b7486b81c351566eaa207da7d226aff7a6cf963745d5f9d4fbef8852db7d9aeea9a1965601a2adcbb38992d18ff5e8e2c01dae8b7a601c071923fbf39961854ebc2669194fc5091d3763959122e799e95a3465b9a8ea9167991c0639d944a10d6acd7eba2c1478123712a1b673ca7c4959e22e118ebdd9dc3a1208e4b0641349ad880095ced31883a702f4e3c925e42191fffe551ba8863455a66158f71ac1187e1d79e98ed2ec7010f9d292624a2d84e329809326486f0ea8f064b6115253c3d2ee0b242523772aa4343e7cce2009410c6fb2649bd825e7a673ab5c1d12de71de19c31a17a2917490c2eab0e0dcab67ed2b6e4fd04901f7c380057ed503cdb3f728edfc4a0e8d84fb85524bc7c3ee123b682893bee80dff8f88192f44a5ee0ab4eb41876ba04154d6208373694ebe7eff70afe43edd65b342b713772383712a2765ddfcd30c13be84e86739a2f2f11dc774d3e6a3d966b7166e274ad0650b9044c748fd147a0f8c99e49da4e5028c8ce6c4f5a44ec2cb32c700fc010e95a117378c00e9bd45646e84a40b30515edfaa82646931181735f6c03ab1b3463975630679e05fbbf0064e3acdf156f8bb673f3983a0a5957a8e3cd9506e5c60b84b84993503228617e5dfad487bee601422802c33cbe2294c73e3c424e8224258a33b3f45e130fb78678633412976a92da9332f633daff9532dcaaa4a1e9cad0580d30908e79c686b177a3098cb9175e05b5d4a97013cf88d178f158cdcc1d7a618d4df5f1f7523bd92a3385c32e71c8b68572ec4e27d395d3ac72313dec1e1b6f0aecb67e3a1be14d833b948237593a5762b046e62c1d19b5b249d43df5e2683a8a96532f59637fa4711d89315fa70805db260dbff8dd30d4e0a7c213778227ff0352e7d1bf647fc8e7fbb5ad28cf6f6786234e5187b49d94c7e917f97a492d6ad9cd1ec7db8f721356c5956ccd49adf22d0986c3289494d57a06a4106ca9a9ac9d20cb73ecdb90e8dc54f7a06e127dd02a566c74792e060f320f2b62c2c52735ecf092cc899b541cf1ae5b907b1482779343a3d9bfdd882acbd2c959920906b452850a84ccb82e5c43ec47ddc81e7da8a63fd8a9b0ee4d87abf6a954fdce4c8a32d4b56bb266070b8bbc35309aae2e0e7244391c4ba4e49a43817e3b850f9fbfd4771f2defa20cbd1cb890ec4be9e8d1eded93ab7b3eac00b9cb4bfc7f87861586d54f16badcf5f1f57aaf08ea7211596e4118ec6b47f45f9d799f1c3599f5f8b129da1636a2e1461252aff95a1c6e0fef0a6de6159d4acafd136cfd2f51068209fc812e2ec875d98d166f8b9399783f47410a4d221925dd94bda81a09d39a6706798e169460359d9f18508e6eccd2727af96025b8c8f854154c64c7c1477c9f5393267b004d745ce77c4fde67d8a321ee133725ee0b1eb379055976c4debbd8b80ad1b9d56eddfd0e78a1deb92dcf8aa7eabf14de24610229e8e32da3d3a335f239900ad2225cab72707e683b0f10649cf601738e473d3537ddfac764c02851b266a24c2bf32b6cfd879415a627da32e2caaaea2d74d4d957c15a8ab71c31e6128e6c1d7201f023a3c3580513cd9d3bfa304552e633be6ee34e486b2664d3ae975433003e97211e93233ccd8e0e508b7b9d6801f9dc769db853809c17758b78eca57897f206eace069195944659a8693250e2ad3b487e28135144657dfbd3f2c59a7063b0a1cda6fb1dff07b111d9759d043976f3c5451635512bd81086bbd5d552db1f9a3891e04fcaf98d9730bef2b291f4ae2fadd24c360f75ca1785438ceefcdb12a5502e65790e7226b072d0e8d23ece0a4e7a444803b2991e8862ca5cab736e9be07f1d3d671199513011a3cd8c6eae0928d8219eaaade3412d52450d552fc28b0ee2542ee3936e75ebe737cba566405229b42df73fc6e1361ebcec3cb7fd5f67924bd128b59f9f129924c4e815fb282d0bbf89ac2a4d1845d35047c010afac07c8ed3f4a2b188ed319446345e2d0707ea523217490116eb1cd2dbe34f28acb47b3f6898346593fdc75f05769568040e3d6ae07a499528e052bdc7f3f4e81779d7a213a7392b26a3ed78f453243de76dbaba5016b109a2a3491b70a8a9f772a6019d51b5768e55a85e48e96aae03348f0bcd4f38ef3acb818de9db2c8ef43c0136695776f52a59b09538fb48acde94a0d3bdb3db32321187c0a5ad9e7626055627a8407d3506440f7db5ad535561b992764e8c32289cbe95aa8aca0f760a2e9ae46ad25190afa7c4b29d08423109c45a0962d95dd344d0a335497cfefd6871025c0f7b13c6fe1a5aa53ee37941777022d9bf35e0b01a8bd32e63c5ac711b5f5fa4f586b0c2c98a55344f3b4e4c612233a4ef612771825dfe3a341a625bc952c9c71d0902efc342704e9a760a10f9d64e8cc88dfd154a0d3e6e8b7d679e7c2adb2e5d6d1ab67e15791d2b908697f83e45dd138901db1eb1d8093ab2dec9686eeb572dcb3948e4d57b832f23286280779243c9072d3aaf971620b6007834058db3af797a30a1089410e6286f6f529c1e0fb5be4cd8ac0a70b090537828a254e4cfabef97228c11228d99dd3c066fb9bd74937bfaa4d348c3c618e9730ba98212b235ff6c902fd7359708b57af63995551195c28e96b1870b493c06d5d632ffbaefaf0c4831eeba673baa62580a22e94816e90054fb4eef8f02e0d2e3ae3077612e2aca930c52c9b09fd549a09e725cfbf2ed260e715aa0fe9d2b589f10a0498ad221ca325060a869bbbdaeb0d4b8c0cf746509fc7cff5ed7a45c1c5d4189e5f050734adb19570e3b37d1bbd9ffc651fefa9727f72fbf880273ae22a8929191b9bbd3b0072bb3640ce36d506f110bd070593e8a44153a5ed0f24e5f1272500e35f2d2ab613b92cead5f76252d95e03914ca1e8ff3c3c5cae9e6cdad1b63576916f6b2c9658604d2ad5d2985a79c668ac19f89fb05482c2fb46ca80a86e6fde15fbf11e430703228f1220e0153210edd111e7f84375bcbfa58c280e3e208ea76978c7bec3884c00b38a182384f82b5c7a08dac62e77b63004227e15800ce3027406fbe2a7e8a0293ff0db88e26390fea09d77cb6fcbba9105f5a2a9f5916a9a1f7e05cc0779f200265b03a339bd01a65a39334fb270694314c9e0539adae3c2ac22c83e01cc27b19b87de23f969fb9fa08c910a82a8b34e3e26a9b96674a1a26b1a2f01dd8baf94ade37c2ea70f4f3b3c55dab35d879ad1063461787b2cbdb5d9a3776478c33d87ccf1f8dc46a226c275dc2bb5fa97785a00c1ceaf38ccb120b1543288baaaa41db4307115e33b35c96aef30a3bca41a4b5aab698dc637004d47518cc55344e2d02ab389bcb32e8677574a38818126b20ca3f11d90e7a88279c91c197fab4d9645f0b3eeaf05234a509864d4ac8c4e48e30bbc8f5fb61f2d69a964b7d4485748d868ddc041d5e6f87ee9bd3eab8ce51d2c65918f72c9ad0bc229c3fd7e9472b92dea76710a49693acfeb28ca3eb5629272c4ba1b70f0aced0d45452a07d2c15c1fb6df6015d44cf978540ac2dd8dc6bb20b1c994fc6eec6171a283294a3b47d55e482b7b43b35daa616189ec9ff8e325af7e7099061fa113d7d85e728de85392117cc20f4c75c6b8baad2ff4172c38b92b0212b3cea06f3075c77d00c96790086c1d7ded7c3f2531c1105ac6b1fbb6a33444ef229b9f0c445155282a411677da5b198180708ee6f40742eb4a3106a6facfdf5fa97ad3e83f79c68464eea54a439cd29b53706a45bc13c67b0518bbd7aa34e46d8ec0654aa9dbc003816af4ec9b73b8ee54e9c97c77c983a2046838db1a441f236e68a045c51e6adadb81b29017ac4e8681a4a4da9aece411cc30e441226eaa0274bf2ac8109438a2e78dc6f16345fceceda0791bf95706201b588f9901504224e4e012b74f7d8f4ffd7ab62deffb219d42876fffeb021f1a5e8915e5d8db43eac570d52de7b9ef7755e419eaf34bfa7223c2c321576e111bae24fe51a6a6db6d25aa17599964ed655e05e353fa54a2d036bd289c0ee0f2688793722ade3682c73743f0e0d79cdb4f6ca43dab4b5117b10dc99aee4770a73fdb77c8a158e08f7b09fbad3c9cddaaca4fb2f4443ec7c1c82bf02d0aaaa555e24a5f861da4446e914a9c3d2b766d6808f3bfb36fe55e755573720b9b0414caf0a74e0f0f37e62f226c2b10c9c9cf2b107757bd1bab4507a8e0119736bd2c58935c6ca864accb9d5c27694d375453f8fd91678e8a97231298b189d27528a8f91d4f63dc1fd46f028c3c93cf9685a2cbbe0463afd8616a3e0276cad71b36293acdfb8a6fd35a459cb1000c246bc214d60c88e2fbcf03c341b4e50eea0ffdc2e2a9a60b46bc6dc80615f3147fa02e9cb34b2380f65a615d764b7309e710d1ed6fb032ebccae84ac1e47cc95998a1da1742ba2b2db477926620e0afa919b524916c7df5597634ab9c1b0c71d7aaec62fdf29bdc3db5ac2c5b28ec77fc255f749fdaee16bfbbd7f30da7586cc5f5d80622256bbb1ff9e79b1c24c1d79b17efc86c83ebaff6666a42a3d97e1127e5", &(0x7f0000001340)="ce541bdc5e96a4177af92fb0214d11caa65417e0eb7eb8a94a123b3f9c6b083b0bd8201a6fc018f66f0cc91bef95b1acefe064d4f28cf7b80a15926c48c50f8ac8a78444067839d4d5765f60047500944d0264d4eca1c808d9c7b2710ac299104064fae1a778f98dc1e55a4e6bf48a626a23d7d342e3dbdd5c6641fd6faa43675ca277d0cb9f25aa4e3c66c30690734ccde93a", 0x2, 0x0, 0x2}, 0x50) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xe8001, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) (async) r5 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) close(r5) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) (async) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x49}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) (async) ioctl$TUNGETDEVNETNS(r2, 0x400454ce, 0xfeffffffffffffff) (async) r12 = syz_clone(0x20000000, &(0x7f0000001a40)="626adbca3d454ac6b78705b72465f674ac6cec30262513aaf015c5798a146fa2c05f3a9981ee5cdd32583693d3e7691b5de3df1adae7bc8ed40229cd337cbc12689e9b97e053f902bb133f1177a61b2505f836e9804c2f4f28b1d181f5b406020a388dd2021eef7056f3a2585852779f5de4e8b7d16e4cf23f577b197c87b4f5db9e24d4253702e0cb6528dd372165a69e7d880873fc678a4687c5357e620f30c858f88c4abb0a953cd531b9d020aa62bba3d776d96d5ecf46cb33f4047adfbe5ec0cf741f48de3d8089761844a27aee27be6fa183", 0xd5, &(0x7f0000000140), &(0x7f0000001980), &(0x7f00000019c0)="fe4cfa965d828eed95bb1c6b8af63538d09409abf453be583800ec214eddbae2a874a20c40050b9c508e02e820521ec663281c36035f8eddbce4e72dab9fa3de133441f5886fbe") syz_open_procfs$namespace(r12, &(0x7f0000000240)='ns/ipc\x00') 97.311325ms ago: executing program 3 (id=3060): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0xa604, 0x0, 0x0, 0x9, 0x0, 0x40}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f0303", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) 63.434727ms ago: executing program 0 (id=3061): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x804, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x1120b4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x8087, 0x0, 0x1ff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0x59, 0xf8, &(0x7f0000000180)="77c538f731969353723be32589cb4414ea60164e9a494ab1cf9dc92436a89d361d41b0c9c51a8d88662110b0d31f27a77eaee1ee8f8c81c92e5ced694ed372a7cbdddba7d1a0870ed8b3a8b0647a7c075f51a94520d8807a07", &(0x7f0000000200)=""/248, 0x6e51226b, 0x0, 0xd7, 0x9a, &(0x7f0000000300)="e8d6224c95df2de6b2ede6a44edf9c040b39f8f26a66aef6ef672fb7d7de4881c1ebb1047b8b64069cab3c90df51cac18576bd789faa1e6986d096302706a4ae88ace4de59dc1feb7616fdb32690581702c9b1ce37d2856aef5e520ec839e26a463ed0762dde4e1aca9f0aa7ff0df0f3f3f110511a37340d4b24ba0fca62ab20fbd92006c0b232fecadf0e9c70294c34d7634dab5801436527bf927b8e8dab84c33fe3e1f602d119f65cbf8c35b4e53a91bad836c3a1c13b84384e7f76879f49989e13036e0227c5a71b511ac442bf5059b0bdc128e8bd", &(0x7f0000000400)="29f7792f10079b5bb3d327137350592f2275df9234d30a3f1f23cbd6e5eed2e90ef475f4fc0dabf3b46d4810457bf207ebb56bd6c24622101a6670b1e8096954d83250cf39b29cb43462303c13e94e8d908160857812084ce7aefe05fcdb49cffbaa4277cd1fdbc6fa9aadc7a97d7be2a7ef3e8d5da341f76a5e9be76ffb483c799b13b583a573ef6eb761d3f79e5cebcd60648e65c40472a1fe", 0x0, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) close(0x3) 0s ago: executing program 4 (id=3062): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x59, 0x9, 0x8, 0x6, 0x0, 0x6, 0x20584, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x2f0, 0x9}, 0x8000, 0x3, 0x101, 0x7, 0x4, 0x81, 0x81, 0x0, 0x8001, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) socket$kcm(0xa, 0x5, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffff}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000100)="fdfae111d08f057c34c08389fd60012c7285d5d2adc8191fd465bdd5d505a6"}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000001000000f1000000000000063000800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x21) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000200)={r4, r3}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="2e00000011008188040f80ec19acbc0437177f3d1300000000000e000a09a60c979c91f349fc0009000000000000", 0x2e}], 0x1}, 0x4000) kernel console output (not intermixed with test programs): _file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 283.021148][ T8636] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.105450][ T8636] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 283.123111][ T8636] Node 0 DMA32 free:1345080kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:49664kB inactive_anon:0kB active_file:77200kB inactive_file:159808kB unevictable:1536kB writepending:280kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:24520kB local_pcp:15868kB free_cma:0kB [ 283.358757][ T8636] lowmem_reserve[]: 0 0 1 1 1 [ 283.394829][ T8636] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.560836][ T8636] lowmem_reserve[]: 0 0 0 0 0 [ 283.586508][ T8636] Node 1 Normal free:3908088kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:11296kB local_pcp:5120kB free_cma:0kB [ 283.744808][ T8636] lowmem_reserve[]: 0 0 0 0 0 [ 283.750595][ T8636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.780382][ T8636] Node 0 DMA32: 482*4kB (UE) 204*8kB (UME) 1341*16kB (UM) 609*32kB (UM) 257*64kB (UME) 90*128kB (UM) 119*256kB (UM) 62*512kB (UME) 28*1024kB (UME) 16*2048kB (UM) 280*4096kB (UM) = 1343000kB [ 283.801206][ T8678] delete_channel: no stack [ 283.817535][ T8636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.854430][ T8636] Node 1 Normal: 212*4kB (UME) 43*8kB (UME) 23*16kB (UME) 71*32kB (UME) 34*64kB (UME) 19*128kB (UME) 5*256kB (U) 2*512kB (ME) 0*1024kB 1*2048kB (E) 951*4096kB (M) = 3908088kB [ 283.912733][ T8636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.950488][ T8636] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.016094][ T8636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.056021][ T8636] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.128053][ T8636] 69498 total pagecache pages [ 284.147125][ T8636] 0 pages in swap cache [ 284.169276][ T8636] Free swap = 124996kB [ 284.179390][ T8698] delete_channel: no stack [ 284.193912][ T8636] Total swap = 124996kB [ 284.198391][ T8636] 2097051 pages RAM [ 284.212275][ T8698] delete_channel: no stack [ 284.217070][ T8636] 0 pages HighMem/MovableOnly [ 284.234545][ T8636] 415205 pages reserved [ 284.267340][ T8636] 0 pages cma reserved [ 284.297224][ T8706] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1118'. [ 284.422781][ T8709] netlink: 'syz.1.1117': attribute type 10 has an invalid length. [ 285.492612][ T8713] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1119'. [ 286.010261][ T8725] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 286.027856][ T8725] device hsr0 left promiscuous mode [ 286.076816][ T8725] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 286.134640][ T8729] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 286.155753][ T8729] team0: Device ipvlan1 failed to register rx_handler [ 286.861726][ T8748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.911436][ T8753] sctp: [Deprecated]: syz.1.1130 (pid 8753) Use of int in maxseg socket option. [ 286.911436][ T8753] Use struct sctp_assoc_value instead [ 287.949812][ T8780] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1138'. [ 288.464635][ T8800] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1144'. [ 288.975829][ T8812] netlink: 'syz.3.1147': attribute type 10 has an invalid length. [ 289.067464][ T8818] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 289.159785][ T8816] netlink: 'syz.1.1149': attribute type 9 has an invalid length. [ 289.177913][ T8818] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 289.184514][ T8822] netlink: 'syz.3.1147': attribute type 29 has an invalid length. [ 289.206494][ T8822] netlink: 'syz.3.1147': attribute type 29 has an invalid length. [ 289.223600][ T8820] netlink: 'syz.1.1149': attribute type 29 has an invalid length. [ 290.118230][ T8843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1156'. [ 290.514496][ T8869] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1161'. [ 290.544998][ T8869] netlink: 'syz.3.1161': attribute type 14 has an invalid length. [ 290.555289][ T8869] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1161'. [ 290.970224][ T8878] netlink: 'syz.2.1166': attribute type 11 has an invalid length. [ 290.999759][ T8878] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1166'. [ 291.046202][ T8877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.717793][ T8898] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 291.751614][ T8897] delete_channel: no stack [ 292.153070][ T8902] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.1172'. [ 292.218735][ T8909] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1176'. [ 292.261329][ T8909] netlink: zone id is out of range [ 292.266762][ T8908] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1176'. [ 292.267627][ T8908] netlink: zone id is out of range [ 292.336774][ T8908] netlink: zone id is out of range [ 292.411102][ T8909] netlink: zone id is out of range [ 292.448567][ T8908] netlink: del zone limit has 4 unknown bytes [ 292.514456][ T8909] netlink: del zone limit has 4 unknown bytes [ 294.384129][ T8959] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1188'. [ 295.544567][ T8980] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1193'. [ 299.620013][ T9010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1202'. [ 299.944302][ T9030] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1209'. [ 299.981146][ T9035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.988460][ T9035] IPv6: NLM_F_CREATE should be set when creating new route [ 299.995815][ T9035] IPv6: NLM_F_CREATE should be set when creating new route [ 300.003347][ T9035] IPv6: NLM_F_CREATE should be set when creating new route [ 300.038218][ T9041] netlink: 'syz.0.1211': attribute type 29 has an invalid length. [ 300.050556][ T9041] netlink: 'syz.0.1211': attribute type 2 has an invalid length. [ 300.064051][ T9041] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 300.319696][ T9044] netlink: 'syz.2.1213': attribute type 39 has an invalid length. [ 300.375286][ T9044] device veth0_macvtap left promiscuous mode [ 300.770855][ T9055] netlink: 'syz.0.1215': attribute type 9 has an invalid length. [ 300.800878][ T9055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1215'. [ 301.004614][ T9063] netlink: 'syz.1.1216': attribute type 21 has an invalid length. [ 301.013340][ T9063] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 301.024693][ T9063] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.1216'. [ 301.153054][ T9068] device syzkaller0 entered promiscuous mode [ 306.007064][ T9073] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 306.029738][ T9073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.262489][ T9084] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1223'. [ 306.377701][ T9093] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1228'. [ 306.638220][ T9101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1231'. [ 306.693612][ T9102] netlink: 'syz.4.1230': attribute type 9 has an invalid length. [ 306.717367][ T9102] netlink: 17619 bytes leftover after parsing attributes in process `syz.4.1230'. [ 306.799607][ T4274] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 306.877340][ T9106] netlink: 'syz.2.1233': attribute type 10 has an invalid length. [ 306.996391][ T9106] team0: Device ipvlan1 failed to register rx_handler [ 307.160566][ T9110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.168053][ T9110] IPv6: NLM_F_CREATE should be set when creating new route [ 307.175515][ T9110] IPv6: NLM_F_CREATE should be set when creating new route [ 307.182814][ T9110] IPv6: NLM_F_CREATE should be set when creating new route [ 307.454416][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1234'. [ 307.795980][ T9130] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1236'. [ 307.859386][ T9127] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1236'. [ 308.218580][ T9149] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1242'. [ 308.268276][ T9149] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1242'. [ 308.760395][ T9156] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1247'. [ 308.889945][ T9164] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 310.266465][ T9191] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 310.911142][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 311.370948][ T9218] __nla_validate_parse: 3 callbacks suppressed [ 311.370969][ T9218] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1265'. [ 311.807927][ T9205] device syzkaller0 entered promiscuous mode [ 315.270106][ T9233] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 315.278657][ T9233] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.1270'. [ 315.289226][ T9234] netlink: 'syz.0.1269': attribute type 10 has an invalid length. [ 315.302556][ T9234] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1269'. [ 315.430573][ T9257] netlink: 'syz.1.1274': attribute type 11 has an invalid length. [ 315.440526][ T9257] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1274'. [ 316.124965][ T9274] netlink: 'syz.3.1279': attribute type 2 has an invalid length. [ 316.167925][ T9274] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1279'. [ 316.432544][ T9290] netlink: 'syz.4.1281': attribute type 21 has an invalid length. [ 316.908266][ T9312] netlink: 64939 bytes leftover after parsing attributes in process `syz.3.1285'. [ 317.356306][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.363023][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.635101][ T9331] netlink: 'syz.0.1293': attribute type 3 has an invalid length. [ 317.648754][ T9331] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1293'. [ 317.730534][ T9334] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1295'. [ 318.025888][ T9349] netlink: 'syz.0.1298': attribute type 9 has an invalid length. [ 318.148809][ T9349] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1298'. [ 319.134352][ T9381] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1305'. [ 319.156996][ T9378] netlink: 'syz.1.1304': attribute type 27 has an invalid length. [ 319.180030][ T9378] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1304'. [ 321.284299][ T9399] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1306'. [ 321.490609][ T9413] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 321.582237][ T9407] netlink: 'syz.2.1308': attribute type 4 has an invalid length. [ 321.632058][ T9417] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1311'. [ 321.684818][ T9417] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 322.729341][ T9464] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1321'. [ 322.769085][ T9462] netlink: 'syz.3.1322': attribute type 2 has an invalid length. [ 322.783814][ T9462] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1322'. [ 322.826169][ T9467] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1323'. [ 322.903568][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1324'. [ 322.975839][ T9473] netlink: 'syz.0.1325': attribute type 3 has an invalid length. [ 322.990961][ T9473] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1325'. [ 323.508502][ T9478] netlink: 'syz.3.1327': attribute type 9 has an invalid length. [ 323.596583][ T9478] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1327'. [ 324.014086][ T9497] netlink: 'syz.3.1333': attribute type 10 has an invalid length. [ 324.728829][ T9515] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1335'. [ 324.802274][ T9508] device bond0 entered promiscuous mode [ 324.808164][ T9508] device bond_slave_0 entered promiscuous mode [ 324.841697][ T9508] device bond_slave_1 entered promiscuous mode [ 325.992658][ T9522] netlink: 'syz.2.1336': attribute type 16 has an invalid length. [ 326.069905][ T9522] netlink: 'syz.2.1336': attribute type 4 has an invalid length. [ 326.081566][ T9522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1336'. [ 326.266242][ T9536] netlink: 'syz.0.1343': attribute type 15 has an invalid length. [ 326.286953][ T9536] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.1343'. [ 326.503450][ T9535] netlink: 'syz.1.1341': attribute type 9 has an invalid length. [ 326.592980][ T9540] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1341'. [ 326.743096][ T9549] netlink: 'syz.4.1345': attribute type 28 has an invalid length. [ 327.500478][ T9563] syz.2.1351[9563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.500594][ T9563] syz.2.1351[9563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.620995][ T9588] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 328.677610][ T9588] __nla_validate_parse: 1 callbacks suppressed [ 328.677631][ T9588] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1358'. [ 329.195476][ T9600] netlink: 'syz.3.1362': attribute type 27 has an invalid length. [ 329.223819][ T9600] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1362'. [ 329.441847][ T9597] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1360'. [ 329.693959][ T9609] netlink: 'syz.3.1363': attribute type 2 has an invalid length. [ 329.705297][ T9609] netlink: 'syz.3.1363': attribute type 8 has an invalid length. [ 329.732798][ T9609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1363'. [ 329.814639][ T9615] netlink: 'syz.4.1365': attribute type 2 has an invalid length. [ 329.833272][ T9615] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1365'. [ 332.991725][ T9647] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1372'. [ 333.028771][ T9646] netlink: 'syz.0.1373': attribute type 2 has an invalid length. [ 333.044106][ T9646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1373'. [ 333.226744][ T9653] netlink: 'syz.4.1375': attribute type 11 has an invalid length. [ 333.275486][ T9653] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1375'. [ 333.446668][ T9670] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1378'. [ 333.891189][ T9682] device wlan0 entered promiscuous mode [ 333.929272][ T9682] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1382'. [ 333.962821][ T9685] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1382'. [ 334.043842][ T9687] netlink: 'syz.4.1381': attribute type 4 has an invalid length. [ 334.062581][ T9682] netlink: 'syz.3.1382': attribute type 3 has an invalid length. [ 334.091162][ T9682] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1382'. [ 334.377163][ T9695] netlink: 'syz.1.1384': attribute type 2 has an invalid length. [ 334.391843][ T9695] netlink: 'syz.1.1384': attribute type 8 has an invalid length. [ 334.402169][ T9695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1384'. [ 334.642915][ T9707] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 334.656693][ T9707] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1388'. [ 335.181580][ T9723] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1394'. [ 335.492317][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 335.507919][ T9729] device wlan0 entered promiscuous mode [ 335.612256][ T9736] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1398'. [ 335.662196][ T9737] netlink: 'syz.4.1398': attribute type 3 has an invalid length. [ 335.732876][ T9729] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1398'. [ 335.815011][ T9737] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1398'. [ 335.864669][ T9732] netlink: 'syz.0.1399': attribute type 10 has an invalid length. [ 335.988108][ T9732] team0: Device hsr_slave_0 failed to register rx_handler [ 337.794199][ T9779] device wlan0 entered promiscuous mode [ 337.919336][ T9779] netlink: 'syz.1.1412': attribute type 3 has an invalid length. [ 338.233888][ T9796] delete_channel: no stack [ 338.323359][ T9806] netlink: 'syz.4.1418': attribute type 3 has an invalid length. [ 339.466831][ T9840] netlink: 'syz.1.1431': attribute type 10 has an invalid length. [ 339.744387][ T9851] __nla_validate_parse: 8 callbacks suppressed [ 339.744408][ T9851] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1433'. [ 340.320221][ T9869] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.944405][ T9884] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1443'. [ 344.967265][T10007] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1475'. [ 345.040060][T10007] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 345.056890][T10009] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1476'. [ 345.375612][T10023] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 345.388310][T10023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1481'. [ 345.690108][T10043] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 345.727412][T10043] bridge0: port 4(team0) entered disabled state [ 345.736547][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.749928][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.934597][T10043] team0: Device bridge0 is already an upper device of the team interface [ 349.391613][T10104] __sock_release: fasync list not empty! [ 349.617813][T10113] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1501'. [ 349.661950][T10113] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 350.669206][T10151] netlink: 'syz.4.1514': attribute type 17 has an invalid length. [ 350.889119][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1516'. [ 351.082095][T10165] netlink: 'syz.3.1517': attribute type 10 has an invalid length. [ 351.312727][T10165] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.320340][T10165] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.534916][T10164] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1518'. [ 351.876188][T10178] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.934469][T10181] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 351.952950][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1524'. [ 351.972698][T10181] device team0 entered promiscuous mode [ 351.997310][T10181] device team_slave_0 entered promiscuous mode [ 352.006664][T10181] device team_slave_1 entered promiscuous mode [ 352.021116][T10181] device wlan1 entered promiscuous mode [ 352.027971][T10181] device batadv0 entered promiscuous mode [ 352.042020][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.050626][T10181] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 352.699174][T10196] netlink: 'syz.1.1530': attribute type 29 has an invalid length. [ 352.728650][T10196] netlink: 'syz.1.1530': attribute type 29 has an invalid length. [ 352.756779][T10195] delete_channel: no stack [ 352.887660][T10202] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 352.897216][T10199] delete_channel: no stack [ 352.903284][T10199] delete_channel: no stack [ 352.905905][T10202] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1533'. [ 352.933318][T10199] delete_channel: no stack [ 352.941102][T10199] delete_channel: no stack [ 352.945747][T10199] delete_channel: no stack [ 352.950448][T10199] delete_channel: no stack [ 352.975966][T10199] delete_channel: no stack [ 352.990918][T10199] delete_channel: no stack [ 352.995724][T10199] delete_channel: no stack [ 353.001545][T10204] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1532'. [ 353.021253][T10199] delete_channel: no stack [ 353.043091][T10199] delete_channel: no stack [ 353.048093][T10199] delete_channel: no stack [ 353.053367][T10199] delete_channel: no stack [ 353.058313][T10199] delete_channel: no stack [ 353.063909][T10199] delete_channel: no stack [ 353.068814][T10199] delete_channel: no stack [ 353.074772][T10199] delete_channel: no stack [ 353.128040][T10199] delete_channel: no stack [ 353.171755][T10199] delete_channel: no stack [ 353.184992][T10214] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 353.299936][T10199] delete_channel: no stack [ 353.318562][T10199] delete_channel: no stack [ 353.331017][T10199] delete_channel: no stack [ 353.336058][T10199] delete_channel: no stack [ 353.341672][T10199] delete_channel: no stack [ 353.346712][T10199] delete_channel: no stack [ 353.370395][T10199] delete_channel: no stack [ 353.384803][T10217] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1533'. [ 353.395295][T10199] delete_channel: no stack [ 353.400307][T10199] delete_channel: no stack [ 353.415011][T10199] delete_channel: no stack [ 353.425973][T10199] delete_channel: no stack [ 353.432210][T10217] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 353.442765][T10199] delete_channel: no stack [ 353.447725][T10199] delete_channel: no stack [ 353.459496][T10199] delete_channel: no stack [ 353.476955][T10208] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1535'. [ 353.972570][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1536'. [ 356.063615][T10263] netlink: 'syz.4.1546': attribute type 3 has an invalid length. [ 356.091749][T10263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1546'. [ 356.264874][T10263] netlink: 'syz.4.1546': attribute type 27 has an invalid length. [ 356.601088][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 356.838883][T10295] netlink: 'syz.0.1557': attribute type 3 has an invalid length. [ 356.886172][T10297] netlink: 'syz.2.1556': attribute type 29 has an invalid length. [ 356.905239][T10295] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1557'. [ 356.965347][T10297] netlink: 'syz.2.1556': attribute type 29 has an invalid length. [ 357.297859][T10320] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 357.320371][T10320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1563'. [ 