last executing test programs: 4.139710622s ago: executing program 1 (id=1385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8001, 0x9, 0x3, 0x800, r0, 0x3800000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xa}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f00000002c0), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x2a, 0x0, &(0x7f0000000680)='syzkaller\x00', 0xba, 0x7, &(0x7f00000006c0)=""/7, 0x41100, 0x58, '\x00', r4, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x9, 0x4, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0x1, 0x1], &(0x7f00000007c0)=[{0x4, 0x4, 0xf, 0x4}, {0x4, 0x5, 0x8, 0x4}, {0x4, 0x3, 0xc}, {0x2, 0x2, 0xf, 0x5}, {0x5, 0x1, 0x3}], 0x10, 0x3521}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @remote}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x982}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x7, 0x6, 0x6, 0x1, 0x7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x100, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x24, '\x00', r3, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x0, 0x3, 0x200, 0x7f}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f0000001740)=[r6, 0x1, r7, r8, 0x1, r10], &(0x7f0000001780)=[{0x2, 0x3, 0x2, 0x3}], 0x10, 0xfff}, 0x94) 3.939085158s ago: executing program 1 (id=1389): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/2, 0x46, 0x2, 0x1}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/2, 0x46, 0x2, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r0, 0x0, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x22, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc23, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}, @alu={0x7, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000ac0)=[{0x2, 0x3, 0x4, 0x7}, {0x2, 0x4, 0xe, 0xb}, {0x3, 0x4, 0x4, 0x9}, {0x1, 0x4, 0x3, 0x2}, {0x0, 0x4, 0xe, 0x7}, {0x5, 0x4, 0xd, 0xc}, {0x3, 0x3, 0x5, 0x7}, {0x4, 0x2, 0x10, 0xb}], 0x10, 0x7}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) recvmsg$kcm(r1, &(0x7f0000000840)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000600)=""/227, 0xe3}], 0x2, &(0x7f0000000740)=""/223, 0xdf}, 0x1) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) socket$kcm(0xa, 0x2, 0x0) (async) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x43, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r6}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r6}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x305480, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000000c0)=0x5) (async) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000000c0)=0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791048000000000005008100000000009500000000000067"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.772190904s ago: executing program 1 (id=1392): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r0, 0x0, 0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 3.688625136s ago: executing program 2 (id=1393): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000c42f8152a77495ed350bedea4d9473403e251adfac57d889550df7a2a4b6121e91b4d715aac7945c4f857e2d2bf14d58ecb15b3db8f59e07"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99, 0x4000840}, 0x20008089) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r4, &(0x7f00000009c0)={&(0x7f0000000780)=@in6, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/190, 0xbe}], 0x1, &(0x7f0000000d40)=""/174, 0xae}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="c628dc05a7d77c3309f195908d5384a05f874201ce3bbee32e743467e184864c8d58ea5abade586e28ab11138aced33f088bc10e9e22f26b9ca7a07f7811ec3ccbb39f9ef150758ce5871f3fd549302330dea0f2b39fcb97b03dc7e6d3a2a0ac07d221aa8d039e6c1c68ae9b372a60eb1692d5b5a723ddace1dc852fa8f8e45c41d54e5b0881a448f55804d55beef7976f0a097cf5bcf3e96d094c1df4", 0x9d}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="1100fcffffff000000000000010000000800000000000000a000000000000000000000000700000044103620ee000008000000070000000a8907080000000000000064010101e00000017f0000017f000001ac1e0101e00000020a010102ac141416891bfde0000002ac1414aaac1e010164010100ffffffffac1414aa0000030204409c0705fd66da0612019caa65affa85eaf34de3d591cc5cc60603b7010aca4f3117647486b0070ba5e0000001640101020000140000000000000000000000020000006e0f000000000000"], 0xd0}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.747748515s ago: executing program 2 (id=1395): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1100000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000004332b0c592b9c75a9aa0cf000000101d00000000000004000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="95000000e08d28c6"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) 2.532348202s ago: executing program 2 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe50e}) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x6000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000f10000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x26, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) 1.480649564s ago: executing program 2 (id=1399): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x7, 0xbc, 0x80, 0xc, 0x0, 0x16, 0x10812, 0xb3fe3d959c1fb4dc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x9, 0x5, 0x10001, 0x3, 0x6, 0x81, 0x4, 0x0, 0xb, 0x0, 0xb}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000000c0), 0x6}, 0x8, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83", 0x1}], 0x1}, 0x4c0e0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500000100000000b548696eb02bd865a2ffc675bbc4b344c44895784c150166eda9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32) 1.384357117s ago: executing program 1 (id=1400): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) (async, rerun: 32) socketpair(0x18, 0x6, 0xd, 0x0) (async) socketpair(0x9, 0x800, 0x1f, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="35f489fecffebf2c0fb9a9d9c85c32670b77b95946972cd2c1580a2210862c27f8c167aacf595fc1e6e52ebd95e786c6f5eaef6d741802f4ffe3f0c092bd407bddfcf0bc6838dde8adb894a46296e87681bccbb18e2519d615403cb6d25e0017845d300dc06146654c2973c651d0930736e76924ac6789c84ab3e37c956074c6cfc77220a1e996d27d5d7d2eb96146704932d4f65ac4a48ae93626b115630f3476d0a2cccfb178f6faafa0129f0ea100c022ae2839fd988ef7e2ca2b446b6917edc280f77ff0948167e7bd", 0xcb}, {&(0x7f0000000600)="3d20902b2ed7d9c3a71607b0e20a373ab4e493aa526182781c7cdea424e24f7a76c93b47b611ec5e5249b87839982e7320aedd09682d386c6c0b8574a1a380", 0x3f}], 0x2, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xff}}], 0x18}, 0x20000000) (rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100), 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0x2d, 0x7, 0x0, 0x9, 0x0, 0xd, 0x400, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0xfffffffffffff001}, 0x1, 0x2, 0x6, 0x1, 0x2c, 0x1, 0xf51a, 0x0, 0xfffff000, 0x0, 0x2}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) 1.267026811s ago: executing program 0 (id=1402): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000000)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r4, r4, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000002d000b63717a3c4a7ad8985b0808aa78", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x6, 0x0, 0x0, 0x0, 0x40000000000, 0x24010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1a2d, 0x0, 0x800004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xd7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x91850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0x0, 0x10, 0x0, 0x1000000000000, 0xa, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, 0xffffffffffffffff, 0x2, r6, 0x1) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xf7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.200340823s ago: executing program 2 (id=1403): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000c42f8152a77495ed350bedea4d9473403e251adfac57d889550df7a2a4b6121e91b4d715aac7945c4f857e2d2bf14d58ecb15b3db8f59e07"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99, 0x4000840}, 0x20008089) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000200), &(0x7f0000000240)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r4, &(0x7f00000009c0)={&(0x7f0000000780)=@in6, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/190, 0xbe}], 0x1, &(0x7f0000000d40)=""/174, 0xae}, 0x10000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="c628dc05a7d77c3309f195908d5384a05f874201ce3bbee32e743467e184864c8d58ea5abade586e28ab11138aced33f088bc10e9e22f26b9ca7a07f7811ec3ccbb39f9ef150758ce5871f3fd549302330dea0f2b39fcb97b03dc7e6d3a2a0ac07d221aa8d039e6c1c68ae9b372a60eb1692d5b5a723ddace1dc852fa8f8e45c41d54e5b0881a448f55804d55beef7976f0a097cf5bcf3e96d094c1df4", 0x9d}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="1100fcffffff000000000000010000000800000000000000a000000000000000000000000700000044103620ee000008000000070000000a8907080000000000000064010101e00000017f0000017f000001ac1e0101e00000020a010102ac141416891bfde0000002ac1414aaac1e010164010100ffffffffac1414aa0000030204409c0705fd66da0612019caa65affa85eaf34de3d591cc5cc60603b7010aca4f3117647486b0070ba5e0000001640101020000140000000000000000000000020000006e0f000000000000"], 0xd0}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.199516663s ago: executing program 3 (id=1404): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x80, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x8}, 0x1, 0x32, 0x43a1bd76, 0x6, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f3ffffff03000000060000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x28, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0x5}, 0x106c48, 0xc8, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @mcast1, 0x6}, 0x80, 0x0}, 0x48084) sendmsg(r4, &(0x7f0000000680)={&(0x7f0000000240)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="2fdd3287", 0x4}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.197751194s ago: executing program 1 (id=1405): r0 = socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6}, {0x27}}, [@printk={@lli, {}, {0x5}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x25}}], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000400)='i', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 994.986089ms ago: executing program 3 (id=1406): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000002c0)="48000000150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c119418f0f000000d6e74703c48f93b8f12a71c17efe89c27d1635c65e5b3591e13fec6f6bb5b71069f964f3855c0e2895d29632ff5577d5f8e030fddb9e89414a83ce5eaa71f21b1ce99557edfc5834b38462352a37e5720590711cbf32460ce1a34ab7ecf37e40adb3fc47fc71b75f44b800c17dd3b50f413e7dc4559f81b5cfe57b16a98d1f910c5d5fa70d", 0xd2}, {&(0x7f0000000100)="decb77dfbba2fdc2a7b40b5b3117d71280e9cd12549e87a76898aae84b7b06817fc8bad6619cf78aded2304756d2c57d3c607247321407e2806262ad65123dc50a2c0db26a71abdeb2dae70ebe4329e8794fff695d18ad7e91d6c82ae9ba5da11e20a47fb30bf528fd171bd38936ccd8e5dd3a325fdadb5664e78bea54ebdd6affe6c8ca825dce4f616d6dfd264000483359f0e38b7d4b22b6c447b44c02e69c570095ba97f0e60cae06f2902570a86960b9fd321952fabe5a7ba3b9", 0xbc}, {&(0x7f0000001a80)="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", 0xe64}], 0x3}, 0x2000000) 885.098353ms ago: executing program 3 (id=1407): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)='P', &(0x7f0000000480), 0x800000, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r11}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f00000007c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x6a, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 668.81789ms ago: executing program 3 (id=1408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe50e}) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x6000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000f10000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x26, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0xffffff04, 0x61e5cc96}, 0x22) 667.18515ms ago: executing program 0 (id=1416): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x0, 0xfffffffd}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xccd6}, 0x94) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7045f467, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)}, 0x10) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) 559.528973ms ago: executing program 1 (id=1409): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073117600000000008510000002000000c50000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x1220, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10200, 0x400000, 0x0, 0x0, 0x4, 0xe}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r8, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40), &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000cc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000fcffffff000000005a05000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140083000000bf0900000400000055090100000000009500000000000000186700000b0000000000000005000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000000000000000000000000004000033930f644564dd9fe30400161b10089c1cccb04bc358b8aed5dc0d0149a78d8e0f24c98ceb9ca96b28440c88a5b38baf359062159a1c70bb8b628544ed90ad1fb5ce8ca46b436ecd99c3436940e84fa8ee19ff1033425f8ddc6143c9708d32851d468f53f258388a1ecdad666014c6bbe41700"/238], &(0x7f0000000b00)='syzkaller\x00', 0x5, 0x8c, &(0x7f0000000b40)=""/140, 0x40f00, 0x0, '\x00', r9, 0x25, r7, 0x8, &(0x7f0000000f00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0x9, 0x3, 0x10001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000fc0)=[r10, r7], &(0x7f0000001000)=[{0x1, 0x1, 0x5, 0x6}], 0x10, 0x100}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000000000000010000000300000002000000", @ANYRES32=0x1, @ANYBLOB="170e00"/20, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1a, &(0x7f0000000240)=@raw=[@ldst={0x2, 0x2, 0x3, 0x5, 0x0, 0xfffffffffffffff3, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f681b1d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0x3, 0x2, 0x0, 0x1ecd, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], &(0x7f0000000340)='syzkaller\x00', 0x533, 0xc6, &(0x7f0000000500)=""/198, 0x41100, 0x60, '\x00', r9, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0xf, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x4, 0x4, 0xc}], 0x10, 0xffff}, 0x94) 478.166885ms ago: executing program 0 (id=1410): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1fc, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000800002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0312da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d4270640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca6bbfe4ba8c215129a7bccb223222ff1a43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b463890ace6cb23d4f82f398ba2944ddaba606cd163246c455d642ffb22a4b9055c4dd3d16f69587e6083df4bc6dec75713b5465c4aad1e18cc443e300"/4521], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcec}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r3, r4, 0x2f, 0x24, 0x4}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000040000000000", 0x5dc}], 0x1}, 0x0) 389.493148ms ago: executing program 3 (id=1411): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x5}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0xe]}}, 0x0, 0x2b, 0x0, 0x1, 0xfff}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x59, 0xc, 0x0, 0xfffffffffffffff8, 0x98102, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x0, 0x0, 0x4a, 0x1, 0x8, 0x10, 0x1ff, 0x0, 0x6}) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 288.032971ms ago: executing program 0 (id=1412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) (async) r1 = getpid() (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0xff, 0x4, 0x10, 0x0, 0xda69, 0x20100, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080)}, 0x105400, 0x0, 0x4ea, 0x3, 0x8, 0x2e, 0x4, 0x0, 0x3, 0x0, 0x3}, r1, 0x1, r2, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xb1, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000480)=r4) (async) close(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x48, 0xda, &(0x7f00000004c0)="1ed51389445dd1f37a3ad76b3b5fbc9f5b61a5c5f995b4accf1758e22546f246b9952ebabe83af544feb7a8ba53dd056f1d1fa111f2bfe8431fc359616af82d617ab3d7b4ee09f79", &(0x7f0000000540)=""/218, 0x6, 0x0, 0x7e, 0xee, &(0x7f0000000640)="780104bca97e17e99645bee24906e3bef9ed9a4fd2b5632d447cdd8dd7f180521bff57644fc2040f47b1a013652e8716a7186c1563caff7b8666c61a711ad4b4441d6b7cfa42d9916a5b4460cd60bec113f503b265e232f2898fc0577f2a5f5eb2be4df0cf3e000b92a380e51d52b1fc7108f42ab9d3cffdc94c9cb86f1d", &(0x7f00000006c0)="5708fbbb44216d8a2af0cfbe00a4484b701eb361baa68077d8d6a133c06b4847e96857852341719034d773a1de8785adec5f0604eabc07e3045ead1f675fad79258645420106c3b517e51f6d10f70f31bb38a0d7bb2ec659a8fe40f223f754bd562f4925eac96d1d3b56ea48a75cbe47f27e7108231cc7906d49f2fdd33054c9798463ff96856d74223ebef985fc5df1c20739768a22072cd2ca6f04dd33c529dc1284a00224b0fbfcc4fd1f0df5e2b4863bd292249636d33a5c0f0b5ec7d6e80acf71d56b78f33c080803036a2527d7ef63124f2acd35443eb64e57cf85657463288ee929aa7b63b31e77c4287f", 0x0, 0x0, 0x9}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000900)={r2, &(0x7f0000000840)="4ceb2a3815c2662f872759d17a4067ed60ea23c3b19234f2d7576b7de175369ce588c27c82d615e96c78416e8670a9b63cef450b43361b60e3d263c78a6eef89a1eda2e1c9042a7bcf7663eee7676aa4042ecca243d308dea9a1d76eb0630cddd9a7ebb20670e719d6d82df7b2ea358b3ced66813f09caa2c6a1", &(0x7f00000008c0)=""/19}, 0x20) r6 = perf_event_open$cgroup(&(0x7f00000009c0)={0x4, 0x80, 0x2, 0x73, 0x6, 0x3, 0x0, 0x9, 0x9001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x653, 0xd}, 0x100, 0x9, 0x5, 0x1, 0x0, 0x3, 0x7, 0x0, 0xfffffffc, 0x0, 0x100000000}, r2, 0xb, r3, 0x6) r7 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0xfc, 0x8, 0x7, 0xb, 0x0, 0xe, 0x77214, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7d}, 0x2411, 0x7, 0x8, 0x0, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x8000, 0x0, 0x4}, r1, 0x10, r6, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000000b00)=[{}], 0x8, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000d40)={r2, r2}) (async) sendmsg$kcm(r2, &(0x7f0000002280)={&(0x7f0000000d80)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e00)="aa38773101d8f269ec123e897018a439fe8f0558942c1c0454ed3034801b7ce05a666eb0ce7dc1ba3470844d9f5e42c00be80ae3a687f72f50e9650f7335513f265ae1d6f47fa2", 0x47}, {&(0x7f0000000e80)="d410a0f6e1ca81a78c444009328d488d0382c3adbb6484f1ae786f63d3a8fea91385b1b0ab34a95620f33961a68606287f921abb11bbacd81133a473f5ceb0d380", 