last executing test programs: 22.415113209s ago: executing program 4 (id=1964): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r2) socket$kcm(0x21, 0x7, 0x2) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r3, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x5e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x7842, 0x6e, 0x9, 0x0, 0x3, 0x6, 0xfcd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x1) (async) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) (async) sendmsg$kcm(r9, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="ba7f", 0x2}], 0x1}, 0x20004050) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) (async) recvmsg(r4, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) (async) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) (async) socket$kcm(0xf, 0x3, 0x2) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r8, 0x58, &(0x7f0000000600)}, 0x10) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 22.135014585s ago: executing program 4 (id=1968): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x2, @multicast2}}, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)}, {&(0x7f0000000300)}, {&(0x7f0000000340)="afea5c8684b5b6e12f06080fdd1982d5ab3f8f5c49d952c17c964484c41e089d89f59ac6b4115a351b00b6a7a38232f278ae094135e376479a2a6d60f66678228dea406bbe8a", 0x46}, {&(0x7f0000000600)="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", 0xf80}, {&(0x7f0000001600)="71b60cb4fdee22c1be2b27f006614d33c4b1070856da041f9b23e215b09a4448ef6457ef52f89b507827e383cc480632cc74b4aca72a4056547192b228cd7b4e60182fd51d596421fbdd33f9310a9ab8827c9589db3267bdf003d4dc71c1db764ee92d", 0x63}], 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="d8000000000000000701000007000000f8e5ab6c9f2ea00d34a6148d82c3d9adca8c1f2f9b66fb3f8cdf278a73c4ed124f2d5a70c7fa9dbef844472cd7ddeca491d98dfa6a5e133c19138ee1773500380793a5c3f43c55d677df38bdbc236ccdc6cf8b503ee50cb6b45bb3417e67519923e3eafca541ffe3a8f5be78"], 0x100}, 0x20000895) (async) socket$kcm(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x10080, 0x0, 0x0, &(0x7f00000000c0), &(0x7f00000001c0), 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x224c}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@broadcast, @dev, @remote]}) (async) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) (async) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b", 0x6}], 0x1}, 0x8000) (async) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0x839b}}}], 0x20}, 0x24008000) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="73f4f25b88e4", 0x6}], 0x1}, 0x8080) (async) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1", 0x3}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 16.514343343s ago: executing program 4 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e410000b395a2f31c230000006f141862a4f227fefad4897e9859e7921878", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc99, 0x0, 0x0, 0x0, 0xe412}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x0, 0x8, 0x4, 0x8ca8, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x1b, &(0x7f0000000140)=""/27, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0x80, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r0, r0, 0xffffffffffffffff, r0, r0, r0], 0x0, 0x10, 0xdca5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003380)={r1, 0x0, 0xfd, 0x1000, &(0x7f0000000400)="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", &(0x7f0000002200)=""/4096, 0x0, 0x0, 0x81, 0x84, &(0x7f0000003200)="0bf984e8a58f04e03753a55323f7030dfe7c4db0f471aebd1b0d625568aa7145674f5a6068c37a475922b5c17c644d800c5e7df20cca3d1ddfdba7bdd35e99b522ad3bdc9298d35a87fa1ecbeadcaaad2d92f3e6f78f912366dbbbf3fed4d6a2520c7bb68e99fb2539ba9818d1a12a17052b05d9e2e6b0cf46975bb0cd4394a4b4", &(0x7f00000032c0)="57314b334e8a15dcf25b273fce96e53087dd4166ceca0a18db44a40d08d9b5a86cc3ae71136c71142be6eaeb7a3622f87c23e6b96f24a96e5fdee9b75146ae7eea9e25d6f454b3c43f5c94710a5def88db9717ca31f55f84102f4cdab935920eb606b548b7b26bae5411e0d45caede2a75ed7ceb4619691131661c57c0d347883ea60e07", 0x2, 0x0, 0x9}, 0x50) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000200)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r2}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f0000000000)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.876820379s ago: executing program 4 (id=1980): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x1041a1, 0x3, 0x0, 0x1, 0x0, 0xfffffffe, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x2802000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.728307692s ago: executing program 4 (id=1983): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (rerun: 32) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611008000000000062"], 0x0, 0x4}, 0x94) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000180)={'batadv_slave_1\x00', @random="50aace748bce"}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (rerun: 64) 12.898254032s ago: executing program 4 (id=1990): socket$kcm(0x10, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xfffffe75, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000ffffff00000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="05000000010000000800000000040000000000000000000000000000489ab13b8a4c4dd5bad8e1f94e2655ad6df28c8a0476257b1bb1d2611d12b775e838d9d76a61c1f64a118ba96950839ed58295d2e532c696a1b34415c2734fc6443994066b40"], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="200000000f000000010000000900000001000000", @ANYRES32=r0, @ANYBLOB="01000000", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0300"/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfe33) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r6 = perf_event_open(&(0x7f0000000540)={0x1, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x11090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffff5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Hf']) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14debf3f5a698d09f0aa3a0d9a5e2423e77138f4f3bdd1c24d0cee4cdb9cbb", @ANYRES8=r8, @ANYBLOB="8700"/20, @ANYRESDEC=r5, @ANYRES8=r2], 0x48) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14084, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000380)}, {&(0x7f0000000980)="1367af9a658982d203ba8afdfabc18790d5970103b26ab2833c9cfe14404ad513ceabf1f0dd56d185838533278a4265fda5d5aa54df917ace5aa098b22760cc7783a49a5c1f551435b40b264fd3ba5285c0cd165adf45c94e9fdac65e062cc0ab134c75d1f8b0b353e6e2c5ce701b03044a723c192f0d8a728138955198a8eec53172c5790f334ddf751b7e6d4211179b4d3cb9a9e1ab37d6a5edfd0082f0035069138abc61d7895dfedcf6303c3148bcee91f4721a3daae9498fc872f3b94ea4dcc48110aaf232d00e19d1f3aebd80ecd7da582f1ad6a33e8b1b576d55b91da708d7ba51a12a9a649cdb934a01586c99b4b04", 0xf3}, {&(0x7f0000000a80)="3f378e5075858bc9db259b8d29f7d141f451d25ec80d70fd018e0044f0d85a855f18a5b303b9d6a0b009fc75bb68c78803ab59f2c06d48f6c47fb28d956fe5bb3fee66b4a84a31999294f3a43c3a51c1c72a3963072595aa468b3eb4c4a1af0834f650494108badde5d719c3bbb4ed8573", 0x71}, {&(0x7f0000000c40)="96a75a6a90fa6a1f2474b78528f7629252a688cc609bec7c4966d1711b911ae736d8b1b23c6f006d933b7ab9f79d59f3ee4e2a2a31da38b0db473bc5d257f33089d4f6da98ada74ddfa5c4779ae78b09c076f132f262b8b88115e0e8d4ddea4fe01d067ca2a93bf08c4ebd8e60fa5d73a85fa2f14267424b9a4a815bf0a092dba61900f466e7747fec145fa038c1df1a64ac2d1acd4a5f879f31c13168ce1b9e4390c8c2b8475832263f6d70b282c66401f9198a3c8b1d3ee6db0a59a99261f8369eaab08d453bc48e5966fbb324e7d8ad27b3a69a17a961632c50d66f2d6eb73a8870632f18073d2c92a3c32012ac3a597889031c", 0xf5}, {&(0x7f0000000d40)="d41a295087d30902f04cdd14a719e0f6", 0x10}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="74c2713cc16c14364438d85814cd0cf192ae96cac7fa0c98293cf1cff29a4d412da7102eaaf2a78e415e35a0ab78ba869e9ee3c6a9af8a4a7febb4941ddc75dc5368ecf29c7fde4407990d4ceebb3b1999199f305cad71e1c96d60cb477a7b69d08e8c1b6ec843cde39ef8b1e467d4ec3912384a0eab2638b88c8da3055e40c8b956965b068668eaf738ff6001f5ef58c236ffc032777b4d7842efe3df3f415a549357c61bc418feca1bcd3d93a054eae18045feea3d72467304c20527818f7867144c36a9fd3a0f85eb43ccc51d2998c136e53ce9c9c6b28a7e3a", 0xdb}], 0x7, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xeb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x68}, 0x20004000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.357297773s ago: executing program 1 (id=2018): socket$kcm(0x2, 0x922000000001, 0x106) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x38}, 0x0) close(0x3) (async) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) r4 = socket$kcm(0x2, 0x2, 0x0) (async, rerun: 32) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x56) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x48) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x5) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004045) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$kcm(r8, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97", 0x1}], 0x1}, 0x10) 6.221468177s ago: executing program 1 (id=2019): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000200)=@raw=[@func, @func, @func, @func, @snprintf], &(0x7f0000000780)='GPL\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f", 0x7}, {&(0x7f0000000140)="78cafb73fc02010700000000ef01048f2e440ab8f9", 0x15}], 0x2}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8927, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0xffffffffffffff71, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @loopback, 0x2a4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x1081) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, &(0x7f0000000080), 0x4) 5.222556981s ago: executing program 1 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x1, 0x1, 0x1000000, 0x0, 0x100, 0x0, 0xfffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r11 = socket$kcm(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_QUERY_BPF(r10, 0xc008240a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) sendmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)="8980", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) r12 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000006000000020000000000000e000000000000000000612e2e"], 0x0, 0x2e}, 0x28) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r12}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f00000002c0)={r11, r13}) 4.900489249s ago: executing program 1 (id=2028): r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_clone(0x90080000, &(0x7f0000000400)="f76fee06a11d49342e692fab8727ab3376db228e85ff690665458651f45da528a8e47b5bbee6b9b46c41378c9cdf3fb9abc9d1ff94cce01cebbf1cf445764b83ae581f54fa7f6ae76f08f41f950073ecf45ad20e", 0x54, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) syz_clone(0x8009000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x1}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000900)={0x6, 0x80, 0x0, 0xc2, 0x0, 0x0, 0x7602, 0x0, 0x10848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x2000000, 0x12, 0x7fffffffffffffff}, r1, 0x80000000, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f00000001c0), &(0x7f0000000140)=r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c012, 0x89, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102050, 0x2, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r7, &(0x7f0000000a00)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0xe4, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000980)}}, 0xfffffffffffffce2) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x4, '\x00', r8, r9, 0x2, 0x2, 0x3}, 0x50) r10 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r10, 0x88, 0xa, &(0x7f0000000000), 0x4) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000240)={r10}) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0xb4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 4.405482301s ago: executing program 2 (id=2032): r0 = socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x6, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000480)={r5}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x8c, 0xdb, &(0x7f00000004c0)="41e2aebf475eef6b9ad35099283ec577f884a75db43da78bdce5711a99a809d53d878524b5a387a16ab5a977017f27a6cc27b21e6666e17932dc5eb786ac7e93d4f7e8aec38fb662b89758cea72ee22b37a72704c15f3d426f9938296d391332839b2c60a00e5ab8f9c475276e05fa1476f96f9601652e02e21cb0cd4763f8154ddcbe167287c9bfee9bdea6", &(0x7f0000000600)=""/219, 0x9, 0x0, 0x81, 0x6f, &(0x7f0000000700)="fda3ff1ed39910c10c068b63231c24bbaa5a8c117477c994c36b571902136a4065f9b54c39339d37b2890e1f4bd3a25b31db2c89fed62a79660736a17c006ccc9e183f72d9c8d6ba5a24cf4e4d830fc8eaa6b92d1395b707c4092224c1ca56ca9ae8d316efb5e594dda74711712ea16dc9b637053fb0717117cc6918f0864ce9d6", &(0x7f00000007c0)="6a7fa2b1815368f629319f575c0920179e222465d103f0a2337039b68c2433d88cc3d53fba0c7e6d7b1184964f31208180990a1f447ab5aadaa77d97f14be92f6c82fd941b06aa06e3f9b0ed530e307685b3fd8c66f869122fbc044c7626ca2287180c63234a22ce8ac01f6d37a517", 0x0, 0x0, 0xffffffff}, 0x50) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x24000090) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c80)=""/4082, 0xff2}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000140)=""/44, 0x2c}], 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) close(r9) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 4.278153645s ago: executing program 2 (id=2034): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d2f, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0xfffffffe, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0", 0x34}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xfd, 0xc2ba, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff3f9500000000000000bb6c16ee0ff29a5a4e5789ba1b5567856fe459807410290632356fde19785172fe7e4a37c18633022641823f53d0b978499e35ace00f3537d5e8cdbdc355aa44414a5592e8934f6f43d64e1fd5131038d1e56808"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) (async, rerun: 64) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x5, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, r4, 0x0) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRES8=r11], 0x12) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 4.06002111s ago: executing program 3 (id=2036): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) (async) socket$kcm(0x2, 0x6, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r1, r1}) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 4.008221141s ago: executing program 2 (id=2037): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, &(0x7f0000000100), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x41) syz_clone(0x80002800, &(0x7f0000000400)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe6fa26bc6d06f6f8d6ff18ba969b1e5c167cd266dbccf4c178105eb249b49e1a5727ddad0766d80", 0x68, 0x0, &(0x7f0000000840), &(0x7f0000000500)="19cbfdadb2f1504b037dd97423d8fb26f36d53ed4dd078e4031081734b3cc39b29e2487d9afcb8cd579dd707a8e9e4cf9c9026de5189326efbfa2b38d8b191fc5932794125dfd9014373a652ee1c4b50d52b8b9a328e035e14d86049c077677127081d0ed36692082302eaa5f67e6e233e9a4328699788bcab5f646715c173c6056a1e36dfde8a89f800ee647b1f90c94b610af7") recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000000)=""/81, 0x51}, {0x0}, {&(0x7f0000002080)=""/207, 0xcf}], 0x6}, 0x40000020) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000000000007, 0x40018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x40}, 0x10140, 0x3, 0x0, 0x0, 0x7ab, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000001b80)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000009c0)}], 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="f0ffd000000000000000000000000100000000000000", @ANYRES32, @ANYRES32], 0x28, 0x4008015}, 0x1) ioctl$SIOCSIFHWADDR(r7, 0x8924, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xf, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x4030582a, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x15, 0x2a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000004000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a000007000000000000000000000018110000928f77bbad81693ec93934cdf76b8b98326767a7338a508feae2f6b8f7f452e7f057c113a50978b89ff542070031c548ff95e34f29ad11d504b92968f8bdf6473f998f5011afeb067c751c", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000000600000018400000feffffff00000000000000001800000005000000000000000080000018440000020000000000000000000000852000000200000095820000f0ffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, 0x0, r9}, 0x94) 3.674398659s ago: executing program 3 (id=2039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x400, 0x0, 0xc2ba, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6389c50ce5da108e) close(0x3) 3.568453292s ago: executing program 0 (id=2040): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x8, 0x5, 0x4, 0x0, 0x9, 0x30020, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x9, 0x6}, 0x10000, 0xc6, 0x7, 0x3, 0x9, 0x100, 0xa9d, 0x0, 0x4, 0x0, 0x4}, r0, 0x6, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r1, 0x0) 3.515990703s ago: executing program 0 (id=2041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x20}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000400)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d005cbd983247f03151ca60bc24eab556a71a251e6182949a3651f60a84c9f4d49309000000a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 3.492021814s ago: executing program 3 (id=2042): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x95, 0x95, 0x7, [@func={0xe, 0x0, 0x0, 0xc, 0x4}, @fwd={0xc}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const={0xe, 0x0, 0x0, 0xa, 0x2}, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x1, 0x7ff}, {0x1, 0x1000, 0x66}, {0x2, 0xfffffffc, 0x3}, {0x2, 0xf75, 0x3}, {0x4, 0x3, 0xd}], "bb"}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x61, 0x61, 0x5f, 0x61, 0x0]}}, &(0x7f0000000300)=""/245, 0xb7, 0xf5, 0x0, 0x8, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4ee331f3, 0x35b, 0x0, 0x30644, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x8}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x14000, 0x10}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x14000, 0x10}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x3, 0x5, 0x6, 0x2, 0xfffffff3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x65b7, 0x0, 0x0, 0x41000, 0x20, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xd, 0xffffff81, 0xf4c}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[r3, r4, r5], &(0x7f0000000600)=[{0x0, 0x4, 0x4, 0x3}, {0x5, 0x1, 0xd, 0xc}, {0x0, 0x3, 0x3, 0xb}, {0x5, 0x4, 0x4, 0x4}, {0x1, 0x5, 0x0, 0x2}, {0x5, 0x3, 0x10, 0xa}, {0x3, 0x1, 0x4, 0x3}, {0x4, 0x1, 0x1}, {0x3, 0x1, 0x7, 0x6}], 0x10, 0x9f}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={&(0x7f0000000780)="2595ade076a521d90cf3c4822e673f32bb18410c7b2e50b7a397368981aa99005ea8177f0a05c5400dede8b4521ed41bf04548f8b4e2c50076e0296df7b4c83316316e9963184fea5d27d5f76d9108a23c1fa7a741156996c943f0d26328101b2c79dffd", &(0x7f0000000800)=""/169, &(0x7f00000008c0)="124ff92a53c8b8de366eb2397d7bfde5846add54227c80d437cd9523b210c7a433ffaa33e01cb658a2e0e611151c3a12033c76e863524cbe55cff2c89140924144305f089e2c36bc0de73584e313c8a2dd8f4307768a1d570af0c4c72d35ac78bc1d51113d2fb5194dcb29ee98c5b0ca1aaaf0919845e11e204f294a21a7307f67bdd372de2bea16bf86c8d40df212", &(0x7f0000000980)="1635c5389791708ab00e1a0bc3d16259e9e8f8b292f1a21d31aabc3a438d8598ffad14a5925578a0cabd6af6e914b86eb774aba90b8b0f2af3245eb30ca3ba3822a1b5631b517b39e403064f8ac64acc490bc1cb51a23f6590a517c493f7d6e26b5ce4489ece5a0350093f6e0fc83f98cb963d40bed8765dad035f23b410411bdd6e9bcd986570e32bb7c9b2b9af35149126bf1be2964a6ebcc8cac9b46503", 0x6, r4, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r6, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r6, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x15, 0x4f55, 0x5, 0x80000000, 0x20000, r0, 0xffff, '\x00', r8, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x8}, 0x18) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ec0)={r10, r4}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ec0)={r10, r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x4, &(0x7f0000000f00)=@raw=[@alu={0x7, 0x0, 0x5, 0x1, 0x5, 0xffffffffffffffff, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}], &(0x7f0000000f40)='syzkaller\x00', 0x7, 0x50, &(0x7f0000000f80)=""/80, 0x41000, 0x30, '\x00', r8, @fallback=0x1f, r2, 0x8, &(0x7f0000001000)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[r4, r4, r10], 0x0, 0x10, 0xffffffff}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x4, &(0x7f0000000f00)=@raw=[@alu={0x7, 0x0, 0x5, 0x1, 0x5, 0xffffffffffffffff, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}], &(0x7f0000000f40)='syzkaller\x00', 0x7, 0x50, &(0x7f0000000f80)=""/80, 0x41000, 0x30, '\x00', r8, @fallback=0x1f, r2, 0x8, &(0x7f0000001000)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[r4, r4, r10], 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001280)={r3, &(0x7f0000001140)="375d8245b20a2e114e019e9e09a6d7cc855894cdbe1c8b94672ffc2b9aa2657b6ff5baa1da323065281d6374ac4b74f4fec5136d350006cd14c3a7276ef134579580f945bc89ff9802d8021cb460c7ebc1b13df078b25e5020f5d980a5939b97abf7bdb40936ef0ea227f9014ca4c126500fcbd6e835f015a5de8e1a4228cc404205deb066388a", &(0x7f0000001200)=""/121}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x5, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @enum64={0xb, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x6, 0x7ff}, {0x7, 0x2, 0xffffff7f}, {0xc, 0x12b6, 0x80000001}]}, @enum={0x0, 0xa, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0xb, 0x9}, {0x7, 0x2485a02b}, {0xb, 0x3}, {0xa, 0x5}, {0xf, 0x9}, {0x9, 0x3}, {0x8, 0x34b}, {0xb}, {0x0, 0x8}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000001380), 0xb5, 0x0, 0x1, 0xc28c}, 0x28) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x25, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000001580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000015c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[r0, r5, r0, r3, r3, r0, r3, r4, r3, r4], 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x25, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000001580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000015c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[r0, r5, r0, r3, r3, r0, r3, r4, r3, r4], 0x0, 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r3}, &(0x7f0000001700), &(0x7f0000001740)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r3, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r13}, &(0x7f00000017c0), &(0x7f0000001800)=r10}, 0x20) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880)={r7}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000018c0)={r11, r6, 0x0, r14}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000018c0)={r11, r6, 0x0, r14}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001900)={r11, r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x80000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={r12, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000001a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0xac, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={r12, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000001a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001a80), &(0x7f0000001ac0), 0x8, 0xac, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c80)=r9, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x40000000, '\x00', r15, r16, 0x1, 0x2, 0x2}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x40000000, '\x00', r15, r16, 0x1, 0x2, 0x2}, 0x50) sendmsg$sock(r5, &(0x7f0000001e80)={&(0x7f0000001d40)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0xfffffffffffffffc, 0x0, &(0x7f0000001dc0)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xc1f}}], 0xc0}, 0x20000014) mkdir(&(0x7f0000001ec0)='./file0\x00', 0x112) sendmsg(r16, &(0x7f0000002380)={&(0x7f0000001f00)=@l2tp6={0xa, 0x0, 0x67c0, @loopback, 0x401, 0x2}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f80)="738bcc10a87a7e93bf8102be61a847f23c8e816ab893cc6699cc0e301ec2d295e61ae99933d25f764878b7c88793da7015354c2b60431efb2cf8ca7787d4feb0398778bf4d4d3e1e2172d063978322b2297d02f6e62df36bcbe96ebecee6d2b4e9e8a72ccbba41d3cea2a362f9503544ba1593f7a2", 0x75}], 0x1, &(0x7f0000002040)=[{0xa0, 0x0, 0xfff, "ba292d71e03659251aa21ff3c658430861d0e634fddc534aeb544462e5ecc63c6fdee0869b845d572008bb6a1d588e5ae5c09dde7e58fbeafd2fd170775207cfc331c4988d28e009eb297fb308a7808da2ff9da6eea68cd33ceefa54743bd2aea5823c64774fa0baabc39ec3cdd12224dbe3bb77061bb4e74b65068e30106886fbbd22be67d0a1a022b4ad0ad9"}, {0xa0, 0x0, 0x3, "852f8f6736df0017fb1a2c3e7d3558d7a9a62516f45cfa5ff492bff9693544901037756421877ee344de53a7d3fe4a673b3de60cd133184f3ce43814a39cd94bb88abe92367e1799d9980f6685aa6da7ca809f8b86a4ef6a64c08560fce722629e04dda7c7c98c57342ce08c7a2cb11fc156542ac52ec62ff6abeb0ca4cf9f3f8f11cdaf83ff1230ea5ae9e683"}, {0x100, 0x29, 0x1, "4278b9deedde7c3d6d0b4b0901233587499e5bdb39a96bd10a1d277dee40503e4956137fc050a39d5113195a280cc7e3b30865209c26c5d25d267bdc5fe3f8a48c09f3252b950076faea7d3f6ab27910c02be56e2cb1a92dc7a5901c071754fc028d0f0b3913348722b7cbf235a8ce807b5667023bccb067fae0897d2d14fa059e794737acc0a3a29b7ebfe7ded7e0f1fe537a6754c942623b54d46ef750b820e050f5da835daee9f4b87229fd0a47a6a41c4d8db292365c5a4d76ec67d929bba51a4351a333eb4439b6fa9f615d1c8b0a54fdf458c0732f9a1a678c708137dec1a45f8d23aa7659aae938"}, {0x48, 0x0, 0x3ff, "4ac3f01110f2a951d136288f33e14116d9ee563d91477e5912dfbfd3eaa585992eb24bdf116d44593767f09ddd96fd2bae6a7bb5a7a47f72"}, {0x48, 0x1, 0xed6, "34fd47008d3cf710c7f1835ac3afb0706731a445dd91534563030b1c9cfb57419d47251d97694e86ca2fca8f2786c3908d4bd988cb4f0a5c"}, {0x70, 0x111, 0x6, "d628fce30a02d9729f0d86b4c56c27686f407028edb9e9241af23b396bab7c9aadc32078554a0f40487ef03c1fd4fedee83149d7f197a51c16b9965994ddaa15207066acb59198c0c3e189ddde2247da41b6c04782cfd88bc3ede0"}], 0x340}, 0x4) openat$cgroup_type(r2, &(0x7f00000023c0), 0x2, 0x0) 3.312221138s ago: executing program 3 (id=2043): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000880)=r1, 0x4) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'rw\x00'}, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x65, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x100d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x10000, 0x0, 0xac5b}, 0x0, 0xffffffffffffffff, r1, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000", @ANYBLOB="1b00"], 0x18}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x4c) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r5, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10060, 0x0, 0xc2ba}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) 3.157856592s ago: executing program 0 (id=2044): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x71, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbb}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3.088535244s ago: executing program 2 (id=2045): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x5, &(0x7f0000000040)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xde, &(0x7f0000000380)=""/222, 0x41100, 0x8, '\x00', 0x0, @fallback=0x20, r1, 0x8, &(0x7f00000004c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x6, 0x3, 0x2}, 0x10, 0x0, r0, 0x3, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x5, 0x2, 0x10, 0xf1ec0ec5c38606ba}, {0x1, 0x1, 0x0, 0x9}, {0x3, 0x4, 0xf, 0x4}], 0x10, 0x8}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', r2, 0x4000, r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r2, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x14, 0x1a, &(0x7f0000000fc0)=@raw=[@alu={0x7, 0x1, 0x8, 0xb, 0x6, 0x4, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000010c0)='syzkaller\x00', 0x80, 0x3f, &(0x7f0000001100)=""/63, 0x40f00, 0x17, '\x00', 0x0, @fallback=0x11, r1, 0x8, &(0x7f0000001140)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x5, &(0x7f0000001180)=[r5, r3, 0x1, r5], &(0x7f00000011c0)=[{0x2, 0x3, 0x7, 0x2}, {0x2, 0x2, 0xb, 0xc}, {0x1, 0x1, 0x9, 0x9}, {0x4, 0x2, 0x8, 0x3}, {0x2, 0x5, 0x10, 0x8}], 0x10, 0xd}, 0x94) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@generic={&(0x7f0000001300)='./file0\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000100010000000000f8ffffdcb703000008000000b7040000020000008500000082000000"], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xb4, &(0x7f0000000dc0)=""/180, 0x40f00, 0x9, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x5, 0xb, 0x2}, 0x10, 0x2cc66, r7, 0x3, &(0x7f0000001380)=[r8, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x0, 0x5, 0x4, 0x8}, {0x4, 0x2, 0x9, 0x2}, {0x3, 0x5, 0xc, 0x6}], 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r10 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x7d, &(0x7f0000000000)=r11, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x3, 0x9, 0x25214, r11, 0x740c, '\x00', r6, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x44}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.952349877s ago: executing program 0 (id=2046): mkdir(0x0, 0xbe9bac6d2d0f4e0b) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) close(r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)}, 0x10100) r4 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) 2.696108223s ago: executing program 3 (id=2047): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000006a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000f99984040630cfb74148000006000000000000000000000300"/64], 0xffffffffffffffff, 0x1e, 0xca, 0x1}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7102}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000200000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%ps \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r5, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0x31, &(0x7f00000007c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@var={0x8, 0x0, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x4}}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000000c80)=""/100, 0x83, 0x64, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x1, 0xc, 0x0, 0x0, 0x28, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0x9, 0x4, 0x5, 0xffffffffffffffff, 0x1}, @ldst={0x2, 0x3, 0x2, 0x3, 0x6, 0xfffffffffffffffe, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xc6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}], &(0x7f00000005c0)='GPL\x00', 0x5, 0x3f, &(0x7f0000000600)=""/63, 0x41100, 0xd, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000d40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0xfff, 0x9, 0x80000000, 0x8010, 0x1, 0x1, '\x00', r7, r11, 0x1, 0x4, 0x0, 0x2, @value=r8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}]}, &(0x7f0000000bc0)='GPL\x00', 0x9, 0x6e, &(0x7f0000000e80)=""/110, 0x41000, 0x2, '\x00', r7, 0x25, r11, 0x8, &(0x7f0000000f00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0x10, 0x3, 0x80000001}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001080)=[r9, r6, r12, r13], &(0x7f00000010c0)=[{0x2, 0x4, 0x10, 0x6}, {0x3, 0x3, 0xe, 0x3}, {0x4, 0x5, 0xe, 0x2}, {0x1, 0x4, 0x0, 0x8}, {0x2, 0x5, 0x8, 0xc}, {0x3, 0x1, 0xe, 0x7}, {0x0, 0x4, 0xf, 0xb}, {0x1, 0x4, 0x4, 0xc}, {0x2, 0x2, 0x0, 0x4}, {0x4, 0x2, 0x9}]}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0xd, 0x3, 0x52d0, 0x54880, 0x1, 0x84, '\x00', r7, r3, 0x2, 0x3}, 0x50) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x2702) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.539797318s ago: executing program 0 (id=2048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xc5, 0x2, 0x8, 0x93, 0x0, 0x6, 0x2000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x10, 0x7, 0x7, 0x3, 0x2c, 0x9, 0x5, 0x0, 0xfffeffff, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="040000000000000000000000146192f626b02036e6000000"]) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 2.084439619s ago: executing program 2 (id=2049): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 1.861955404s ago: executing program 2 (id=2050): r0 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000001302"], 0x0, 0x56}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x2, 0x0, 0x5}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) 1.809808545s ago: executing program 3 (id=2051): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x51, &(0x7f0000000880)=[{&(0x7f0000000540)=""/263, 0x107}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f00000015c0)=""/310, 0x136}, {&(0x7f0000002d80)=""/4162, 0x1042}, {&(0x7f0000000780)=""/112, 0x70}], 0x6}, 0x2000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}, 0x101239, 0xc8, 0x6, 0x0, 0x0, 0x3, 0xffc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r7, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRESHEX], 0xffffffffffffffc6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xe, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000008484000000070000007f00000000000000b8", @ANYBLOB="428417c12cc6b5298807181a90365916610235872e111bc7d7a9a04cba0151796efcf02e59a27a51373169712f1fe0a6a412ae5494bde37ce213824fbddeffe290e12695b250b4f91eab9a19797e955de35eaea4c2340a251791290acdbf747503fba8e744b2c666feafada7d5ff2c9ac715465d97c3fd399b97bd8174bcc3fafbc5e2e0934fc43cc21db4865fa7d7dfb7dd8a713be217ebbc281018522f0b40a6d91ffd1933160eb5b9ea3f37153cc5a6d0d7bccb81d0ebbdffdef2fef61f23ab09257a94b661c73a93c5458372ab600f8e63581f9d68b2006c35c4e3cea7ee579fd640c0fdcfde6f04728284716784b14c603e413eeb3fef", @ANYRES64=r1, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="327c026991a4add2ebb4f7bd334ca24da16e0d325da8bc447c62843ae2ab516538c30f00009ac8ca936f3197c3642bd025d6ddcedfcb6db93af7e3852d2dde086727403e8250917aad52ad40e5fc3b29c709692ec42af9a7cb4b804f1b6c2eae4a1f40f09448c85b1624b84451dd6776aa98733726127fe4842622365c7a7736ccfdc8560d107fe7756ab738d263540f58a3eefa7d9aa9d2cc09c4c5151a9ea8d99e61d6a30ba93e9d7d4a308d3295eafa2661276f5deb1e004f841345632994ae4d7d7f67f544b22f045af6564b646cbc044c523f64549f965b1d9b"], 0xd0}, 0x480c4) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r8, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r12 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 1.720344298s ago: executing program 1 (id=2052): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x4, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.