358.089857][T10350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 358.121248][T10350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 358.142401][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 358.179112][T10350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 358.197325][T10350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1571'. [ 358.571431][T10373] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1576'. [ 359.217396][T10404] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 359.422260][ T4274] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 360.066415][T10437] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 360.090787][T10437] netlink: 'syz.3.1599': attribute type 4 has an invalid length. [ 360.691492][T10460] netlink: 'syz.3.1604': attribute type 21 has an invalid length. [ 360.843746][T10466] netlink: 'syz.4.1607': attribute type 21 has an invalid length. [ 361.513002][ T4274] Bluetooth: hci4: command 0x2016 tx timeout [ 362.144819][T10511] validate_nla: 1 callbacks suppressed [ 362.144837][T10511] netlink: 'syz.1.1616': attribute type 41 has an invalid length. [ 362.188877][T10511] __nla_validate_parse: 3 callbacks suppressed [ 362.188894][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1616'. [ 362.340591][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.492606][T10523] netlink: 'syz.3.1618': attribute type 3 has an invalid length. [ 362.558738][T10523] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1618'. [ 362.852503][T10536] netlink: 'syz.1.1622': attribute type 29 has an invalid length. [ 362.854093][T10529] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1620'. [ 362.876885][T10536] netlink: 'syz.1.1622': attribute type 29 has an invalid length. [ 362.904015][T10536] netlink: 'syz.1.1622': attribute type 29 has an invalid length. [ 362.915202][T10536] netlink: 'syz.1.1622': attribute type 29 has an invalid length. [ 363.490557][T10553] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1627'. [ 363.509227][T10550] device syzkaller0 entered promiscuous mode [ 363.632520][T10548] netlink: 'syz.1.1625': attribute type 2 has an invalid length. [ 363.640583][T10548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1625'. [ 364.972406][T10575] device sit0 left promiscuous mode [ 365.335738][T10582] device sit0 entered promiscuous mode [ 365.815619][T10599] netlink: 'syz.2.1639': attribute type 21 has an invalid length. [ 365.827081][T10599] netlink: 'syz.2.1639': attribute type 4 has an invalid length. [ 365.836859][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'. [ 365.873956][T10599] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1639'. [ 366.103411][T10619] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1642'. [ 366.199505][T10626] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 366.488653][T10642] netlink: 'syz.4.1648': attribute type 13 has an invalid length. [ 369.476632][T10649] tap0: tun_chr_ioctl cmd 1074025675 [ 369.513999][T10649] tap0: persist enabled [ 369.621277][T10654] tap0: tun_chr_ioctl cmd 1074025675 [ 369.688211][T10654] tap0: persist disabled [ 370.097884][T10654] tap0: tun_chr_ioctl cmd 1074812118 [ 370.883986][T10682] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1659'. [ 370.911073][T10693] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1662'. [ 371.112666][T10696] netlink: 'syz.0.1659': attribute type 3 has an invalid length. [ 371.149485][T10698] netlink: 'syz.2.1663': attribute type 10 has an invalid length. [ 371.166000][T10696] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1659'. [ 371.721159][T10719] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1670'. [ 371.888872][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1667'. [ 372.317154][T10732] netlink: 'syz.0.1673': attribute type 3 has an invalid length. [ 372.411165][T10732] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1673'. [ 372.513050][T10733] sctp: [Deprecated]: syz.4.1674 (pid 10733) Use of int in maxseg socket option. [ 372.513050][T10733] Use struct sctp_assoc_value instead [ 373.171662][T10755] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1681'. [ 373.228301][T10755] netlink: 'syz.3.1681': attribute type 3 has an invalid length. [ 373.248948][T10755] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1681'. [ 373.522551][T10770] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1685'. [ 374.109379][T10806] device vcan0 entered promiscuous mode [ 374.122704][T10806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.134704][T10807] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 374.155821][T10806] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1694'. [ 374.203588][T10810] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 374.302841][T10809] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 374.313774][T10809] CPU: 0 PID: 10809 Comm: syz.4.1696 Not tainted syzkaller #0 [ 374.321327][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.331638][T10809] Call Trace: [ 374.334985][T10809] [ 374.337982][T10809] dump_stack_lvl+0x188/0x24e [ 374.342761][T10809] ? show_regs_print_info+0x12/0x12 [ 374.348042][T10809] ? load_image+0x400/0x400 [ 374.352656][T10809] sysfs_warn_dup+0x8a/0xa0 [ 374.357244][T10809] sysfs_do_create_link_sd+0xc0/0x110 [ 374.362697][T10809] device_add+0x7ed/0xfb0 [ 374.367138][T10809] wiphy_register+0x1d9f/0x2ac0 [ 374.372210][T10809] ? cfg80211_event_work+0x40/0x40 [ 374.377433][T10809] ? minstrel_ht_alloc+0x894/0xa20 [ 374.382623][T10809] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 374.388784][T10809] ieee80211_register_hw+0x2d00/0x39f0 [ 374.394352][T10809] ? ieee80211_register_hw+0xea1/0x39f0 [ 374.399977][T10809] ? ieee80211_register_hw+0xea1/0x39f0 [ 374.405635][T10809] ? ieee80211_tasklet_handler+0x20/0x20 [ 374.411387][T10809] ? memset+0x1e/0x40 [ 374.415450][T10809] ? __hrtimer_init+0x186/0x270 [ 374.420382][T10809] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 374.426228][T10809] hwsim_new_radio_nl+0xafa/0xce0 [ 374.431354][T10809] genl_family_rcv_msg_doit+0x22a/0x330 [ 374.437084][T10809] ? end_current_label_crit_section+0x170/0x170 [ 374.443382][T10809] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 374.449438][T10809] ? bpf_lsm_capable+0x5/0x10 [ 374.454161][T10809] ? security_capable+0x85/0xb0 [ 374.459075][T10809] genl_rcv_msg+0x604/0x790 [ 374.463642][T10809] ? genl_bind+0x360/0x360 [ 374.468113][T10809] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 374.474519][T10809] netlink_rcv_skb+0x1fb/0x450 [ 374.479331][T10809] ? genl_bind+0x360/0x360 [ 374.483800][T10809] ? netlink_ack+0x1170/0x1170 [ 374.488634][T10809] ? down_read+0x1a8/0x2d0 [ 374.493112][T10809] genl_rcv+0x24/0x40 [ 374.497144][T10809] netlink_unicast+0x74d/0x8d0 [ 374.501977][T10809] netlink_sendmsg+0x8ad/0xbd0 [ 374.506803][T10809] ? netlink_getsockopt+0x550/0x550 [ 374.512147][T10809] ? aa_sock_msg_perm+0x94/0x150 [ 374.517187][T10809] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 374.522525][T10809] ? security_socket_sendmsg+0x7c/0xa0 [ 374.528033][T10809] ? netlink_getsockopt+0x550/0x550 [ 374.533279][T10809] ____sys_sendmsg+0x5be/0x970 [ 374.538111][T10809] ? __sys_sendmsg_sock+0x30/0x30 [ 374.543260][T10809] ? __import_iovec+0x315/0x500 [ 374.548415][T10809] ? import_iovec+0x6f/0xa0 [ 374.552960][T10809] ___sys_sendmsg+0x2a2/0x360 [ 374.557706][T10809] ? __sys_sendmsg+0x290/0x290 [ 374.562597][T10809] __se_sys_sendmsg+0x1bb/0x2a0 [ 374.567596][T10809] ? __x64_sys_sendmsg+0x80/0x80 [ 374.572606][T10809] ? lockdep_hardirqs_on+0x94/0x140 [ 374.577857][T10809] do_syscall_64+0x4c/0xa0 [ 374.582322][T10809] ? clear_bhb_loop+0x60/0xb0 [ 374.587040][T10809] ? clear_bhb_loop+0x60/0xb0 [ 374.591767][T10809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.597694][T10809] RIP: 0033:0x7f1257b9acb9 [ 374.602153][T10809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.621820][T10809] RSP: 002b:00007f1258aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.630374][T10809] RAX: ffffffffffffffda RBX: 00007f1257e15fa0 RCX: 00007f1257b9acb9 [ 374.638401][T10809] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 374.646413][T10809] RBP: 00007f1257c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 374.654427][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.662479][T10809] R13: 00007f1257e16038 R14: 00007f1257e15fa0 R15: 00007fff3f6dea28 [ 374.670640][T10809] [ 374.942949][T10823] netlink: 'syz.1.1697': attribute type 3 has an invalid length. [ 375.516236][T10833] netlink: 'syz.4.1702': attribute type 2 has an invalid length. [ 375.543170][T10833] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 376.163215][T10850] __nla_validate_parse: 5 callbacks suppressed [ 376.163236][T10850] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1707'. [ 376.595663][T10871] netlink: 'syz.2.1711': attribute type 10 has an invalid length. [ 376.704328][T10872] netlink: 'syz.1.1710': attribute type 29 has an invalid length. [ 378.399144][T10872] netlink: 'syz.1.1710': attribute type 29 has an invalid length. [ 378.565005][T10930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.572391][T10930] IPv6: NLM_F_CREATE should be set when creating new route [ 378.579651][T10930] IPv6: NLM_F_CREATE should be set when creating new route [ 378.662387][T10930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1715'. [ 378.794707][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.809327][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.832036][T10940] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.1718'. [ 379.078574][T10950] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1721'. [ 379.487232][T10961] netlink: 'syz.2.1726': attribute type 29 has an invalid length. [ 379.534397][T10961] netlink: 'syz.2.1726': attribute type 29 has an invalid length. [ 379.773146][T10966] sock: sock_set_timeout: `syz.1.1727' (pid 10966) tries to set negative timeout [ 379.888973][T10966] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 380.643460][T10997] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 380.658021][T10997] netlink: 'syz.0.1736': attribute type 3 has an invalid length. [ 380.676024][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1736'. [ 381.213529][T10985] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1731'. [ 381.651313][T11017] netlink: 'syz.0.1740': attribute type 29 has an invalid length. [ 381.669633][T11017] netlink: 'syz.0.1740': attribute type 29 has an invalid length. [ 382.895242][T11066] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1754'. [ 383.028514][T11069] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 383.083342][T11069] team0: Cannot enslave team device to itself [ 384.007890][T11103] netlink: 'syz.0.1766': attribute type 21 has an invalid length. [ 384.025115][T11103] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1766'. [ 385.876365][T11182] netlink: 'syz.1.1775': attribute type 29 has an invalid length. [ 385.904475][T11182] netlink: 'syz.1.1775': attribute type 29 has an invalid length. [ 385.947467][T11182] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1775'. [ 385.988886][T11184] sctp: [Deprecated]: syz.2.1774 (pid 11184) Use of int in max_burst socket option deprecated. [ 385.988886][T11184] Use struct sctp_assoc_value instead [ 386.501520][T11188] netlink: 'syz.4.1776': attribute type 15 has an invalid length. [ 386.509658][T11188] netlink: 'syz.4.1776': attribute type 5 has an invalid length. [ 386.548005][T11188] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1776'. [ 386.651052][T11189] device bond_slave_1 entered promiscuous mode [ 386.680549][T11191] netlink: 'syz.1.1778': attribute type 10 has an invalid length. [ 386.695980][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 386.721415][T11190] delete_channel: no stack [ 386.775316][T11195] netlink: 'syz.3.1780': attribute type 1 has an invalid length. [ 386.802361][T11195] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1780'. [ 386.996497][T11205] netlink: 'syz.4.1781': attribute type 21 has an invalid length. [ 387.020981][T11205] netlink: 'syz.4.1781': attribute type 3 has an invalid length. [ 387.082433][T11205] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1781'. [ 387.730977][T11251] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1785'. [ 388.479525][T11268] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.1790'. [ 389.567046][T11306] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 389.597785][T11306] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1800'. [ 390.718805][T11346] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1809'. [ 390.737804][T11339] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 390.832969][T11339] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 390.904684][T11343] netlink: 'syz.2.1808': attribute type 29 has an invalid length. [ 391.230848][T11361] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1813'. [ 392.230143][T11380] netlink: 'syz.3.1817': attribute type 39 has an invalid length. [ 392.629862][T11393] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 392.671210][T11393] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 392.715384][T11397] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 392.803726][T11393] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 393.333782][T11412] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1828'. [ 393.361782][T11412] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 394.432456][T11451] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1840'. [ 394.779252][T11460] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 394.819613][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1845'. [ 394.847844][T11460] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 394.865460][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1845'. [ 395.066829][T11465] device syzkaller0 entered promiscuous mode [ 398.986404][T11491] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1853'. [ 398.997051][T11504] netlink: 'syz.3.1856': attribute type 8 has an invalid length. [ 399.010046][T11504] netlink: 'syz.3.1856': attribute type 9 has an invalid length. [ 399.018411][T11504] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 399.029907][T11504] netlink: 'syz.3.1856': attribute type 11 has an invalid length. [ 399.039040][T11504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1856'. [ 399.082093][T11505] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 399.258089][T11513] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1857'. [ 399.360409][T11522] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1859'. [ 399.375826][T11520] netlink: 'syz.3.1861': attribute type 29 has an invalid length. [ 399.386979][T11522] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 399.574012][T11513] team0 (unregistering): Port device team_slave_1 removed [ 399.598285][T11513] team0 (unregistering): Port device bridge0 removed [ 399.801405][T11512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1858'. [ 399.833324][T11520] netlink: 'syz.3.1861': attribute type 29 has an invalid length. [ 399.861397][T11526] netlink: 'syz.3.1861': attribute type 29 has an invalid length. [ 400.068286][T11530] netlink: 'syz.2.1862': attribute type 29 has an invalid length. [ 400.077614][T11530] netlink: 'syz.2.1862': attribute type 29 has an invalid length. [ 400.297567][T11534] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1865'. [ 400.317964][T11544] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1868'. [ 400.328574][T11544] syz_tun: refused to change device tx_queue_len [ 400.335456][T11544] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 400.394724][T11544] netlink: 15039 bytes leftover after parsing attributes in process `syz.3.1868'. [ 400.422034][T11549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1868'. [ 400.443367][T11549] syz_tun: refused to change device tx_queue_len [ 400.449802][T11549] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 