0x41}, {&(0x7f0000000f00)="9efebb666a7d0a277b16f4faf7ec88c786a1fdd459bf74f4303507e459a216419cabd72f850de04b35638d1a9c8093ac819d95e51776cb0f99d900e09ba01abd2609c8196d9d5435f12b63dae5763d0801a62b36a673eb97e4a527bd352b7f1f4519aaccfa39ee2819b30ebd7616a7c7a9aa39e042301efb6731232e307f333ae05ce53b4998f7907e7973acbe869c29da75ad121d81e6a606b5bdf896f2adc9b50763805b44ad868791892c8e0b77", 0xaf}, {&(0x7f0000000fc0)="87b881b8107a51b897b9f3850f3237e50ed23c99b1fd6145148d046f198042c526b0f069357a4318eaa6a74e784a5cfb729bf609d1c54429d5ef0ceb53b4eca33337978f8d0e266073028fb8c0724f60bcd5bb601d2412b1f61e166cc202a5c44f4fd74dcc252a4ebc0231f36ed6708f9d60cce9144659ef421b6c7ed647b80745d3b70c53353c3b4a6d", 0x8a}, {&(0x7f0000001080)="0ae635d24189d40f352c1a5d54abf7535d3a2c6fe6fc66f7ff7178479ae1eddec38a01799b2a6dcf8277fef1e866724c92f44200118031147766ede91654eb0410062592959544fb6eedc9c900feb2e1cc4e5b4cc31626e3bcda9b", 0x5b}], 0x5, &(0x7f0000001180)=[{0x88, 0x10c, 0x8001, "94763af4dd6b158fd1062e5e817e6536738406eb204a98f1046357e90d5285da7f3ec7a657c3d179e21e86033d71a3674d5752167488beb940542c098496517e97051ada286af42ab661e14cc487938079995a3dac499575f78c3e1b3d16843e7749d91203ed11b175ba9eabafdfbf54e2f3cb2eb7"}, {0x1010, 0x1, 0x100, "dcc085f5a1293bf5814bd83b4de8ee589956a01e2e817c625e65c6f16efabb4263caffe1d26cc5920ee3742d470503dceedd0f75a6f25cf692da63068e731666723e876ab5646587d5d35b9e62ffb77ee34b8b7cb3e93ecc72851f607c49daf4088697e89885ad9b0aaa0b61539548eea964a0187008d51674ba616b5bd4e73d7627dc62ba523d99fc4004222327869d52ac6574fdb12e3a9d00684ca997184431fb1c92e7f3422ae5a5870809bab7fead6e47da92a32e5e1d681efacdf01ddbfa15d9b39d6233675272aef02b9c063c909b0c87f120fc8d37bd25fa4b0e250aa62865b42b7220fcb00ef62cb7683dd6303d5e213525f7c048f6385cad4004686ff73a4837a569f4d75c45c9919a179e19840ffe3ffd24ad917855a9019212c347a641f3d21a25af9af5f553ff955a2f44f382c05421cc8267c94491525ab6fafb0449d2784bb6ab456a282f2cb9c2d369a431f54026f402e7a2bd70e4bbeffa994fc961c46cf1849f2a927296b8852561cf9df2f27ebb80dd937e1b9680afa542555cf475ab3544fc7121586acd4c2fd85715ba254454b73526aed3a49a257886b81eb207f1f32f4b1e317cc31085025b85e621a3ed18d5c07aea8377f78480feab2129a6e0ff7b21348e01b6a88c5f411fc72a4a0b28cdf789fef0d1a0317d768479789c80f102bb953ea4608282aa109148b04d1c768353991b49b291e87c9dd69421f3af0715464b34aa00148e5cbb866cc206f0e6be20e1e0db1a10321db8f4ac79f369b4868edd3ddc3d820cac1e84528b894712b1edb5320cd83d0ca40856f670d10597872013782351a63ca9c529bcac7645722286d9817f2ee02c9f94ee99d21e7b1b764ec0de0a58d3148850396df8e341ce4fea661b006c51fbe8ef61b06f5eb710c96351c1c5209a5d9d8351cb03e7d1a1c81f5f77afcc8134bf6d5fc1ca1f8bcc298a90c510d35b1808c31135d29b45bd65b46a7faec59d048d89f26d7ea75189227fcbdc3e18bfe52ee59fc491317bf67436829fead69ee602861d81827d87a5240efcac2217583e832adcf97629cbba8e0223e2e83b78c7b3a52d2430a390475b29daa22503699096ebe5b126c5220d257e6545029a1df0887294390a243a573931ced10c78214dc2b8c57c9e99eff6ec43b4d789eb628cb2d583397efda943c2bfe4e2ea7415133ce166782c95c9c5df7e59702664560faca0ff72f352e0394a7fcca21319467e4523a3ecd9d04329aceea36adf9c6b975b2e922d401209f06844dfba1b95c68040db722105912b3a7892a7e31320d79558a2cd23434f9d7de732478fa4688e559d639f5502f0138db4cc4700aaccc255b2588d73fa3f8cca5d8f46dc15674ac3665c26e460fc62d166b6fde773bec764278341943a3c67c0f3e557db0ab822cdbe599bd8a7c6d13fdb4bbcd051bc3dd0c43c498f00681dfb06ad34a0a5f8c17b22398c4ec71dbb6507d6145e191c87ea8f420c0e5707c49d2e590d67fcab267d31a73abf84164d084fc230bfa3aca99fc347323e191e8bf1b2818258370b6d0c9c441d33879b742d975cdb2d947c5c92b11376876bdb9cdf0c2ab203703bf3b2ca330dc179e3389f5a2b60a7bc234c63373ad01ddf4285c9b8892c80a762a817b5e0811eb68725bade1e77eb9258a26a8897d2e2f30a28b25b8b0bcb35ba5c805a815e7a9a89c2c003c0b3c6be85942de98bfd71747e0c8adb74aa51597de04ba6ebc686563b0ddcb4c3ab4749676333b2c70d9543170d2b35b877c3080d1b65e7794f457b0bde2fe0535d06a78bece13a1e1b66f73292fbc96b10cca3acd54694d5721c2b462683af702ce26543fd4f0415a70af519a6dee4d3b35276d801b5d02e069e3fd3fe38d4b1f8f73d9b9128034f29bc3c0cbb72164b6f52d6fbea2dc9a041a968e5d91af3d6636a94b0d221b1c9694dd717e3cf5672fe0130fd0cf27d96c49c4d8de8c15d7170b59d8e2b7c245e6c17e6b43b71d129fd6c20de710f1cfdb66eb7ce39710d6d61b56b0aee5bed391aff1b60cbe87ac2006160a86cdf4cef0fff77bcd00830b4fb32308bc909215af452cc7ac30c40cf63c7e00503da518c78d642b7a8b8787fde89eec5143b79391906995f2c7621937ec6dd10e7a30f24e912276e5185bedc9c8ae3dfa37308b49d93941988c56227e3016f36e18945d9741d570abf47c7116cba996602879e22486c5bb8108412f64d414ab00764ab2afa070757ea0d94e1ba26103e3c293912c340dba794f11e2b8d03b05f6850829f27d0830d4b97bdd31bc00e14ccaf69132f411285e0dfc727760963552cf55a3d18316b937ceaa66ad0171eb8e89b348aa41ca4112b171b6ad86d60c40b5c245f1df12d34bc8a3401e8a119c97d34574e3bd08d42c0ebf38fc599c0d9168ba00a6da19b8f8d624556ef94ddbd3b1ef2c2767bda149cdc33e3b76c6d243e943c2e1c6e35041a1e38a07720eb2c683b1521aa5819c7816142a4ff86eb96ddc91cfa57cf8ebe1a0a94987f101f7f7b703ae106dc1d5021ac11caa8d1444060fdf5662f371c56da8c8616eda2860463ca15424be89c63949bbb7163c63879b1a97364a89fa86894c548be3e96a8ade3b92bb9c03e1f15831fc50ba4c3342ca324a288573e4cb9d674457b32348f9d41a36f9d061e0316091503cea0bf6de35a6084db2f5a8839089050f30adc4d61a4300b01480d4a117260be59bd46f0206db8ca3b29e4efa24affc914621509f2ec0eab4d1b5afde9a6d3d5a353bf9c03f747d598f8a3b5675cb4c256fa594a93fac8550a5844b87e5fe4d444572092eab0b8b4b75fc408c3d6fa4da49955fa98a063f2a94602227176eb47350c98fe5c3c8438cc90612752388fcea4596b90daf2ca0336fa733059a694cd95fadfb98c5ec75f4ae17e99ee5851610cfcd95d0e498157eab8fbb2e0621a5ce9ddcea78adfb4578e198da0451c0d1b9afb518c4cb52ae28c6b41ffd4dfb558c6841ba79051f2de15cce7ac709b42fc619688a2d7a0abd93f1beb57d57f399b287ca16a7027867de3bb5e29c25dd026708939256f6bf882cd488a1299bd1b879d34558c54c5505b05085064351e06427980ce842d49a7ca8d7c048b8394682b5617137571436faed31e9f68488064a7f16362d368b3615a05d90a29954724db38605eaf768855066d3bc4d83569064ea55b76d87b86e54359d403d634dbf1652611fa1a05f5c4c2109a7337dffbaaec30d625617c9193d3749c1ea3e73d2b1f933e1a44a76592d570d79503bdbcecebbc2ad89cf4aa518ad6c5bb9335ca8b35197869fd9ba286b07358eeffccfe9bbbd409c8fb0fc5f4d601e7325422a65eb21a20e7e86916d1253a5cf9ff19df734ed8d7a39a22008cd4e4f1e937cd1dac0ca533dac803d59612087738423262054f89cb03a6ce3b3dc9c9cc58c1be5e19428a36c1b2d619de5d2a6df1f3a75e05d9c534dd026f0ef1091b432866e854e412e73cb4fa2851ec2f21ccc8be62f8d9e45e8ba6b1b615b20cb5f121b5715e833247b0d0462ec9383c895f624332259717e614aec053a793564f7a86d64a9527600ceb4c96463350206c3dc3a52034a405c73c1aec0714a111de6a975cddb2d14d40f0732959c3662bcb185185009c00821aed88ad3f70ba9c2eb5901463a1903043dcbdc34dad5e09e99ace7f6930182fce6e73029dfe952ff6767b5f75b746d0c76c08243794fec067620e848db174030c86b1c1db34190720ad8c53a6aeac0948b79030f9e960d6b5638ad8901f7fb9097e91e912852c80cb042918a54cbfee2c57728d858292cbe3576d9ddecc79b33ddcc30d6801fc6bc96b6cc6d25cb7cc5ee0dc6d5462ec06d503f098012a5146a86fdf8c9bd42b2b4b0d239e3d9b93026000f516d83d9396c7131ae4124284f3bb80d540b1264b05851472fb014ead354c3ba10385a403995fa0dfbbf451d7a0e0da7079dfedfede9c70c9473a8960fb1ddbb18c2f76c274307dd3e0dd425ac2b1a3c4dcddba1e6b05d642e7cc247739e3789dff36947727d8f28dc57d69f0368cb9b5384932f0b8dded70025a5a953f41c88878f762c1a5ca6aae5a5a20a476a7edce84b5ca67725c8506f6c2b9d0084127ca59276e098adfb6b04a0f92996933215485da4b73379b71f6c0a21b559832737c2c8b9835a0d9ba03f516400793f8f4528252795994b215ab8f433d7e94d424c42d23392636c7c26b85a546aa8fa3027bfe6ee036d1f8bf3bbeb6ae37f6798337e26131e634a2834f550042eb1dcd63a6c45115075c631fd5d8422b840f2a7c33ac59908476727607195a0728726a293e101177ad1fdd8706c70fd963bedc94d598cbcb1d20aa652e2c3f136dbe86c38c68a2e28277655132443e6074a17281e9f2a515f7a8cb6719740d643c5e4d9138f0a7caebc7a25ec8d85ba4c9fc21d84ffb6b9a525cf6a1939137ff605d7b5bb5908c98739f1061c78c0d2b6ee4671b1727481cf5338aae0b0692c33ceaf6cad409c9e10b383f6fca14eba0c2dd46f0e4a13239545dd269f05ff1bb4b2306a5751a2b20c82c17541979ad5d10cf0001198917513ac0f7c19a3940b8408b1a85e6a0613d4147e454151234524ff347343274e8ceb6ec348397cbde356740750b6c4a678eb1b238cb9cf4a2bf31177440f12b47e4e1eab4d0bdb3a5bcdfc2ebed8a9bad56fc4de1de3cda7611d3865346969272fd7d8322ce2007f1611f0c2ebb21706df6f7682dce036cc8d316cebe7cda65a535794a8b80354587c354302248c29b19f11a7cbc3e631bc3ba99889aee94be95aa634a67811abd293344a9d792512fe96a78efccbfe8cd1b97fa7d382ce8e4064f0da31de342a4ce67ee1f872bf7f4e26687fb09cc95d82b0afc1f6393ca0a9e4009e32acd35477ddcd64e96fb292dd422f1314a436c4aba86fa8cec8f1d6d7cedc69296c5ae749a51d3b8bdce85cf547fc39746fdb85df211c181b3e5de0d0e6bc720fd959e25a5cdbc83149bba0cbf5b06525d2b443ae733ce9ab3f138f8e39d2f8b6c3cc1b235aa52290cc7c344a5a07894005f5f00f02451b3e7b01baed5d48cc4104d64e22020a07788ce440473a9ce75435e8cd7b62857998f669e82a1542b9aec7d2403aeb3f1e43264402b7bac92dc6a605978710bd27fac55f41b2c9d678df3c457bd22eb2c04b2d8ffa63543c941d26d482a968cf2213eac2b1cfb068a2355fbec28e089558041c5948ac788c772f550288005420861a0711e9d09d90e53622341a23c686949b19b8471d48907ab42f3a590eb46d9f827e6f795c7277fe7d2ddd5a3491be375e8a11faa05f08dd6f45d51bca008363bd3d5f6cdeb4ab24d4552044a202efcb84c87efa8ef19a30790c7a98ac567ab0273f83ded4514b8d8bc4d8b35f63257d53f290b6319abc946df86b66f0f457a532a2651da95df6170569a99a0b931af6c39cd507ceb161b7118266098356f14e7acba432cd32a9503f8db2a6b0d1d69cca4fcb00610530663668872c6c2e0ca6625239087105d9646ad2713fe3550cebd6d37f1a17228eb496c309ececff5717f4a486b72a3b3c6ec0ff375398bb69820dc5f1c9813f36fb7f15868b5fcf75714fd1b2a3ac040d352f22a95af435a732ba9620d378f2456cb91c63e045cd6f00338455a191c38d46f2c5db1cec430f0b08a7816e0ff40164ba7bbaaf03a44991ca2d18626fa1294aaba360220238e27be66cbcad8347345bc1adb2b30551c4e5f4b16928de9f9fdced4c60f26669bb641fe9c261110374503"}, {0x68, 0x84, 0x3, "df3e600c8efa50c0e3fe3721b0f5a5595877a86e0ef88cb27bb2625118db5fe7b3361906b74b0566f1f2288367c70388d97cf32e3c16129edbb71dbddcf494a33fdf72a0273ba770150ad72de867362889"}], 0x1100}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003500)={0x6, 0x23, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb25d}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @generic={0x7, 0x8, 0x5, 0x6, 0x1b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x0, 0x0, 0x1, 0xb, 0x50, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000002400)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000002440)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003440)={0x2, 0xf, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003480)=[r2, r2, r2, r2, r2], &(0x7f00000034c0)=[{0x3, 0x5, 0x10, 0x6}, {0x2, 0x1, 0x7, 0x5}], 0x10, 0xc947}, 0x94) (async) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003600)=@o_path={&(0x7f00000035c0)='./file0\x00', 0x0, 0x8008, r7}, 0x18) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000003640)=r9) syz_open_procfs$namespace(0x0, &(0x7f0000003680)='ns/mnt\x00') (async) close(r3) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003740)={{r2, 0xffffffffffffffff}, &(0x7f00000036c0), &(0x7f0000003700)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003800)={{r2, 0xffffffffffffffff}, &(0x7f0000003780), &(0x7f00000037c0)=r9}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003ac0)={r2, 0x58, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x3, 0x12, &(0x7f0000003840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x727}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}]}, &(0x7f0000003900)='syzkaller\x00', 0xf, 0xd6, &(0x7f0000003940)=""/214, 0x40f00, 0x4b, '\x00', r13, @sched_cls=0x2f, r2, 0x8, &(0x7f0000003b00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000003b40)={0x0, 0x4, 0x3c872aa4, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000003b80)=[r2, r2, r2, r2], 0x0, 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003ec0)={{r2, 0xffffffffffffffff}, &(0x7f0000003e40), &(0x7f0000003e80)='%+9llu \x00'}, 0x20) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003f00)={r12, 0x80000001, 0x4}, 0xc) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003f40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0xf, '\x00', r4, r2, 0x3, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004040)={0x18, 0x19, &(0x7f0000003c80)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7637}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], &(0x7f0000003d80)='syzkaller\x00', 0x7, 0x0, &(0x7f0000003dc0), 0x41000, 0x6, '\x00', r13, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003e00)={0x3, 0x7, 0xfffffff7, 0xffff016c}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003fc0)=[r10, r14, r11, r10, r15, r16, r11], &(0x7f0000004000)=[{0x1, 0x1, 0x4, 0x9}], 0x10, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f00000044c0)={&(0x7f0000004100)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004180)="f0211cc09129f2d71250cb290f3ad6f75f8c7cb552b61e1bed101cd6f2c8c511135a6050963c95cda1b66e9474bfefa4481f66b374a9ec4d4eb5597c8e4a15265089832c8b281106ba59b79f0b9a0cc3f44f0d49c394997acb910e052d07b204548cfe5e7ce7c67252a0995569f78a58af065c0b62f49ea2729faa312c66adc8ea1d995aef4ffda0b53f47cc55e7f1cd12804581caa0", 0x96}, {&(0x7f0000004240)="7a48f2d0932e263243097f21f717f18503c6fbcace2f27acfa429f235d697c673a15519ed2c6e9df63b2370c46279cd8f9e2bacd139a26609883375c57c5ecd44c6842906c8fb00cbfcb7b2c317ff0364c7cbdcc687ff514a9854f13b83aeb3e93e13f59e8e789cc80d03bf2632dd81d45b4d5f260ce951b074cb337cf047e", 0x7f}, {&(0x7f00000042c0)="350b3ec123933415283cfd740479be18ea7356c0f44724816be250ecf5665421accb12f5f8a5f432bc2b4fe633ced32758bce0e4d82624979974eb7df2d5142fd14927791cab65a83dc23a22ad0efbcfd6e1d149f29980ef498d076d5d9299df573a8b57947f749a12e26e6bc53081ce990811e8fa1361b872ad1f1aca6bae871e7dc22608b395416eec26458cc974b20188783f4aec55d85e941dde97c3289e6029057df9d25eed8a7cfe0bb2904c5640098f86390ca76456e310ba746455eab07ffc4ee9859bd9090557911a7a234c", 0xd0}, {&(0x7f00000043c0)="cae76acd2630d7fb5ccaa1d6805f1855d4a57f5908ae230ccd5538af989abd5dbc43906097fa85e51f102c9ba42c670e71ca336ec83ac0089c6dfbfcb9fdc341614cb9036ee332077694c5d5bd1dbd4ad00d00cdc796f5419de948a65fbbd5263a12f3cbbd999fd591", 0x69}], 0x4, &(0x7f0000004480)=[{0x38, 0x10a, 0x7, "c267c29043a03e3f0c1f1ed8a8281bfbf4e0560fbd2bd1c19fa7e25c4df9d0868623d50f13012d53"}], 0x38}, 0x20000000) 252.597272ms ago: executing program 0 (id=1413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000029006bcd9e3fe3dc4e48aa31086b8703290000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10980, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x6, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2) 200.930424ms ago: executing program 0 (id=1414): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000b40)="d0fe9e", 0x3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) r7 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="b822", 0x2}], 0x1}, 0x4015) recvmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10) r11 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) 189.315754ms ago: executing program 2 (id=1415): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3, 0x740, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x1100, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00700142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000001200000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfe3a) 0s ago: executing program 3 (id=1417): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x214, 0x2, 0x3f, 0x4, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x1170) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000064008188040f80ec59acbc0413a1f84829000002000e000a000f00000002800000121f4605f8dd02a78322ddf24a4f3763bc254ebed158f9b93ebaac76d6703637ba355f7278be497c471bdf47d71780563706b3c80ffed9a778168a82439650885b3d66606b85d378fecc591b5ef52642ec9010da6863d8101c4333f620ac8283dfe0b33068911985196718f5251f09058b81c922bffc945f6f3c02e426819fa91dc8bbfe636dacb3948d609f06470f111c22c074909cc947670867a483", 0xc2}], 0x1}, 0x20000884) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000086a7e4e0b6e1cf5a98f8dce955063b000000000000000000ffee3b0008800000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 61.211160][ T5766] cgroup: Unknown subsys name 'net' [ 61.310192][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.725894][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.104172][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.112976][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.120804][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.122951][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.128865][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.143285][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.150857][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.161419][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.170092][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.186331][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.196653][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.206300][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.214884][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.223780][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.232536][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.232648][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.242011][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.254783][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.263295][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.272984][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.282548][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.290074][ T5089] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.297507][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.304839][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.417015][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 64.601154][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.608946][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.616474][ T5778] bridge_slave_0: entered allmulticast mode [ 64.623242][ T5778] bridge_slave_0: entered promiscuous mode [ 64.632275][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.639700][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.647038][ T5778] bridge_slave_1: entered allmulticast mode [ 64.653894][ T5778] bridge_slave_1: entered promiscuous mode [ 64.709317][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.723435][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.784772][ T5778] team0: Port device team_slave_0 added [ 64.809317][ T5778] team0: Port device team_slave_1 added [ 64.856870][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.863971][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.889951][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.913707][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.920702][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.946614][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.968304][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 65.064217][ T5778] hsr_slave_0: entered