//\x00\x00\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)="11dda18c48d4779456db7b4d52cd9095b9a05de7f87b42376f9fa2268ce007350f05679904511121f72f55cd37db216a81263ef90663d34daa3947c4f284c415a546ab7f016d547b", 0x48}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="174cc73e6fe913566d17785c10310c34d111e78f5d0883cf1b436b279cdc30f097a461c8c89b947fb267775da82f78153ab601abe2cfe8faad47bb12bea8ee748ec244724ff15a82c7261a17ade1d4f0ff5ba2ca827130fc9782c81cc4c7d26a4d32cef04876d4033b05de545da81c3800fcacaa45a8ca44009c4d2c0643efa03f6672222a04a26cefa18339d5757f9f52c52b01b175357c6a4bf41f5c50e643a9f303a32c5fdee69591bc1404c969717c72862ad446a7cc0728f486d3b45699ea68bbcf62acae2a0eed26ff115a7fe69a28d72040", 0xd5}, {&(0x7f00000004c0)="34cf4a053df43780d01166ad8015c95428498baa55860ebacb098c21f7b13714d2ed0422d934bb93ca392a61a8", 0x2d}, {&(0x7f0000000500)="0a81da61669921766962996794db0b", 0xf}], 0x5}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 122.581017ms ago: executing program 0 (id=2053): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x48df355c, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x7, 0x0, 0x100000, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x5993, 0x8}, 0x80, 0x7, 0x7, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0x5, 0x0, 0x9}, r2, 0xc, r2, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000f8ff0e002900", 0x24}, {&(0x7f0000000080)="e46c0000", 0x4}, {&(0x7f0000000380)="22903ecc2c1c", 0x6}], 0x3}, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="0100"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000007a000000b70000000100002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 0s ago: executing program 1 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000001f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c07000000000000009555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a59a08077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25fe936b2cf31dc573b98bd037bceeae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): 93.203694][ T4821] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 93.239662][ T4822] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.101'. [ 93.252680][ T4821] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.102'. [ 93.491457][ T4815] device syzkaller0 entered promiscuous mode [ 93.816294][ T4832] netlink: 'syz.4.104': attribute type 13 has an invalid length. [ 93.820612][ T4822] netlink: 'syz.2.101': attribute type 3 has an invalid length. [ 93.831868][ T4832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.104'. [ 93.832420][ T4832] erspan0: refused to change device tx_queue_len [ 93.899625][ T4832] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 93.915511][ T4822] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.101'. [ 94.482733][ T4852] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.109'. [ 95.954960][ T4851] netlink: 56 bytes leftover after parsing attributes in process `syz.3.109'. [ 96.617939][ T4889] validate_nla: 1 callbacks suppressed [ 96.617955][ T4889] netlink: 'syz.3.119': attribute type 12 has an invalid length. [ 96.710261][ T4889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.119'. [ 97.284332][ T4910] netlink: 'syz.2.127': attribute type 13 has an invalid length. [ 97.304078][ T4910] netlink: 172 bytes leftover after parsing attributes in process `syz.2.127'. [ 97.344640][ T4910] erspan0: refused to change device tx_queue_len [ 99.012264][ T4948] syzkaller0: create flow: hash 1020174612 index 2 [ 99.952719][ T4983] netlink: 'syz.0.142': attribute type 29 has an invalid length. [ 99.998815][ T4360] syzkaller0: tun_net_xmit 76 [ 100.029728][ T4360] syzkaller0: tun_net_xmit 48 [ 100.062547][ T4260] syzkaller0: tun_net_xmit 76 [ 100.070561][ T4974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.141'. [ 100.184031][ T4979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.142'. [ 100.215601][ T4981] netlink: 830 bytes leftover after parsing attributes in process `syz.4.143'. [ 100.248951][ T4984] netlink: 'syz.2.144': attribute type 21 has an invalid length. [ 100.271238][ T4984] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.456907][ T4983] netlink: 'syz.0.142': attribute type 29 has an invalid length. [ 100.580572][ T4360] syzkaller0: tun_net_xmit 76 [ 100.883017][ T4955] syzkaller0: delete flow: hash 1020174612 index 2 [ 101.012200][ T5005] netlink: 'syz.2.147': attribute type 39 has an invalid length. [ 101.016654][ T4320] syzkaller0: tun_net_xmit 76 [ 101.064923][ T4314] syzkaller0: tun_net_xmit 76 [ 101.340192][ T5021] netlink: 'syz.4.154': attribute type 3 has an invalid length. [ 101.389216][ T5021] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.154'. [ 107.765975][ T5086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.169'. [ 107.785963][ T5086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.169'. [ 107.796944][ T5086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.169'. [ 107.859219][ T5086] netlink: 132 bytes leftover after parsing attributes in process `syz.4.169'. [ 107.920720][ T5090] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 108.071639][ T5090] netlink: 156 bytes leftover after parsing attributes in process `syz.3.170'. [ 109.540041][ T5122] netlink: 'syz.4.180': attribute type 10 has an invalid length. [ 109.548952][ T5122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.590343][ T5122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.626931][ T5122] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 109.657693][ T5135] netlink: 14 bytes leftover after parsing attributes in process `syz.1.183'. [ 109.682853][ T5135] device hsr_slave_0 left promiscuous mode [ 109.693252][ T5135] device hsr_slave_1 left promiscuous mode [ 109.877321][ T5143] netlink: 'syz.4.185': attribute type 10 has an invalid length. [ 109.942830][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.970292][ T5143] device bridge_slave_1 left promiscuous mode [ 109.985054][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.065458][ T5143] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 110.138125][ T5151] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 110.705072][ T5167] netlink: 'syz.4.190': attribute type 39 has an invalid length. [ 110.998544][ T5173] netlink: 144 bytes leftover after parsing attributes in process `syz.1.194'. [ 111.657112][ T5201] can: request_module (can-proto-0) failed. [ 111.811814][ T5214] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.207'. [ 111.827579][ T5217] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 111.842240][ T5214] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.207'. [ 111.865762][ T5214] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.207'. [ 111.895172][ T5217] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 111.913621][ T5220] netlink: 'syz.3.205': attribute type 29 has an invalid length. [ 112.054495][ T5223] sock: sock_set_timeout: `syz.4.208' (pid 5223) tries to set negative timeout [ 113.292013][ T5256] __nla_validate_parse: 2 callbacks suppressed [ 113.292029][ T5256] netlink: 10 bytes leftover after parsing attributes in process `syz.2.217'. [ 113.443813][ T5256] netlink: 'syz.2.217': attribute type 17 has an invalid length. [ 113.560624][ T5256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.217'. [ 113.581352][ T5256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.941074][ T5282] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 113.949864][ T5282] netlink: 'syz.3.223': attribute type 29 has an invalid length. [ 114.227504][ T5296] netlink: 'syz.4.229': attribute type 29 has an invalid length. [ 115.624480][ T5325] tap0: tun_chr_ioctl cmd 1074025675 [ 115.629842][ T5325] tap0: persist enabled [ 115.650240][ T5325] tap0: tun_chr_ioctl cmd 1074025675 [ 115.696271][ T5325] tap0: persist disabled [ 115.808255][ T5327] device syzkaller0 entered promiscuous mode [ 117.099599][ T5348] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.243'. [ 117.444517][ T5367] validate_nla: 2 callbacks suppressed [ 117.444530][ T5367] netlink: 'syz.4.249': attribute type 3 has an invalid length. [ 117.478995][ T5368] netlink: 'syz.4.249': attribute type 3 has an invalid length. [ 117.519329][ T5367] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.249'. [ 117.549047][ T5368] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.249'. [ 117.730429][ T5377] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 117.786641][ T5379] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.254'. [ 119.814699][ T5402] netlink: 10 bytes leftover after parsing attributes in process `syz.1.258'. [ 121.232139][ T5447] device wlan1 entered promiscuous mode [ 122.196760][ T5457] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 122.238279][ T5457] device macvlan0 entered promiscuous mode [ 122.499346][ T5457] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 122.510741][ T5461] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 122.543550][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.551459][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.628987][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.636408][ T5461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.644695][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.651984][ T5461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.758555][ T5461] team0: Port device bridge0 added [ 123.017360][ T5470] netlink: 'syz.4.277': attribute type 16 has an invalid length. [ 123.076974][ T5470] netlink: 152 bytes leftover after parsing attributes in process `syz.4.277'. [ 124.297071][ T5486] device syzkaller0 entered promiscuous mode [ 124.318680][ T5493] netlink: 'syz.0.286': attribute type 13 has an invalid length. [ 124.345571][ T5493] netlink: 172 bytes leftover after parsing attributes in process `syz.0.286'. [ 124.384993][ T5493] erspan0: refused to change device tx_queue_len [ 125.527144][ T5511] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.290'. [ 125.568435][ T5512] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.290'. [ 126.815067][ T5516] netlink: 'syz.4.291': attribute type 3 has an invalid length. [ 127.422023][ T5493] device syzkaller0 entered promiscuous mode [ 127.479409][ T5506] device veth1_macvtap left promiscuous mode [ 127.505048][ T5508] device veth1_macvtap entered promiscuous mode [ 127.561422][ T5508] device macsec0 entered promiscuous mode [ 127.582014][ T5515] netlink: 'syz.4.291': attribute type 22 has an invalid length. [ 127.623977][ T5518] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 127.661645][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 129.858858][ T5518] netlink: 'syz.3.292': attribute type 29 has an invalid length. [ 129.866893][ T5539] netlink: 'syz.1.299': attribute type 10 has an invalid length. [ 130.210196][ T5561] netlink: 'syz.1.305': attribute type 29 has an invalid length. [ 130.392692][ T5552] device syzkaller0 entered promiscuous mode [ 130.417562][ T5553] Ÿë: port 1(veth0_to_team) entered blocking state [ 130.430758][ T5553] Ÿë: port 1(veth0_to_team) entered disabled state [ 130.447088][ T5553] device veth0_to_team entered promiscuous mode [ 130.523451][ T5561] netlink: 'syz.1.305': attribute type 29 has an invalid length. [ 130.964773][ T5570] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 130.981829][ T5570] device macvlan0 entered promiscuous mode [ 131.017980][ T5570] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 131.148588][ T5566] netlink: 'syz.1.305': attribute type 29 has an invalid length. [ 131.513108][ T5599] netlink: 188 bytes leftover after parsing attributes in process `syz.1.313'. [ 132.031180][ T5605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.316'. [ 132.574590][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.581003][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184700][ T5622] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 133.198450][ T5622] dvmrp1: linktype set to 768 [ 133.526344][ T5640] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.324'. [ 133.717421][ T5651] netlink: 172 bytes leftover after parsing attributes in process `syz.2.327'. [ 133.846980][ T5651] netlink: 14 bytes leftover after parsing attributes in process `syz.2.327'. [ 133.899508][ T5654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.328'. [ 133.900807][ T5651] openvswitch: netlink: Flow key attr not present in new flow. [ 134.022455][ T5654] device pim6reg1 entered promiscuous mode [ 135.205726][ T5675] device syzkaller0 entered promiscuous mode [ 136.730827][ T5691] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 136.754415][ T5691] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.783478][ T5691] bond0: (slave team0): Enslaving as an active interface with an up link [ 136.999294][ T5708] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 137.011103][ T5708] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.342'. [ 137.073325][ T5710] netlink: 164 bytes leftover after parsing attributes in process `syz.4.342'. [ 138.098812][ T5737] device syzkaller0 entered promiscuous mode [ 138.216252][ T5753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.353'. [ 139.991550][ T5787] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 139.999317][ T5787] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.361'. [ 140.711264][ T5753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.353'. [ 140.998590][ T5800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.365'. [ 141.574260][ T5813] : port 1(ip6gretap0) entered blocking state [ 141.592948][ T5813] : port 1(ip6gretap0) entered disabled state [ 141.608751][ T5813] device ip6gretap0 entered promiscuous mode [ 141.631366][ T5819] device ip6gretap0 left promiscuous mode [ 141.637938][ T5819] : port 1(ip6gretap0) entered disabled state [ 141.996772][ T5821] __sock_release: fasync list not empty! [ 142.182478][ T5832] device syzkaller0 entered promiscuous mode [ 142.381409][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.400796][ T5849] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.421495][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.448476][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.464224][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.499687][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.522731][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.555124][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.566497][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.582214][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.598882][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.609687][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.621723][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.629374][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.642804][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.650581][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.661863][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.678200][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.689313][ T5849] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 142.697140][ T5849] netlink: 62332 bytes leftover after parsing attributes in process `syz.4.378'. [ 143.926293][ T5857] device hsr_slave_0 left promiscuous mode [ 143.941175][ T5857] device hsr_slave_1 left promiscuous mode [ 144.671191][ T5901] bridge_slave_1: default FDB implementation only supports local addresses [ 146.415743][ T5937] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.425992][ T5935] team0: Port device macvlan0 added [ 147.207181][ T5971] device syzkaller0 entered promiscuous mode [ 148.082236][ T6019] validate_nla: 28 callbacks suppressed [ 148.082253][ T6019] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 148.130461][ T6019] netlink: 'syz.4.424': attribute type 3 has an invalid length. [ 148.175347][ T6019] __nla_validate_parse: 28 callbacks suppressed [ 148.175363][ T6019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.424'. [ 148.312330][ T6026] netlink: 'syz.3.429': attribute type 29 has an invalid length. [ 149.219588][ T6026] netlink: 'syz.3.429': attribute type 29 has an invalid length. [ 149.490965][ T6036] netlink: 14 bytes leftover after parsing attributes in process `syz.3.432'. [ 149.613015][ T6044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.432'. [ 149.657662][ T6045] netlink: 'syz.2.434': attribute type 3 has an invalid length. [ 149.704041][ T6045] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.434'. [ 154.836076][ T6108] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 154.848907][ T6108] team0: Device vxcan1 is of different type [ 154.893358][ T6106] device syzkaller0 entered promiscuous mode [ 155.177056][ T6134] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.449'. [ 155.194025][ T6134] netlink: zone id is out of range [ 155.199316][ T6134] netlink: zone id is out of range [ 155.214826][ T6134] netlink: zone id is out of range [ 155.227047][ T6134] netlink: del zone limit has 4 unknown bytes [ 159.234299][ T6132] netlink: 'syz.3.448': attribute type 21 has an invalid length. [ 159.243141][ T6140] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.450'. [ 159.637819][ T6160] IPv6: Can't replace route, no match found [ 159.689855][ T6161] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 159.715691][ T6161] netlink: 55 bytes leftover after parsing attributes in process `syz.1.456'. [ 163.915130][ T6161] team0: Port device macvlan0 removed [ 163.980092][ T6183] netlink: 'syz.3.463': attribute type 19 has an invalid length. [ 164.000538][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 164.196484][ T6189] device syzkaller0 entered promiscuous mode [ 164.255243][ T6193] device syzkaller0 entered promiscuous mode [ 164.287807][ T6198] device syzkaller0 entered promiscuous mode [ 164.405683][ T6193] FAULT_INJECTION: forcing a failure. [ 164.405683][ T6193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 164.436123][ T6193] CPU: 0 PID: 6193 Comm: syz.0.465 Not tainted syzkaller #0 [ 164.443446][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.453512][ T6193] Call Trace: [ 164.456786][ T6193] [ 164.459712][ T6193] dump_stack_lvl+0x188/0x24e [ 164.464387][ T6193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.470534][ T6193] ? show_regs_print_info+0x12/0x12 [ 164.475741][ T6193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.481904][ T6193] should_fail_ex+0x390/0x4c0 [ 164.486570][ T6193] _copy_from_iter+0x1c0/0x1130 [ 164.491410][ T6193] ? rcu_is_watching+0x11/0xa0 [ 164.496160][ T6193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.502303][ T6193] ? copyout_mc+0x110/0x110 [ 164.506789][ T6193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.512942][ T6193] ? __check_object_size+0x4f6/0xa70 [ 164.518215][ T6193] skb_copy_datagram_from_iter+0xee/0x6b0 [ 164.523921][ T6193] tun_get_user+0xc41/0x3c20 [ 164.528504][ T6193] ? rcu_read_unlock+0xa0/0xa0 [ 164.533261][ T6193] ? tun_get+0x1c/0x2e0 [ 164.537413][ T6193] ? __lock_acquire+0x7c40/0x7c40 [ 164.542426][ T6193] ? lockdep_hardirqs_on+0x94/0x140 [ 164.547617][ T6193] ? tun_get+0x1c/0x2e0 [ 164.551769][ T6193] tun_chr_write_iter+0x112/0x1f0 [ 164.556786][ T6193] vfs_write+0x482/0x9a0 [ 164.561025][ T6193] ? file_end_write+0x250/0x250 [ 164.565870][ T6193] ? __fget_files+0x3fc/0x460 [ 164.570542][ T6193] ? __fdget_pos+0x1d4/0x360 [ 164.575120][ T6193] ? ksys_write+0x70/0x260 [ 164.579525][ T6193] ksys_write+0x14d/0x260 [ 164.583845][ T6193] ? __ia32_sys_read+0x80/0x80 [ 164.588601][ T6193] ? lockdep_hardirqs_on+0x94/0x140 [ 164.593790][ T6193] do_syscall_64+0x4c/0xa0 [ 164.598194][ T6193] ? clear_bhb_loop+0x60/0xb0 [ 164.602856][ T6193] ? clear_bhb_loop+0x60/0xb0 [ 164.607520][ T6193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.613412][ T6193] RIP: 0033:0x7faa2fb9e019 [ 164.617820][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.637417][ T6193] RSP: 002b:00007faa30a0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.645822][ T6193] RAX: ffffffffffffffda RBX: 00007faa2fe25fa0 RCX: 00007faa2fb9e019 [ 164.653778][ T6193] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 0000000000000003 [ 164.661736][ T6193] RBP: 00007faa30a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.669693][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.677649][ T6193] R13: 00007faa2fe26038 R14: 00007faa2fe25fa0 R15: 00007ffdf6753ac8 [ 164.685618][ T6193] [ 167.638173][ T6232] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.474'. [ 169.401460][ T6269] netlink: 'syz.1.485': attribute type 2 has an invalid length. [ 169.429078][ T6269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.485'. [ 169.567752][ T6273] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.486'. [ 169.900940][ T6282] FAULT_INJECTION: forcing a failure. [ 169.900940][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.026063][ T6282] CPU: 1 PID: 6282 Comm: syz.2.487 Not tainted syzkaller #0 [ 170.033389][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.043447][ T6282] Call Trace: [ 170.046731][ T6282] [ 170.049668][ T6282] dump_stack_lvl+0x188/0x24e [ 170.054374][ T6282] ? show_regs_print_info+0x12/0x12 [ 170.057610][ T6276] device syzkaller0 entered promiscuous mode [ 170.059582][ T6282] ? load_image+0x410/0x410 [ 170.059627][ T6282] ? __lock_acquire+0x7c40/0x7c40 [ 170.075107][ T6282] should_fail_ex+0x390/0x4c0 [ 170.079809][ T6282] _copy_from_iter+0x1c0/0x1130 [ 170.084676][ T6282] ? __lock_acquire+0x7c40/0x7c40 [ 170.089713][ T6282] ? mark_lock+0x94/0x320 [ 170.094062][ T6282] ? copyout_mc+0x110/0x110 [ 170.098577][ T6282] ? __virt_addr_valid+0x188/0x540 [ 170.103706][ T6282] ? __virt_addr_valid+0x188/0x540 [ 170.108833][ T6282] ? __virt_addr_valid+0x467/0x540 [ 170.113961][ T6282] ? __check_object_size+0x4f6/0xa70 [ 170.119263][ T6282] skb_copy_datagram_from_iter+0xee/0x6b0 [ 170.124995][ T6282] ? napi_get_frags+0x1c/0x140 [ 170.129776][ T6282] ? napi_get_frags+0xb7/0x140 [ 170.134561][ T6282] tun_get_user+0xc41/0x3c20 [ 170.139173][ T6282] ? trace_event_raw_event_lock+0x1d1/0x230 [ 170.145082][ T6282] ? rcu_read_unlock+0xa0/0xa0 [ 170.149871][ T6282] ? tun_get+0x1c/0x2e0 [ 170.154044][ T6282] ? __lock_acquire+0x7c40/0x7c40 [ 170.159084][ T6282] ? tun_get+0x1c/0x2e0 [ 170.163271][ T6282] tun_chr_write_iter+0x112/0x1f0 [ 170.168324][ T6282] vfs_write+0x482/0x9a0 [ 170.172652][ T6282] ? file_end_write+0x250/0x250 [ 170.177528][ T6282] ? __fget_files+0x3fc/0x460 [ 170.182235][ T6282] ? __fdget_pos+0x1d4/0x360 [ 170.186845][ T6282] ? ksys_write+0x70/0x260 [ 170.191283][ T6282] ksys_write+0x14d/0x260 [ 170.195638][ T6282] ? __ia32_sys_read+0x80/0x80 [ 170.200422][ T6282] ? lockdep_hardirqs_on+0x94/0x140 [ 170.205639][ T6282] do_syscall_64+0x4c/0xa0 [ 170.210066][ T6282] ? clear_bhb_loop+0x60/0xb0 [ 170.214755][ T6282] ? clear_bhb_loop+0x60/0xb0 [ 170.219453][ T6282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.225354][ T6282] RIP: 0033:0x7f1035f9e019 [ 170.229772][ T6282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.249389][ T6282] RSP: 002b:00007f1036ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 170.257818][ T6282] RAX: ffffffffffffffda RBX: 00007f1036226180 RCX: 00007f1035f9e019 [ 170.265801][ T6282] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 0000000000000003 [ 170.273780][ T6282] RBP: 00007f1036ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.281770][ T6282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.289747][ T6282] R13: 00007f1036226218 R14: 00007f1036226180 R15: 00007ffc4a2bd188 [ 170.297745][ T6282] [ 172.667961][ T6334] netlink: 'syz.0.499': attribute type 3 has an invalid length. [ 172.795446][ T6334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.499'. [ 172.829239][ T6345] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.502'. [ 172.989251][ T6348] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.501'. [ 173.035085][ T6350] netlink: 144 bytes leftover after parsing attributes in process `syz.3.503'. [ 173.513172][ T6364] netlink: 14 bytes leftover after parsing attributes in process `syz.2.508'. [ 173.732945][ T6372] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.509'. [ 173.854365][ T6364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.928415][ T6364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.995818][ T6364] bond0 (unregistering): Released all slaves [ 174.031814][ T6369] netlink: 2 bytes leftover after parsing attributes in process `syz.2.508'. [ 174.041125][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.053351][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.063534][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.075508][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.118665][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.129352][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.139995][ T6369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.151024][ T6369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.170687][ T6369] device batadv_slave_1 entered promiscuous mode [ 174.183567][ T6376] netlink: 'syz.4.511': attribute type 5 has an invalid length. [ 174.399994][ T6384] device syzkaller0 entered promiscuous mode [ 174.521070][ T6386] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 174.644028][ T6386] team0 (unregistering): Port device team_slave_0 removed [ 174.669029][ T6386] team0 (unregistering): Port device team_slave_1 removed [ 175.216712][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 176.772561][ T6397] device syzkaller0 entered promiscuous mode [ 176.820838][ T6421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.521'. [ 177.096708][ T6434] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.526'. [ 178.698894][ T6436] tap0: tun_chr_ioctl cmd 1074025677 [ 178.704467][ T6436] tap0: linktype set to 769 [ 179.578572][ T6472] device syzkaller0 entered promiscuous mode [ 182.716327][ T6500] netlink: 'syz.2.538': attribute type 29 has an invalid length. [ 183.755474][ T6500] netlink: 'syz.2.538': attribute type 29 has an invalid length. [ 183.779480][ T6501] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 183.791130][ T6503] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 184.023788][ T6520] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.542'. [ 184.789235][ T6551] device syzkaller0 entered promiscuous mode [ 184.801923][ T6559] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 185.840613][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 185.846720][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 185.853089][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 185.859099][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 185.865970][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 187.646351][ T6567] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 187.658439][ T6569] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 187.834726][ T6580] device syzkaller0 entered promiscuous mode [ 187.878533][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 187.889400][ T6584] netlink: 'syz.0.560': attribute type 10 has an invalid length. [ 187.903688][ T6580] netlink: 'syz.2.559': attribute type 3 has an invalid length. [ 187.919841][ T6584] netlink: 55 bytes leftover after parsing attributes in process `syz.0.560'. [ 187.929279][ T6580] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 187.939245][ T6580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.559'. [ 188.148465][ T6599] netlink: 'syz.3.562': attribute type 153 has an invalid length. [ 188.165595][ T6599] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.562'. [ 188.191711][ T6603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.564'. [ 188.245083][ T4277] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 188.338759][ T6593] device syzkaller0 entered promiscuous mode [ 190.079407][ T6612] netlink: 152 bytes leftover after parsing attributes in process `syz.0.565'. [ 190.089367][ T6612] bond0: (slave bond_slave_0): Releasing backup interface [ 190.102692][ T6612] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 190.345599][ T6649] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 190.407185][ T6649] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 190.757430][ T6659] tap0: tun_chr_ioctl cmd 2147767521 [ 190.762984][ T6661] device sit0 entered promiscuous mode [ 190.829002][ T6663] device syzkaller0 entered promiscuous mode [ 194.009161][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.015762][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.669174][ T6668] netlink: 'syz.3.577': attribute type 2 has an invalid length. [ 194.677781][ T6668] netlink: 'syz.3.577': attribute type 8 has an invalid length. [ 194.685546][ T6668] netlink: 132 bytes leftover after parsing attributes in process `syz.3.577'. [ 194.696322][ T6677] netlink: 'syz.3.577': attribute type 2 has an invalid length. [ 194.704372][ T6677] netlink: 'syz.3.577': attribute type 8 has an invalid length. [ 194.712341][ T6677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.577'. [ 194.723160][ T6687] netlink: 'syz.4.582': attribute type 275 has an invalid length. [ 194.826328][ T6696] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 194.895527][ T6696] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.584'. [ 194.918828][ T6676] device syzkaller0 entered promiscuous mode [ 194.928261][ T6694] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 194.936810][ T6694] netlink: 176 bytes leftover after parsing attributes in process `syz.0.583'. [ 195.318160][ T6724] netlink: 'syz.1.590': attribute type 2 has an invalid length. [ 195.352337][ T6724] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.590'. [ 195.456202][ T4277] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 197.212492][ T6718] device syzkaller0 entered promiscuous mode [ 197.237013][ T6755] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.599'. [ 198.827044][ T6763] netlink: 'syz.2.601': attribute type 19 has an invalid length. [ 198.840236][ T6769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.900619][ T6770] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.603'. [ 198.920521][ T6770] netlink: 4952 bytes leftover after parsing attributes in process `syz.1.603'. [ 198.957183][ T6770] tc_dump_action: action bad kind [ 199.356575][ T6797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'. [ 199.511318][ T6804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.612'. [ 200.311542][ T6831] device syzkaller0 entered promiscuous mode [ 202.244427][ T6860] netlink: 188 bytes leftover after parsing attributes in process `syz.0.625'. [ 203.016221][ T6884] netlink: 'syz.0.633': attribute type 9 has an invalid length. [ 203.059097][ T6884] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.633'. [ 204.100540][ T6887] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 204.150060][ T6887] netlink: 164 bytes leftover after parsing attributes in process `syz.2.634'. [ 204.216736][ T6894] netlink: 'syz.3.638': attribute type 9 has an invalid length. [ 204.284975][ T6894] netlink: 668 bytes leftover after parsing attributes in process `syz.3.638'. [ 204.415853][ T4277] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 204.423613][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 204.433776][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 204.441342][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.451408][ T4277] Workqueue: hci4 hci_rx_work [ 204.456112][ T4277] Call Trace: [ 204.459397][ T4277] [ 204.462340][ T4277] dump_stack_lvl+0x188/0x24e [ 204.467039][ T4277] ? show_regs_print_info+0x12/0x12 [ 204.472259][ T4277] ? load_image+0x410/0x410 [ 204.476791][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 204.481927][ T4277] ? __lock_acquire+0x7c40/0x7c40 [ 204.486975][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 204.491676][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 204.496895][ T4277] kobject_add_internal+0x617/0xca0 [ 204.502119][ T4277] kobject_add+0x160/0x230 [ 204.506557][ T4277] ? kobject_init+0x1c0/0x1c0 [ 204.511257][ T4277] ? __raw_spin_lock_init+0x41/0x100 [ 204.516549][ T4277] ? klist_children_get+0x50/0x50 [ 204.521598][ T4277] ? get_device_parent+0x121/0x3e0 [ 204.526708][ T4277] device_add+0x470/0x1050 [ 204.531120][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 