400.531244][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1869'. [ 404.455201][T11668] __nla_validate_parse: 3 callbacks suppressed [ 404.455222][T11668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1901'. [ 405.326979][T11681] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1905'. [ 406.303911][T11680] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1905'. [ 406.592297][T11685] device syzkaller0 entered promiscuous mode [ 409.190850][T11711] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1912'. [ 409.962218][T11737] validate_nla: 7 callbacks suppressed [ 409.962283][T11737] netlink: 'syz.3.1917': attribute type 21 has an invalid length. [ 410.655015][T11759] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.1927'. [ 412.203328][T11793] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 413.275909][T11793] device 0 entered promiscuous mode [ 413.951015][T11812] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 413.996616][T11812] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 414.513042][T11825] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.1947'. [ 414.617588][T11828] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 414.716757][T11828] : port 1(vlan0) entered disabled state [ 414.753964][T11828] device vlan0 left promiscuous mode [ 414.763650][T11828] : port 1(vlan0) entered disabled state [ 414.892464][T11828] device vlan0 entered promiscuous mode [ 414.911617][T11828] team0: Port device vlan0 added [ 414.961308][T11837] netlink: 'syz.1.1950': attribute type 22 has an invalid length. [ 414.975438][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 414.985823][T11838] device syzkaller0 left promiscuous mode [ 415.001145][T11847] netlink: 'syz.0.1951': attribute type 15 has an invalid length. [ 415.009203][T11847] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.1951'. [ 415.041591][T11841] netlink: 'syz.0.1951': attribute type 11 has an invalid length. [ 415.061192][T11841] netlink: 'syz.0.1951': attribute type 15 has an invalid length. [ 415.087584][T11841] netlink: 'syz.0.1951': attribute type 16 has an invalid length. [ 415.107031][T11841] netlink: 'syz.0.1951': attribute type 21 has an invalid length. [ 415.129657][T11841] netlink: 'syz.0.1951': attribute type 25 has an invalid length. [ 415.164451][T11841] netlink: 'syz.0.1951': attribute type 27 has an invalid length. [ 415.203215][T11841] netlink: 'syz.0.1951': attribute type 28 has an invalid length. [ 415.224710][T11841] netlink: 'syz.0.1951': attribute type 29 has an invalid length. [ 415.261004][T11841] netlink: 'syz.0.1951': attribute type 7 has an invalid length. [ 415.269477][T11841] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.1951'. [ 415.855103][T11882] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1962'. [ 415.964036][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'. [ 416.022977][T11885] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1962'. [ 417.896729][T11913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1969'. [ 417.941568][T11914] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1968'. [ 417.956093][T11914] netlink: zone id is out of range [ 417.982100][T11914] netlink: zone id is out of range [ 418.059105][T11914] netlink: del zone limit has 4 unknown bytes [ 418.549850][T11927] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.1975'. [ 418.826831][T11951] netlink: 3748 bytes leftover after parsing attributes in process `syz.3.1979'. [ 419.376250][ T4275] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 419.991978][T11986] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1989'. [ 420.011053][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.050971][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.071021][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.110711][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.160816][T11986] device batadv_slave_1 entered promiscuous mode [ 420.458343][T11999] validate_nla: 9 callbacks suppressed [ 420.458363][T11999] netlink: 'syz.2.1993': attribute type 10 has an invalid length. [ 420.543505][T11999] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1993'. [ 420.665765][T12011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1995'. [ 421.791028][T12037] __nla_validate_parse: 3 callbacks suppressed [ 421.791066][T12037] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2000'. [ 421.849245][T12038] netlink: 'syz.2.2000': attribute type 25 has an invalid length. [ 421.875942][T12038] netlink: 'syz.2.2000': attribute type 27 has an invalid length. [ 421.897688][T12038] netlink: 'syz.2.2000': attribute type 28 has an invalid length. [ 421.932132][T12038] netlink: 'syz.2.2000': attribute type 29 has an invalid length. [ 421.950458][T12038] netlink: 'syz.2.2000': attribute type 7 has an invalid length. [ 421.966654][T12038] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2000'. [ 422.238546][T12047] tap0: tun_chr_ioctl cmd 2148553947 [ 422.991967][T12072] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2011'. [ 423.620404][T12092] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2017'. [ 423.649940][T12096] netlink: 'syz.4.2017': attribute type 25 has an invalid length. [ 423.680903][T12096] netlink: 'syz.4.2017': attribute type 27 has an invalid length. [ 423.689154][T12096] netlink: 'syz.4.2017': attribute type 28 has an invalid length. [ 423.755163][T12096] netlink: 'syz.4.2017': attribute type 29 has an invalid length. [ 423.787558][T12096] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2017'. [ 423.839644][T12097] netlink: 16030 bytes leftover after parsing attributes in process `syz.0.2027'. [ 426.885140][T12149] pimreg0: tun_chr_ioctl cmd 35111 [ 428.060761][T12172] validate_nla: 1 callbacks suppressed [ 428.060782][T12172] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 428.585382][T12193] netlink: 'syz.4.2046': attribute type 21 has an invalid length. [ 429.430144][T12210] pimreg0: tun_chr_ioctl cmd 35111 [ 430.851957][T12249] raw_sendmsg: syz.0.2061 forgot to set AF_INET. Fix it! [ 431.287762][T12256] netlink: 'syz.4.2063': attribute type 3 has an invalid length. [ 431.413198][T12256] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2063'. [ 433.605821][T12295] netlink: 'syz.4.2073': attribute type 2 has an invalid length. [ 433.620849][T12295] netlink: 'syz.4.2073': attribute type 8 has an invalid length. [ 433.629250][T12295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2073'. [ 434.428624][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2084'. [ 435.146988][T12341] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2086'. [ 435.184696][T12343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2086'. [ 435.379491][ T4275] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 435.408179][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 435.859012][ T4275] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 436.101604][T12381] bridge0: port 4(team0) entered disabled state [ 436.178669][T12381] device netdevsim0 left promiscuous mode [ 436.219293][T12381] bridge0: port 3(netdevsim0) entered disabled state [ 436.302131][T12381] device bridge_slave_1 left promiscuous mode [ 436.345735][T12381] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.420168][T12381] device bridge_slave_0 left promiscuous mode [ 436.451337][T12381] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.954489][T12386] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2098'. [ 437.246776][T12410] delete_channel: no stack [ 439.867405][T12416] netlink: 'syz.3.2105': attribute type 10 has an invalid length. [ 439.878412][T12416] device hsr0 left promiscuous mode [ 439.894804][T12409] netlink: 'syz.1.2103': attribute type 21 has an invalid length. [ 439.909659][T12409] netlink: 'syz.1.2103': attribute type 20 has an invalid length. [ 440.130102][T12433] netlink: 'syz.2.2108': attribute type 16 has an invalid length. [ 440.150437][T12433] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2108'. [ 440.234209][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.240781][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.970278][T12457] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2116'. [ 441.245612][T12466] netlink: 'syz.3.2118': attribute type 2 has an invalid length. [ 441.704779][T12457] netlink: 'syz.4.2116': attribute type 10 has an invalid length. [ 442.359946][T12493] delete_channel: no stack [ 444.129534][T12483] netlink: 'syz.0.2124': attribute type 13 has an invalid length. [ 444.137824][T12483] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2124'. [ 444.672211][T12523] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2135'. [ 445.100732][T12527] netlink: 'syz.2.2136': attribute type 21 has an invalid length. [ 445.178672][T12527] netlink: 'syz.2.2136': attribute type 20 has an invalid length. [ 445.438406][T12533] netlink: 9470 bytes leftover after parsing attributes in process `syz.0.2137'. [ 445.518546][T12535] netlink: 9470 bytes leftover after parsing attributes in process `syz.0.2137'. [ 445.653921][T12543] netlink: 'syz.4.2140': attribute type 6 has an invalid length. [ 446.149078][T12555] netlink: 'syz.2.2143': attribute type 2 has an invalid length. [ 446.168238][T12555] netlink: 'syz.2.2143': attribute type 8 has an invalid length. [ 446.181573][T12555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2143'. [ 446.878520][T12572] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2153'. [ 447.103482][T12583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.182243][T12583] device hsr0 entered promiscuous mode [ 447.198515][T12583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 447.247317][T12578] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 447.304111][T12578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2154'. [ 447.993072][T12599] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2161'. [ 448.391593][ T4306] syzkaller0: tun_net_xmit 76 [ 448.396877][T12610] syzkaller0: create flow: hash 580370740 index 2 [ 448.461012][T10587] syzkaller0: tun_net_xmit 76 [ 448.471122][T12608] syzkaller0: delete flow: hash 580370740 index 2 [ 448.615496][T12616] netlink: 'syz.4.2166': attribute type 39 has an invalid length. [ 449.024373][T12625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2170'. [ 449.039705][T12627] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2169'. [ 449.103423][T12630] netlink: 'syz.2.2171': attribute type 11 has an invalid length. [ 449.151185][T12630] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2171'. [ 449.202717][T12633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.510404][T12646] netlink: 'syz.2.2175': attribute type 12 has an invalid length. [ 449.520929][T12646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2175'. [ 450.283831][T12666] netlink: 9470 bytes leftover after parsing attributes in process `syz.3.2182'. [ 450.322398][T12674] netlink: 9470 bytes leftover after parsing attributes in process `syz.3.2182'. [ 452.356612][T12724] netlink: 'syz.2.2197': attribute type 10 has an invalid length. [ 452.378915][T12724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2197'. [ 452.417075][T12724] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2197'. [ 452.903035][T12744] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2203'. [ 453.047186][T12744] tc_dump_action: action bad kind [ 453.706093][T12756] delete_channel: no stack [ 453.788836][T12740] delete_channel: no stack [ 454.306469][T12768] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 454.343302][T12768] device team0 left promiscuous mode [ 454.370332][T12768] device team_slave_0 left promiscuous mode [ 454.430938][T12768] device team_slave_1 left promiscuous mode [ 454.499516][T12768] device wlan1 left promiscuous mode [ 454.515849][T12768] device batadv0 left promiscuous mode [ 454.529688][T12768] device vlan0 left promiscuous mode [ 454.566743][T12768] team0: Cannot enslave team device to itself [ 454.646054][T12771] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 454.809738][T12779] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2210'. [ 454.870342][T12776] cgroup: fork rejected by pids controller in /syz3 [ 456.638383][T12918] device syz_tun entered promiscuous mode [ 457.570408][T12931] device syzkaller0 entered promiscuous mode [ 457.670896][T12933] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2229'. [ 457.761281][T12940] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2232'. [ 457.789073][T12940] openvswitch: netlink: Message has 6 unknown bytes. [ 458.047043][T12947] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 458.074826][T12948] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 458.091606][T12948] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2233'. [ 458.115976][T12947] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2233'. [ 458.869607][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.888740][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.903452][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.920250][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.943778][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.958286][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.355344][ T4361] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.372073][T12950] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2234'. [ 460.382952][T12954] netlink: 'syz.2.2235': attribute type 39 has an invalid length. [ 460.405821][T12955] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 460.425908][T12955] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 460.452678][T12955] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 460.482634][ T4361] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.604949][ T4361] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.728413][ T4361] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.040823][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 461.075149][T12958] chnl_net:caif_netlink_parms(): no params data found [ 461.765564][T12958] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.774808][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.784074][T12958] device bridge_slave_0 entered promiscuous mode [ 461.860343][T12958] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.879891][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.911921][T12958] device bridge_slave_1 entered promiscuous mode [ 462.038368][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.050850][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.084037][T13018] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.123160][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.163749][T13018] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.188350][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.222843][T13018] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2248'. [ 462.319295][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.378078][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.610030][T12958] team0: Port device team_slave_0 added [ 462.702682][T13037] netlink: 'syz.4.2255': attribute type 29 has an invalid length. [ 463.093814][T12958] team0: Port device team_slave_1 added [ 463.110973][ T4275] Bluetooth: hci1: command 0x041b tx timeout [ 463.253130][T13037] netlink: 'syz.4.2255': attribute type 29 has an invalid length. [ 463.545359][T12958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.564319][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.600555][T13076] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2261'. [ 463.616240][T12958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.663097][T12958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.690453][T12958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.726291][T12958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.001918][T12958] device hsr_slave_0 entered promiscuous mode [ 464.041499][T12958] device hsr_slave_1 entered promiscuous mode [ 