promiscuous mode [ 65.070753][ T5778] hsr_slave_1: entered promiscuous mode [ 65.083982][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 65.114614][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 65.218778][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.226059][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.233319][ T5781] bridge_slave_0: entered allmulticast mode [ 65.240300][ T5781] bridge_slave_0: entered promiscuous mode [ 65.247899][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.255150][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.262299][ T5781] bridge_slave_1: entered allmulticast mode [ 65.269187][ T5781] bridge_slave_1: entered promiscuous mode [ 65.334632][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.348261][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.397428][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.404725][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.411851][ T5785] bridge_slave_0: entered allmulticast mode [ 65.418909][ T5785] bridge_slave_0: entered promiscuous mode [ 65.436675][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.443956][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.451120][ T5786] bridge_slave_0: entered allmulticast mode [ 65.458588][ T5786] bridge_slave_0: entered promiscuous mode [ 65.477534][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.486445][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.494143][ T5785] bridge_slave_1: entered allmulticast mode [ 65.500858][ T5785] bridge_slave_1: entered promiscuous mode [ 65.510368][ T5781] team0: Port device team_slave_0 added [ 65.517818][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.525127][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.532276][ T5786] bridge_slave_1: entered allmulticast mode [ 65.539195][ T5786] bridge_slave_1: entered promiscuous mode [ 65.576802][ T5781] team0: Port device team_slave_1 added [ 65.614297][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.635456][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.646714][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.659046][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.712390][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.721703][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.748069][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.760299][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.767558][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.793658][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.853962][ T5786] team0: Port device team_slave_0 added [ 65.862394][ T5785] team0: Port device team_slave_0 added [ 65.871410][ T5785] team0: Port device team_slave_1 added [ 65.888005][ T5786] team0: Port device team_slave_1 added [ 65.916278][ T5781] hsr_slave_0: entered promiscuous mode [ 65.922458][ T5781] hsr_slave_1: entered promiscuous mode [ 65.928836][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.936628][ T5781] Cannot create hsr debugfs directory [ 65.988007][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.995678][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.021764][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.042876][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.049911][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.075867][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.087829][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.094933][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.120989][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.133872][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.140839][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.166879][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.195267][ T5787] Bluetooth: hci0: command tx timeout [ 66.262761][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.295002][ T5786] hsr_slave_0: entered promiscuous mode [ 66.301172][ T5786] hsr_slave_1: entered promiscuous mode [ 66.307967][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.316095][ T5786] Cannot create hsr debugfs directory [ 66.321720][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.338522][ T5785] hsr_slave_0: entered promiscuous mode [ 66.345444][ T5785] hsr_slave_1: entered promiscuous mode [ 66.351520][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.359549][ T5785] Cannot create hsr debugfs directory [ 66.364408][ T5787] Bluetooth: hci1: command tx timeout [ 66.370591][ T5787] Bluetooth: hci2: command tx timeout [ 66.376889][ T5089] Bluetooth: hci3: command tx timeout [ 66.399697][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.410439][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.682390][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.691560][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.704647][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.724743][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.804365][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.822889][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.832520][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.844411][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.918006][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.956284][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.966777][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.979054][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.990779][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.037199][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.079326][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.086720][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.130581][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.137730][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.149572][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.220512][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.254750][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.261910][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.278434][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.298059][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.305203][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.318115][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.388736][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.407246][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.428886][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.436064][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.471154][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.478385][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.501125][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508366][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.530917][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.538116][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.662716][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.798546][ T5778] veth0_vlan: entered promiscuous mode [ 67.831354][ T5778] veth1_vlan: entered promiscuous mode [ 67.913275][ T5778] veth0_macvtap: entered promiscuous mode [ 67.956244][ T5778] veth1_macvtap: entered promiscuous mode [ 67.987341][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.013434][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.057642][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.067928][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.078181][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.088277][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.106753][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.170497][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.209303][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.249620][ T5781] veth0_vlan: entered promiscuous mode [ 68.259971][ T5781] veth1_vlan: entered promiscuous mode [ 68.275077][ T5787] Bluetooth: hci0: command tx timeout [ 68.304253][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.312261][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.374505][ T5781] veth0_macvtap: entered promiscuous mode [ 68.385046][ T5781] veth1_macvtap: entered promiscuous mode [ 68.415925][ T5785] veth0_vlan: entered promiscuous mode [ 68.434974][ T5784] Bluetooth: hci3: command tx timeout [ 68.440420][ T5784] Bluetooth: hci1: command tx timeout [ 68.446026][ T5787] Bluetooth: hci2: command tx timeout [ 68.457312][ T5785] veth1_vlan: entered promiscuous mode [ 68.476933][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.487962][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.500707][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.509861][ T5786] veth0_vlan: entered promiscuous mode [ 68.519538][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.530108][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.542283][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.556947][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.568554][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.602144][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.613716][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.622457][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.632101][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.648247][ T5786] veth1_vlan: entered promiscuous mode [ 68.685651][ T5785] veth0_macvtap: entered promiscuous mode [ 68.722841][ T5785] veth1_macvtap: entered promiscuous mode [ 68.789011][ T5786] veth0_macvtap: entered promiscuous mode [ 68.861332][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.877104][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.887237][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.897864][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.909336][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.926793][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.938196][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.949897][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.960432][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.972042][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.981754][ T5786] veth1_macvtap: entered promiscuous mode [ 68.999555][ T5836] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.021536][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.032670][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042036][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051148][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.066148][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.087686][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.146614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.166091][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.184067][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.188223][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.203123][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.215398][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.226159][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.237518][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.249234][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.273268][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.284840][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.296195][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.306722][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.317578][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.328157][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.339410][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.386604][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.396322][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.405528][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.414909][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.429958][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.448719][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.539617][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.552290][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.588162][ T5840] netlink: 'syz.0.1': attribute type 21 has an invalid length. [ 69.658011][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.689890][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.820520][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.846982][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.938869][ T5848] FAULT_INJECTION: forcing a failure. [ 69.938869][ T5848] name failslab, interval 1, probability 0, space 0, times 1 [ 69.955912][ T5848] CPU: 0 PID: 5848 Comm: syz.2.3 Not tainted syzkaller #0 [ 69.963074][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 69.973173][ T5848] Call Trace: [ 69.976473][ T5848] [ 69.979426][ T5848] dump_stack_lvl+0x18c/0x250 [ 69.984150][ T5848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.990341][ T5848] ? show_regs_print_info+0x20/0x20 [ 69.995560][ T5848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.001734][ T5848] should_fail_ex+0x394/0x4c0 [ 70.006421][ T5848] should_failslab+0x9/0x20 [ 70.010936][ T5848] slab_pre_alloc_hook+0x59/0x300 [ 70.015959][ T5848] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 70.021500][ T5848] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 70.027040][ T5848] __kmem_cache_alloc_node+0x53/0x250 [ 70.032412][ T5848] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 70.037950][ T5848] __kmalloc+0xa7/0x240 [ 70.042108][ T5848] bpf_prog_test_run_skb+0x242/0x18f0 [ 70.047478][ T5848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.053633][ T5848] ? lockdep_hardirqs_on+0x98/0x150 [ 70.058830][ T5848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.064980][ T5848] ? cpu_online+0x60/0x60 [ 70.069304][ T5848] ? bpf_prog_test_run+0x313/0x390 [ 70.074410][ T5848] ? cpu_online+0x60/0x60 [ 70.078735][ T5848] bpf_prog_test_run+0x31f/0x390 [ 70.083670][ T5848] __sys_bpf+0x49d/0x890 [ 70.087909][ T5848] ? bpf_link_show_fdinfo+0x390/0x390 [ 70.093285][ T5848] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.099440][ T5848] ? lock_chain_count+0x20/0x20 [ 70.104297][ T5848] __x64_sys_bpf+0x7c/0x90 [ 70.108717][ T5848] do_syscall_64+0x55/0xb0 [ 70.113127][ T5848] ? clear_bhb_loop+0x40/0x90 [ 70.117796][ T5848] ? clear_bhb_loop+0x40/0x90 [ 70.122464][ T5848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.128366][ T5848] RIP: 0033:0x7f5589f9ce59 [ 70.132775][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.152375][ T5848] RSP: 002b:00007f558ae94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.160784][ T5848] RAX: ffffffffffffffda RBX: 00007f558a215fa0 RCX: 00007f5589f9ce59 [ 70.168749][ T5848] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a [ 70.176713][ T5848] RBP: 00007f558ae94090 R08: 0000000000000000 R09: 0000000000000000 [ 70.184684][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.192649][ T5848] R13: 00007f558a216038 R14: 00007f558a215fa0 R15: 00007ffc12cbc138 [ 70.200638][ T5848] [ 70.353489][ C0] hrtimer: interrupt took 44163 ns [ 70.359106][ T5787] Bluetooth: hci0: command tx timeout [ 70.515305][ T5787] Bluetooth: hci1: command tx timeout [ 70.515861][ T5784] Bluetooth: hci2: command tx timeout [ 70.523637][ T5089] Bluetooth: hci3: command tx timeout [ 70.580753][ T5856] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6'. [ 70.654109][ T5856] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6'. [ 70.851154][ T5864] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9'. [ 70.875249][ T5864] netlink: get zone limit has 4 unknown bytes [ 70.968172][ T5862] netlink: 'syz.3.7': attribute type 4 has an invalid length. [ 70.999510][ T5862] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7'. [ 71.117713][ T5862] .