204.536053][ T4277] le_conn_complete_evt+0xfac/0x15c0 [ 204.541338][ T4277] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 204.547575][ T4277] ? bt_info+0x180/0x180 [ 204.551816][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 204.557447][ T4277] ? mutex_unlock+0x10/0x10 [ 204.561949][ T4277] ? skb_pull_data+0xec/0x1f0 [ 204.566628][ T4277] hci_le_conn_complete_evt+0x183/0x440 [ 204.572172][ T4277] ? hci_remote_host_features_evt+0x230/0x230 [ 204.578226][ T4277] hci_event_packet+0x7b3/0x1290 [ 204.583166][ T4277] ? __lock_acquire+0x7c40/0x7c40 [ 204.588181][ T4277] ? bis_list+0x280/0x280 [ 204.592503][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 204.598390][ T4277] ? kcov_remote_start+0x4b0/0x7e0 [ 204.603490][ T4277] ? do_machine_check+0x380/0x750 [ 204.608506][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 204.613695][ T4277] hci_rx_work+0x3eb/0xd40 [ 204.618103][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 204.622949][ T4277] ? process_one_work+0x7b4/0x1160 [ 204.628049][ T4277] process_one_work+0x8ab/0x1160 [ 204.632988][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 204.638609][ T4277] ? _raw_spin_lock_irq+0x86/0xf0 [ 204.643623][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 204.648632][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 204.654166][ T4277] ? wq_worker_running+0x97/0x190 [ 204.659186][ T4277] worker_thread+0xaf5/0x12a0 [ 204.663876][ T4277] kthread+0x29d/0x330 [ 204.667930][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 204.672939][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 204.677516][ T4277] ret_from_fork+0x1f/0x30 [ 204.681932][ T4277] [ 204.685506][ T4277] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 204.698750][ T4277] Bluetooth: hci4: failed to register connection device [ 204.717897][ T6892] device syzkaller0 entered promiscuous mode [ 204.816048][ T6895] netlink: 128 bytes leftover after parsing attributes in process `syz.0.636'. [ 204.843310][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 204.867142][ T6895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.736927][ T6940] netlink: 'syz.2.648': attribute type 3 has an invalid length. [ 205.759455][ T6940] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.648'. [ 206.922785][ T6931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.929999][ T6931] IPv6: NLM_F_CREATE should be set when creating new route [ 206.937261][ T6931] IPv6: NLM_F_CREATE should be set when creating new route [ 206.944491][ T6931] IPv6: NLM_F_CREATE should be set when creating new route [ 206.958974][ T6943] tap0: tun_chr_ioctl cmd 1074025677 [ 206.967448][ T6943] tap0: linktype set to 769 [ 207.453794][ T6974] netlink: 'syz.0.657': attribute type 2 has an invalid length. [ 208.677418][ T7000] device syzkaller0 entered promiscuous mode [ 209.068037][ T7016] netlink: 'syz.3.667': attribute type 9 has an invalid length. [ 209.133646][ T7016] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.667'. [ 213.614463][ T7048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.673'. [ 213.631239][ T7048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.673'. [ 213.885601][ T7055] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 213.897997][ T7055] netlink: 'syz.3.675': attribute type 8 has an invalid length. [ 213.906028][ T7055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.675'. [ 213.917647][ T7063] netlink: 'syz.2.677': attribute type 4 has an invalid length. [ 213.930665][ T7064] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 213.938652][ T7064] netlink: 'syz.3.675': attribute type 8 has an invalid length. [ 213.952540][ T7064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.675'. [ 214.552771][ T7080] ÿÿÿÿÿÿ: renamed from vlan1 [ 214.716304][ T7086] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 214.724488][ T7086] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.684'. [ 215.145196][ T7094] netlink: 'syz.2.685': attribute type 3 has an invalid length. [ 215.151696][ T7091] netlink: 'syz.2.685': attribute type 3 has an invalid length. [ 215.159088][ T7094] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.685'. [ 215.281690][ T7091] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.685'. [ 215.376604][ T7103] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.689'. [ 218.648253][ T7138] device syzkaller0 entered promiscuous mode [ 218.784630][ T7145] netlink: 'syz.4.701': attribute type 10 has an invalid length. [ 218.840874][ T7145] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.989776][ T7169] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 220.122220][ T7169] netlink: 'syz.3.707': attribute type 2 has an invalid length. [ 220.323964][ T7160] netlink: 'syz.0.705': attribute type 21 has an invalid length. [ 220.342754][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.705'. [ 220.352662][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.362392][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.381219][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.388698][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.751186][ T7180] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 220.788417][ T7180] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.824197][ T7188] netlink: 'syz.4.722': attribute type 21 has an invalid length. [ 220.832358][ T7188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.722'. [ 220.894144][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.923754][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.261474][ T7207] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 221.303632][ T7207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.717'. [ 221.525078][ T7205] device batadv0 entered promiscuous mode [ 224.943288][ T7249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.950556][ T7249] IPv6: NLM_F_CREATE should be set when creating new route [ 224.957877][ T7249] IPv6: NLM_F_CREATE should be set when creating new route [ 224.965144][ T7249] IPv6: NLM_F_CREATE should be set when creating new route [ 225.145925][ T7266] netlink: 'syz.4.735': attribute type 21 has an invalid length. [ 225.774466][ T7302] device syzkaller0 entered promiscuous mode [ 227.591143][ T7338] netlink: 'syz.0.751': attribute type 3 has an invalid length. [ 227.623492][ T7338] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.751'. [ 228.293990][ T7383] netlink: 188 bytes leftover after parsing attributes in process `syz.1.763'. [ 228.317124][ T7383] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 228.446189][ T7377] device syzkaller0 entered promiscuous mode [ 228.507251][ T7382] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 230.479348][ T7397] netlink: 132 bytes leftover after parsing attributes in process `syz.4.765'. [ 230.489963][ T7419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.771'. [ 230.746731][ T7440] device syzkaller0 entered promiscuous mode [ 231.030156][ T7452] -1: renamed from syzkaller0 [ 231.290140][ T7466] Ÿë: port 1(veth0_to_team) entered blocking state [ 231.320526][ T7466] Ÿë: port 1(veth0_to_team) entered disabled state [ 231.338556][ T7466] device veth0_to_team entered promiscuous mode [ 231.984869][ T7505] netlink: 'syz.0.791': attribute type 2 has an invalid length. [ 232.009909][ T7505] netlink: 10 bytes leftover after parsing attributes in process `syz.0.791'. [ 232.192242][ T7519] netlink: 'syz.2.797': attribute type 21 has an invalid length. [ 232.219143][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 232.342730][ T7519] device syzkaller0 entered promiscuous mode [ 232.739857][ T7539] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 232.788998][ T7539] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.800'. [ 234.637322][ T7545] device syzkaller0 left promiscuous mode [ 234.979759][ T7559] netlink: 'syz.3.805': attribute type 9 has an invalid length. [ 234.987959][ T7559] netlink: 668 bytes leftover after parsing attributes in process `syz.3.805'. [ 236.095134][ T7556] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 236.103053][ T7556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'. [ 236.117950][ T7556] device team0 entered promiscuous mode [ 236.127790][ T7556] device team_slave_0 entered promiscuous mode [ 236.138901][ T7556] device team_slave_1 entered promiscuous mode [ 236.151213][ T7556] bridge0: port 3(team0) entered blocking state [ 236.157638][ T7556] bridge0: port 3(team0) entered disabled state [ 236.171876][ T7556] bridge0: port 3(team0) entered blocking state [ 236.178201][ T7556] bridge0: port 3(team0) entered forwarding state [ 236.200102][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'. [ 236.220164][ T7558] device caif0 entered promiscuous mode [ 236.233430][ T7558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.954715][ T7592] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.815'. [ 236.974246][ T7585] device syzkaller0 entered promiscuous mode [ 237.035338][ T7592] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 239.084306][ T7622] netlink: 'syz.3.824': attribute type 3 has an invalid length. [ 239.104968][ T7622] netlink: 'syz.3.824': attribute type 8 has an invalid length. [ 239.119996][ T7622] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.824'. [ 240.152140][ T7650] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.830'. [ 242.783179][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 242.994501][ T7674] netlink: 'syz.2.840': attribute type 3 has an invalid length. [ 243.024111][ T7674] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.840'. [ 243.914249][ T7703] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 243.939950][ T7703] netlink: 55 bytes leftover after parsing attributes in process `syz.2.845'. [ 243.962277][ T7705] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.846'. [ 244.123020][ T7705] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 244.346819][ T7719] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 244.367459][ T7719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 244.946990][ T4277] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 245.720435][ T7758] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.863'. [ 245.796185][ T7758] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 247.755737][ T7798] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.870'. [ 248.045211][ T4277] Bluetooth: hci1: ISO packet for unknown connection handle 10 [ 248.069892][ T7815] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.879'. [ 248.075094][ T7818] netlink: 'syz.4.880': attribute type 2 has an invalid length. [ 248.088423][ T7818] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.880'. [ 248.116231][ T7815] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 248.404665][ T7825] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 248.426164][ T7835] netlink: 60 bytes leftover after parsing attributes in process `syz.3.884'. [ 250.150845][ T7878] IPv6: Can't replace route, no match found [ 250.352724][ T7886] netlink: 'syz.4.901': attribute type 3 has an invalid length. [ 250.372613][ T7886] netlink: 'syz.4.901': attribute type 8 has an invalid length. [ 250.380280][ T7886] netlink: 'syz.4.901': attribute type 7 has an invalid length. [ 250.415929][ T7886] netlink: 194740 bytes leftover after parsing attributes in process `syz.4.901'. [ 250.522005][ T7895] netlink: 'syz.2.903': attribute type 3 has an invalid length. [ 250.529792][ T7895] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.903'. [ 250.620608][ T7899] netlink: 'syz.2.903': attribute type 3 has an invalid length. [ 250.637738][ T7899] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.903'. [ 250.678106][ T7898] netlink: 'syz.1.905': attribute type 12 has an invalid length. [ 250.720613][ T7898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.905'. [ 251.447992][ T7926] sctp: [Deprecated]: syz.4.913 (pid 7926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.447992][ T7926] Use struct sctp_sack_info instead [ 251.566566][ T7931] netlink: 'syz.3.915': attribute type 3 has an invalid length. [ 251.590461][ T7931] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.915'. [ 252.106188][ T7954] device syzkaller0 entered promiscuous mode [ 252.547107][ T7966] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.924'. [ 252.561113][ T7958] netlink: 'syz.1.921': attribute type 3 has an invalid length. [ 252.570778][ T7958] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.921'. [ 252.662490][ T7969] netlink: 14 bytes leftover after parsing attributes in process `syz.3.924'. [ 252.680424][ T7969] openvswitch: netlink: Flow key attr not present in new flow. [ 254.477777][ T7976] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 254.487460][ T7979] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 254.487485][ T7976] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 254.505279][ T7976] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.515574][ T7979] device veth0_macvtap left promiscuous mode [ 254.600568][ T7986] device aaaaaaaaaaaaaaa entered promiscuous mode [ 254.615893][ T7992] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.932'. [ 254.908815][ T8009] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.937'. [ 255.442603][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.449001][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.532174][ T8037] device syzkaller0 entered promiscuous mode [ 255.745977][ T8048] netlink: 'syz.4.947': attribute type 2 has an invalid length. [ 255.829489][ T8048] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.947'. [ 255.987065][ T8053] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.949'. [ 258.090700][ T8044] netlink: 'syz.1.945': attribute type 27 has an invalid length. [ 258.098452][ T8044] netlink: 'syz.1.945': attribute type 4 has an invalid length. [ 258.106245][ T8044] netlink: 120 bytes leftover after parsing attributes in process `syz.1.945'. [ 258.115707][ T8044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.853433][ T8091] netlink: 'syz.1.958': attribute type 2 has an invalid length. [ 258.861718][ T8091] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 258.869358][ T8091] netlink: 'syz.1.958': attribute type 8 has an invalid length. [ 258.890419][ T8091] netlink: 44 bytes leftover after parsing attributes in process `syz.1.958'. [ 259.065205][ T8100] netlink: 10 bytes leftover after parsing attributes in process `syz.4.961'. [ 259.265115][ T8101] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.959'. [ 259.290871][ T8101] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.959'. [ 259.407957][ T8106] device syzkaller0 entered promiscuous mode [ 259.488661][ T8117] netlink: 'syz.3.967': attribute type 21 has an invalid length. [ 259.509311][ T8117] netlink: 164 bytes leftover after parsing attributes in process `syz.3.967'. [ 261.205643][ T8124] netlink: 'syz.0.969': attribute type 12 has an invalid length. [ 261.250477][ T8124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.969'. [ 261.342939][ T8145] netlink: 'syz.1.974': attribute type 21 has an invalid length. [ 261.375515][ T8145] netlink: 164 bytes leftover after parsing attributes in process `syz.1.974'. [ 262.207464][ T8163] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.980'. [ 262.245604][ T8163] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 262.320717][ T8163] CPU: 0 PID: 8163 Comm: syz.4.980 Not tainted syzkaller #0 [ 262.328078][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.338181][ T8163] Call Trace: [ 262.341483][ T8163] [ 262.344416][ T8163] dump_stack_lvl+0x188/0x24e [ 262.349113][ T8163] ? show_regs_print_info+0x12/0x12 [ 262.354347][ T8163] ? load_image+0x410/0x410 [ 262.358929][ T8163] sysfs_warn_dup+0x8a/0xa0 [ 262.363469][ T8163] sysfs_do_create_link_sd+0xc0/0x110 [ 262.368872][ T8163] device_add+0x83b/0x1050 [ 262.373312][ T8163] wiphy_register+0x1d8b/0x2aa0 [ 262.378220][ T8163] ? cfg80211_event_work+0x40/0x40 [ 262.383393][ T8163] ? minstrel_ht_alloc+0x894/0xa20 [ 262.388598][ T8163] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 262.394737][ T8163] ieee80211_register_hw+0x2d48/0x39f0 [ 262.400303][ T8163] ? ieee80211_register_hw+0xee1/0x39f0 [ 262.405906][ T8163] ? ieee80211_register_hw+0xee1/0x39f0 [ 262.411538][ T8163] ? ieee80211_tasklet_handler+0x20/0x20 [ 262.417215][ T8163] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 262.423174][ T8163] ? __debug_object_init+0xed/0x440 [ 262.428449][ T8163] ? memset+0x1e/0x40 [ 262.432485][ T8163] ? __hrtimer_init+0x189/0x270 [ 262.437404][ T8163] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 262.443217][ T8163] ? memcpy+0x3c/0x60 [ 262.447277][ T8163] hwsim_new_radio_nl+0xab7/0xc90 [ 262.452403][ T8163] genl_family_rcv_msg_doit+0x22f/0x350 [ 262.457977][ T8163] ? end_current_label_crit_section+0x170/0x170 [ 262.464263][ T8163] ? trace_call_bpf+0xbf/0x6b0 [ 262.469084][ T8163] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 262.475069][ T8163] ? bpf_lsm_capable+0x5/0x10 [ 262.479790][ T8163] ? security_capable+0x85/0xb0 [ 262.484727][ T8163] genl_rcv_msg+0x601/0x790 [ 262.489318][ T8163] ? genl_bind+0x360/0x360 [ 262.493773][ T8163] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 262.500220][ T8163] netlink_rcv_skb+0x1ef/0x440 [ 262.505043][ T8163] ? genl_bind+0x360/0x360 [ 262.509523][ T8163] ? netlink_ack+0x1160/0x1160 [ 262.514394][ T8163] ? down_read+0x1a8/0x2d0 [ 262.518869][ T8163] genl_rcv+0x24/0x40 [ 262.522909][ T8163] netlink_unicast+0x7ad/0x920 [ 262.527782][ T8163] netlink_sendmsg+0x8ad/0xbd0 [ 262.532658][ T8163] ? netlink_getsockopt+0x550/0x550 [ 262.537921][ T8163] ? apparmor_socket_sendmsg+0x8a/0x330 [ 262.543534][ T8163] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 262.548859][ T8163] ? security_socket_sendmsg+0x7c/0xa0 [ 262.554363][ T8163] ? netlink_getsockopt+0x550/0x550 [ 262.559629][ T8163] ____sys_sendmsg+0x5ed/0x9a0 [ 262.564445][ T8163] ? __sys_sendmsg_sock+0x30/0x30 [ 262.569513][ T8163] ? __import_iovec+0x306/0x510 [ 262.574467][ T8163] ? import_iovec+0x6f/0xa0 [ 262.579045][ T8163] ___sys_sendmsg+0x2a2/0x360 [ 262.583802][ T8163] ? __sys_sendmsg+0x2a0/0x2a0 [ 262.588838][ T8163] __se_sys_sendmsg+0x1c3/0x2b0 [ 262.593736][ T8163] ? ct_nmi_exit+0x145/0x1c0 [ 262.598381][ T8163] ? __x64_sys_sendmsg+0x80/0x80 [ 262.603450][ T8163] ? lockdep_hardirqs_on+0x94/0x140 [ 262.608737][ T8163] do_syscall_64+0x4c/0xa0 [ 262.613198][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 262.617920][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 262.622654][ T8163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.628587][ T8163] RIP: 0033:0x7f9598f9e019 [ 262.633046][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.652697][ T8163] RSP: 002b:00007f9599f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.661171][ T8163] RAX: ffffffffffffffda RBX: 00007f9599225fa0 RCX: 00007f9598f9e019 [ 262.669182][ T8163] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 262.677189][ T8163] RBP: 00007f959903500c R08: 0000000000000000 R09: 0000000000000000 [ 262.685202][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.693212][ T8163] R13: 00007f9599226038 R14: 00007f9599225fa0 R15: 00007fffc6b74008 [ 262.701285][ T8163] [ 262.764776][ T8168] netlink: 'syz.3.981': attribute type 2 has an invalid length. [ 262.779594][ T8176] netlink: 'syz.1.983': attribute type 9 has an invalid length. [ 262.789405][ T8168] netlink: 164 bytes leftover after parsing attributes in process `syz.3.981'. [ 262.806403][ T8176] netlink: 668 bytes leftover after parsing attributes in process `syz.1.983'. [ 262.819330][ T8172] netlink: 'syz.3.981': attribute type 2 has an invalid length. [ 262.829204][ T8172] netlink: 164 bytes leftover after parsing attributes in process `syz.3.981'. [ 262.849421][ T8177] device syzkaller0 entered promiscuous mode [ 262.859070][ T8177] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 263.118243][ T8176] device syzkaller0 entered promiscuous mode [ 263.131472][ T8192] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 263.163811][ T8192] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.985'. [ 263.201923][ T8193] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.985'. [ 263.234345][ T8193] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 264.552680][ T8198] netlink: 'syz.3.988': attribute type 22 has an invalid length. [ 264.570414][ T8198] netlink: 14526 bytes leftover after parsing attributes in process `syz.3.988'. [ 264.834278][ T8227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.996'. [ 264.923509][ T8227] device syzkaller0 entered promiscuous mode [ 266.848674][ T8253] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 266.865983][ T8253] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 266.875700][ T8253] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 266.912430][ T8268] netlink: 'syz.2.1007': attribute type 12 has an invalid length. [ 266.923615][ T8268] __nla_validate_parse: 3 callbacks suppressed [ 266.923627][ T8268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1007'. [ 267.432116][ T8295] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1011'. [ 267.488183][ T8295] netlink: zone id is out of range [ 267.571396][ T8295] netlink: zone id is out of range [ 267.599242][ T8303] netlink: 'syz.0.1011': attribute type 2 has an invalid length. [ 267.676775][ T8295] netlink: zone id is out of range [ 267.725901][ T8299] netlink: 'syz.4.1014': attribute type 3 has an invalid length. [ 267.735466][ T8299] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1014'. [ 267.930892][ T8302] device syzkaller0 entered promiscuous mode [ 267.940132][ T8308] netlink: 'syz.3.1015': attribute type 3 has an invalid length. [ 267.950080][ T8308] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1015'. [ 268.053037][ T8307] device batadv0 entered promiscuous mode [ 268.096470][ T8303] device 0 entered promiscuous mode [ 269.905132][ T8345] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.1028'. [ 269.950612][ T8345] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1028'. [ 270.162503][ T8360] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1030'. [ 270.232130][ T8356] netlink: 'syz.1.1032': attribute type 30 has an invalid length. [ 270.414770][ T8377] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1037'. [ 270.546011][ T8387] : port 1(ip6gretap0) entered blocking state [ 270.560972][ T8387] : port 1(ip6gretap0) entered disabled state [ 270.574797][ T8387] device ip6gretap0 entered promiscuous mode [ 271.067358][ T8412] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1046'. [ 271.289114][ T8425] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 271.319943][ T8425] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.1051'. [ 271.345377][ T8432] delete_channel: no stack [ 271.528547][ T8438] netlink: 'syz.1.1054': attribute type 16 has an invalid length. [ 271.569624][ T8438] netlink: 'syz.1.1054': attribute type 3 has an invalid length. [ 271.616243][ T8441] netlink: 'syz.1.1054': attribute type 3 has an invalid length. [ 272.180012][ T8450] __nla_validate_parse: 2 callbacks suppressed [ 272.180053][ T8450] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.1058'. [ 272.587206][ T8457] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 272.693991][ T8462] netlink: 'syz.0.1060': attribute type 13 has an invalid length. [ 272.721349][ T8462] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1060'. [ 272.752547][ T8462] erspan0: refused to change device tx_queue_len [ 272.778638][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 273.468317][ T8495] netlink: 'syz.0.1073': attribute type 10 has an invalid length. [ 273.918523][ T8521] netlink: 'syz.3.1079': attribute type 25 has an invalid length. [ 273.930220][ T8521] netlink: 'syz.3.1079': attribute type 29 has an invalid length. [ 273.976741][ T8521] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1079'. [ 274.252354][ T8520] device syzkaller0 entered promiscuous mode [ 274.303349][ T8526] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 275.250106][ T8557] netlink: 'syz.3.1091': attribute type 29 has an invalid length. [ 277.467120][ T8557] netlink: 'syz.3.1091': attribute type 29 has an invalid length. [ 277.490003][ T8561] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1091'. [ 277.596817][ T8569] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1094'. [ 277.654700][ T8569] ksmbd: Unknown IPC event: 10, ignore. [ 277.679013][ T8570] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1094'. [ 277.713184][ T8570] ksmbd: Unknown IPC event: 10, ignore. [ 277.741139][ T8581] netlink: 'syz.4.1096': attribute type 2 has an invalid length. [ 277.761048][ T8581] netlink: 'syz.4.1096': attribute type 8 has an invalid length. [ 277.768927][ T8581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1096'. [ 277.877685][ T8590] netlink: 16251 bytes leftover after parsing attributes in process `syz.0.1100'. [ 278.059250][ T8602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.582644][ T8618] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.589361][ T8618] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.622377][ T8618] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1108'. [ 278.645326][ T8618] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1108'. [ 279.738888][ T8639] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 282.552324][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.590085][ T8639] device bridge_slave_1 left promiscuous mode [ 282.606787][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.625171][ T8639] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 282.638822][ T8648] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 282.651962][ T8648] syzkaller1: linktype set to 0 [ 282.834354][ T8668] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 282.870369][ T8668] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1123'. [ 282.973135][ T8674] netlink: 'syz.0.1125': attribute type 28 has an invalid length. [ 283.038579][ T8675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 283.096512][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 283.219339][ T8675] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1123'. [ 284.542672][ T8714] device pim6reg1 entered promiscuous mode [ 284.728341][ T8728] netlink: 'syz.4.1141': attribute type 10 has an invalid length. [ 284.771452][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1141'. [ 284.838825][ T8728] device dummy0 entered promiscuous mode [ 284.876746][ T8728] bridge0: port 2(dummy0) entered blocking state [ 284.911224][ T8728] bridge0: port 2(dummy0) entered disabled state [ 284.953050][ T8728] bridge0: port 2(dummy0) entered blocking state [ 284.959804][ T8728] bridge0: port 2(dummy0) entered forwarding state [ 285.002538][ T8757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.029342][ T8757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.049572][ T8757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.058077][ T8757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.092071][ T8752] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 285.851098][ T8793] netlink: 'syz.1.1160': attribute type 16 has an invalid length. [ 285.858972][ T8793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1160'. [ 286.274389][ T8803] netlink: 'syz.1.1163': attribute type 21 has an invalid length. [ 286.339942][ T8803] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.399838][ T8803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.407141][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 286.414448][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 286.421718][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 286.580068][ T8805] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1163'. [ 286.662259][ T8805] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 286.718595][ T8819] raw_sendmsg: syz.0.1166 forgot to set AF_INET. Fix it! [ 286.764479][ T8819] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1166'. [ 286.774548][ T8820] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1167'. [ 286.802696][ T8818] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1167'. [ 286.984771][ T8827] netlink: 'syz.4.1169': attribute type 21 has an invalid length. [ 286.987692][ T8826] netlink: 'syz.1.1170': attribute type 29 has an invalid length. [ 287.011265][ T8826] netlink: 'syz.1.1170': attribute type 29 has an invalid length. [ 287.034667][ T8827] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 287.080795][ T8827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.146098][ T8831] netlink: 'syz.1.1170': attribute type 29 has an invalid length. [ 287.156545][ T8833] netlink: 'syz.1.1170': attribute type 28 has an invalid length. [ 289.208377][ T8872] netlink: 'syz.2.1181': attribute type 7 has an invalid length. [ 289.221087][ T8874] __nla_validate_parse: 3 callbacks suppressed [ 289.221100][ T8874] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1181'. [ 289.244489][ T8881] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1183'. [ 289.246807][ T8884] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 289.291005][ T8884] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.1183'. [ 289.455543][ T8895] netlink: 'syz.2.1186': attribute type 9 has an invalid length. [ 289.493046][ T8895] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1186'. [ 290.330711][ T8913] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 290.338923][ T8913] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1190'. [ 290.372788][ T8913] device hsr0 entered promiscuous mode [ 290.403674][ T8913] bridge0: port 4(hsr0) entered blocking state [ 290.431022][ T8913] bridge0: port 4(hsr0) entered disabled state [ 290.462803][ T8913] bridge0: port 4(hsr0) entered blocking state [ 290.469252][ T8913] bridge0: port 4(hsr0) entered forwarding state [ 290.634584][ T8929] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1194'. [ 290.673743][ T8929] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 290.697418][ T8929] CPU: 0 PID: 8929 Comm: syz.3.1194 Not tainted syzkaller #0 [ 290.704827][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.714882][ T8929] Call Trace: [ 290.718161][ T8929] [ 290.721091][ T8929] dump_stack_lvl+0x188/0x24e [ 290.725798][ T8929] ? show_regs_print_info+0x12/0x12 [ 290.731007][ T8929] ? load_image+0x410/0x410 [ 290.735527][ T8929] sysfs_warn_dup+0x8a/0xa0 [ 290.740043][ T8929] sysfs_do_create_link_sd+0xc0/0x110 [ 290.745424][ T8929] device_add+0x83b/0x1050 [ 290.749841][ T8929] wiphy_register+0x1d8b/0x2aa0 [ 290.754704][ T8929] ? cfg80211_event_work+0x40/0x40 [ 290.759813][ T8929] ? minstrel_ht_alloc+0x894/0xa20 [ 290.764922][ T8929] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 290.770983][ T8929] ieee80211_register_hw+0x2d48/0x39f0 [ 290.776446][ T8929] ? ieee80211_register_hw+0xee1/0x39f0 [ 290.781986][ T8929] ? ieee80211_register_hw+0xee1/0x39f0 [ 290.787528][ T8929] ? ieee80211_tasklet_handler+0x20/0x20 [ 290.793151][ T8929] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 290.799036][ T8929] ? __debug_object_init+0xed/0x440 [ 290.804243][ T8929] ? memset+0x1e/0x40 [ 290.808219][ T8929] ? __hrtimer_init+0x189/0x270 [ 290.813070][ T8929] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 290.818790][ T8929] ? memcpy+0x3c/0x60 [ 290.822761][ T8929] hwsim_new_radio_nl+0xab7/0xc90 [ 290.827810][ T8929] genl_family_rcv_msg_doit+0x22f/0x350 [ 290.833348][ T8929] ? end_current_label_crit_section+0x170/0x170 [ 290.839585][ T8929] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 290.845731][ T8929] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 290.851636][ T8929] ? bpf_lsm_capable+0x5/0x10 [ 290.856305][ T8929] ? security_capable+0x85/0xb0 [ 290.861153][ T8929] genl_rcv_msg+0x601/0x790 [ 290.865651][ T8929] ? genl_bind+0x360/0x360 [ 290.870077][ T8929] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 290.876414][ T8929] netlink_rcv_skb+0x1ef/0x440 [ 290.881171][ T8929] ? genl_bind+0x360/0x360 [ 290.885578][ T8929] ? netlink_ack+0x1160/0x1160 [ 290.890345][ T8929] ? down_read+0x1a8/0x2d0 [ 290.894751][ T8929] genl_rcv+0x24/0x40 [ 290.898723][ T8929] netlink_unicast+0x7ad/0x920 [ 290.903490][ T8929] netlink_sendmsg+0x8ad/0xbd0 [ 290.908255][ T8929] ? netlink_getsockopt+0x550/0x550 [ 290.913447][ T8929] ? apparmor_socket_sendmsg+0x8a/0x330 [ 290.918988][ T8929] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 290.924259][ T8929] ? security_socket_sendmsg+0x7c/0xa0 [ 290.929708][ T8929] ? netlink_getsockopt+0x550/0x550 [ 290.934907][ T8929] ____sys_sendmsg+0x5ed/0x9a0 [ 290.939671][ T8929] ? __sys_sendmsg_sock+0x30/0x30 [ 290.944689][ T8929] ? __import_iovec+0x306/0x510 [ 290.949538][ T8929] ? import_iovec+0x6f/0xa0 [ 290.954049][ T8929] ___sys_sendmsg+0x2a2/0x360 [ 290.958725][ T8929] ? __sys_sendmsg+0x2a0/0x2a0 [ 290.963514][ T8929] __se_sys_sendmsg+0x1c3/0x2b0 [ 290.968357][ T8929] ? ct_nmi_exit+0x145/0x1c0 [ 290.972939][ T8929] ? __x64_sys_sendmsg+0x80/0x80 [ 290.977883][ T8929] ? lockdep_hardirqs_on+0x94/0x140 [ 290.983070][ T8929] do_syscall_64+0x4c/0xa0 [ 290.987479][ T8929] ? clear_bhb_loop+0x60/0xb0 [ 290.992148][ T8929] ? clear_bhb_loop+0x60/0xb0 [ 290.996816][ T8929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.002699][ T8929] RIP: 0033:0x7f10f939e019 [ 291.007104][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.026697][ T8929] RSP: 002b:00007f10fa1a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.035097][ T8929] RAX: ffffffffffffffda RBX: 00007f10f9625fa0 RCX: 00007f10f939e019 [ 291.043056][ T8929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 291.051016][ T8929] RBP: 00007f10f943500c R08: 0000000000000000 R09: 0000000000000000 [ 291.059006][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.066963][ T8929] R13: 00007f10f9626038 R14: 00007f10f9625fa0 R15: 00007ffe58944f48 [ 291.074937][ T8929] [ 291.223616][ T8945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 291.239276][ T8944] syz.0.1198[8944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.239681][ T8944] syz.0.1198[8944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.311750][ T8945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.887462][ T8941] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1196'. [ 293.482780][ T9023] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 293.665511][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.697148][ T9023] device bridge_slave_1 left promiscuous mode [ 293.710027][ T9023] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.731779][ T9023] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 294.232644][ T9037] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1219'. [ 294.288997][ T9046] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1222'. [ 294.301001][ T9038] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1219'. [ 294.316876][ T9049] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1223'. [ 294.380088][ T4277] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 294.788290][ T9066] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1227'. [ 294.925684][ T9069] device pim6reg1 entered promiscuous mode [ 296.955296][ T9140] netlink: 'syz.1.1249': attribute type 4 has an invalid length. [ 296.991670][ T9140] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1249'. [ 298.886404][ T9124] netlink: 'syz.3.1244': attribute type 41 has an invalid length. [ 298.910412][ T9144] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1250'. [ 299.112973][ T9151] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1254'. [ 299.170351][ T9151] ksmbd: Unknown IPC event: 10, ignore. [ 299.766872][ T9178] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 299.777906][ T9178] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1261'. [ 300.510096][ T9210] netlink: 'syz.1.1271': attribute type 11 has an invalid length. [ 300.902138][ T9228] device syzkaller0 entered promiscuous mode [ 300.908466][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 301.659562][ T9252] syzkaller0: create flow: hash 3472490666 index 0 [ 302.029933][ T9251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.054886][ T14] syzkaller0: tun_net_xmit 76 [ 302.059828][ T14] syzkaller0: tun_net_xmit 48 [ 302.087509][ T4277] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 302.100739][ T7] syzkaller0: tun_net_xmit 76 [ 304.180375][ T9242] syzkaller0 (unregistered): delete flow: hash 3472490666 index 0 [ 304.482834][ T9297] netlink: 'syz.3.1293': attribute type 2 has an invalid length. [ 304.655613][ T9304] netlink: 'syz.2.1295': attribute type 3 has an invalid length. [ 304.673365][ T9304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1295'. [ 305.377160][ T9329] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1303'. [ 305.841875][ T9336] device sit0 entered promiscuous mode [ 306.079714][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1309'. [ 306.263204][ T9354] netlink: 'syz.4.1311': attribute type 21 has an invalid length. [ 306.551202][ T9368] netlink: 'syz.4.1315': attribute type 10 has an invalid length. [ 306.565179][ T9368] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1315'. [ 307.019834][ T9381] netlink: 'syz.4.1319': attribute type 3 has an invalid length. [ 307.081913][ T9381] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1319'. [ 307.228538][ T9390] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1320'. [ 308.027451][ T9390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.065345][ T9390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.084803][ T9390] bond0 (unregistering): (slave team0): Releasing backup interface [ 308.103067][ T9390] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 308.131782][ T9390] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 308.147301][ T9390] bond0 (unregistering): Released all slaves [ 308.172341][ T9392] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1322'. [ 309.860020][ T9463] device sit0 entered promiscuous mode [ 310.012726][ T9475] sctp: [Deprecated]: syz.4.1350 (pid 9475) Use of int in maxseg socket option. [ 310.012726][ T9475] Use struct sctp_assoc_value instead [ 310.185626][ T9475] team0: Port device team_slave_0 removed [ 310.206305][ T9481] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 310.224266][ T9474] delete_channel: no stack [ 311.802339][ T9536] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1364'. [ 312.143971][ T9554] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1370'. [ 312.554595][ T9558] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 312.561849][ T9558] syzkaller1: linktype set to 0 [ 312.573409][ T9552] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.783614][ T9567] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1375'. [ 312.962031][ T9569] netlink: 'syz.4.1375': attribute type 21 has an invalid length. [ 312.969909][ T9569] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1375'. [ 312.985370][ T9571] netlink: 'syz.3.1376': attribute type 29 has an invalid length. [ 313.017916][ T9571] netlink: 'syz.3.1376': attribute type 29 has an invalid length. [ 313.064213][ T9571] netlink: 'syz.3.1376': attribute type 29 has an invalid length. [ 313.064409][ T9573] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1379'. [ 313.161967][ T9573] netlink: zone id is out of range [ 313.186460][ T9573] netlink: zone id is out of range [ 313.202415][ T9573] netlink: zone id is out of range [ 313.212271][ T9573] netlink: zone id is out of range [ 313.224883][ T9573] netlink: zone id is out of range [ 313.236737][ T9573] netlink: zone id is out of range [ 313.257214][ T9584] tun0: tun_chr_ioctl cmd 1074812118 [ 313.292949][ T9582] netlink: 'syz.4.1381': attribute type 153 has an invalid length. [ 313.310908][ T9582] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.1381'. [ 313.351690][ T9582] netlink: 'syz.4.1381': attribute type 10 has an invalid length. [ 313.461893][ T9595] netlink: 'syz.2.1383': attribute type 21 has an invalid length. [ 313.478142][ T9595] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.1383'. [ 313.498705][ T9598] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1385'. [ 313.513726][ T9598] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 314.352293][ T9624] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1391'. [ 314.642500][ T4434] wlan1: Trigger new scan to find an IBSS to join [ 315.243848][ T9642] __sock_release: fasync list not empty! [ 315.334034][ T9654] netlink: 'syz.0.1398': attribute type 2 has an invalid length. [ 316.900801][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.907539][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.997508][ T9679] netlink: 'syz.2.1407': attribute type 39 has an invalid length. [ 317.314587][ T9689] can: request_module (can-proto-0) failed. [ 317.603588][ T9701] netlink: 'syz.0.1414': attribute type 3 has an invalid length. [ 317.615573][ T9701] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1414'. [ 318.641365][ T40] wlan1: Trigger new scan to find an IBSS to join [ 318.995755][ T9699] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 319.658629][ T4434] wlan1: Creating new IBSS network, BSSID e2:96:45:85:cd:a3 [ 319.667720][ T9746] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1426'. [ 319.875047][ T9746] team0: Port device team_slave_0 removed [ 319.902532][ T9746] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 321.557970][ T9813] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1442'. [ 321.653421][ T9798] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 321.895802][ T9826] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1446'. [ 321.976700][ T9826] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1446'. [ 322.075668][ T9829] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1447'. [ 322.145265][ T9829] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 322.184045][ T9829] CPU: 0 PID: 9829 Comm: syz.1.1447 Not tainted syzkaller #0 [ 322.191472][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.201548][ T9829] Call Trace: [ 322.204835][ T9829] [ 322.207774][ T9829] dump_stack_lvl+0x188/0x24e [ 322.212493][ T9829] ? show_regs_print_info+0x12/0x12 [ 322.217719][ T9829] ? load_image+0x410/0x410 [ 322.222253][ T9829] sysfs_warn_dup+0x8a/0xa0 [ 322.226770][ T9829] sysfs_do_create_link_sd+0xc0/0x110 [ 322.232165][ T9829] device_add+0x83b/0x1050 [ 322.236624][ T9829] wiphy_register+0x1d8b/0x2aa0 [ 322.241516][ T9829] ? cfg80211_event_work+0x40/0x40 [ 322.246656][ T9829] ? minstrel_ht_alloc+0x894/0xa20 [ 322.251801][ T9829] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 322.257899][ T9829] ieee80211_register_hw+0x2d48/0x39f0 [ 322.263408][ T9829] ? ieee80211_register_hw+0xee1/0x39f0 [ 322.268984][ T9829] ? ieee80211_register_hw+0xee1/0x39f0 [ 322.274569][ T9829] ? ieee80211_tasklet_handler+0x20/0x20 [ 322.280228][ T9829] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 322.286147][ T9829] ? __debug_object_init+0xed/0x440 [ 322.291376][ T9829] ? memset+0x1e/0x40 [ 322.295376][ T9829] ? __hrtimer_init+0x189/0x270 [ 322.300241][ T9829] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 322.305991][ T9829] ? memcpy+0x3c/0x60 [ 322.309993][ T9829] hwsim_new_radio_nl+0xab7/0xc90 [ 322.315061][ T9829] genl_family_rcv_msg_doit+0x22f/0x350 [ 322.320625][ T9829] ? end_current_label_crit_section+0x170/0x170 [ 322.326892][ T9829] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 322.332806][ T9829] ? bpf_lsm_capable+0x5/0x10 [ 322.337504][ T9829] ? security_capable+0x85/0xb0 [ 322.342384][ T9829] genl_rcv_msg+0x601/0x790 [ 322.346913][ T9829] ? genl_bind+0x360/0x360 [ 322.351341][ T9829] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 322.357708][ T9829] netlink_rcv_skb+0x1ef/0x440 [ 322.362499][ T9829] ? genl_bind+0x360/0x360 [ 322.366931][ T9829] ? netlink_ack+0x1160/0x1160 [ 322.371728][ T9829] ? down_read+0x1a8/0x2d0 [ 322.376160][ T9829] genl_rcv+0x24/0x40 [ 322.380153][ T9829] netlink_unicast+0x7ad/0x920 [ 322.384948][ T9829] netlink_sendmsg+0x8ad/0xbd0 [ 322.389745][ T9829] ? netlink_getsockopt+0x550/0x550 [ 322.394969][ T9829] ? apparmor_socket_sendmsg+0x8a/0x330 [ 322.400549][ T9829] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.405844][ T9829] ? security_socket_sendmsg+0x7c/0xa0 [ 322.411323][ T9829] ? netlink_getsockopt+0x550/0x550 [ 322.416546][ T9829] ____sys_sendmsg+0x5ed/0x9a0 [ 322.421340][ T9829] ? __sys_sendmsg_sock+0x30/0x30 [ 322.426377][ T9829] ? __import_iovec+0x306/0x510 [ 322.431255][ T9829] ? import_iovec+0x6f/0xa0 [ 322.435778][ T9829] ___sys_sendmsg+0x2a2/0x360 [ 322.440480][ T9829] ? __sys_sendmsg+0x2a0/0x2a0 [ 322.445279][ T9829] ? bpf_prog_free_id+0x1d0/0x1d0 [ 322.450342][ T9829] __se_sys_sendmsg+0x1c3/0x2b0 [ 322.455214][ T9829] ? __x64_sys_sendmsg+0x80/0x80 [ 322.460186][ T9829] ? lockdep_hardirqs_on+0x94/0x140 [ 322.465409][ T9829] do_syscall_64+0x4c/0xa0 [ 322.469842][ T9829] ? clear_bhb_loop+0x60/0xb0 [ 322.474538][ T9829] ? clear_bhb_loop+0x60/0xb0 [ 322.479232][ T9829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.485149][ T9829] RIP: 0033:0x7fb82cf9e019 [ 322.489581][ T9829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.509206][ T9829] RSP: 002b:00007fb82b1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.517641][ T9829] RAX: ffffffffffffffda RBX: 00007fb82d225fa0 RCX: 00007fb82cf9e019 [ 322.525628][ T9829] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 322.533619][ T9829] RBP: 00007fb82d03500c R08: 0000000000000000 R09: 0000000000000000 [ 322.541606][ T9829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.549593][ T9829] R13: 00007fb82d226038 R14: 00007fb82d225fa0 R15: 00007fff5ccdc0b8 [ 322.557599][ T9829] [ 322.931576][ T9844] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 322.937241][ T9844] dvmrp1: linktype set to 768 [ 323.869978][ T9877] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.1461'. [ 324.296192][ T9892] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 324.310434][ T9892] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1466'. [ 324.413774][ T9892] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.1466'. [ 324.419577][ T9895] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1467'. [ 324.439701][ T9892] netlink: zone id is out of range [ 324.453980][ T9892] netlink: zone id is out of range [ 324.459988][ T9892] netlink: zone id is out of range [ 324.468133][ T9892] netlink: zone id is out of range [ 324.475178][ T9892] netlink: zone id is out of range [ 324.484863][ T9892] netlink: zone id is out of range [ 324.493813][ T9892] netlink: zone id is out of range [ 324.508634][ T9892] netlink: zone id is out of range [ 324.515639][ T9892] netlink: zone id is out of range [ 324.638973][ T9895] netlink: 'syz.0.1467': attribute type 10 has an invalid length. [ 324.664562][ T9895] netlink: 'syz.0.1467': attribute type 25 has an invalid length. [ 325.059772][ T9906] delete_channel: no stack [ 325.558085][ T9929] netlink: 'syz.3.1479': attribute type 29 has an invalid length. [ 325.568698][ T9929] netlink: 'syz.3.1479': attribute type 29 has an invalid length. [ 325.602725][ T4431] wlan1: Trigger new scan to find an IBSS to join [ 325.630989][ T9930] netlink: 'syz.3.1479': attribute type 29 has an invalid length. [ 325.639386][ T9930] netlink: 'syz.3.1479': attribute type 29 has an invalid length. [ 325.648082][ T9930] netlink: 'syz.3.1479': attribute type 29 has an invalid length. [ 325.978605][ T9955] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1485'. [ 326.172899][ T9965] device syzkaller0 entered promiscuous mode [ 326.182714][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 326.489619][ T9973] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 326.510609][ T9973] netlink: 'syz.4.1489': attribute type 4 has an invalid length. [ 326.518379][ T9973] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1489'. [ 327.661832][ T9999] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1495'. [ 327.973732][T10010] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1499'. [ 327.988887][T10001] device syzkaller0 entered promiscuous mode [ 328.560828][ T4447] wlan1: Trigger new scan to find an IBSS to join [ 329.463131][ T4611] wlan1: Creating new IBSS network, BSSID 36:b7:42:f3:72:5e [ 331.165998][T10065] validate_nla: 1 callbacks suppressed [ 331.166016][T10065] netlink: 'syz.1.1515': attribute type 3 has an invalid length. [ 331.191599][T10065] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1515'. [ 331.427678][T10075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.435069][T10075] IPv6: NLM_F_CREATE should be set when creating new route [ 331.442517][T10075] IPv6: NLM_F_CREATE should be set when creating new route [ 331.449844][T10075] IPv6: NLM_F_CREATE should be set when creating new route [ 331.550645][T10083] netlink: 'syz.1.1520': attribute type 29 has an invalid length. [ 331.562182][T10083] netlink: 'syz.1.1520': attribute type 29 has an invalid length. [ 331.575562][T10083] netlink: 'syz.1.1520': attribute type 29 has an invalid length. [ 332.450463][T10100] netlink: 'syz.3.1524': attribute type 9 has an invalid length. [ 332.458246][T10100] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1524'. [ 332.638923][T10105] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1526'. [ 333.073941][T10138] netlink: 'syz.2.1536': attribute type 7 has an invalid length. [ 333.345122][T10157] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 333.369343][T10153] netlink: 'syz.4.1541': attribute type 21 has an invalid length. [ 333.382914][T10157] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 333.391967][T10153] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1541'. [ 333.405291][T10157] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1540'. [ 