464.057470][T12958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.080774][T12958] Cannot create hsr debugfs directory [ 464.094387][ T4361] device hsr_slave_0 left promiscuous mode [ 464.127215][ T4361] device hsr_slave_1 left promiscuous mode [ 464.147693][ T4361] device bridge_slave_1 left promiscuous mode [ 464.157257][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.173016][ T4361] device bridge_slave_0 left promiscuous mode [ 464.179405][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.380261][ T4361] device veth1_macvtap left promiscuous mode [ 465.200682][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 467.194702][ T4361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.204039][ T4361] device bond_slave_1 left promiscuous mode [ 467.249215][ T4361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.258909][ T4361] device bond_slave_0 left promiscuous mode [ 467.276866][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 467.536662][ T4361] bond0 (unregistering): Released all slaves [ 467.635465][T13093] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2267'. [ 468.780511][T13152] delete_channel: no stack [ 468.974297][T12958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.005712][T12958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.044370][T12958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.080064][T12958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.334422][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.376563][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.411605][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.465315][T12958] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.489307][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.503520][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.526220][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.533557][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.577185][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.595999][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.617762][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.638653][ T4952] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.645974][ T4952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.660345][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.674174][T13189] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 469.723258][T13189] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 469.740319][T13192] sock: sock_timestamping_bind_phc: sock not bind to device [ 469.832350][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.864854][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.908219][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.964416][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.028458][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.052130][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.114135][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.128063][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.139741][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.166286][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.179884][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.593597][T13212] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.2289'. [ 470.659247][T13212] netlink: zone id is out of range [ 470.683271][T13212] netlink: zone id is out of range [ 470.712246][T13212] netlink: zone id is out of range [ 470.717497][T13212] netlink: zone id is out of range [ 470.752973][T13212] netlink: zone id is out of range [ 470.758219][T13212] netlink: zone id is out of range [ 470.851053][T13212] netlink: zone id is out of range [ 470.856310][T13212] netlink: zone id is out of range [ 470.930872][T13212] netlink: zone id is out of range [ 470.936176][T13212] netlink: zone id is out of range [ 471.499061][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.523779][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 471.610861][T12958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.690298][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.733049][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.830453][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.849282][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.874763][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.896656][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.921679][T12958] device veth0_vlan entered promiscuous mode [ 471.954757][T12958] device veth1_vlan entered promiscuous mode [ 472.107617][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.313413][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.509780][T12958] device veth0_macvtap entered promiscuous mode [ 472.549373][T13262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2302'. [ 472.664077][T12958] device veth1_macvtap entered promiscuous mode [ 472.695931][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.706666][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.773448][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.831293][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.924774][T12958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.983434][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 473.022109][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 473.077261][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.201923][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.282371][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.331464][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.380771][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.464955][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.505784][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.547588][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.617069][T12958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.643787][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.684288][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.732435][T12958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.767473][T12958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.790814][T12958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.827337][T12958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.021771][T13296] pimreg: tun_chr_ioctl cmd 2147767520 [ 474.131366][ T6601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.176653][ T6601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.211286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.250489][ T4952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.301050][ T4952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.333907][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 475.637399][T13362] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2324'. [ 475.836515][T13371] net_ratelimit: 135 callbacks suppressed [ 475.836533][T13371] wlan1: mtu greater than device maximum [ 476.008885][T13371] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2326'. [ 476.056941][T13371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.102408][T13371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.201562][T13371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.238398][T13371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.668329][T13400] netlink: 'syz.3.2336': attribute type 9 has an invalid length. [ 477.018902][T13419] netlink: 'syz.1.2341': attribute type 46 has an invalid length. [ 477.207481][T13419] netlink: 'syz.1.2341': attribute type 46 has an invalid length. [ 478.972130][T13485] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2356'. [ 479.642307][T13503] netlink: 'syz.2.2359': attribute type 9 has an invalid length. [ 479.737884][T13503] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2359'. [ 480.594470][T13541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2367'. [ 480.735109][T13543] netlink: 'syz.2.2368': attribute type 10 has an invalid length. [ 480.790890][T13543] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2368'. [ 480.811444][T13543] device team0 entered promiscuous mode [ 480.824489][T13543] device team_slave_0 entered promiscuous mode [ 480.841633][T13543] device team_slave_1 entered promiscuous mode [ 480.871699][T13543] device wlan1 entered promiscuous mode [ 480.888254][T13543] device batadv0 entered promiscuous mode [ 480.931727][T13543] device vlan0 entered promiscuous mode [ 480.982694][T13543] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.021025][T13543] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 483.154332][T13607] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 486.129744][ T4361] tipc: Subscription rejected, illegal request [ 486.246718][T13687] netlink: 'syz.1.2407': attribute type 27 has an invalid length. [ 486.721901][T13687] bond0: (slave bond_slave_0): Releasing backup interface [ 488.337732][T13689] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2406'. [ 488.438638][T13698] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2406'. [ 489.694305][T13728] netlink: 'syz.2.2416': attribute type 10 has an invalid length. [ 490.180343][T13737] netlink: 'syz.0.2420': attribute type 27 has an invalid length. [ 490.896914][T13758] netlink: 'syz.4.2422': attribute type 3 has an invalid length. [ 490.949866][T13758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2422'. [ 491.932284][T13784] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2431'. [ 494.646507][T13804] device syzkaller0 entered promiscuous mode [ 495.053493][T13808] netlink: 'syz.1.2439': attribute type 16 has an invalid length. [ 495.124114][T13808] netlink: 'syz.1.2439': attribute type 3 has an invalid length. [ 495.165076][T13808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2439'. [ 497.837874][T13832] sctp: [Deprecated]: syz.4.2443 (pid 13832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.837874][T13832] Use struct sctp_sack_info instead [ 499.730023][T13826] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2443'. [ 499.992508][T13842] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2447'. [ 500.368864][T13858] tap0: tun_chr_ioctl cmd 2147767517 [ 500.440406][T13855] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2448'. [ 500.459816][T13857] netlink: 'syz.3.2452': attribute type 3 has an invalid length. [ 500.471496][T13857] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2452'. [ 500.596590][T13855] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 500.628781][T13855] CPU: 0 PID: 13855 Comm: syz.1.2448 Not tainted syzkaller #0 [ 500.636344][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.646479][T13855] Call Trace: [ 500.649824][T13855] [ 500.652803][T13855] dump_stack_lvl+0x188/0x24e [ 500.657550][T13855] ? show_regs_print_info+0x12/0x12 [ 500.662915][T13855] ? load_image+0x400/0x400 [ 500.667586][T13855] sysfs_warn_dup+0x8a/0xa0 [ 500.672178][T13855] sysfs_do_create_link_sd+0xc0/0x110 [ 500.677636][T13855] device_add+0x7ed/0xfb0 [ 500.682057][T13855] wiphy_register+0x1d9f/0x2ac0 [ 500.687007][T13855] ? cfg80211_event_work+0x40/0x40 [ 500.692189][T13855] ? minstrel_ht_alloc+0x894/0xa20 [ 500.697427][T13855] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 500.703575][T13855] ieee80211_register_hw+0x2d00/0x39f0 [ 500.709122][T13855] ? ieee80211_register_hw+0xea1/0x39f0 [ 500.714735][T13855] ? ieee80211_register_hw+0xea1/0x39f0 [ 500.720361][T13855] ? ieee80211_tasklet_handler+0x20/0x20 [ 500.726075][T13855] ? memset+0x1e/0x40 [ 500.730107][T13855] ? __hrtimer_init+0x186/0x270 [ 500.735015][T13855] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 500.740907][T13855] hwsim_new_radio_nl+0xafa/0xce0 [ 500.746104][T13855] genl_family_rcv_msg_doit+0x22a/0x330 [ 500.751725][T13855] ? end_current_label_crit_section+0x170/0x170 [ 500.758351][T13855] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 500.764421][T13855] ? bpf_lsm_capable+0x5/0x10 [ 500.769157][T13855] ? security_capable+0x85/0xb0 [ 500.774069][T13855] genl_rcv_msg+0x604/0x790 [ 500.778661][T13855] ? genl_bind+0x360/0x360 [ 500.783138][T13855] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 500.789557][T13855] netlink_rcv_skb+0x1fb/0x450 [ 500.794393][T13855] ? genl_bind+0x360/0x360 [ 500.798900][T13855] ? netlink_ack+0x1170/0x1170 [ 500.803744][T13855] ? down_read+0x1a8/0x2d0 [ 500.808238][T13855] genl_rcv+0x24/0x40 [ 500.812300][T13855] netlink_unicast+0x74d/0x8d0 [ 500.817155][T13855] netlink_sendmsg+0x8ad/0xbd0 [ 500.822178][T13855] ? netlink_getsockopt+0x550/0x550 [ 500.827463][T13855] ? aa_sock_msg_perm+0x94/0x150 [ 500.832458][T13855] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 500.837782][T13855] ? security_socket_sendmsg+0x7c/0xa0 [ 500.843309][T13855] ? netlink_getsockopt+0x550/0x550 [ 500.848576][T13855] ____sys_sendmsg+0x5be/0x970 [ 500.853415][T13855] ? __sys_sendmsg_sock+0x30/0x30 [ 500.858557][T13855] ? __import_iovec+0x315/0x500 [ 500.863471][T13855] ? import_iovec+0x6f/0xa0 [ 500.868013][T13855] ___sys_sendmsg+0x2a2/0x360 [ 500.872774][T13855] ? try_to_wake_up+0x67c/0x1080 [ 500.877767][T13855] ? __sys_sendmsg+0x290/0x290 [ 500.882638][T13855] __se_sys_sendmsg+0x1bb/0x2a0 [ 500.887557][T13855] ? __x64_sys_sendmsg+0x80/0x80 [ 500.892577][T13855] ? lockdep_hardirqs_on+0x94/0x140 [ 500.897838][T13855] do_syscall_64+0x4c/0xa0 [ 500.902300][T13855] ? clear_bhb_loop+0x60/0xb0 [ 500.907107][T13855] ? clear_bhb_loop+0x60/0xb0 [ 500.911821][T13855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.917822][T13855] RIP: 0033:0x7fc2d3d9acb9 [ 500.922285][T13855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.942119][T13855] RSP: 002b:00007fc2d4bc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.950746][T13855] RAX: ffffffffffffffda RBX: 00007fc2d4016090 RCX: 00007fc2d3d9acb9 [ 500.958758][T13855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 500.966757][T13855] RBP: 00007fc2d3e08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 500.974754][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.982840][T13855] R13: 00007fc2d4016128 R14: 00007fc2d4016090 R15: 00007ffc90d3e9a8 [ 500.990868][T13855] [ 501.476474][T13878] netlink: 'syz.2.2457': attribute type 21 has an invalid length. [ 501.539419][T13878] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2457'. [ 501.617686][T13878] netlink: 'syz.2.2457': attribute type 5 has an invalid length. [ 501.637557][T13878] netlink: 'syz.2.2457': attribute type 6 has an invalid length. [ 501.665474][T13878] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2457'. [ 501.684035][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.690457][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.734990][T13883] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2459'. [ 502.068525][T13897] device vcan0 entered promiscuous mode [ 502.090117][T13897] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 502.159281][T13904] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2463'. [ 502.345606][T13910] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2465'. [ 502.399080][T13900] delete_channel: no stack [ 502.560148][T13917] device sit0 entered promiscuous mode [ 503.069916][T13928] netlink: 'syz.3.2471': attribute type 2 has an invalid length. [ 503.101585][T13928] netlink: 'syz.3.2471': attribute type 8 has an invalid length. [ 503.109628][T13928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2471'. [ 503.573682][T13955] netlink: 'syz.3.2478': attribute type 7 has an invalid length. [ 503.998494][T13964] netlink: 'syz.4.2481': attribute type 21 has an invalid length. [ 504.021457][T13964] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2481'. [ 504.569303][T13989] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2485'. [ 505.448945][T14013] netlink: 'syz.3.2494': attribute type 3 has an invalid length. [ 505.459858][T14013] __nla_validate_parse: 2 callbacks suppressed [ 505.459875][T14013] netlink: 7874 bytes leftover after parsing attributes in process `syz.3.2494'. [ 505.719969][T14020] netlink: 