`: renamed from bond0 (while UP) [ 71.495298][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.502014][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.734822][ T5866] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 71.741834][ T5866] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 72.433710][ T5787] Bluetooth: hci0: command tx timeout [ 72.596677][ T5089] Bluetooth: hci3: command tx timeout [ 72.602309][ T5787] Bluetooth: hci1: command tx timeout [ 72.607309][ T5089] Bluetooth: hci2: command tx timeout [ 73.122161][ T5903] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.17'. [ 74.049165][ T5917] netlink: 144 bytes leftover after parsing attributes in process `syz.2.20'. [ 74.055042][ T5920] netlink: 'syz.3.22': attribute type 29 has an invalid length. [ 74.076143][ T5920] netlink: 'syz.3.22': attribute type 29 has an invalid length. [ 74.701520][ T5925] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 74.726384][ T5933] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 74.743057][ T5935] netlink: 'syz.2.26': attribute type 29 has an invalid length. [ 74.828566][ T5929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'. [ 74.840363][ T5935] netlink: 'syz.2.26': attribute type 29 has an invalid length. [ 75.272840][ T5950] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.31'. [ 75.344576][ T5950] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.31'. [ 75.369832][ T5950] netlink: 2 bytes leftover after parsing attributes in process `syz.2.31'. [ 76.523985][ T6012] Zero length message leads to an empty skb [ 76.554338][ T6005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.777186][ T6019] pimreg: tun_chr_ioctl cmd 1074025681 [ 76.794823][ T6019] netlink: zone id is out of range [ 76.816426][ T6019] netlink: set zone limit has 8 unknown bytes [ 76.954263][ T6025] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 76.983907][ T6025] netlink: 55 bytes leftover after parsing attributes in process `syz.2.49'. [ 79.037297][ T6047] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.55'. [ 79.290635][ T6052] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.57'. [ 79.748496][ T6058] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.781038][ T6064] netlink: 'syz.0.59': attribute type 10 has an invalid length. [ 79.803585][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.812241][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.852328][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.61'. [ 79.934773][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.942227][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.950672][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.958638][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.020510][ T6064] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.176689][ T6063] netlink: 128 bytes leftover after parsing attributes in process `syz.1.61'. [ 80.219978][ T6063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.661249][ T6064] syz.0.59 (6064) used greatest stack depth: 19816 bytes left [ 81.732783][ T9] cfg80211: failed to load regulatory.db [ 81.954312][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 84.554315][ T6107] netlink: 'syz.2.70': attribute type 28 has an invalid length. [ 84.577213][ T6107] netlink: 'syz.2.70': attribute type 29 has an invalid length. [ 84.610976][ T6107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.70'. [ 84.828351][ T6114] netlink: 'syz.1.74': attribute type 3 has an invalid length. [ 84.853702][ T6114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.74'. [ 85.955000][ T49] wlan1: Trigger new scan to find an IBSS to join [ 86.042735][ T6134] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.78'. [ 86.322609][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.053704][ T49] wlan1: Creating new IBSS network, BSSID 62:4d:8b:c4:bb:16 [ 87.129147][ T6151] netlink: 'syz.2.82': attribute type 12 has an invalid length. [ 87.151803][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.069335][ T6168] can: request_module (can-proto-0) failed. [ 88.592395][ T6182] netlink: 'syz.3.90': attribute type 5 has an invalid length. [ 88.740579][ T6187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.92'. [ 88.782368][ T6187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.991918][ T5089] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 88.992308][ T5089] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 89.271172][ T6205] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.96'. [ 89.356010][ T6208] netlink: 'syz.1.98': attribute type 11 has an invalid length. [ 89.381421][ T6208] netlink: 'syz.1.98': attribute type 2 has an invalid length. [ 89.393912][ T6208] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.98'. [ 89.864536][ T6221] netlink: 'syz.0.101': attribute type 3 has an invalid length. [ 89.889474][ T6221] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 90.332432][ T6238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.106'. [ 90.430834][ T6240] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.108'. [ 90.655130][ T6254] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.113'. [ 90.786929][ T6259] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 90.804788][ T6259] netlink: 116 bytes leftover after parsing attributes in process `syz.3.114'. [ 90.866112][ T6256] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 90.902659][ T6256] veth0_macvtap: left promiscuous mode [ 91.073715][ T5089] Bluetooth: hci2: command tx timeout [ 91.478844][ T6276] syzkaller0: entered promiscuous mode [ 91.495102][ T6276] syzkaller0: entered allmulticast mode [ 91.578767][ T6281] sock: sock_timestamping_bind_phc: sock not bind to device [ 91.862842][ T6283] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.122'. [ 92.241950][ T6287] netlink: 156 bytes leftover after parsing attributes in process `syz.1.123'. [ 92.286431][ T6287] netlink: 'syz.1.123': attribute type 28 has an invalid length. [ 92.303890][ T6287] netlink: 'syz.1.123': attribute type 29 has an invalid length. [ 92.317063][ T6287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.123'. [ 92.656033][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 92.674778][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 92.692123][ T6306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'. [ 92.703125][ T6306] netlink: 'syz.2.128': attribute type 2 has an invalid length. [ 92.716860][ T6306] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 93.145271][ T6326] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 93.156008][ T5089] Bluetooth: hci2: command tx timeout [ 93.209251][ T6326] team0: Port device geneve1 added [ 93.337690][ T6331] netlink: 'syz.2.138': attribute type 3 has an invalid length. [ 93.424512][ T6339] lo: entered allmulticast mode [ 93.472760][ T6339] lo: entered promiscuous mode [ 93.514306][ T6339] lo: left allmulticast mode [ 94.043122][ T6349] veth1_macvtap: left promiscuous mode [ 94.786415][ T6377] syz.1.151 uses obsolete (PF_INET,SOCK_PACKET) [ 95.574636][ T6398] __nla_validate_parse: 8 callbacks suppressed [ 95.574658][ T6398] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.158'. [ 95.701400][ T6400] validate_nla: 4 callbacks suppressed [ 95.701418][ T6400] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 95.721513][ T6400] netlink: 'syz.0.159': attribute type 1 has an invalid length. [ 95.731938][ T6400] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.159'. [ 96.109810][ T6407] netlink: 14 bytes leftover after parsing attributes in process `syz.0.162'. [ 96.480765][ T6407] team0: Port device team_slave_0 removed [ 97.132266][ T6426] netlink: 3 bytes leftover after parsing attributes in process `syz.0.167'. [ 97.256792][ T6430] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 97.290076][ T6430] netlink: 'syz.2.169': attribute type 3 has an invalid length. [ 97.317219][ T6430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.169'. [ 97.720674][ T6445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.173'. [ 97.749034][ T6445] netlink: 'syz.0.173': attribute type 28 has an invalid length. [ 98.119861][ T6467] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 98.397344][ T6468] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.179'. [ 98.921311][ T6496] can: request_module (can-proto-0) failed. [ 99.234000][ T6512] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.190'. [ 99.264596][ T6506] syzkaller0: entered promiscuous mode [ 99.287230][ T6506] syzkaller0: entered allmulticast mode [ 99.368952][ T6506] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 101.203936][ T6565] netlink: 'syz.3.202': attribute type 21 has an invalid length. [ 101.215417][ T6565] netlink: 128 bytes leftover after parsing attributes in process `syz.3.202'. [ 101.226712][ T6565] netlink: 3 bytes leftover after parsing attributes in process `syz.3.202'. [ 101.791083][ T6594] netlink: 'syz.2.207': attribute type 2 has an invalid length. [ 101.867894][ T6594] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.207'. [ 101.947439][ T6597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.657587][ T6625] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.218'. [ 103.026065][ T6638] netlink: 'syz.1.221': attribute type 9 has an invalid length. [ 103.039881][ T6638] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.221'. [ 103.154074][ T6640] netlink: 'syz.1.221': attribute type 9 has an invalid length. [ 103.161793][ T6640] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.221'. [ 103.736377][ T6653] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.225'. [ 103.958802][ T6659] netlink: 'syz.2.226': attribute type 21 has an invalid length. [ 103.986530][ T6659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.226'. [ 106.620987][ T6716] netlink: 119100 bytes leftover after parsing attributes in process `syz.2.238'. [ 107.775705][ T5089] Bluetooth: hci2: Dropping invalid advertising data [ 107.786802][ T5089] Bluetooth: hci2: Malformed LE Event: 0x02 [ 108.590827][ T6769] netlink: 'syz.2.253': attribute type 9 has an invalid length. [ 108.623598][ T6769] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.253'. [ 108.910559][ T6773] netlink: 'syz.1.255': attribute type 12 has an invalid length. [ 108.950853][ T6773] netlink: 'syz.1.255': attribute type 12 has an invalid length. [ 109.187087][ T6778] Driver unsupported XDP return value 0 on prog (id 270) dev N/A, expect packet loss! [ 109.338604][ T6786] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 110.224291][ T6786] team0: Port device geneve1 added [ 110.384765][ T6796] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 110.580105][ T6796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.651980][ T6796] .`: (slave batadv0): Enslaving as an active interface with an up link [ 110.985110][ T6796] syz.3.259 (6796) used greatest stack depth: 17832 bytes left [ 111.280602][ T6814] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.264'. [ 111.322024][ T6814] openvswitch: netlink: IP tunnel dst address not specified [ 111.766416][ T6823] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 111.793886][ T6823] netlink: 2 bytes leftover after parsing attributes in process `syz.2.266'. [ 111.802733][ T6823] hsr0: entered promiscuous mode [ 111.835186][ T6823] bridge0: port 3(hsr0) entered blocking state [ 111.856156][ T6823] bridge0: port 3(hsr0) entered disabled state [ 111.870359][ T6823] hsr0: entered allmulticast mode [ 111.900272][ T6823] hsr_slave_0: entered allmulticast mode [ 111.911916][ T6823] hsr_slave_1: entered allmulticast mode [ 111.940784][ T6823] bridge0: port 3(hsr0) entered blocking state [ 111.947168][ T6823] bridge0: port 3(hsr0) entered forwarding state [ 112.898448][ T6833] netlink: 'syz.2.271': attribute type 10 has an invalid length. [ 113.007195][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.271'. [ 113.033562][ T6833] team0: entered promiscuous mode [ 113.038794][ T6833] team_slave_0: entered promiscuous mode [ 113.049133][ T6833] team_slave_1: entered promiscuous mode [ 113.059208][ T6833] team0: entered allmulticast mode [ 113.069154][ T6833] team_slave_0: entered allmulticast mode [ 113.103668][ T6833] team_slave_1: entered allmulticast mode [ 113.110157][ T6833] bridge0: port 4(team0) entered blocking state [ 113.123957][ T6833] bridge0: port 4(team0) entered disabled state [ 113.146161][ T6833] bridge0: port 4(team0) entered blocking state [ 113.152585][ T6833] bridge0: port 4(team0) entered forwarding state [ 113.190426][ T6836] netlink: 'syz.3.270': attribute type 64 has an invalid length. [ 116.565914][ T6877] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 116.588480][ T6876] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 116.783877][ T6877] netlink: 'syz.2.281': attribute type 29 has an invalid length. [ 116.999307][ T6896] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.285'. [ 117.098174][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 117.662282][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 117.733631][ T6905] netlink: 152 bytes leftover after parsing attributes in process `syz.3.286'. [ 120.729969][ T6930] netlink: 76 bytes leftover after parsing attributes in process `syz.3.295'. [ 120.924573][ T6927] netlink: 'syz.2.294': attribute type 2 has an invalid length. [ 120.956994][ T6927] netlink: 'syz.2.294': attribute type 8 has an invalid length. [ 120.982355][ T6927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.294'. [ 121.002473][ T6928] netlink: 'syz.2.294': attribute type 11 has an invalid length. [ 121.377868][ T6950] netlink: 'syz.1.303': attribute type 17 has an invalid length. [ 121.450927][ T6950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.303'. [ 121.863321][ T6969] netlink: 'syz.2.309': attribute type 39 has an invalid length. [ 122.366424][ T6976] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.312'. [ 122.784557][ T6985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.001903][ T7012] can: request_module (can-proto-4) failed. [ 126.106213][ T7016] netlink: 'syz.3.325': attribute type 2 has an invalid length. [ 126.143670][ T7016] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.325'. [ 126.657256][ T7049] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.334'. [ 126.773177][ T7045] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.334'. [ 126.866929][ T7045] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 126.888346][ T7045] CPU: 1 PID: 7045 Comm: syz.2.334 Not tainted syzkaller #0 [ 126.895700][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.905787][ T7045] Call Trace: [ 126.909093][ T7045] [ 126.912054][ T7045] dump_stack_lvl+0x18c/0x250 [ 126.916778][ T7045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.922974][ T7045] ? show_regs_print_info+0x20/0x20 [ 126.928205][ T7045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.934416][ T7045] sysfs_warn_dup+0x8e/0xa0 [ 126.938950][ T7045] sysfs_do_create_link_sd+0xc0/0x110 [ 126.944357][ T7045] device_add_class_symlinks+0x1cf/0x240 [ 126.950029][ T7045] device_add+0x4f9/0xc40 [ 126.954399][ T7045] wiphy_register+0x1d99/0x2ac0 [ 126.959279][ T7045] ? cfg80211_event_work+0x40/0x40 [ 126.964393][ T7045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.970556][ T7045] ? ieee80211_register_hw+0x2978/0x3b30 [ 126.976193][ T7045] ieee80211_register_hw+0x2dd8/0x3b30 [ 126.981664][ T7045] ? ieee80211_register_hw+0xfc1/0x3b30 [ 126.987220][ T7045] ? ieee80211_tasklet_handler+0x20/0x20 [ 126.992850][ T7045] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 126.998752][ T7045] ? __debug_object_init+0xec/0x450 [ 127.003957][ T7045] ? __asan_memset+0x22/0x40 [ 127.008549][ T7045] ? __hrtimer_init+0x189/0x270 [ 127.013403][ T7045] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 127.019150][ T7045] ? mac80211_hwsim_free+0x220/0x220 [ 127.024433][ T7045] ? rcu_is_watching+0x15/0xb0 [ 127.029196][ T7045] ? kstrndup+0xbd/0x140 [ 127.033455][ T7045] hwsim_new_radio_nl+0xdad/0x1a70 [ 127.038576][ T7045] ? mark_lock+0x94/0x320 [ 127.042914][ T7045] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 127.049248][ T7045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.055403][ T7045] ? lockdep_hardirqs_on+0x98/0x150 [ 127.060605][ T7045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 127.066774][ T7045] genl_family_rcv_msg_doit+0x21a/0x310 [ 127.072325][ T7045] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 127.078225][ T7045] ? bpf_lsm_capable+0x9/0x10 [ 127.082899][ T7045] ? security_capable+0x89/0xb0 [ 127.087754][ T7045] genl_rcv_msg+0x611/0x7a0 [ 127.092267][ T7045] ? genl_bind+0x360/0x360 [ 127.096684][ T7045] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 127.103032][ T7045] netlink_rcv_skb+0x235/0x4c0 [ 127.107793][ T7045] ? genl_bind+0x360/0x360 [ 127.112210][ T7045] ? netlink_ack+0x1160/0x1160 [ 127.116980][ T7045] ? __lock_acquire+0x7d80/0x7d80 [ 127.122011][ T7045] ? down_read+0x1ac/0x2e0 [ 127.126436][ T7045] genl_rcv+0x28/0x40 [ 127.130414][ T7045] netlink_unicast+0x7b1/0x930 [ 127.135184][ T7045] netlink_sendmsg+0x8d0/0xbf0 [ 127.139955][ T7045] ? netlink_getsockopt+0x590/0x590 [ 127.145154][ T7045] ? aa_sock_msg_perm+0x94/0x150 [ 127.150094][ T7045] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.155375][ T7045] ? security_socket_sendmsg+0x80/0xa0 [ 127.160829][ T7045] ? netlink_getsockopt+0x590/0x590 [ 127.166033][ T7045] ____sys_sendmsg+0x61b/0x980 [ 127.170801][ T7045] ? __asan_memset+0x22/0x40 [ 127.175401][ T7045] ? __sys_sendmsg_sock+0x30/0x30 [ 127.180423][ T7045] ? __import_iovec+0x5f2/0x850 [ 127.185278][ T7045] ? import_iovec+0x73/0xa0 [ 127.189780][ T7045] ___sys_sendmsg+0x2a6/0x360 [ 127.194476][ T7045] ? __sys_sendmsg+0x2b0/0x2b0 [ 127.199307][ T7045] __se_sys_sendmsg+0x1d0/0x2c0 [ 127.204172][ T7045] ? __x64_sys_sendmsg+0x80/0x80 [ 127.209137][ T7045] ? syscall_enter_from_user_mode+0x2e/0x80 [ 127.215044][ T7045] do_syscall_64+0x55/0xb0 [ 127.219460][ T7045] ? clear_bhb_loop+0x40/0x90 [ 127.224131][ T7045] ? clear_bhb_loop+0x40/0x90 [ 127.228803][ T7045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.234699][ T7045] RIP: 0033:0x7f5589f9ce59 [ 127.239128][ T7045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.258737][ T7045] RSP: 002b:00007f558ae94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.267149][ T7045] RAX: ffffffffffffffda RBX: 00007f558a215fa0 RCX: 00007f5589f9ce59 [ 127.275115][ T7045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 127.283078][ T7045] RBP: 00007f558a032e6f R08: 0000000000000000 R09: 0000000000000000 [ 127.291044][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.299016][ T7045] R13: 00007f558a216038 R14: 00007f558a215fa0 R15: 00007ffc12cbc138 [ 127.307002][ T7045] [ 127.450470][ T7062] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.338'. [ 127.493920][ T7062] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.338'. [ 128.099077][ T7083] IPv6: Can't replace route, no match found [ 131.419100][ T7092] netlink: 'syz.0.347': attribute type 33 has an invalid length. [ 131.442715][ T7092] netlink: 152 bytes leftover after parsing attributes in process `syz.0.347'. [ 131.466112][ T7092] `: renamed from syz_tun (while UP) [ 132.048631][ T7105] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.351'. [ 132.160543][ T7105] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 132.458788][ T7115] netlink: 'syz.3.352': attribute type 25 has an invalid length. [ 132.477421][ T7115] netlink: 'syz.3.352': attribute type 29 has an invalid length. [ 132.506872][ T7114] netlink: 5 bytes leftover after parsing attributes in process `syz.3.352'. [ 132.720868][ T7123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.354'. [ 132.919991][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.926477][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.654891][ T7167] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 136.931055][ T7167] team0: Port device wlan1 added [ 137.056997][ T7170] bridge0: port 5(hsr_slave_1) entered blocking state [ 137.085064][ T7170] bridge0: port 5(hsr_slave_1) entered disabled state [ 139.335580][ T7189] delete_channel: no stack [ 140.107371][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 142.870996][ T7225] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 142.879553][ T7225] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.386'. [ 144.000778][ T7257] netlink: 'syz.0.394': attribute type 21 has an invalid length. [ 144.031636][ T7257] netlink: 'syz.0.394': attribute type 6 has an invalid length. [ 144.065877][ T7257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.394'. [ 144.083419][ T7250] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 144.101617][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'. [ 144.145084][ T7250] batman_adv: batadv0: Adding interface: virt_wifi0 [ 144.178529][ T7250] batman_adv: batadv0: Interface activated: virt_wifi0 [ 144.717772][ T7284] syzkaller0: entered promiscuous mode [ 144.766783][ T7284] syzkaller0: entered allmulticast mode [ 150.377634][ T1119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 152.503484][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 152.609286][ T7323] netlink: 128 bytes leftover after parsing attributes in process `syz.2.414'. [ 152.626103][ T7323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.150928][ T7347] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.418'. [ 156.231467][ T7357] netlink: 127924 bytes leftover after parsing attributes in process `syz.2.423'. [ 156.267455][ T7357] netlink: 16384 bytes leftover after parsing attributes in process `syz.2.423'. [ 156.321715][ T7363] netlink: 'syz.3.424': attribute type 21 has an invalid length. [ 156.338744][ T7363] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 156.364126][ T7363] netlink: 144 bytes leftover after parsing attributes in process `syz.3.424'. [ 158.368118][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz.0.434'. [ 161.088464][ T7417] netlink: 'syz.0.441': attribute type 16 has an invalid length. [ 161.141485][ T7417] netlink: 'syz.0.441': attribute type 3 has an invalid length. [ 161.180773][ T7417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.441'. [ 161.381397][ T7420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 161.388478][ T7420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 161.521744][ T7423] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 161.690991][ T7420] netlink: 'syz.2.442': attribute type 9 has an invalid length. [ 161.744477][ T7420] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.442'. [ 162.031899][ T7434] netlink: 63747 bytes leftover after parsing attributes in process `syz.0.443'. [ 162.142087][ T7438] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 162.191408][ T7438] netlink: 'syz.2.446': attribute type 4 has an invalid length. [ 162.206907][ T7438] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.446'. [ 162.330307][ T7448] netlink: 'syz.2.448': attribute type 27 has an invalid length. [ 162.361151][ T7448] netlink: 'syz.2.448': attribute type 27 has an invalid length. [ 163.580294][ T7473] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.455'. [ 163.953080][ T7485] netlink: 'syz.3.459': attribute type 14 has an invalid length. [ 163.973171][ T7485] netlink: 164 bytes leftover after parsing attributes in process `syz.3.459'. [ 163.992678][ T7487] netlink: 763 bytes leftover after parsing attributes in process `syz.2.458'. [ 164.858062][ T7509] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.466'. [ 164.882885][ T7509] netlink: zone id is out of range [ 164.895349][ T7509] netlink: zone id is out of range [ 164.912239][ T7509] netlink: zone id is out of range [ 164.942341][ T7509] netlink: zone id is out of range [ 164.947952][ T7508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.955285][ T7508] IPv6: NLM_F_CREATE should be set when creating new route [ 164.962608][ T7508] IPv6: NLM_F_CREATE should be set when creating new route [ 164.969889][ T7508] IPv6: NLM_F_CREATE should be set when creating new route [ 164.989188][ T7509] netlink: zone id is out of range [ 165.010836][ T7509] netlink: zone id is out of range [ 165.035995][ T7509] netlink: zone id is out of range [ 165.431197][ T7528] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 165.442753][ T7528] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.469'. [ 165.715290][ T7537] netlink: 184912 bytes leftover after parsing attributes in process `syz.2.473'. [ 165.786500][ T7538] netlink: 'syz.2.473': attribute type 27 has an invalid length. [ 166.207665][ T7551] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 166.244340][ T7551] netlink: 209280 bytes leftover after parsing attributes in process `syz.2.478'. [ 166.921834][ T7571] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 166.938035][ T7571] hsr0: entered promiscuous mode [ 166.943342][ T7575] netlink: 'syz.2.485': attribute type 29 has an invalid length. [ 166.951962][ T7571] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.982056][ T7575] netlink: 'syz.2.485': attribute type 29 has an invalid length. [ 167.048918][ T7579] netlink: 'syz.0.486': attribute type 26 has an invalid length. [ 167.071856][ T7579] netlink: 62827 bytes leftover after parsing attributes in process `syz.0.486'. [ 167.310675][ T7584] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 167.337706][ T7586] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.489'. [ 167.347442][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 167.386344][ T7588] lo: entered allmulticast mode [ 167.891954][ T7602] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 168.938868][ T7624] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 169.042993][ T7627] netlink: 'syz.1.503': attribute type 10 has an invalid length. [ 169.081936][ T7627] __nla_validate_parse: 1 callbacks suppressed [ 169.081951][ T7627] netlink: 2 bytes leftover after parsing attributes in process `syz.1.503'. [ 169.101997][ T7627] bond0: entered promiscuous mode [ 169.107658][ T7627] bond_slave_0: entered promiscuous mode [ 169.115295][ T7627] bond_slave_1: entered promiscuous mode [ 169.126754][ T7627] bridge0: port 3(bond0) entered blocking state [ 169.137278][ T7627] bridge0: port 3(bond0) entered disabled state [ 169.146722][ T7627] bond0: entered allmulticast mode [ 169.152058][ T7627] bond_slave_0: entered allmulticast mode [ 169.160616][ T7627] bond_slave_1: entered allmulticast mode [ 169.172831][ T7627] bridge0: port 3(bond0) entered blocking state [ 169.179298][ T7627] bridge0: port 3(bond0) entered forwarding state [ 170.359354][ T7659] netlink: 'syz.3.515': attribute type 4 has an invalid length. [ 170.390013][ T7659] netlink: 152 bytes leftover after parsing attributes in process `syz.3.515'. [ 171.029007][ T7670] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 171.236068][ T7670] team0: Device hsr_slave_0 failed to register rx_handler [ 171.689481][ T7680] bridge0: port 3(team0) entered blocking state [ 171.704387][ T7680] bridge0: port 3(team0) entered disabled state [ 171.721658][ T7680] team0: entered allmulticast mode [ 171.734412][ T7680] team_slave_0: entered allmulticast mode [ 171.751805][ T7680] team_slave_1: entered allmulticast mode [ 171.803048][ T7680] team0: entered promiscuous mode [ 171.808485][ T7680] team_slave_0: entered promiscuous mode [ 171.817882][ T7680] team_slave_1: entered promiscuous mode [ 171.828970][ T7680] bridge0: port 3(team0) entered blocking state [ 171.836916][ T7680] bridge0: port 3(team0) entered forwarding state [ 172.043478][ T7691] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.523'. [ 172.125254][ T7694] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.523'. [ 172.208797][ T7694] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.523'. [ 172.801088][ T7707] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.528'. [ 172.816276][ T7707] net_ratelimit: 38 callbacks suppressed [ 172.816332][ T7707] openvswitch: netlink: IP tunnel dst address not specified [ 172.830155][ T7709] bridge0: port 3(`) entered blocking state [ 172.847041][ T7709] bridge0: port 3(`) entered disabled state [ 172.862268][ T7709] `: entered allmulticast mode [ 172.877703][ T7709] `: entered promiscuous mode [ 172.889473][ T7709] bridge0: port 3(`) entered blocking state [ 172.895773][ T7709] bridge0: port 3(`) entered forwarding state [ 173.040200][ T5089] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 173.332471][ T7729] netlink: 'syz.1.536': attribute type 3 has an invalid length. [ 173.385978][ T7729] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 173.426756][ T7729] netlink: 153768 bytes leftover after parsing attributes in process `syz.1.536'. [ 174.780268][ T7767] netlink: 'syz.2.543': attribute type 21 has an invalid length. [ 174.840345][ T7767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.543'. [ 174.901540][ T7770] netlink: 'syz.0.545': attribute type 2 has an invalid length. [ 175.108099][ T7775] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 175.192233][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.217290][ T7775] bridge_slave_1: left allmulticast mode [ 175.233281][ T7775] bridge_slave_1: left promiscuous mode [ 175.257380][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.354283][ T7775] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 175.472306][ T7780] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.549'. [ 175.528447][ T7780] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.549'. [ 175.907918][ T7789] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 176.001931][ T7789] .`: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 176.512504][ T7810] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.555'. [ 176.550111][ T7810] netlink: zone id is out of range [ 176.584504][ T7810] netlink: zone id is out of range [ 176.603588][ T7810] netlink: zone id is out of range [ 176.631262][ T7810] netlink: zone id is out of range [ 176.658723][ T7810] netlink: zone id is out of range [ 176.683726][ T7810] netlink: zone id is out of range [ 176.703981][ T7810] netlink: zone id is out of range [ 176.716129][ T7810] netlink: zone id is out of range [ 176.722216][ T7810] netlink: zone id is out of range [ 177.112308][ T7831] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.561'. [ 178.040122][ T7839] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 178.063616][ T7839] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 178.071311][ T7839] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.563'. [ 178.783125][ T7850] netlink: 'syz.3.566': attribute type 3 has an invalid length. [ 178.858926][ T7850] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 178.878945][ T7850] netlink: 'syz.3.566': attribute type 7 has an invalid length. [ 178.903591][ T7850] netlink: 'syz.3.566': attribute type 8 has an invalid length. [ 178.955642][ T7850] netlink: 'syz.3.566': attribute type 7 has an invalid length. [ 179.020733][ T7850] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.566'. [ 179.425068][ T7853] netlink: 164 bytes leftover after parsing attributes in process `syz.3.566'. [ 179.609125][ T7854] @: port 1(netdevsim3) entered blocking state [ 179.634921][ T7854] @: port 1(netdevsim3) entered disabled state [ 179.641407][ T7854] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 179.701240][ T7854] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 179.767246][ T7866] netlink: 'syz.1.569': attribute type 25 has an invalid length. [ 179.779196][ T7866] netlink: 'syz.1.569': attribute type 3 has an invalid length. [ 179.793595][ T7866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.569'. [ 180.068452][ T7868] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.570'. [ 180.082511][ T7868] net_ratelimit: 332 callbacks suppressed [ 180.082980][ T7868] openvswitch: netlink: Key type 4112 is out of range max 32 [ 180.458733][ T7880] netlink: 'syz.1.575': attribute type 1 has an invalid length. [ 180.633598][ T7884] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 180.655263][ T7884] netlink: 'syz.1.577': attribute type 29 has an invalid length. [ 181.609580][ T1119] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.651413][ T7901] veth0_vlan: left promiscuous mode [ 181.737281][ T7901] veth0_vlan: entered promiscuous mode [ 181.860025][ T7901] team0: Device veth0_vlan failed to register rx_handler [ 182.181715][ T7922] syzkaller0: entered promiscuous mode [ 182.193582][ T7922] syzkaller0: entered allmulticast mode [ 182.701967][ T7939] syz.0.589: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 182.743164][ T7939] CPU: 0 PID: 7939 Comm: syz.0.589 Not tainted syzkaller #0 [ 182.750511][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.760605][ T7939] Call Trace: [ 182.763907][ T7939] [ 182.766854][ T7939] dump_stack_lvl+0x18c/0x250 [ 182.771560][ T7939] ? show_regs_print_info+0x20/0x20 [ 182.776791][ T7939] ? load_image+0x420/0x420 [ 182.781328][ T7939] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 182.787777][ T7939] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 182.792058][ T7940] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.589'. [ 182.794290][ T7939] warn_alloc+0x246/0x340 [ 182.794360][ T7939] ? stack_trace_save+0xaa/0x100 [ 182.812836][ T7939] ? zone_watermark_ok_safe+0x230/0x230 [ 182.818430][ T7939] ? kasan_set_track+0x5f/0x70 [ 182.823212][ T7939] ? kasan_set_track+0x4e/0x70 [ 182.827994][ T7939] ? __kasan_kmalloc+0x8f/0xa0 [ 182.832778][ T7939] ? xsk_init_queue+0xad/0x100 [ 182.837563][ T7939] ? xsk_setsockopt+0x4c9/0x750 [ 182.842447][ T7939] ? do_sock_setsockopt+0x175/0x1a0 [ 182.847678][ T7939] ? __x64_sys_setsockopt+0x182/0x200 [ 182.853080][ T7939] __vmalloc_node_range+0x129/0x1320 [ 182.858433][ T7939] ? free_vm_area+0x50/0x50 [ 182.862979][ T7939] vmalloc_user+0x74/0x80 [ 182.867335][ T7939] ? xskq_create+0xbf/0x170 [ 182.871864][ T7939] xskq_create+0xbf/0x170 [ 182.876218][ T7939] xsk_init_queue+0xad/0x100 [ 182.880836][ T7939] xsk_setsockopt+0x4c9/0x750 [ 182.885544][ T7939] ? xsk_poll+0x670/0x670 [ 182.889905][ T7939] ? __fget_files+0x28/0x460 [ 182.894526][ T7939] ? aa_sock_opt_perm+0x74/0x100 [ 182.899497][ T7939] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 182.905072][ T7939] ? security_socket_setsockopt+0x7e/0xa0 [ 182.910815][ T7939] ? xsk_poll+0x670/0x670 [ 182.915170][ T7939] do_sock_setsockopt+0x175/0x1a0 [ 182.920223][ T7939] ? __fdget+0x180/0x210 [ 182.924499][ T7939] __x64_sys_setsockopt+0x182/0x200 [ 182.929730][ T7939] do_syscall_64+0x55/0xb0 [ 182.934168][ T7939] ? clear_bhb_loop+0x40/0x90 [ 182.938864][ T7939] ? clear_bhb_loop+0x40/0x90 [ 182.943563][ T7939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.949499][ T7939] RIP: 0033:0x7f763fd9ce59 [ 182.953938][ T7939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.973568][ T7939] RSP: 002b:00007f7640cc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.982019][ T7939] RAX: ffffffffffffffda RBX: 00007f7640016180 RCX: 00007f763fd9ce59 [ 182.990015][ T7939] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 182.998006][ T7939] RBP: 00007f763fe32e6f R08: 0000000000000004 R09: 0000000000000000 [ 183.006000][ T7939] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 183.013992][ T7939] R13: 00007f7640016218 R14: 00007f7640016180 R15: 00007fff55d64b88 [ 183.022004][ T7939] [ 183.087466][ T7939] Mem-Info: [ 183.094937][ T7939] active_anon:73473 inactive_anon:0 isolated_anon:0 [ 183.094937][ T7939] active_file:15780 inactive_file:39991 isolated_file:0 [ 183.094937][ T7939] unevictable:768 dirty:38 writeback:0 [ 183.094937][ T7939] slab_reclaimable:10378 slab_unreclaimable:93937 [ 183.094937][ T7939] mapped:34148 shmem:69312 pagetables:666 [ 183.094937][ T7939] sec_pagetables:0 bounce:0 [ 183.094937][ T7939] kernel_misc_reclaimable:0 [ 183.094937][ T7939] free:1277670 free_pcp:12738 free_cma:0 [ 183.173523][ T7939] Node 0 active_anon:290992kB inactive_anon:0kB active_file:63120kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136592kB dirty:148kB writeback:0kB shmem:272712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10928kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no [ 183.217483][ T7939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.263596][ T7939] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.323495][ T7939] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 183.333708][ T7939] Node 0 DMA32 free:1208076kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:280156kB inactive_anon:0kB active_file:63120kB inactive_file:158932kB unevictable:1536kB writepending:148kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:38092kB local_pcp:21616kB free_cma:0kB [ 183.393463][ T7939] lowmem_reserve[]: 0 0 0 0 0 [ 183.400442][ T7939] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 183.443503][ T7939] lowmem_reserve[]: 0 0 0 0 0 [ 183.453087][ T7939] Node 1 Normal free:3893872kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20608kB local_pcp:8672kB free_cma:0kB [ 183.503643][ T7939] lowmem_reserve[]: 0 0 0 0 0 [ 183.508454][ T7939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.532353][ T7939] Node 0 DMA32: 1239*4kB (UME) 1127*8kB (UME) 748*16kB (UME) 1585*32kB (UME) 589*64kB (UME) 69*128kB (UM) 159*256kB (UME) 72*512kB (UE) 28*1024kB (U) 13*2048kB (UE) 242*4096kB (UM) = 1247284kB [ 183.561950][ T7939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.583777][ T7939] Node 1 Normal: 250*4kB (UME) 67*8kB (UME) 49*16kB (UME) 77*32kB (UME) 23*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3893872kB [ 183.603526][ T7939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.623294][ T7939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.633077][ T7939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.660833][ T7939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.670298][ T7939] 111483 total pagecache pages [ 183.683501][ T7939] 0 pages in swap cache [ 183.687724][ T7939] Free swap = 124564kB [ 183.702036][ T7939] Total swap = 124996kB [ 183.706292][ T7939] 2097051 pages RAM [ 183.710111][ T7939] 0 pages HighMem/MovableOnly [ 183.723464][ T7939] 416931 pages reserved [ 183.727648][ T7939] 0 pages cma reserved [ 185.456541][ T7935] netlink: 830 bytes leftover after parsing attributes in process `syz.0.589'. [ 185.638936][ T7948] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.591'. [ 186.249431][ T7970] validate_nla: 2 callbacks suppressed [ 186.249447][ T7970] netlink: 'syz.2.597': attribute type 41 has an invalid length. [ 186.602489][ T7989] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.602'. [ 186.618047][ T7990] netlink: 'syz.2.601': attribute type 21 has an invalid length. [ 186.708244][ T7992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.603'. [ 186.723297][ T7992] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.603'. [ 186.734828][ T7992] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.603'. [ 187.530252][ T8027] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.613'. [ 188.021220][ T8050] netlink: 168 bytes leftover after parsing attributes in process `syz.2.618'. [ 188.148450][ T8054] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 188.161619][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.181179][ T8054] bridge_slave_1: left allmulticast mode [ 188.188867][ T8054] bridge_slave_1: left promiscuous mode [ 188.195143][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.218001][ T8054] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 188.227565][ T8052] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 189.068426][ T8094] netlink: 'syz.2.630': attribute type 9 has an invalid length. [ 189.077994][ T8094] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.630'. [ 189.133061][ T8096] TCP: TCP_TX_DELAY enabled [ 189.676717][ T8103] netlink: 'syz.0.633': attribute type 7 has an invalid length. [ 189.736832][ T8103] netlink: 'syz.0.633': attribute type 6 has an invalid length. [ 189.970366][ T8103] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.633'. [ 190.327492][ T8115] netlink: 'syz.1.636': attribute type 10 has an invalid length. [ 190.344451][ T8115] bridge0: port 4(hsr0) entered blocking state [ 190.353865][ T8115] bridge0: port 4(hsr0) entered disabled state [ 190.370703][ T8115] hsr0: entered allmulticast mode [ 190.376120][ T8115] hsr_slave_0: entered allmulticast mode [ 190.383692][ T8115] hsr_slave_1: entered allmulticast mode [ 190.399202][ T8115] bridge0: port 4(hsr0) entered blocking state [ 190.405667][ T8115] bridge0: port 4(hsr0) entered forwarding state [ 190.470501][ T8125] team_slave_0: left promiscuous mode [ 190.490369][ T8125] team_slave_0: left allmulticast mode [ 190.525870][ T8125] team0: Port device team_slave_0 removed [ 190.580664][ T8127] __nla_validate_parse: 1 callbacks suppressed [ 190.580701][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 190.778429][ T8122] delete_channel: no stack [ 191.316494][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 191.325179][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 191.331430][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 191.338082][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 191.695964][ T8152] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.646'. [ 191.749216][ T8155] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 (while UP) [ 192.208876][ T8165] vcan0: entered allmulticast mode [ 192.476408][ T7518] tipc: Subscription rejected, illegal request [ 193.278029][ T8202] netlink: 'syz.3.656': attribute type 10 has an invalid length. [ 193.313654][ T8202] hsr_slave_0: left promiscuous mode [ 193.356643][ T8202] hsr_slave_1: left promiscuous mode [ 193.481473][ T8210] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 193.560743][ T8210] veth0_vlan: left promiscuous mode [ 193.606067][ T8210] veth0_vlan: entered promiscuous mode [ 193.637687][ T8210] team0: Device veth0_vlan failed to register rx_handler [ 194.079262][ T8217] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.662'. [ 194.109014][ T8217] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.662'. [ 194.366191][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372668][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.582428][ T8248] netlink: 14 bytes leftover after parsing attributes in process `syz.0.670'. [ 194.681329][ T8248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.705078][ T8248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.715659][ T8251] netlink: 'syz.2.671': attribute type 3 has an invalid length. [ 194.725878][ T8248] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 194.735063][ T8248] bridge0: port 3(`) entered disabled state [ 194.741334][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.742808][ T8251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.671'. [ 194.764210][ T8248] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 194.778452][ T8248] bond0 (unregistering): Released all slaves [ 194.796146][ T8246] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.669'. [ 194.931840][ T8254] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 194.961622][ T8254] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 194.977190][ T8253] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 195.266603][ T8277] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.677'. [ 195.349756][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 195.601557][ T8290] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.682'. [ 195.745279][ T8297] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 195.754750][ T8296] netlink: 'syz.3.684': attribute type 2 has an invalid length. [ 196.017348][ T8305] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.686'. [ 196.166368][ T8311] sctp: [Deprecated]: syz.0.688 (pid 8311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.166368][ T8311] Use struct sctp_sack_info instead [ 196.844933][ T8334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'. [ 196.864095][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.694'. [ 197.754940][ T8367] netlink: 162804 bytes leftover after parsing attributes in process `syz.3.704'. [ 197.778034][ T8367] openvswitch: netlink: Key type 29 is not supported [ 197.870254][ T8372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.704'. [ 198.181762][ T8383] netlink: 'syz.3.710': attribute type 39 has an invalid length. [ 199.220992][ T8416] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 [ 199.257393][ T8420] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.720'. [ 199.271396][ T8416] netlink: 'syz.1.718': attribute type 3 has an invalid length. [ 199.295385][ T8416] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.718'. [ 199.411267][ T8420] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 199.432689][ T8420] netlink: 152 bytes leftover after parsing attributes in process `syz.0.720'. [ 200.628424][ T8458] netlink: 'syz.3.726': attribute type 4 has an invalid length. [ 200.669478][ T8458] netlink: 152 bytes leftover after parsing attributes in process `syz.3.726'. [ 200.708760][ T8460] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.728'. [ 200.936038][ T8464] netlink: 'syz.2.727': attribute type 3 has an invalid length. [ 200.960151][ T8464] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 201.003631][ T8464] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.727'. [ 201.291765][ T8475] sock: sock_timestamping_bind_phc: sock not bind to device [ 201.356367][ T8475] netlink: 'syz.3.732': attribute type 39 has an invalid length. [ 201.731030][ T8491] netlink: 168 bytes leftover after parsing attributes in process `syz.1.736'. [ 203.816814][ T8530] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 204.959671][ T8549] Ÿë: port 1(gretap0) entered blocking state [ 204.983655][ T8549] Ÿë: port 1(gretap0) entered disabled state [ 204.990526][ T8549] gretap0: entered allmulticast mode [ 204.997445][ T8549] gretap0: entered promiscuous mode [ 207.599556][ T8665] netlink: 830 bytes leftover after parsing attributes in process `syz.2.767'. [ 207.774207][ T8670] netlink: 'syz.1.768': attribute type 11 has an invalid length. [ 207.797498][ T8670] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.768'. [ 207.851389][ T8670] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 207.888243][ T8670] CPU: 0 PID: 8670 Comm: syz.1.768 Not tainted syzkaller #0 [ 207.895598][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.905669][ T8670] Call Trace: [ 207.908971][ T8670] [ 207.911916][ T8670] dump_stack_lvl+0x18c/0x250 [ 207.916625][ T8670] ? show_regs_print_info+0x20/0x20 [ 207.921850][ T8670] ? load_image+0x420/0x420 [ 207.926387][ T8670] sysfs_warn_dup+0x8e/0xa0 [ 207.930913][ T8670] sysfs_do_create_link_sd+0xc0/0x110 [ 207.936309][ T8670] device_add_class_symlinks+0x1cf/0x240 [ 207.941973][ T8670] device_add+0x4f9/0xc40 [ 207.946332][ T8670] wiphy_register+0x1d99/0x2ac0 [ 207.951228][ T8670] ? cfg80211_event_work+0x40/0x40 [ 207.956361][ T8670] ? minstrel_ht_alloc+0x88a/0x990 [ 207.961506][ T8670] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 207.967607][ T8670] ieee80211_register_hw+0x2dd8/0x3b30 [ 207.973106][ T8670] ? ieee80211_register_hw+0xfc1/0x3b30 [ 207.978694][ T8670] ? ieee80211_tasklet_handler+0x20/0x20 [ 207.984349][ T8670] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 207.990274][ T8670] ? __debug_object_init+0xec/0x450 [ 207.995505][ T8670] ? __asan_memset+0x22/0x40 [ 208.000122][ T8670] ? __hrtimer_init+0x189/0x270 [ 208.005008][ T8670] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 208.010781][ T8670] ? mac80211_hwsim_free+0x220/0x220 [ 208.016086][ T8670] ? rcu_is_watching+0x15/0xb0 [ 208.020873][ T8670] ? kstrndup+0xbd/0x140 [ 208.025156][ T8670] hwsim_new_radio_nl+0xdad/0x1a70 [ 208.030296][ T8670] ? __nla_validate+0x50/0x50 [ 208.035010][ T8670] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 208.041373][ T8670] ? __nla_parse+0x40/0x50 [ 208.045810][ T8670] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 208.052171][ T8670] genl_family_rcv_msg_doit+0x21a/0x310 [ 208.057744][ T8670] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 208.063668][ T8670] ? bpf_lsm_capable+0x9/0x10 [ 208.068371][ T8670] ? security_capable+0x89/0xb0 [ 208.073251][ T8670] genl_rcv_msg+0x611/0x7a0 [ 208.077784][ T8670] ? genl_bind+0x360/0x360 [ 208.082227][ T8670] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 208.088582][ T8670] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 208.095212][ T8670] netlink_rcv_skb+0x235/0x4c0 [ 208.099997][ T8670] ? genl_bind+0x360/0x360 [ 208.104436][ T8670] ? netlink_ack+0x1160/0x1160 [ 208.109233][ T8670] ? __lock_acquire+0x7d80/0x7d80 [ 208.114286][ T8670] ? down_read+0x1ac/0x2e0 [ 208.118728][ T8670] genl_rcv+0x28/0x40 [ 208.122737][ T8670] netlink_unicast+0x7b1/0x930 [ 208.127543][ T8670] netlink_sendmsg+0x8d0/0xbf0 [ 208.132337][ T8670] ? netlink_getsockopt+0x590/0x590 [ 208.137563][ T8670] ? aa_sock_msg_perm+0x94/0x150 [ 208.142524][ T8670] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 208.147826][ T8670] ? security_socket_sendmsg+0x80/0xa0 [ 208.153304][ T8670] ? netlink_getsockopt+0x590/0x590 [ 208.158523][ T8670] ____sys_sendmsg+0x61b/0x980 [ 208.163312][ T8670] ? __asan_memset+0x22/0x40 [ 208.167922][ T8670] ? __sys_sendmsg_sock+0x30/0x30 [ 208.172964][ T8670] ? __import_iovec+0x5f2/0x850 [ 208.177842][ T8670] ? import_iovec+0x73/0xa0 [ 208.182370][ T8670] ___sys_sendmsg+0x2a6/0x360 [ 208.187079][ T8670] ? __sys_sendmsg+0x2b0/0x2b0 [ 208.191924][ T8670] __se_sys_sendmsg+0x1d0/0x2c0 [ 208.196801][ T8670] ? __x64_sys_sendmsg+0x80/0x80 [ 208.201788][ T8670] ? lockdep_hardirqs_on+0x98/0x150 [ 208.207014][ T8670] do_syscall_64+0x55/0xb0 [ 208.211450][ T8670] ? clear_bhb_loop+0x40/0x90 [ 208.216144][ T8670] ? clear_bhb_loop+0x40/0x90 [ 208.220839][ T8670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.226764][ T8670] RIP: 0033:0x7fb422f9ce59 [ 208.231195][ T8670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.250816][ T8670] RSP: 002b:00007fb423dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.259251][ T8670] RAX: ffffffffffffffda RBX: 00007fb423216090 RCX: 00007fb422f9ce59 [ 208.267239][ T8670] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 208.275224][ T8670] RBP: 00007fb423032e6f R08: 0000000000000000 R09: 0000000000000000 [ 208.283220][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.291210][ T8670] R13: 00007fb423216128 R14: 00007fb423216090 R15: 00007ffccc35eab8 [ 208.299220][ T8670] [ 208.715194][ T8693] netlink: 128 bytes leftover after parsing attributes in process `syz.2.774'. [ 208.751792][ T8693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.136161][ T8692] netlink: 'syz.0.773': attribute type 3 has an invalid length. [ 209.175375][ T8692] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.773'. [ 209.225803][ T8702] netlink: 'syz.1.779': attribute type 29 has an invalid length. [ 209.283718][ T8702] netlink: 'syz.1.779': attribute type 29 has an invalid length. [ 209.304497][ T8705] netlink: 'syz.1.779': attribute type 29 has an invalid length. [ 209.363360][ T8702] netlink: 'syz.1.779': attribute type 29 has an invalid length. [ 209.394250][ T8705] netlink: 'syz.1.779': attribute type 29 has an invalid length. [ 209.608454][ T8705] À: port 1(vlan0) entered blocking state [ 209.622250][ T8705] À: port 1(vlan0) entered disabled state [ 209.636760][ T8705] vlan0: entered allmulticast mode [ 209.649254][ T8705] veth0_vlan: entered allmulticast mode [ 209.675190][ T8705] vlan0: entered promiscuous mode [ 210.205406][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 210.217786][ T8722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.785'. [ 210.398569][ T8725] netlink: 'syz.2.786': attribute type 58 has an invalid length. [ 210.433747][ T8725] netlink: 144 bytes leftover after parsing attributes in process `syz.2.786'. [ 210.700342][ T8735] hsr0: left allmulticast mode [ 210.705671][ T8735] hsr_slave_0: left allmulticast mode [ 210.733582][ T8735] hsr_slave_1: left allmulticast mode [ 210.739433][ T8735] bridge0: port 4(hsr0) entered disabled state [ 210.772604][ T8735] bond0: left allmulticast mode [ 210.781814][ T8735] bond_slave_0: left allmulticast mode [ 210.793089][ T8735] bond_slave_1: left allmulticast mode [ 210.813487][ T8735] bridge0: port 3(bond0) entered disabled state [ 210.834753][ T8735] bridge_slave_1: left allmulticast mode [ 210.846699][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.884520][ T8735] bridge_slave_0: left allmulticast mode [ 210.914378][ T8735] bridge_slave_0: left promiscuous mode [ 210.920232][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.339823][ T8748] netlink: 'syz.0.793': attribute type 21 has an invalid length. [ 211.381216][ T8748] netlink: 168 bytes leftover after parsing attributes in process `syz.0.793'. [ 211.849546][ T8762] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.796'. [ 212.377096][ T8772] netlink: 'syz.2.797': attribute type 4 has an invalid length. [ 212.398559][ T8772] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.797'. [ 212.678758][ T8778] tun0: tun_chr_ioctl cmd 1074025675 [ 212.708421][ T8778] tun0: persist enabled [ 212.733477][ T8776] tun0: tun_chr_ioctl cmd 1074025673 [ 212.740101][ T8637] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 212.757372][ T8779] netlink: 'syz.1.801': attribute type 3 has an invalid length. [ 212.783759][ T8779] netlink: 197324 bytes leftover after parsing attributes in process `syz.1.801'. [ 212.874299][ T8784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.799'. [ 213.896961][ T8789] team0: Device wg1 is of different type [ 214.279225][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.808'. [ 214.301235][ T8798] netlink: 10 bytes leftover after parsing attributes in process `syz.2.807'. [ 214.622487][ T8812] validate_nla: 4 callbacks suppressed [ 214.622520][ T8812] netlink: 'syz.0.810': attribute type 29 has an invalid length. [ 214.680435][ T8812] netlink: 'syz.0.810': attribute type 3 has an invalid length. [ 214.711452][ T8812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.810'. [ 214.829399][ T8815] netlink: 'syz.2.812': attribute type 12 has an invalid length. [ 214.873510][ T8815] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 216.343184][ T8815] bridge0: port 4(team0) entered disabled state [ 216.386548][ T8815] team0: left allmulticast mode [ 216.393046][ T8815] team_slave_0: left allmulticast mode [ 216.400901][ T8815] team_slave_1: left allmulticast mode [ 216.418067][ T8815] team0: left promiscuous mode [ 216.427468][ T8815] team_slave_0: left promiscuous mode [ 216.433037][ T8815] team_slave_1: left promiscuous mode [ 216.471879][ T8815] bridge0: port 4(team0) entered disabled state [ 216.495609][ T8815] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.514459][ T8815] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.537106][ T8816] netlink: 'syz.2.812': attribute type 10 has an invalid length. [ 216.550496][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.812'. [ 216.576968][ T8816] team0: entered promiscuous mode [ 216.582044][ T8816] team_slave_0: entered promiscuous mode [ 216.588160][ T8816] team_slave_1: entered promiscuous mode [ 216.594637][ T8816] team0: entered allmulticast mode [ 216.599878][ T8816] team_slave_0: entered allmulticast mode [ 216.606200][ T8816] team_slave_1: entered allmulticast mode [ 216.616761][ T8816] bond0: (slave team0): Releasing backup interface [ 216.646156][ T8816] bridge0: port 4(team0) entered blocking state [ 216.652572][ T8816] bridge0: port 4(team0) entered disabled state [ 217.051011][ T8840] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.817'. [ 217.110662][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 217.130899][ T8842] netlink: 152 bytes leftover after parsing attributes in process `syz.3.820'. [ 217.365938][ T8851] netlink: 'syz.0.822': attribute type 21 has an invalid length. [ 217.384630][ T8851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.822'. [ 218.036649][ T8868] netlink: 152 bytes leftover after parsing attributes in process `syz.1.826'. [ 218.781318][ T5780] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 218.809245][ T8898] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.832'. [ 219.788859][ T8910] netlink: 10750 bytes leftover after parsing attributes in process `syz.1.835'. [ 222.700204][ T8917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.837'. [ 222.875523][ T8928] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 222.899990][ T8928] netlink: 168 bytes leftover after parsing attributes in process `syz.3.842'. [ 222.942444][ T8932] netlink: 'syz.2.844': attribute type 13 has an invalid length. [ 222.951733][ T8932] netlink: 172 bytes leftover after parsing attributes in process `syz.2.844'. [ 223.002626][ T8933] netlink: 'syz.2.844': attribute type 13 has an invalid length. [ 223.030889][ T8933] netlink: 172 bytes leftover after parsing attributes in process `syz.2.844'. [ 223.954523][ T8966] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.854'. [ 224.037603][ T8966] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 224.093599][ T8966] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.854'. [ 224.730119][ T8975] netlink: 'syz.3.858': attribute type 6 has an invalid length. [ 226.297328][ T9022] netlink: 'syz.2.871': attribute type 9 has an invalid length. [ 226.338875][ T9022] netlink: 399 bytes leftover after parsing attributes in process `syz.2.871'. [ 226.885661][ T9032] netlink: 10 bytes leftover after parsing attributes in process `syz.3.874'. [ 227.068295][ T9035] netlink: 'syz.1.875': attribute type 2 has an invalid length. [ 227.113567][ T9035] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.875'. [ 227.243825][ T9041] netlink: 'syz.2.877': attribute type 21 has an invalid length. [ 227.251635][ T9041] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 227.273377][ T9041] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.877'. [ 227.313190][ T9045] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.879'. [ 227.824245][ T9061] netlink: 14 bytes leftover after parsing attributes in process `syz.3.884'. [ 229.195064][ T9073] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 229.202861][ T9073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.887'. [ 229.283223][ T9073] hsr0: entered promiscuous mode [ 229.316132][ T9073] bridge0: port 