'syz.2.2496': attribute type 3 has an invalid length. [ 505.748264][T14015] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 505.765927][T14020] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2496'. [ 505.777466][T14015] syzkaller1: linktype set to 823 [ 505.864308][T14015] netlink: 'syz.4.2495': attribute type 3 has an invalid length. [ 505.881417][T14015] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2495'. [ 506.047238][T14026] netlink: 'syz.0.2497': attribute type 21 has an invalid length. [ 506.059487][T14026] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2497'. [ 507.225788][T14045] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 507.260814][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2505'. [ 508.320267][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 508.361540][T14067] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 508.377643][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2511'. [ 508.422885][T14072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2513'. [ 508.698534][T14077] netlink: 'syz.4.2514': attribute type 3 has an invalid length. [ 508.736489][T14077] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2514'. [ 509.711942][T14102] delete_channel: no stack [ 510.485182][ T4274] Bluetooth: hci4: ISO packet for unknown connection handle 62 [ 510.494633][T14131] __nla_validate_parse: 1 callbacks suppressed [ 510.494651][T14131] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2528'. [ 511.499768][T14170] netlink: 'syz.3.2538': attribute type 13 has an invalid length. [ 511.547617][T14170] netlink: 'syz.3.2538': attribute type 14 has an invalid length. [ 511.589306][T14170] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2538'. [ 511.726606][T14174] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2539'. [ 511.883673][T14174] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 511.931967][T14174] CPU: 0 PID: 14174 Comm: syz.4.2539 Not tainted syzkaller #0 [ 511.939546][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.949702][T14174] Call Trace: [ 511.953059][T14174] [ 511.956092][T14174] dump_stack_lvl+0x188/0x24e [ 511.960870][T14174] ? show_regs_print_info+0x12/0x12 [ 511.966162][T14174] ? load_image+0x400/0x400 [ 511.970797][T14174] sysfs_warn_dup+0x8a/0xa0 [ 511.975390][T14174] sysfs_do_create_link_sd+0xc0/0x110 [ 511.980911][T14174] device_add+0x7ed/0xfb0 [ 511.985398][T14174] wiphy_register+0x1d9f/0x2ac0 [ 511.990432][T14174] ? cfg80211_event_work+0x40/0x40 [ 511.995641][T14174] ? minstrel_ht_alloc+0x894/0xa20 [ 512.000877][T14174] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 512.007062][T14174] ieee80211_register_hw+0x2d00/0x39f0 [ 512.012860][T14174] ? ieee80211_register_hw+0xea1/0x39f0 [ 512.018495][T14174] ? ieee80211_register_hw+0xea1/0x39f0 [ 512.024253][T14174] ? ieee80211_tasklet_handler+0x20/0x20 [ 512.030018][T14174] ? memset+0x1e/0x40 [ 512.034070][T14174] ? __hrtimer_init+0x186/0x270 [ 512.038985][T14174] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 512.044909][T14174] hwsim_new_radio_nl+0xafa/0xce0 [ 512.050250][T14174] genl_family_rcv_msg_doit+0x22a/0x330 [ 512.055858][T14174] ? end_current_label_crit_section+0x170/0x170 [ 512.062176][T14174] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 512.068189][T14174] ? bpf_lsm_capable+0x5/0x10 [ 512.072940][T14174] ? security_capable+0x85/0xb0 [ 512.077864][T14174] genl_rcv_msg+0x604/0x790 [ 512.082465][T14174] ? genl_bind+0x360/0x360 [ 512.086940][T14174] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 512.093380][T14174] netlink_rcv_skb+0x1fb/0x450 [ 512.098292][T14174] ? genl_bind+0x360/0x360 [ 512.102779][T14174] ? netlink_ack+0x1170/0x1170 [ 512.107628][T14174] ? down_read+0x1a8/0x2d0 [ 512.112109][T14174] genl_rcv+0x24/0x40 [ 512.116255][T14174] netlink_unicast+0x74d/0x8d0 [ 512.121112][T14174] netlink_sendmsg+0x8ad/0xbd0 [ 512.125976][T14174] ? netlink_getsockopt+0x550/0x550 [ 512.131247][T14174] ? aa_sock_msg_perm+0x94/0x150 [ 512.136253][T14174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 512.141637][T14174] ? security_socket_sendmsg+0x7c/0xa0 [ 512.147165][T14174] ? netlink_getsockopt+0x550/0x550 [ 512.152598][T14174] ____sys_sendmsg+0x5be/0x970 [ 512.157447][T14174] ? __sys_sendmsg_sock+0x30/0x30 [ 512.162543][T14174] ? __import_iovec+0x315/0x500 [ 512.167489][T14174] ? import_iovec+0x6f/0xa0 [ 512.172097][T14174] ___sys_sendmsg+0x2a2/0x360 [ 512.176829][T14174] ? try_to_wake_up+0x67c/0x1080 [ 512.181830][T14174] ? __sys_sendmsg+0x290/0x290 [ 512.186791][T14174] __se_sys_sendmsg+0x1bb/0x2a0 [ 512.191705][T14174] ? __x64_sys_sendmsg+0x80/0x80 [ 512.196751][T14174] ? lockdep_hardirqs_on+0x94/0x140 [ 512.202082][T14174] do_syscall_64+0x4c/0xa0 [ 512.206555][T14174] ? clear_bhb_loop+0x60/0xb0 [ 512.211284][T14174] ? clear_bhb_loop+0x60/0xb0 [ 512.216035][T14174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.222074][T14174] RIP: 0033:0x7f1257b9acb9 [ 512.226548][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.246226][T14174] RSP: 002b:00007f1258a84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.254697][T14174] RAX: ffffffffffffffda RBX: 00007f1257e16090 RCX: 00007f1257b9acb9 [ 512.262718][T14174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 512.270739][T14174] RBP: 00007f1257c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 512.278780][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.286798][T14174] R13: 00007f1257e16128 R14: 00007f1257e16090 R15: 00007fff3f6dea28 [ 512.294874][T14174] [ 514.502865][T14200] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 514.547595][T14200] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 517.587790][T14238] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 517.634550][T14238] device team0 left promiscuous mode [ 517.653386][T14238] device team_slave_0 left promiscuous mode [ 517.672065][T14238] device team_slave_1 left promiscuous mode [ 517.720315][T14238] device wlan1 left promiscuous mode [ 517.802047][T14238] device batadv0 left promiscuous mode [ 517.819733][T14238] device vlan0 left promiscuous mode [ 518.500230][T14259] : port 1(gretap0) entered blocking state [ 518.520943][T14259] : port 1(gretap0) entered disabled state [ 518.541295][T14259] device gretap0 entered promiscuous mode [ 518.691520][T14266] netlink: 'syz.3.2563': attribute type 10 has an invalid length. [ 518.847634][T14266] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 518.857703][T14271] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2563'. [ 519.530667][T14291] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2568'. [ 519.751013][T14304] netlink: 'syz.3.2573': attribute type 11 has an invalid length. [ 519.758939][T14304] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2573'. [ 519.832519][T14304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.865120][T14336] netlink: 'syz.2.2581': attribute type 10 has an invalid length. [ 523.873661][T14336] batman_adv: batadv0: Adding interface: wlan0 [ 523.879876][T14336] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.905398][T14336] batman_adv: batadv0: Interface activated: wlan0 [ 524.151118][T14366] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2589'. [ 524.247822][T14370] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2591'. [ 524.397776][T14376] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2594'. [ 524.429541][T14380] netlink: 'syz.1.2595': attribute type 41 has an invalid length. [ 524.764360][T14393] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2598'. [ 526.350930][T14443] netlink: 'syz.4.2611': attribute type 7 has an invalid length. [ 526.361161][T14443] netlink: 208404 bytes leftover after parsing attributes in process `syz.4.2611'. [ 526.510838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 527.506355][T14486] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 527.536857][T14486] netlink: 'syz.0.2624': attribute type 29 has an invalid length. [ 527.578947][T14484] delete_channel: no stack [ 528.196127][T14520] netlink: 'syz.3.2633': attribute type 29 has an invalid length. [ 528.805661][T14520] netlink: 'syz.3.2633': attribute type 29 has an invalid length. [ 529.253348][T14556] netlink: 'syz.2.2644': attribute type 10 has an invalid length. [ 529.370051][T14556] team0: Device veth0_vlan is already a lower device of the team interface [ 529.635988][T14571] netlink: 'syz.1.2647': attribute type 4 has an invalid length. [ 529.671208][T14571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2647'. [ 530.075941][T14600] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2656'. [ 530.090011][T14600] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 530.257238][T14603] device pim6reg1 entered promiscuous mode [ 533.348442][T14624] netlink: 'syz.3.2662': attribute type 10 has an invalid length. [ 533.374926][T14624] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2662'. [ 533.400958][T14629] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2663'. [ 535.756604][T14631] netlink: 'syz.0.2665': attribute type 10 has an invalid length. [ 535.765469][T14631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2665'. [ 535.775833][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'. [ 535.786092][T14646] tc_dump_action: action bad kind [ 535.805308][T14650] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 535.820711][T14650] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2672'. [ 536.745432][T14705] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2688'. [ 536.768779][T14706] netlink: 'syz.1.2697': attribute type 2 has an invalid length. [ 536.793597][T14702] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 536.812304][T14702] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2687'. [ 536.867405][T14706] device .*! entered promiscuous mode [ 538.388695][T14755] netlink: 'syz.4.2703': attribute type 10 has an invalid length. [ 538.481216][T14755] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2703'. [ 538.804178][T14764] syzkaller0: create flow: hash 580370740 index 1 [ 539.314877][ T4359] syzkaller0: tun_net_xmit 76 [ 539.320342][ T4359] syzkaller0: tun_net_xmit 48 [ 539.340934][ T4342] syzkaller0: tun_net_xmit 76 [ 539.393618][T14757] syzkaller0: delete flow: hash 580370740 index 1 [ 542.558968][T14807] netlink: 'syz.1.2717': attribute type 29 has an invalid length. [ 544.629392][T14792] netlink: 'syz.0.2714': attribute type 10 has an invalid length. [ 544.637447][T14792] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2714'. [ 544.649029][T14792] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 544.663391][T14792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.707391][T14807] netlink: 'syz.1.2717': attribute type 29 has an invalid length. [ 544.991868][T14825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2722'. [ 545.136770][T14829] netlink: 'syz.0.2723': attribute type 29 has an invalid length. [ 545.160832][T14829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2723'. [ 545.187860][T14829] netlink: 'syz.0.2723': attribute type 29 has an invalid length. [ 545.200050][T14829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2723'. [ 547.255318][T14868] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 547.684782][T14870] netlink: 'syz.3.2734': attribute type 29 has an invalid length. [ 547.757852][T14868] team0: Port device wlan1 added [ 547.773754][T14873] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2735'. [ 547.804587][T14870] netlink: 'syz.3.2734': attribute type 29 has an invalid length. [ 548.333952][T14887] netlink: 'syz.3.2741': attribute type 7 has an invalid length. [ 548.944051][T14898] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 549.339541][T14911] netlink: 'syz.4.2750': attribute type 10 has an invalid length. [ 549.644450][T14922] netlink: 'syz.2.2752': attribute type 29 has an invalid length. [ 549.684717][T14922] netlink: 'syz.2.2752': attribute type 29 has an invalid length. [ 549.720477][T14922] netlink: 'syz.2.2752': attribute type 29 has an invalid length. [ 550.075601][T14945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2760'. [ 550.107812][T14945] device caif0 entered promiscuous mode [ 552.616442][T14971] netlink: 'syz.0.2766': attribute type 4 has an invalid length. [ 552.650909][T14971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2766'. [ 552.676638][T14971] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 552.721996][T14971] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 553.809625][T15007] netlink: 'syz.2.2775': attribute type 10 has an invalid length. [ 554.796952][T15044] netlink: 'syz.1.2788': attribute type 21 has an invalid length. [ 554.821591][T15044] netlink: 'syz.1.2788': attribute type 1 has an invalid length. [ 554.829485][T15044] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2788'. [ 555.166380][T15061] FAULT_INJECTION: forcing a failure. [ 555.166380][T15061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 555.220091][T15061] CPU: 0 PID: 15061 Comm: syz.4.2794 Not tainted syzkaller #0 [ 555.227779][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.238094][T15061] Call Trace: [ 555.241429][T15061] [ 555.244584][T15061] dump_stack_lvl+0x188/0x24e [ 555.249335][T15061] ? show_regs_print_info+0x12/0x12 [ 555.254621][T15061] ? load_image+0x400/0x400 [ 555.259186][T15061] ? __lock_acquire+0x7d10/0x7d10 [ 555.264315][T15061] ? snprintf+0xe5/0x140 [ 555.268619][T15061] should_fail_ex+0x399/0x4d0 [ 555.273375][T15061] _copy_to_user+0x2c/0x130 [ 555.277947][T15061] simple_read_from_buffer+0xe3/0x150 [ 555.283392][T15061] proc_fail_nth_read+0x1a6/0x220 [ 555.288487][T15061] ? proc_fault_inject_write+0x310/0x310 [ 555.294197][T15061] ? fsnotify_perm+0x248/0x550 [ 555.299032][T15061] ? proc_fault_inject_write+0x310/0x310 [ 555.304814][T15061] vfs_read+0x2de/0xa00 [ 555.309055][T15061] ? kernel_read+0x1e0/0x1e0 [ 555.313708][T15061] ? __fget_files+0x28/0x4b0 [ 555.318364][T15061] ? __fget_files+0x28/0x4b0 [ 555.323016][T15061] ? __fget_files+0x43d/0x4b0 [ 555.327768][T15061] ? __fdget_pos+0x2ae/0x360 [ 555.332513][T15061] ? ksys_read+0x71/0x250 [ 555.336910][T15061] ksys_read+0x14c/0x250 [ 555.341218][T15061] ? vfs_write+0xa30/0xa30 [ 555.345703][T15061] ? lockdep_hardirqs_on+0x94/0x140 [ 555.350970][T15061] do_syscall_64+0x4c/0xa0 [ 555.355443][T15061] ? clear_bhb_loop+0x60/0xb0 [ 555.360434][T15061] ? clear_bhb_loop+0x60/0xb0 [ 555.365176][T15061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.371128][T15061] RIP: 0033:0x7f1257b5b58e [ 555.375640][T15061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 555.395485][T15061] RSP: 002b:00007f1258aa4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.403962][T15061] RAX: ffffffffffffffda RBX: 00007f1258aa56c0 RCX: 00007f1257b5b58e [ 555.412002][T15061] RDX: 000000000000000f RSI: 00007f1258aa50a0 RDI: 0000000000000004 [ 555.420035][T15061] RBP: 00007f1258aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 555.428157][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.436209][T15061] R13: 00007f1257e16038 R14: 00007f1257e15fa0 R15: 00007fff3f6dea28 [ 555.444405][T15061] [ 555.587513][T15067] netlink: 'syz.1.2793': attribute type 10 has an invalid length. [ 555.779695][T15072] sock: sock_set_timeout: `syz.0.2795' (pid 15072) tries to set negative timeout [ 555.902334][T15082] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 555.945602][T15082] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2798'. [ 556.378288][T15089] can: request_module (can-proto-4) failed. [ 556.596289][T15110] netlink: 'syz.1.2806': attribute type 10 has an invalid length. [ 556.853849][ T4274] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 557.280106][T15125] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 557.308214][T15124] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 557.314856][ T4359] syzkaller0: tun_net_xmit 76 [ 557.882587][T15154] netlink: 'syz.4.2816': attribute type 41 has an invalid length. [ 557.890490][T15154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2816'. [ 559.370896][T15198] netlink: 'syz.1.2827': attribute type 10 has an invalid length. [ 559.400684][T15198] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 563.115730][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.122181][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.594822][T15256] delete_channel: no stack [ 563.599432][T15256] delete_channel: no stack [ 563.638229][T15248] netlink: 'syz.2.2843': attribute type 10 has an invalid length. [ 564.175267][T15288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2852'. [ 564.199340][T15288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2852'. [ 564.221080][T15289] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2852'. [ 564.252202][T15288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2852'. [ 565.757999][T15308] netlink: 'syz.0.2856': attribute type 21 has an invalid length. [ 565.766245][T15308] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2856'. [ 567.890131][T15349] netlink: 'syz.3.2867': attribute type 21 has an invalid length. [ 567.907642][T15349] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2867'. [ 568.136774][T15358] netlink: 'syz.3.2870': attribute type 6 has an invalid length. [ 568.229966][T15352] netlink: 'syz.4.2866': attribute type 10 has an invalid length. [ 568.404861][T15364] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2871'. [ 568.438468][T15368] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2873'. [ 568.447294][T15364] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2871'. [ 568.468064][T15368] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2873'. [ 568.469962][T15364] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 569.471755][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 569.484062][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 569.494119][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 569.503524][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 569.511854][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 569.519278][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 569.703926][T14722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.090265][T14722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.131996][T15411] netlink: 'syz.0.2885': attribute type 10 has an invalid length. [ 570.248579][T14722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.394262][T14722] bond0: (slave netdevsim0): Releasing backup interface [ 570.401553][T15439] netlink: 'syz.2.2891': attribute type 3 has an invalid length. [ 570.411199][T15439] __nla_validate_parse: 2 callbacks suppressed [ 570.411220][T15439] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2891'. [ 570.446438][T14722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.677821][T15437] can: request_module (can-proto-4) failed. [ 570.863700][T14722] device 0 left promiscuous mode [ 571.052915][T15405] chnl_net:caif_netlink_parms(): no params data found [ 571.094079][T14722] device .*! left promiscuous mode [ 571.332150][T15405] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.339446][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.348849][T15405] device bridge_slave_0 entered promiscuous mode [ 571.358322][T15405] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.367521][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.376468][T15405] device bridge_slave_1 entered promiscuous mode [ 571.596034][ T4275] Bluetooth: hci0: command 0x0409 tx timeout [ 571.688658][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.728585][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.769101][T15405] team0: Port device team_slave_0 added [ 571.777941][T15405] team0: Port device team_slave_1 added [ 572.059048][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.100705][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.195803][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.336108][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.351351][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.457087][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.643117][T15405] device hsr_slave_0 entered promiscuous mode [ 572.650472][T15405] device hsr_slave_1 entered promiscuous mode [ 572.666315][T15405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.675718][T15405] Cannot create hsr debugfs directory [ 572.686735][T15515] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2908'. [ 572.709188][T15515] team0: default FDB implementation only supports local addresses [ 572.751204][T15518] wlan1: mtu greater than device maximum [ 572.786001][T14722] device gretap0 left promiscuous mode [ 572.800170][T15518] netlink: 'syz.0.2909': attribute type 2 has an invalid length. [ 572.814653][T14722] : port 1(gretap0) entered disabled state [ 573.007549][T15518] device 0 entered promiscuous mode [ 573.332930][T15533] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2912'. [ 573.680721][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 574.567303][T14722] bond0: (slave wlan1): Releasing backup interface [ 574.904465][T15405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.030036][T14722] device veth0_macvtap left promiscuous mode [ 575.259402][T15590] netlink: 'syz.3.2926': attribute type 3 has an invalid length. [ 575.282179][T15590] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2926'. [ 575.750690][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 576.346469][T14722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.689778][T14722] bond0 (unregistering): Released all slaves [ 576.731784][T15405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 576.744135][T15405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.785421][T15405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 577.466564][T15405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.535665][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.554055][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.585042][T15405] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.624502][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.641962][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.681430][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.688627][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.728234][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.758832][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.779575][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.798430][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.805769][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.830766][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 577.831922][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.886583][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 577.906215][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.961895][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 578.011094][T15656] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2941'. [ 578.054020][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.090988][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.136611][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 578.247281][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.319272][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.464427][T15674] netlink: 'syz.3.2941': attribute type 27 has an invalid length. [ 578.721466][T15674] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2941'. [ 578.998142][T15664] netlink: 'syz.3.2941': attribute type 21 has an invalid length. [ 579.010701][T15664] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2941'. [ 579.029914][T15662] netlink: 'syz.0.2943': attribute type 27 has an invalid length. [ 579.051585][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 579.091502][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.102902][T15405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.426084][T15685] netlink: 'syz.0.2946': attribute type 10 has an invalid length. [ 579.598684][T15694] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2945'. [ 579.727450][T15694] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 579.817889][T15694] CPU: 0 PID: 15694 Comm: syz.4.2945 Not tainted syzkaller #0 [ 579.825447][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.835656][T15694] Call Trace: [ 579.838992][T15694] [ 579.841971][T15694] dump_stack_lvl+0x188/0x24e [ 579.846717][T15694] ? show_regs_print_info+0x12/0x12 [ 579.851988][T15694] ? load_image+0x400/0x400 [ 579.856563][T15694] sysfs_warn_dup+0x8a/0xa0 [ 579.861247][T15694] sysfs_do_create_link_sd+0xc0/0x110 [ 579.866662][T15694] device_add+0x7ed/0xfb0 [ 579.871055][T15694] wiphy_register+0x1d9f/0x2ac0 [ 579.876059][T15694] ? cfg80211_event_work+0x40/0x40 [ 579.881203][T15694] ? minstrel_ht_alloc+0x894/0xa20 [ 579.886700][T15694] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 579.892822][T15694] ieee80211_register_hw+0x2d00/0x39f0 [ 579.898334][T15694] ? ieee80211_register_hw+0xea1/0x39f0 [ 579.903919][T15694] ? ieee80211_register_hw+0xea1/0x39f0 [ 579.909511][T15694] ? ieee80211_tasklet_handler+0x20/0x20 [ 579.915203][T15694] ? memset+0x1e/0x40 [ 579.919217][T15694] ? __hrtimer_init+0x186/0x270 [ 579.924139][T15694] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 579.930006][T15694] hwsim_new_radio_nl+0xafa/0xce0 [ 579.935079][T15694] genl_family_rcv_msg_doit+0x22a/0x330 [ 579.940754][T15694] ? end_current_label_crit_section+0x170/0x170 [ 579.947132][T15694] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 579.953172][T15694] ? bpf_lsm_capable+0x5/0x10 [ 579.957891][T15694] ? security_capable+0x85/0xb0 [ 579.962780][T15694] genl_rcv_msg+0x604/0x790 [ 579.967333][T15694] ? genl_bind+0x360/0x360 [ 579.971811][T15694] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 579.978314][T15694] netlink_rcv_skb+0x1fb/0x450 [ 579.983116][T15694] ? genl_bind+0x360/0x360 [ 579.987574][T15694] ? netlink_ack+0x1170/0x1170 [ 579.992380][T15694] ? down_read+0x1a8/0x2d0 [ 579.996838][T15694] genl_rcv+0x24/0x40 [ 580.000876][T15694] netlink_unicast+0x74d/0x8d0 [ 580.005807][T15694] netlink_sendmsg+0x8ad/0xbd0 [ 580.010646][T15694] ? netlink_getsockopt+0x550/0x550 [ 580.015912][T15694] ? aa_sock_msg_perm+0x94/0x150 [ 580.020895][T15694] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 580.026222][T15694] ? security_socket_sendmsg+0x7c/0xa0 [ 580.031730][T15694] ? netlink_getsockopt+0x550/0x550 [ 580.036976][T15694] ____sys_sendmsg+0x5be/0x970 [ 580.041794][T15694] ? __sys_sendmsg_sock+0x30/0x30 [ 580.046867][T15694] ? __import_iovec+0x315/0x500 [ 580.051760][T15694] ? import_iovec+0x6f/0xa0 [ 580.056301][T15694] ___sys_sendmsg+0x2a2/0x360 [ 580.061041][T15694] ? try_to_wake_up+0x6ae/0x1080 [ 580.066149][T15694] ? __sys_sendmsg+0x290/0x290 [ 580.070987][T15694] ? btf_new_fd+0x396/0x780 [ 580.075645][T15694] __se_sys_sendmsg+0x1bb/0x2a0 [ 580.080555][T15694] ? ct_nmi_exit+0x145/0x1c0 [ 580.085182][T15694] ? __x64_sys_sendmsg+0x80/0x80 [ 580.090168][T15694] ? lockdep_hardirqs_on+0x94/0x140 [ 580.095417][T15694] do_syscall_64+0x4c/0xa0 [ 580.099877][T15694] ? clear_bhb_loop+0x60/0xb0 [ 580.104872][T15694] ? clear_bhb_loop+0x60/0xb0 [ 580.109630][T15694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.115606][T15694] RIP: 0033:0x7f1257b9acb9 [ 580.120073][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.139740][T15694] RSP: 002b:00007f1258a84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.148199][T15694] RAX: ffffffffffffffda RBX: 00007f1257e16090 RCX: 00007f1257b9acb9 [ 580.156208][T15694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 580.164235][T15694] RBP: 00007f1257c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 580.172278][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.180306][T15694] R13: 00007f1257e16128 R14: 00007f1257e16090 R15: 00007fff3f6dea28 [ 580.188413][T15694] [ 580.763393][ T6617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 580.840953][ T6617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 580.941919][T15405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.101361][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 581.135871][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 581.354143][T15405] device veth0_vlan entered promiscuous mode [ 581.374473][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 581.432263][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 581.501849][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 581.551573][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 581.620395][T15405] device veth1_vlan entered promiscuous mode [ 581.734277][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 581.767288][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 581.793027][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 581.809201][T14721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.859688][T15405] device veth0_macvtap entered promiscuous mode [ 581.896004][T15405] device veth1_macvtap entered promiscuous mode [ 581.938620][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.955038][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.965792][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.981915][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.050285][T15405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.068978][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.090260][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.125376][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.156602][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.198801][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.216124][T15749] netlink: 'syz.4.2960': attribute type 11 has an invalid length. [ 582.240776][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.257516][T15749] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2960'. [ 582.289282][T15405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.302525][T15744] netlink: 'syz.3.2959': attribute type 39 has an invalid length. [ 582.510278][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 582.523404][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 582.535903][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 582.546794][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 582.561757][T15748] netlink: 'syz.2.2958': attribute type 10 has an invalid length. [ 582.572501][T15748] device veth1_macvtap left promiscuous mode [ 582.638395][T15405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.656262][T15405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.667054][T15405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.680257][T15405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.766243][T15747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.837643][T15405] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 582.860365][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.904736][T14722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.921051][T14722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.012746][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.095188][ T4952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.118636][ T4952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.147552][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.265606][T15774] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2966'. [ 585.305606][T15817] netlink: 'syz.3.2976': attribute type 1 has an invalid length. [ 585.369038][T15817] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 585.453980][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 585.468075][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 585.470450][T15817] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2976'. [ 585.487932][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 585.496418][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 585.504426][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 585.511979][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 585.620936][T15821] netlink: 'syz.3.2976': attribute type 1 has an invalid length. [ 585.670833][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 585.697388][T15821] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 585.708508][T15829] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.2978'. [ 585.733340][T15821] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2976'. [ 585.809076][T15829] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.2978'. [ 585.955365][T14722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.600729][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 588.934730][T14722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.127444][T14722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.606814][T15887] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2992'. [ 589.670806][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 590.379612][T15820] chnl_net:caif_netlink_parms(): no params data found [ 590.422913][T14722] device .