2(hsr0) entered blocking state [ 229.331140][ T9073] bridge0: port 2(hsr0) entered disabled state [ 229.394158][ T9073] hsr0: entered allmulticast mode [ 229.399247][ T9073] hsr_slave_0: entered allmulticast mode [ 229.503492][ T9073] hsr_slave_1: entered allmulticast mode [ 230.399438][ T9085] netlink: 168 bytes leftover after parsing attributes in process `syz.2.892'. [ 232.720081][ T9113] netlink: 'syz.0.900': attribute type 10 has an invalid length. [ 232.729336][ T9113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.900'. [ 233.644934][ T9118] tap0: tun_chr_ioctl cmd 1074025677 [ 233.663783][ T9118] tap0: linktype set to 825 [ 233.776223][ T9139] netlink: 180 bytes leftover after parsing attributes in process `syz.3.904'. [ 233.831640][ T9139] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.904'. [ 234.258010][ T9182] gretap0: refused to change device tx_queue_len [ 234.273858][ T9186] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 234.281900][ T9186] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.911'. [ 234.549886][ T9201] netlink: 21 bytes leftover after parsing attributes in process `syz.0.914'. [ 234.561779][ T9201] ksmbd: Unknown IPC event: 0, ignore. [ 234.570184][ T9201] netlink: 'syz.0.914': attribute type 3 has an invalid length. [ 234.578037][ T9201] netlink: 132 bytes leftover after parsing attributes in process `syz.0.914'. [ 235.626437][ T9208] netlink: 'syz.2.917': attribute type 4 has an invalid length. [ 235.717673][ T9210] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.916'. [ 235.923600][ T9208] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.917'. [ 236.094032][ T9206] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.916'. [ 237.357363][ T9236] netlink: 'syz.0.923': attribute type 2 has an invalid length. [ 237.397169][ T9236] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.923'. [ 237.766704][ T9257] netlink: 'syz.2.931': attribute type 28 has an invalid length. [ 237.993333][ T9259] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.930'. [ 238.039485][ T9259] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 238.051072][ T9259] CPU: 1 PID: 9259 Comm: syz.1.930 Not tainted syzkaller #0 [ 238.058405][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.068482][ T9259] Call Trace: [ 238.071782][ T9259] [ 238.074733][ T9259] dump_stack_lvl+0x18c/0x250 [ 238.079458][ T9259] ? show_regs_print_info+0x20/0x20 [ 238.084700][ T9259] ? load_image+0x420/0x420 [ 238.089282][ T9259] sysfs_warn_dup+0x8e/0xa0 [ 238.093814][ T9259] sysfs_do_create_link_sd+0xc0/0x110 [ 238.099217][ T9259] device_add_class_symlinks+0x1cf/0x240 [ 238.104891][ T9259] device_add+0x4f9/0xc40 [ 238.109259][ T9259] wiphy_register+0x1d99/0x2ac0 [ 238.114158][ T9259] ? cfg80211_event_work+0x40/0x40 [ 238.119309][ T9259] ? minstrel_ht_alloc+0x88a/0x990 [ 238.124453][ T9259] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 238.130544][ T9259] ieee80211_register_hw+0x2dd8/0x3b30 [ 238.136020][ T9259] ? ieee80211_register_hw+0xfc1/0x3b30 [ 238.141574][ T9259] ? ieee80211_tasklet_handler+0x20/0x20 [ 238.147205][ T9259] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 238.153108][ T9259] ? __debug_object_init+0xec/0x450 [ 238.158315][ T9259] ? __asan_memset+0x22/0x40 [ 238.162907][ T9259] ? __hrtimer_init+0x189/0x270 [ 238.167765][ T9259] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 238.173505][ T9259] ? mac80211_hwsim_free+0x220/0x220 [ 238.178787][ T9259] ? rcu_is_watching+0x15/0xb0 [ 238.183554][ T9259] ? kstrndup+0xbd/0x140 [ 238.187806][ T9259] hwsim_new_radio_nl+0xdad/0x1a70 [ 238.192922][ T9259] ? __nla_validate+0x50/0x50 [ 238.197606][ T9259] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 238.203944][ T9259] ? __nla_parse+0x40/0x50 [ 238.208363][ T9259] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 238.214696][ T9259] genl_family_rcv_msg_doit+0x21a/0x310 [ 238.220256][ T9259] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 238.226156][ T9259] ? bpf_lsm_capable+0x9/0x10 [ 238.230835][ T9259] ? security_capable+0x89/0xb0 [ 238.235693][ T9259] genl_rcv_msg+0x611/0x7a0 [ 238.240206][ T9259] ? genl_bind+0x360/0x360 [ 238.244620][ T9259] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 238.250945][ T9259] ? lockdep_hardirqs_on+0x98/0x150 [ 238.256153][ T9259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 238.262319][ T9259] netlink_rcv_skb+0x235/0x4c0 [ 238.267083][ T9259] ? genl_bind+0x360/0x360 [ 238.271502][ T9259] ? netlink_ack+0x1160/0x1160 [ 238.276272][ T9259] ? __lock_acquire+0x7d80/0x7d80 [ 238.281305][ T9259] ? down_read+0x1ac/0x2e0 [ 238.285747][ T9259] genl_rcv+0x28/0x40 [ 238.289750][ T9259] netlink_unicast+0x7b1/0x930 [ 238.294531][ T9259] netlink_sendmsg+0x8d0/0xbf0 [ 238.299310][ T9259] ? netlink_getsockopt+0x590/0x590 [ 238.304518][ T9259] ? aa_sock_msg_perm+0x94/0x150 [ 238.309467][ T9259] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.314756][ T9259] ? security_socket_sendmsg+0x80/0xa0 [ 238.320217][ T9259] ? netlink_getsockopt+0x590/0x590 [ 238.325451][ T9259] ____sys_sendmsg+0x61b/0x980 [ 238.330312][ T9259] ? __asan_memset+0x22/0x40 [ 238.334905][ T9259] ? __sys_sendmsg_sock+0x30/0x30 [ 238.339932][ T9259] ? __import_iovec+0x5f2/0x850 [ 238.344788][ T9259] ? import_iovec+0x73/0xa0 [ 238.349313][ T9259] ___sys_sendmsg+0x2a6/0x360 [ 238.354020][ T9259] ? __sys_sendmsg+0x2b0/0x2b0 [ 238.358852][ T9259] __se_sys_sendmsg+0x1d0/0x2c0 [ 238.363713][ T9259] ? __x64_sys_sendmsg+0x80/0x80 [ 238.368673][ T9259] ? syscall_enter_from_user_mode+0x2e/0x80 [ 238.374581][ T9259] do_syscall_64+0x55/0xb0 [ 238.378999][ T9259] ? clear_bhb_loop+0x40/0x90 [ 238.383674][ T9259] ? clear_bhb_loop+0x40/0x90 [ 238.388352][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.394251][ T9259] RIP: 0033:0x7fb422f9ce59 [ 238.398666][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.418269][ T9259] RSP: 002b:00007fb423de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.426681][ T9259] RAX: ffffffffffffffda RBX: 00007fb423215fa0 RCX: 00007fb422f9ce59 [ 238.434649][ T9259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 238.442612][ T9259] RBP: 00007fb423032e6f R08: 0000000000000000 R09: 0000000000000000 [ 238.450575][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.458546][ T9259] R13: 00007fb423216038 R14: 00007fb423215fa0 R15: 00007ffccc35eab8 [ 238.466528][ T9259] [ 238.528416][ T9271] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.934'. [ 239.241154][ T9298] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 239.280219][ T9298] bridge0: port 3(hsr0) entered disabled state [ 239.286710][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.295260][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.320608][ T9298] team0: Device bridge0 is already an upper device of the team interface [ 239.372218][ T9301] netlink: 'syz.0.943': attribute type 17 has an invalid length. [ 239.671746][ T9314] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.946'. [ 239.688935][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 240.097044][ T9328] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 240.277511][ T9330] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.951'. [ 240.929410][ T9347] netlink: 'syz.3.957': attribute type 29 has an invalid length. [ 240.941918][ T9347] netlink: 'syz.3.957': attribute type 29 has an invalid length. [ 240.968639][ T9347] netlink: 'syz.3.957': attribute type 29 has an invalid length. [ 241.969138][ T9387] netlink: 'syz.3.969': attribute type 33 has an invalid length. [ 241.980182][ T9387] netlink: 164 bytes leftover after parsing attributes in process `syz.3.969'. [ 242.005370][ T9389] netlink: 'syz.1.970': attribute type 33 has an invalid length. [ 242.013372][ T9389] netlink: 152 bytes leftover after parsing attributes in process `syz.1.970'. [ 242.220498][ T9393] sit0: entered allmulticast mode [ 242.490647][ T9404] netlink: 14 bytes leftover after parsing attributes in process `syz.3.975'. [ 242.698463][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.979'. [ 242.723914][ T9421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.979'. [ 242.870492][ T5780] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 243.313843][ T9434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.981'. [ 244.396338][ T9470] sctp: [Deprecated]: syz.0.991 (pid 9470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.396338][ T9470] Use struct sctp_sack_info instead [ 244.914614][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 245.748947][ T9497] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.998'. [ 246.767065][ T9530] netlink: 'syz.2.1006': attribute type 21 has an invalid length. [ 246.778828][ T9530] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1006'. [ 248.086100][ T9569] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1015'. [ 248.983082][ T9570] bridge0: port 4(team0) entered blocking state [ 249.053916][ T9570] bridge0: port 4(team0) entered disabled state [ 249.060418][ T9570] team0: entered allmulticast mode [ 249.148072][ T9570] team_slave_1: entered allmulticast mode [ 249.241030][ T9577] netlink: 'syz.2.1017': attribute type 9 has an invalid length. [ 249.245046][ T9570] geneve1: entered allmulticast mode [ 249.256923][ T9577] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1017'. [ 249.323794][ T9570] mac80211_hwsim hwsim5 ..ãc¤±: entered allmulticast mode [ 249.352278][ T9570] team0: entered promiscuous mode [ 249.371232][ T9570] team_slave_1: entered promiscuous mode [ 249.388545][ T9570] geneve1: entered promiscuous mode [ 249.413169][ T9570] mac80211_hwsim hwsim5 ..ãc¤±: entered promiscuous mode [ 250.229376][ T9585] netlink: 'syz.2.1020': attribute type 29 has an invalid length. [ 250.315763][ T9588] netlink: 'syz.3.1018': attribute type 10 has an invalid length. [ 250.399928][ T9588] team0: Device ipvlan1 failed to register rx_handler [ 250.532025][ T9585] netlink: 'syz.2.1020': attribute type 29 has an invalid length. [ 255.596810][ T9649] netlink: 'syz.1.1036': attribute type 21 has an invalid length. [ 255.655067][ T9650] netlink: 'syz.0.1035': attribute type 4 has an invalid length. [ 255.721415][ T9652] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1037'. [ 255.799920][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.807335][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.974317][ T9661] bridge0: port 3(team0) entered disabled state [ 255.981109][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.014164][ T9661] bridge0: entered allmulticast mode [ 256.227859][ T9665] netlink: 'syz.1.1040': attribute type 2 has an invalid length. [ 256.246366][ T9665] netlink: 'syz.1.1040': attribute type 8 has an invalid length. [ 256.269877][ T9665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1040'. [ 257.189574][ T9679] netlink: 'syz.0.1046': attribute type 21 has an invalid length. [ 257.198720][ T9679] netlink: 'syz.0.1046': attribute type 6 has an invalid length. [ 257.213557][ T9679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1046'. [ 257.372161][ T9687] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1048'. [ 257.725916][ T9697] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 257.738679][ T9697] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 257.749351][ T9697] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 257.763950][ T9697] netlink: 'syz.2.1051': attribute type 29 has an invalid length. [ 260.892678][ T9756] validate_nla: 1 callbacks suppressed [ 260.892696][ T9756] netlink: 'syz.0.1068': attribute type 19 has an invalid length. [ 262.522144][ T9786] netlink: 'syz.2.1077': attribute type 8 has an invalid length. [ 262.542546][ T9786] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1077'. [ 266.242920][ T9823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1086'. [ 266.286563][ T9823] pim6reg1: entered promiscuous mode [ 266.310383][ T9823] pim6reg1: entered allmulticast mode [ 266.401764][ T9825] netlink: zone id is out of range [ 266.411566][ T9825] netlink: set zone limit has 8 unknown bytes [ 268.221929][ T9847] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1089'. [ 268.319686][ T9847] bridge_slave_1: default FDB implementation only supports local addresses [ 268.372141][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 268.467361][ T9863] netlink: 'syz.0.1098': attribute type 16 has an invalid length. [ 268.477405][ T9863] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1098'. [ 268.669534][ T9870] netlink: 'syz.0.1100': attribute type 9 has an invalid length. [ 268.680456][ T9870] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1100'. [ 269.436614][ T9897] netlink: 'syz.0.1109': attribute type 21 has an invalid length. [ 269.445220][ T9897] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1109'. [ 269.455401][ T9897] netlink: 'syz.0.1109': attribute type 5 has an invalid length. [ 269.463186][ T9897] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1109'. [ 269.712800][ T9904] netlink: 'syz.3.1111': attribute type 28 has an invalid length. [ 269.726491][ T9904] netlink: 'syz.3.1111': attribute type 29 has an invalid length. [ 269.735521][ T9904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1111'. [ 269.766305][ T9904] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1111'. [ 269.802311][ T9908] netlink: 'syz.3.1111': attribute type 28 has an invalid length. [ 269.832895][ T9908] netlink: 'syz.3.1111': attribute type 29 has an invalid length. [ 269.847767][ T9908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1111'. [ 270.382489][ T9911] syzkaller0: entered promiscuous mode [ 270.398574][ T9911] syzkaller0: entered allmulticast mode [ 270.411128][ T9916] @0Ù: renamed from bond_slave_1 (while UP) [ 272.558853][ T9926] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 272.598809][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.619717][ T9926] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 272.847352][ T9951] netlink: 'syz.1.1121': attribute type 3 has an invalid length. [ 272.863764][ T9951] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.1121'. [ 273.313902][ T9970] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1128'. [ 273.501505][ T9975] delete_channel: no stack [ 273.981370][ T9983] validate_nla: 5 callbacks suppressed [ 273.981409][ T9983] netlink: 'syz.2.1130': attribute type 2 has an invalid length. [ 275.104092][ T9999] netlink: 'syz.0.1136': attribute type 12 has an invalid length. [ 275.126283][ T9999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1136'. [ 279.191528][T10045] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 279.882962][T10063] raw_sendmsg: syz.3.1157 forgot to set AF_INET. Fix it! [ 280.149313][T10081] netlink: 'syz.1.1162': attribute type 13 has an invalid length. [ 280.163773][T10081] netlink: 'syz.1.1162': attribute type 58 has an invalid length. [ 280.185163][T10081] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1162'. [ 281.231776][T10116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1173'. [ 281.439830][T10118] netlink: 'syz.1.1174': attribute type 10 has an invalid length. [ 281.509667][T10118] team0: Device hsr_slave_0 failed to register rx_handler [ 281.510298][T10120] netlink: 'syz.1.1174': attribute type 9 has an invalid length. [ 281.544684][T10120] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1174'. [ 282.299606][T10142] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1180'. [ 282.323464][T10142] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1180'. [ 282.346891][T10142] .`: (slave bond_slave_0): Releasing backup interface [ 282.367870][T10142] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 282.557899][T10152] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 282.584445][T10152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1183'. [ 282.593809][ T5780] Bluetooth: hci1: ISO packet for unknown connection handle 6 [ 283.523463][T10169] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1187'. [ 283.532680][T10169] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1187'. [ 283.653243][T10169] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1187'. [ 283.782569][T10167] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1187'. [ 286.001505][T10231] __nla_validate_parse: 2 callbacks suppressed [ 286.001521][T10231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1204'. [ 286.337499][T10239] netlink: 'syz.2.1207': attribute type 3 has an invalid length. [ 286.346461][T10239] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 286.355445][T10239] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1207'. [ 286.554574][T10245] netlink: 'syz.3.1209': attribute type 29 has an invalid length. [ 286.563073][T10245] netlink: 'syz.3.1209': attribute type 29 has an invalid length. [ 286.573597][T10247] netlink: 'syz.3.1209': attribute type 29 has an invalid length. [ 286.581809][T10246] netlink: 'syz.3.1209': attribute type 29 has an invalid length. [ 286.592061][T10245] netlink: 'syz.3.1209': attribute type 29 has an invalid length. [ 286.701012][T10249] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 286.708985][T10249] netlink: 7075 bytes leftover after parsing attributes in process `syz.0.1210'. [ 286.874287][T10251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1211'. [ 287.062946][T10260] netlink: 'syz.3.1214': attribute type 21 has an invalid length. [ 287.079853][T10260] netlink: 'syz.3.1214': attribute type 19 has an invalid length. [ 287.091847][T10260] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1214'. [ 287.101673][T10262] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1213'. [ 287.116121][T10260] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1214'. [ 287.827210][T10300] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1226'. [ 288.193525][T10314] IPv6: Can't replace route, no match found [ 288.611700][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 290.535130][T10391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1250'. [ 291.031556][T10412] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1258'. [ 291.089237][T10419] bridge0: port 4(team0) entered disabled state [ 291.122735][T10419] hsr0: left allmulticast mode [ 291.139955][T10419] hsr_slave_0: left allmulticast mode [ 291.157610][T10419] hsr_slave_1: left allmulticast mode [ 291.190269][T10419] bridge0: port 3(hsr0) entered disabled state [ 291.213340][T10419] bridge_slave_1: left allmulticast mode [ 291.240577][T10419] bridge_slave_1: left promiscuous mode [ 291.247404][T10419] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.262700][T10419] bridge_slave_0: left allmulticast mode [ 291.268669][T10419] bridge_slave_0: left promiscuous mode [ 291.275108][T10419] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.598443][T10430] netlink: 184912 bytes leftover after parsing attributes in process `syz.1.1264'. [ 291.677469][T10437] validate_nla: 11 callbacks suppressed [ 291.677490][T10437] netlink: 'syz.1.1264': attribute type 27 has an invalid length. [ 292.740931][T10454] netlink: 'syz.1.1269': attribute type 4 has an invalid length. [ 292.751389][T10454] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1269'. [ 292.884058][T10462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1270'. [ 292.929974][T10466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1272'. [ 293.850784][T10489] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1278'. [ 293.981684][T10491] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1279'. [ 294.321334][T10500] netlink: 'syz.1.1282': attribute type 9 has an invalid length. [ 294.344618][T10500] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1282'. [ 294.914409][T10508] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.107595][T10508] syzkaller0: entered promiscuous mode [ 295.120432][T10508] syzkaller0: entered allmulticast mode [ 295.160890][T10521] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1288'. [ 295.235135][T10521] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1288'. [ 297.842850][T10548] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 298.024183][T10555] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1296'. [ 298.185918][T10552] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1294'. [ 298.186119][T10560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1297'. [ 298.312439][T10552] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 298.363469][T10552] CPU: 1 PID: 10552 Comm: syz.1.1294 Not tainted syzkaller #0 [ 298.370998][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.381058][T10552] Call Trace: [ 298.384337][T10552] [ 298.387286][T10552] dump_stack_lvl+0x18c/0x250 [ 298.392000][T10552] ? show_regs_print_info+0x20/0x20 [ 298.397211][T10552] ? load_image+0x420/0x420 [ 298.401729][T10552] sysfs_warn_dup+0x8e/0xa0 [ 298.406239][T10552] sysfs_do_create_link_sd+0xc0/0x110 [ 298.411614][T10552] device_add_class_symlinks+0x1cf/0x240 [ 298.417260][T10552] device_add+0x4f9/0xc40 [ 298.421604][T10552] wiphy_register+0x1d99/0x2ac0 [ 298.426480][T10552] ? cfg80211_event_work+0x40/0x40 [ 298.431592][T10552] ? minstrel_ht_alloc+0x88a/0x990 [ 298.436708][T10552] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 298.442782][T10552] ieee80211_register_hw+0x2dd8/0x3b30 [ 298.448255][T10552] ? ieee80211_register_hw+0xfc1/0x3b30 [ 298.453810][T10552] ? ieee80211_tasklet_handler+0x20/0x20 [ 298.459444][T10552] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 298.465353][T10552] ? __debug_object_init+0xec/0x450 [ 298.470563][T10552] ? __asan_memset+0x22/0x40 [ 298.475158][T10552] ? __hrtimer_init+0x189/0x270 [ 298.480017][T10552] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 298.485758][T10552] ? mac80211_hwsim_free+0x220/0x220 [ 298.491044][T10552] ? rcu_is_watching+0x15/0xb0 [ 298.495809][T10552] ? kstrndup+0xbd/0x140 [ 298.500061][T10552] hwsim_new_radio_nl+0xdad/0x1a70 [ 298.505178][T10552] ? __nla_validate+0x50/0x50 [ 298.509881][T10552] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 298.516221][T10552] ? __nla_parse+0x40/0x50 [ 298.520637][T10552] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 298.526976][T10552] genl_family_rcv_msg_doit+0x21a/0x310 [ 298.532532][T10552] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 298.538434][T10552] ? bpf_lsm_capable+0x9/0x10 [ 298.543115][T10552] ? security_capable+0x89/0xb0 [ 298.547979][T10552] genl_rcv_msg+0x611/0x7a0 [ 298.552490][T10552] ? genl_bind+0x360/0x360 [ 298.556905][T10552] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 298.563238][T10552] ? ref_tracker_free+0x686/0x830 [ 298.568262][T10552] ? __kasan_kmalloc_large+0x8b/0xa0 [ 298.573558][T10552] netlink_rcv_skb+0x235/0x4c0 [ 298.578330][T10552] ? genl_bind+0x360/0x360 [ 298.582754][T10552] ? netlink_ack+0x1160/0x1160 [ 298.587529][T10552] ? __lock_acquire+0x7d80/0x7d80 [ 298.592563][T10552] ? down_read+0x1ac/0x2e0 [ 298.596985][T10552] genl_rcv+0x28/0x40 [ 298.600970][T10552] netlink_unicast+0x7b1/0x930 [ 298.605743][T10552] netlink_sendmsg+0x8d0/0xbf0 [ 298.610512][T10552] ? netlink_getsockopt+0x590/0x590 [ 298.615712][T10552] ? aa_sock_msg_perm+0x94/0x150 [ 298.620660][T10552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.625949][T10552] ? security_socket_sendmsg+0x80/0xa0 [ 298.631411][T10552] ? netlink_getsockopt+0x590/0x590 [ 298.636612][T10552] ____sys_sendmsg+0x61b/0x980 [ 298.641385][T10552] ? __asan_memset+0x22/0x40 [ 298.645978][T10552] ? __sys_sendmsg_sock+0x30/0x30 [ 298.651000][T10552] ? __import_iovec+0x5f2/0x850 [ 298.655859][T10552] ? import_iovec+0x73/0xa0 [ 298.660363][T10552] ___sys_sendmsg+0x2a6/0x360 [ 298.665045][T10552] ? __sys_sendmsg+0x2b0/0x2b0 [ 298.669853][T10552] __se_sys_sendmsg+0x1d0/0x2c0 [ 298.674707][T10552] ? __x64_sys_sendmsg+0x80/0x80 [ 298.679690][T10552] ? lockdep_hardirqs_on+0x98/0x150 [ 298.684898][T10552] do_syscall_64+0x55/0xb0 [ 298.689319][T10552] ? clear_bhb_loop+0x40/0x90 [ 298.693992][T10552] ? clear_bhb_loop+0x40/0x90 [ 298.698666][T10552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.704563][T10552] RIP: 0033:0x7fb422f9ce59 [ 298.708980][T10552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.728585][T10552] RSP: 002b:00007fb423dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.737000][T10552] RAX: ffffffffffffffda RBX: 00007fb423216090 RCX: 00007fb422f9ce59 [ 298.744968][T10552] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 298.752934][T10552] RBP: 00007fb423032e6f R08: 0000000000000000 R09: 0000000000000000 [ 298.760901][T10552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.768873][T10552] R13: 00007fb423216128 R14: 00007fb423216090 R15: 00007ffccc35eab8 [ 298.776859][T10552] [ 299.503923][T10576] syzkaller0: entered promiscuous mode [ 299.530981][T10576] syzkaller0: entered allmulticast mode [ 299.689512][T10582] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1299'. [ 300.455594][T10596] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1305'. [ 304.521556][T10610] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 304.534413][T10610] macvlan0: entered promiscuous mode [ 304.539785][T10610] macvlan0: entered allmulticast mode [ 304.566786][T10610] veth1_vlan: entered allmulticast mode [ 304.592803][T10610] .`: (slave macvlan0): Enslaving as an active interface with an up link [ 304.904606][T10627] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 304.916111][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1315'. [ 304.925997][T10627] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 304.934504][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1315'. [ 304.949144][T10627] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 305.246006][T10636] sit0: entered promiscuous mode [ 305.870207][T10651] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1322'. [ 305.881494][T10649] syz.1.1321 (10649) used obsolete PPPIOCDETACH ioctl [ 307.089442][T10702] netlink: 'syz.2.1338': attribute type 10 has an invalid length. [ 307.098456][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1338'. [ 307.119988][T10702] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.130824][T10702] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.288988][T10716] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 309.323850][T10716] team0: Device hsr_slave_0 failed to register rx_handler [ 309.542293][T10727] delete_channel: no stack [ 309.560723][T10727] delete_channel: no stack [ 309.888125][T10739] netlink: 'syz.1.1349': attribute type 3 has an invalid length. [ 309.910995][T10739] netlink: 'syz.1.1349': attribute type 6 has an invalid length. [ 309.922022][T10739] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1349'. [ 310.430950][T10757] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 310.450487][T10757] syz_tun: entered promiscuous mode [ 310.479610][T10757] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 310.870422][T10773] netlink: 'syz.0.1358': attribute type 49 has an invalid length. [ 310.880421][T10773] netlink: 'syz.0.1358': attribute type 49 has an invalid length. [ 310.915599][T10776] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.1360'. [ 310.926003][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 311.292677][T10797] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 311.309941][T10799] netlink: 'syz.3.1365': attribute type 9 has an invalid length. [ 311.322049][T10799] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1365'. [ 311.340448][T10797] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1364'. [ 311.514164][T10804] SÛ÷: renamed from bond_slave_0 [ 312.041790][T10808] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.1368'. [ 312.416924][T10820] netlink: 'syz.3.1372': attribute type 13 has an invalid length. [ 312.425541][T10820] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1372'. [ 313.808869][T10836] netlink: 'syz.2.1378': attribute type 10 has an invalid length. [ 313.968977][T10836] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 314.279297][T10848] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 314.288185][T10848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 314.299248][T10848] dummy0: entered promiscuous mode [ 314.308228][T10848] dummy0: entered allmulticast mode [ 314.320232][T10848] bridge0: port 5(dummy0) entered blocking state [ 314.328623][T10848] bridge0: port 5(dummy0) entered disabled state [ 314.399518][T10845] netlink: 109804 bytes leftover after parsing attributes in process `syz.2.1381'. [ 314.420345][T10851] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1381'. [ 314.462695][T10845] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1381'. [ 315.130966][T10858] bridge_slave_0: mtu less than device minimum [ 315.281635][T10867] validate_nla: 4 callbacks suppressed [ 315.281651][T10867] netlink: 'syz.1.1389': attribute type 13 has an invalid length. [ 315.328477][T10867] erspan0: refused to change device tx_queue_len [ 315.657246][T10864] syzkaller0: entered allmulticast mode [ 315.676358][T10878] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 316.462864][T10891] netlink: 'syz.2.1395': attribute type 27 has an invalid length. [ 316.471290][T10891] __nla_validate_parse: 2 callbacks suppressed [ 316.471306][T10891] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1395'. [ 317.242183][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.248693][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.449555][T10887] sit0: left promiscuous mode [ 317.499172][T10888] sit0: entered promiscuous mode [ 317.626246][T10900] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1397'. [ 317.744971][T10900] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1397'. [ 317.759343][T10900] bridge_slave_1: default FDB implementation only supports local addresses [ 319.069167][T10962] netlink: 'syz.2.1415': attribute type 21 has an invalid length. [ 319.128157][T10963] netlink: 'syz.0.1414': attribute type 21 has an invalid length. [ 319.134055][ C0] [ 319.134062][ C0] ================================ [ 319.134066][ C0] WARNING: inconsistent lock state [ 319.134085][ C0] syzkaller #0 Not tainted [ 319.134093][ C0] -------------------------------- [ 319.134097][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 319.134103][ C0] syz.2.1415/10962 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 319.134119][ C0] ffff88805fad64a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 319.134162][ C0] {INITIAL USE} state was registered at: [ 319.134167][ C0] lock_acquire+0x19e/0x420 [ 319.134183][ C0] _raw_spin_lock+0x2e/0x40 [ 319.134202][ C0] htab_lock_bucket+0x17d/0x300 [ 319.134216][ C0] __htab_lru_percpu_map_update_elem+0x2b3/0x9f0 [ 319.134231][ C0] bpf_percpu_hash_update+0x119/0x200 [ 319.134245][ C0] bpf_map_update_value+0x3ae/0x710 [ 319.134259][ C0] map_update_elem+0x586/0x710 [ 319.134272][ C0] __sys_bpf+0x6b5/0x890 [ 319.134284][ C0] __x64_sys_bpf+0x7c/0x90 [ 319.134297][ C0] do_syscall_64+0x55/0xb0 [ 319.134313][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.134337][ C0] irq event stamp: 2766 [ 319.134343][ C0] hardirqs last enabled at (2765): [] __kmalloc_large_node+0x112/0x1f0 [ 319.134368][ C0] hardirqs last disabled at (2766): [] exc_debug+0x73/0x140 [ 319.134388][ C0] softirqs last enabled at (2758): [] tun_get_user+0x80d/0x3d40 [ 319.134410][ C0] softirqs last disabled at (2756): [] tun_get_user+0x80d/0x3d40 [ 319.134432][ C0] [ 319.134432][ C0] other info that might help us debug this: [ 319.134436][ C0] Possible unsafe locking scenario: [ 319.134436][ C0] [ 319.134440][ C0] CPU0 [ 319.134442][ C0] ---- [ 319.134445][ C0] lock(&htab->lockdep_key); [ 319.134454][ C0] [ 319.134457][ C0] lock(&htab->lockdep_key); [ 319.134472][ C0] [ 319.134472][ C0] *** DEADLOCK *** [ 319.134472][ C0] [ 319.134476][ C0] 1 lock held by syz.2.1415/10962: [ 319.134484][ C0] #0: ffff88805d504810 (&tfile->napi_mutex){+.+.}-{3:3}, at: tun_get_user+0x786/0x3d40 [ 319.134523][ C0] [ 319.134523][ C0] stack backtrace: [ 319.134528][ C0] CPU: 0 PID: 10962 Comm: syz.2.1415 Not tainted syzkaller #0 [ 319.134543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.134556][ C0] Call Trace: [ 319.134562][ C0] <#DB> [ 319.134567][ C0] dump_stack_lvl+0x18c/0x250 [ 319.134586][ C0] ? show_regs_print_info+0x20/0x20 [ 319.134606][ C0] ? print_usage_bug+0x43d/0x6a0 [ 319.134623][ C0] ? verify_lock_unused+0x15/0x140 [ 319.134641][ C0] lock_acquire+0x2c2/0x420 [ 319.134656][ C0] ? look_up_lock_class+0x75/0x140 [ 319.134677][ C0] ? htab_lock_bucket+0x17d/0x300 [ 319.134693][ C0] ? read_lock_is_recursive+0x20/0x20 [ 319.134716][ C0] _raw_spin_lock+0x2e/0x40 [ 319.134735][ C0] ? htab_lock_bucket+0x17d/0x300 [ 319.134750][ C0] htab_lock_bucket+0x17d/0x300 [ 319.134768][ C0] ? htab_lru_map_delete_node+0x770/0x770 [ 319.134785][ C0] ? look_up_lock_class+0x75/0x140 [ 319.134805][ C0] ? verify_lock_unused+0x15/0x140 [ 319.134821][ C0] ? htab_map_hash+0x1e8/0x330 [ 319.134838][ C0] htab_lru_map_delete_elem+0x19f/0x640 [ 319.134857][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 319.134873][ C0] ? perf_callchain+0x220/0x220 [ 319.134892][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 319.134909][ C0] bpf_overflow_handler+0x1fc/0x510 [ 319.134930][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 319.134946][ C0] ? bpf_overflow_handler+0xde/0x510 [ 319.134965][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 319.134988][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 319.135005][ C0] __perf_event_overflow+0x461/0x660 [ 319.135025][ C0] perf_swevent_event+0x319/0x570 [ 319.135043][ C0] ? perf_tp_event+0x1550/0x1550 [ 319.135059][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 319.135085][ C0] perf_bp_event+0x319/0x430 [ 319.135104][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 319.135135][ C0] ? lock_acquire+0x2c2/0x420 [ 319.135154][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 319.135176][ C0] notifier_call_chain+0x18f/0x380 [ 319.135195][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 319.135214][ C0] atomic_notifier_call_chain+0xda/0x180 [ 319.135233][ C0] notify_die+0x145/0x1a0 [ 319.135253][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 319.135274][ C0] ? rcu_is_watching+0x15/0xb0 [ 319.135294][ C0] notify_debug+0x2e/0x50 [ 319.135308][ C0] exc_debug+0xde/0x140 [ 319.135326][ C0] asm_exc_debug+0x1e/0x40 [ 319.135346][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 319.135366][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 319.135379][ C0] RSP: 0018:ffffc90003a57898 EFLAGS: 00050202 [ 319.135392][ C0] RAX: ffffffff84271401 RBX: 000000000000fe2c RCX: 000000000000fb2c [ 319.135403][ C0] RDX: 0000000000000001 RSI: 000020000000030e RDI: ffff888051040340 [ 319.135413][ C0] RBP: ffffc90003a579d0 R08: ffff88805104fe6b R09: 1ffff1100a209fcd [ 319.135424][ C0] R10: dffffc0000000000 R11: ffffed100a209fce R12: ffff888051040040 [ 319.135434][ C0] R13: 000020000000000e R14: ffffc90003a57db8 R15: 1ffff9200074afb7 [ 319.135448][ C0] ? _copy_from_iter+0x151/0x1290 [ 319.135479][ C0] [ 319.135484][ C0] [ 319.135488][ C0] _copy_from_iter+0x242/0x1290 [ 319.135510][ C0] ? __kasan_kmalloc_large+0x8b/0xa0 [ 319.135529][ C0] ? copyout_mc+0x70/0x70 [ 319.135547][ C0] ? rcu_is_watching+0x15/0xb0 [ 319.135565][ C0] ? __virt_addr_valid+0x10c/0x380 [ 319.135582][ C0] ? __virt_addr_valid+0x10c/0x380 [ 319.135600][ C0] ? __virt_addr_valid+0x10c/0x380 [ 319.135618][ C0] ? __check_object_size+0x4fc/0xa40 [ 319.135634][ C0] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 319.135655][ C0] tun_get_user+0xbc2/0x3d40 [ 319.135682][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 319.135705][ C0] ? tun_get+0x1c/0x2e0 [ 319.135723][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 319.135742][ C0] ? tun_get+0x1c/0x2e0 [ 319.135763][ C0] tun_chr_write_iter+0x119/0x200 [ 319.135783][ C0] vfs_write+0x474/0x9a0 [ 319.135805][ C0] ? file_end_write+0x250/0x250 [ 319.135825][ C0] ? __fget_files+0x3fc/0x460 [ 319.135847][ C0] ? __fdget_pos+0x1d8/0x330 [ 319.135864][ C0] ? ksys_write+0x74/0x260 [ 319.135883][ C0] ksys_write+0x151/0x260 [ 319.135903][ C0] ? __ia32_sys_read+0x90/0x90 [ 319.135923][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 319.135944][ C0] do_syscall_64+0x55/0xb0 [ 319.135959][ C0] ? clear_bhb_loop+0x40/0x90 [ 319.135972][ C0] ? clear_bhb_loop+0x40/0x90 [ 319.135986][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.136007][ C0] RIP: 0033:0x7f5589f9ce59 [ 319.136018][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.136030][ C0] RSP: 002b:00007f558ae94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.136043][ C0] RAX: ffffffffffffffda RBX: 00007f558a215fa0 RCX: 00007f5589f9ce59 [ 319.136054][ C0] RDX: 000000000000fe3a RSI: 0000200000000000 RDI: 000000000000000a [ 319.136062][ C0] RBP: 00007f558a032e6f R08: 0000000000000000 R09: 0000000000000000 [ 319.136071][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.136079][ C0] R13: 00007f558a216038 R14: 00007f558a215fa0 R15: 00007ffc12cbc138 [ 319.136096][ C0] [ 319.890857][T10963] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1414'. [ 319.924689][T10968] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1417'.