*! left promiscuous mode [ 591.750689][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 592.003376][T15820] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.011767][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.020221][T15820] device bridge_slave_0 entered promiscuous mode [ 592.321947][T15820] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.341267][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.366857][T15820] device bridge_slave_1 entered promiscuous mode [ 592.403571][T15943] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3000'. [ 592.430356][T15949] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3000'. [ 592.671453][T15820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.733893][T15820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.011887][T15820] team0: Port device team_slave_0 added [ 593.058701][T15820] team0: Port device team_slave_1 added [ 593.326530][T15981] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3010'. [ 593.356700][T15820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.369144][T15820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.484233][T15820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.522740][T15820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.529870][T15820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.573880][T15820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.814463][T15820] device hsr_slave_0 entered promiscuous mode [ 593.829204][T15820] device hsr_slave_1 entered promiscuous mode [ 593.836140][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 593.909809][T15820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.935664][T15997] netlink: 'syz.4.3013': attribute type 2 has an invalid length. [ 593.940102][T15820] Cannot create hsr debugfs directory [ 594.133183][T15997] device 0 entered promiscuous mode [ 594.418691][T14722] team0: Port device wlan1 removed [ 594.683785][T14722] batman_adv: batadv0: Interface deactivated: wlan0 [ 594.769129][T14722] batman_adv: batadv0: Removing interface: wlan0 [ 594.912240][T14722] device hsr_slave_0 left promiscuous mode [ 594.964060][T14722] device hsr_slave_1 left promiscuous mode [ 594.986053][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.006913][T14722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.032038][T14722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.039812][T14722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.078327][T14722] device veth1_vlan left promiscuous mode [ 595.240070][T16031] syz.4.3021[16031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.240190][T16031] syz.4.3021[16031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.123923][T16047] netlink: 'syz.4.3022': attribute type 11 has an invalid length. [ 596.146822][T14722] team0 (unregistering): Port device vlan0 removed [ 596.198067][T16047] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3022'. [ 596.226124][T16038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.789462][T14722] team0 (unregistering): Port device team_slave_1 removed [ 596.838227][T14722] team0 (unregistering): Port device team_slave_0 removed [ 597.149799][T14722] team0 (unregistering): Port device batadv0 removed [ 597.258050][T16064] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3026'. [ 597.290164][T16063] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3026'. [ 597.751211][T16074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3029'. [ 597.960665][T16082] netlink: 'syz.0.3031': attribute type 21 has an invalid length. [ 597.968588][T16082] netlink: 'syz.0.3031': attribute type 4 has an invalid length. [ 598.012049][T16082] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3031'. [ 598.044739][T16086] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.3031'. [ 599.147345][T16098] delete_channel: no stack [ 599.337740][T16111] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 599.395988][T16117] netlink: 'syz.3.3037': attribute type 10 has an invalid length. [ 599.437065][T14722] tipc: Subscription rejected, illegal request [ 599.533893][T16117] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 599.577018][T16115] netlink: 611 bytes leftover after parsing attributes in process `syz.0.3039'. [ 599.618408][T15820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 599.744452][T15820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 599.763825][T15820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 599.808399][T15820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 600.112078][T16143] netlink: 64351 bytes leftover after parsing attributes in process `syz.0.3045'. [ 600.236500][T15820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.305476][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.323721][T14722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.347120][T15820] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.379695][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.394396][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.421105][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.428339][ T4343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.481218][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.506666][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.532815][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.569144][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.576427][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.607353][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.649789][T16158] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3050'. [ 600.944248][T16157] delete_channel: no stack [ 600.972864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.995843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.020310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.034396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.058088][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.076935][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.123074][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.140216][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.152814][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.168726][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.186743][T15820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.821470][T16198] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3055'. [ 601.864655][T16198] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 602.220727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.239774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.286609][T15820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.367759][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 602.381774][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 602.443860][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 602.471886][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 602.501269][T15820] device veth0_vlan entered promiscuous mode [ 602.512786][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 602.556199][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 602.607991][T15820] device veth1_vlan entered promiscuous mode [ 602.699821][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 602.717416][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 602.741876][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 602.757436][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 602.881662][T16213] netlink: 'syz.4.3062': attribute type 10 has an invalid length. [ 602.919176][T16213] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3062'. [ 605.682316][T16215] ------------[ cut here ]------------ [ 605.687974][T16215] WARNING: CPU: 1 PID: 16215 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 605.701614][T16215] Modules linked in: [ 605.705590][T16215] CPU: 1 PID: 16215 Comm: syz.3.3060 Not tainted syzkaller #0 [ 605.713148][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 605.723329][T16215] RIP: 0010:perf_pending_task+0x358/0x470 [ 605.729119][T16215] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 605.748846][T16215] RSP: 0018:ffffc9000453f8e0 EFLAGS: 00010293 [ 605.755106][T16215] RAX: ffffffff81a7f328 RBX: ffff88801a26f658 RCX: ffff88809059d940 [ 605.763195][T16215] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 605.771356][T16215] RBP: 0000000000000001 R08: ffff88809059e343 R09: 1ffff110120b3c68 [ 605.779392][T16215] R10: dffffc0000000000 R11: ffffed10120b3c69 R12: ffff88809059d940 [ 605.787582][T16215] R13: ffff88803071e960 R14: ffff88801a26f420 R15: 1ffff1100344de84 [ 605.795687][T16215] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 605.804876][T16215] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.811571][T16215] CR2: 00007f763e981990 CR3: 000000005b3bb000 CR4: 00000000003506e0 [ 605.819696][T16215] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 605.827802][T16215] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 605.835896][T16215] Call Trace: [ 605.839275][T16215] [ 605.842666][T16215] task_work_run+0x1d0/0x260 [ 605.847363][T16215] ? task_work_cancel+0x220/0x220 [ 605.852519][T16215] ? do_raw_spin_unlock+0x11d/0x230 [ 605.857807][T16215] do_exit+0x982/0x2480 [ 605.862137][T16215] ? put_task_struct+0x80/0x80 [ 605.866991][T16215] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 605.873122][T16215] ? _raw_spin_lock_irq+0x86/0xf0 [ 605.878241][T16215] ? lock_chain_count+0x20/0x20 [ 605.883312][T16215] ? _raw_spin_lock_irq+0xb7/0xf0 [ 605.888416][T16215] do_group_exit+0x217/0x2d0 [ 605.893139][T16215] ? lockdep_hardirqs_on+0x94/0x140 [ 605.898427][T16215] get_signal+0x1272/0x1350 [ 605.903092][T16215] arch_do_signal_or_restart+0xc4/0x1350 [ 605.908888][T16215] ? bpf_prog_free_id+0x190/0x190 [ 605.914146][T16215] ? cpu_online+0xa0/0xa0 [ 605.918633][T16215] ? bpf_prog_test_run+0x334/0x390 [ 605.923879][T16215] ? get_sigframe_size+0x10/0x10 [ 605.928882][T16215] ? __sys_bpf+0x62b/0x780 [ 605.933440][T16215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.939684][T16215] ? exit_to_user_mode_loop+0x3b/0x110 [ 605.945321][T16215] exit_to_user_mode_loop+0x70/0x110 [ 605.950764][T16215] exit_to_user_mode_prepare+0xee/0x180 [ 605.956394][T16215] syscall_exit_to_user_mode+0x16/0x40 [ 605.962164][T16215] do_syscall_64+0x58/0xa0 [ 605.966661][T16215] ? clear_bhb_loop+0x60/0xb0 [ 605.971457][T16215] ? clear_bhb_loop+0x60/0xb0 [ 605.976213][T16215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.982386][T16215] RIP: 0033:0x7f763db9acb9 [ 605.986961][T16215] Code: Unable to access opcode bytes at 0x7f763db9ac8f. [ 605.994360][T16215] RSP: 002b:00007f763e981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.002889][T16215] RAX: fffffffffffffffc RBX: 00007f763de15fa0 RCX: 00007f763db9acb9 [ 606.010977][T16215] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 606.019024][T16215] RBP: 00007f763dc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 606.027147][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.035327][T16215] R13: 00007f763de16038 R14: 00007f763de15fa0 R15: 00007ffc98b3d998 [ 606.043453][T16215] [ 606.046560][T16215] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 606.054052][T16215] CPU: 1 PID: 16215 Comm: syz.3.3060 Not tainted syzkaller #0 [ 606.061551][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.071665][T16215] Call Trace: [ 606.074989][T16215] [ 606.078136][T16215] dump_stack_lvl+0x188/0x24e [ 606.082875][T16215] ? memcpy+0x3c/0x60 [ 606.086909][T16215] ? show_regs_print_info+0x12/0x12 [ 606.092159][T16215] ? load_image+0x400/0x400 [ 606.096813][T16215] panic+0x2e5/0x730 [ 606.100777][T16215] ? bpf_jit_dump+0xd0/0xd0 [ 606.105404][T16215] __warn+0x2f8/0x4f0 [ 606.109445][T16215] ? perf_pending_task+0x358/0x470 [ 606.114618][T16215] ? perf_pending_task+0x358/0x470 [ 606.119794][T16215] report_bug+0x2ba/0x4f0 [ 606.124157][T16215] ? perf_pending_task+0x358/0x470 [ 606.129392][T16215] handle_bug+0x3a/0x70 [ 606.133588][T16215] exc_invalid_op+0x16/0x40 [ 606.138135][T16215] asm_exc_invalid_op+0x16/0x20 [ 606.143113][T16215] RIP: 0010:perf_pending_task+0x358/0x470 [ 606.149016][T16215] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 606.168682][T16215] RSP: 0018:ffffc9000453f8e0 EFLAGS: 00010293 [ 606.174792][T16215] RAX: ffffffff81a7f328 RBX: ffff88801a26f658 RCX: ffff88809059d940 [ 606.182892][T16215] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 606.190890][T16215] RBP: 0000000000000001 R08: ffff88809059e343 R09: 1ffff110120b3c68 [ 606.198890][T16215] R10: dffffc0000000000 R11: ffffed10120b3c69 R12: ffff88809059d940 [ 606.206894][T16215] R13: ffff88803071e960 R14: ffff88801a26f420 R15: 1ffff1100344de84 [ 606.214900][T16215] ? perf_pending_task+0x358/0x470 [ 606.220057][T16215] task_work_run+0x1d0/0x260 [ 606.224696][T16215] ? task_work_cancel+0x220/0x220 [ 606.229777][T16215] ? do_raw_spin_unlock+0x11d/0x230 [ 606.235199][T16215] do_exit+0x982/0x2480 [ 606.239460][T16215] ? put_task_struct+0x80/0x80 [ 606.244354][T16215] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 606.250458][T16215] ? _raw_spin_lock_irq+0x86/0xf0 [ 606.255520][T16215] ? lock_chain_count+0x20/0x20 [ 606.260409][T16215] ? _raw_spin_lock_irq+0xb7/0xf0 [ 606.265589][T16215] do_group_exit+0x217/0x2d0 [ 606.270246][T16215] ? lockdep_hardirqs_on+0x94/0x140 [ 606.275490][T16215] get_signal+0x1272/0x1350 [ 606.280049][T16215] arch_do_signal_or_restart+0xc4/0x1350 [ 606.285726][T16215] ? bpf_prog_free_id+0x190/0x190 [ 606.290889][T16215] ? cpu_online+0xa0/0xa0 [ 606.295253][T16215] ? bpf_prog_test_run+0x334/0x390 [ 606.300404][T16215] ? get_sigframe_size+0x10/0x10 [ 606.305377][T16215] ? __sys_bpf+0x62b/0x780 [ 606.309852][T16215] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 606.316043][T16215] ? exit_to_user_mode_loop+0x3b/0x110 [ 606.321538][T16215] exit_to_user_mode_loop+0x70/0x110 [ 606.326865][T16215] exit_to_user_mode_prepare+0xee/0x180 [ 606.332442][T16215] syscall_exit_to_user_mode+0x16/0x40 [ 606.338102][T16215] do_syscall_64+0x58/0xa0 [ 606.342651][T16215] ? clear_bhb_loop+0x60/0xb0 [ 606.347447][T16215] ? clear_bhb_loop+0x60/0xb0 [ 606.352159][T16215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.358177][T16215] RIP: 0033:0x7f763db9acb9 [ 606.362619][T16215] Code: Unable to access opcode bytes at 0x7f763db9ac8f. [ 606.369653][T16215] RSP: 002b:00007f763e981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.378091][T16215] RAX: fffffffffffffffc RBX: 00007f763de15fa0 RCX: 00007f763db9acb9 [ 606.386096][T16215] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 606.394181][T16215] RBP: 00007f763dc08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 606.402359][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.410974][T16215] R13: 00007f763de16038 R14: 00007f763de15fa0 R15: 00007ffc98b3d998 [ 606.418986][T16215] [ 606.422616][T16215] Kernel Offset: disabled [ 606.426955][T16215] Rebooting in 86400 seconds..