333.417433][T10153] netlink: 'syz.4.1541': attribute type 4 has an invalid length. [ 333.439981][T10162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1543'. [ 333.467806][T10162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1543'. [ 333.925817][T10176] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1548'. [ 335.239963][T10215] device wlan1 left promiscuous mode [ 335.295282][T10215] device wlan1 entered promiscuous mode [ 335.312957][T10215] team0: Port device wlan1 added [ 335.563608][T10222] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1560'. [ 337.223146][T10274] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1574'. [ 337.269881][T10281] validate_nla: 12 callbacks suppressed [ 337.269898][T10281] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 337.328546][T10281] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1574'. [ 337.329330][T10274] netlink: 'syz.4.1574': attribute type 29 has an invalid length. [ 337.389966][T10281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1574'. [ 337.445849][T10274] netlink: 'syz.4.1574': attribute type 29 has an invalid length. [ 337.527087][T10297] netlink: 'syz.0.1581': attribute type 3 has an invalid length. [ 337.540085][T10297] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1581'. [ 337.553526][T10297] netlink: 'syz.0.1581': attribute type 15 has an invalid length. [ 337.564126][T10297] netlink: 'syz.0.1581': attribute type 16 has an invalid length. [ 337.573578][T10297] netlink: 'syz.0.1581': attribute type 4 has an invalid length. [ 337.589417][T10297] netlink: 'syz.0.1581': attribute type 6 has an invalid length. [ 337.636646][T10297] netlink: 'syz.0.1581': attribute type 15 has an invalid length. [ 337.656689][T10297] netlink: 'syz.0.1581': attribute type 16 has an invalid length. [ 337.665435][T10297] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.1581'. [ 338.773354][T10321] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1589'. [ 339.982463][T10346] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.1595'. [ 339.992049][T10346] net_ratelimit: 3544 callbacks suppressed [ 339.992062][T10346] netlink: zone id is out of range [ 340.788720][T10343] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.841863][T10376] delete_channel: no stack [ 341.649079][T10424] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.1618'. [ 342.031805][T10447] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1622'. [ 342.093283][T10447] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1622'. [ 342.369043][T10465] validate_nla: 24 callbacks suppressed [ 342.388255][T10465] netlink: 'syz.2.1627': attribute type 3 has an invalid length. [ 342.463568][T10465] __nla_validate_parse: 1 callbacks suppressed [ 342.463601][T10465] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1627'. [ 343.600529][ T4413] wlan1: Trigger new scan to find an IBSS to join [ 345.176854][T10481] netlink: 'syz.0.1630': attribute type 6 has an invalid length. [ 345.233028][T10481] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1630'. [ 345.470156][T10486] device syzkaller0 entered promiscuous mode [ 345.668271][T10499] netlink: 'syz.0.1635': attribute type 27 has an invalid length. [ 345.681381][T10499] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1635'. [ 345.784531][T10499] netlink: 'syz.0.1635': attribute type 2 has an invalid length. [ 345.793230][T10499] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1635'. [ 347.602691][ T46] wlan1: Trigger new scan to find an IBSS to join [ 348.511379][T10037] wlan1: Creating new IBSS network, BSSID 32:cd:c3:c8:4c:0a [ 348.722438][T10560] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1649'. [ 349.341885][T10581] netlink: 'syz.3.1656': attribute type 3 has an invalid length. [ 349.349660][T10581] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1656'. [ 349.689152][T10600] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 349.689561][ T4434] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 349.724162][T10600] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1664'. [ 349.739997][T10595] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 349.759814][T10595] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1660'. [ 350.136956][T10609] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 350.368048][T10609] device wg1 entered promiscuous mode [ 350.385649][T10609] team0: Device wg1 is of different type [ 352.733836][T10637] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1672'. [ 352.805146][T10645] netlink: 'syz.3.1676': attribute type 10 has an invalid length. [ 352.821192][T10645] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1676'. [ 352.827393][T10637] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1672'. [ 352.905838][T10637] netlink: zone id is out of range [ 352.924422][T10637] netlink: zone id is out of range [ 352.968301][T10637] netlink: zone id is out of range [ 353.010713][T10637] netlink: zone id is out of range [ 353.061450][T10637] netlink: zone id is out of range [ 353.077605][T10637] netlink: zone id is out of range [ 353.130717][T10637] netlink: zone id is out of range [ 353.159380][T10637] netlink: zone id is out of range [ 353.197726][T10637] netlink: zone id is out of range [ 353.208827][T10637] netlink: zone id is out of range [ 353.713849][T10659] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1678'. [ 353.833393][T10647] netlink: 'syz.0.1673': attribute type 2 has an invalid length. [ 353.842674][T10647] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1673'. [ 353.872953][T10655] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1677'. [ 353.885228][T10658] netlink: 'syz.1.1677': attribute type 21 has an invalid length. [ 354.220115][T10678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1683'. [ 354.753166][T10707] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 354.772422][T10709] netlink: 'syz.2.1690': attribute type 25 has an invalid length. [ 354.814757][T10709] netlink: 'syz.2.1690': attribute type 28 has an invalid length. [ 354.867860][T10707] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 354.915425][T10711] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 354.932898][T10707] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 354.995495][T10712] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 355.062342][T10707] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 355.092368][T10707] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 355.139438][T10707] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1691'. [ 355.333423][T10743] bond0: (slave wlan1): Error: Slave device does not support XDP [ 355.369298][T10743] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1699'. [ 355.531997][T10743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.585954][T10743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.627927][T10743] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 358.683281][T10743] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 358.703293][T10743] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 358.721762][T10743] bond0 (unregistering): Released all slaves [ 358.733956][T10756] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1704'. [ 358.765287][T10759] netlink: 'syz.0.1704': attribute type 21 has an invalid length. [ 358.778016][T10759] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1704'. [ 358.885468][T10777] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.1707'. [ 358.899990][T10778] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1708'. [ 358.926393][T10778] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 358.938345][T10778] CPU: 1 PID: 10778 Comm: syz.0.1708 Not tainted syzkaller #0 [ 358.945839][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.955922][T10778] Call Trace: [ 358.959214][T10778] [ 358.962166][T10778] dump_stack_lvl+0x188/0x24e [ 358.966949][T10778] ? show_regs_print_info+0x12/0x12 [ 358.972185][T10778] ? load_image+0x410/0x410 [ 358.976787][T10778] sysfs_warn_dup+0x8a/0xa0 [ 358.981341][T10778] sysfs_do_create_link_sd+0xc0/0x110 [ 358.986764][T10778] device_add+0x83b/0x1050 [ 358.991367][T10778] wiphy_register+0x1d8b/0x2aa0 [ 358.996385][T10778] ? cfg80211_event_work+0x40/0x40 [ 359.001534][T10778] ? minstrel_ht_alloc+0x894/0xa20 [ 359.006801][T10778] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 359.012969][T10778] ieee80211_register_hw+0x2d48/0x39f0 [ 359.018579][T10778] ? ieee80211_register_hw+0xee1/0x39f0 [ 359.024161][T10778] ? ieee80211_register_hw+0xee1/0x39f0 [ 359.029775][T10778] ? ieee80211_tasklet_handler+0x20/0x20 [ 359.035441][T10778] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 359.041447][T10778] ? __debug_object_init+0xed/0x440 [ 359.046775][T10778] ? memset+0x1e/0x40 [ 359.050847][T10778] ? __hrtimer_init+0x189/0x270 [ 359.055786][T10778] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 359.061661][T10778] ? memcpy+0x3c/0x60 [ 359.065700][T10778] hwsim_new_radio_nl+0xab7/0xc90 [ 359.070810][T10778] genl_family_rcv_msg_doit+0x22f/0x350 [ 359.076457][T10778] ? end_current_label_crit_section+0x170/0x170 [ 359.082811][T10778] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 359.088759][T10778] ? bpf_lsm_capable+0x5/0x10 [ 359.093550][T10778] ? security_capable+0x85/0xb0 [ 359.098505][T10778] genl_rcv_msg+0x601/0x790 [ 359.103073][T10778] ? genl_bind+0x360/0x360 [ 359.107528][T10778] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 359.113941][T10778] netlink_rcv_skb+0x1ef/0x440 [ 359.118818][T10778] ? genl_bind+0x360/0x360 [ 359.123273][T10778] ? netlink_ack+0x1160/0x1160 [ 359.128120][T10778] ? down_read+0x1a8/0x2d0 [ 359.132576][T10778] genl_rcv+0x24/0x40 [ 359.136581][T10778] netlink_unicast+0x7ad/0x920 [ 359.141415][T10778] netlink_sendmsg+0x8ad/0xbd0 [ 359.146243][T10778] ? netlink_getsockopt+0x550/0x550 [ 359.151487][T10778] ? apparmor_socket_sendmsg+0x8a/0x330 [ 359.157079][T10778] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 359.162399][T10778] ? security_socket_sendmsg+0x7c/0xa0 [ 359.167957][T10778] ? netlink_getsockopt+0x550/0x550 [ 359.173199][T10778] ____sys_sendmsg+0x5ed/0x9a0 [ 359.178116][T10778] ? __sys_sendmsg_sock+0x30/0x30 [ 359.183172][T10778] ? __import_iovec+0x306/0x510 [ 359.188151][T10778] ? import_iovec+0x6f/0xa0 [ 359.192699][T10778] ___sys_sendmsg+0x2a2/0x360 [ 359.197425][T10778] ? __sys_sendmsg+0x2a0/0x2a0 [ 359.202379][T10778] __se_sys_sendmsg+0x1c3/0x2b0 [ 359.207275][T10778] ? __x64_sys_sendmsg+0x80/0x80 [ 359.212295][T10778] ? lockdep_hardirqs_on+0x94/0x140 [ 359.217538][T10778] do_syscall_64+0x4c/0xa0 [ 359.221986][T10778] ? clear_bhb_loop+0x60/0xb0 [ 359.226779][T10778] ? clear_bhb_loop+0x60/0xb0 [ 359.231497][T10778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.237416][T10778] RIP: 0033:0x7faa2fb9e019 [ 359.241858][T10778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.261497][T10778] RSP: 002b:00007faa30a0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.269947][T10778] RAX: ffffffffffffffda RBX: 00007faa2fe25fa0 RCX: 00007faa2fb9e019 [ 359.277945][T10778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 359.285940][T10778] RBP: 00007faa2fc3500c R08: 0000000000000000 R09: 0000000000000000 [ 359.293936][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.301933][T10778] R13: 00007faa2fe26038 R14: 00007faa2fe25fa0 R15: 00007ffdf6753ac8 [ 359.309977][T10778] [ 359.523245][T10785] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1710'. [ 359.874086][T10807] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1716'. [ 360.850925][T10821] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 360.891441][T10821] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1721'. [ 361.397736][T10842] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1724'. [ 361.402508][T10821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.494940][T10821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.860135][T10821] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 361.974670][T10821] bond0 (unregistering): Released all slaves [ 362.126108][T10845] validate_nla: 4 callbacks suppressed [ 362.126123][T10845] netlink: 'syz.1.1726': attribute type 2 has an invalid length. [ 362.184670][T10845] netlink: 'syz.1.1726': attribute type 8 has an invalid length. [ 362.240850][T10845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1726'. [ 362.285244][T10844] netlink: 'syz.1.1726': attribute type 2 has an invalid length. [ 362.321177][T10844] netlink: 'syz.1.1726': attribute type 8 has an invalid length. [ 362.394488][T10844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1726'. [ 363.137548][T10881] netlink: 'syz.4.1737': attribute type 29 has an invalid length. [ 363.158093][T10881] netlink: 'syz.4.1737': attribute type 29 has an invalid length. [ 363.207578][T10882] netlink: 'syz.4.1737': attribute type 29 has an invalid length. [ 363.990696][T10886] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 364.062438][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.116638][T10886] device bridge_slave_1 left promiscuous mode [ 364.138269][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.227745][T10897] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 364.255750][T10900] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1741'. [ 364.746669][T10900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.783323][T10900] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 364.804516][T10900] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 364.829339][T10900] bond0 (unregistering): Released all slaves [ 364.869811][T10910] netlink: 'syz.3.1746': attribute type 10 has an invalid length. [ 366.352068][T10956] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1758'. [ 366.496259][T10956] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 366.544145][T10956] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1758'. [ 366.666520][T10962] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1759'. [ 366.867038][T10970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1762'. [ 367.037211][T10971] device 0 entered promiscuous mode [ 367.058841][T10970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1762'. [ 367.302488][T10984] tc_dump_action: action bad kind [ 367.317334][T10986] validate_nla: 1 callbacks suppressed [ 367.317347][T10986] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 367.357905][T10986] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.1770'. [ 367.654090][T10998] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.681254][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 368.771748][T11024] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1777'. [ 368.781773][T11027] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1779'. [ 368.792018][T11027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 368.814969][T11027] net_ratelimit: 36 callbacks suppressed [ 368.814987][T11027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.090058][T11045] netlink: 'syz.3.1783': attribute type 25 has an invalid length. [ 369.119546][T11045] netlink: 'syz.3.1783': attribute type 9 has an invalid length. [ 369.798743][T11067] __nla_validate_parse: 1 callbacks suppressed [ 369.798761][T11067] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1791'. [ 370.098929][T11076] netlink: 130181 bytes leftover after parsing attributes in process `syz.1.1794'. [ 370.164103][T11076] mac80211_hwsim hwsim6 ªªªªªª: renamed from wlan0 [ 370.683835][T11095] __sock_release: fasync list not empty! [ 370.819278][T11103] netlink: 'syz.0.1804': attribute type 9 has an invalid length. [ 370.829957][T11103] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1804'. [ 370.959709][T11111] netlink: 'syz.1.1806': attribute type 10 has an invalid length. [ 371.006843][T11111] team0: Port device netdevsim0 added [ 371.089555][T11083] delete_channel: no stack [ 371.694356][T11148] device syzkaller0 entered promiscuous mode [ 371.714059][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 371.727246][T11148] syzkaller0: mtu greater than device maximum [ 371.752213][T11152] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1819'. [ 374.545614][T11179] netlink: 'syz.0.1824': attribute type 11 has an invalid length. [ 374.594303][T11179] netlink: 184220 bytes leftover after parsing attributes in process `syz.0.1824'. [ 374.692604][T11179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.744845][T11193] netlink: 'syz.0.1829': attribute type 29 has an invalid length. [ 374.775819][T11193] netlink: 'syz.0.1829': attribute type 29 has an invalid length. [ 374.795313][T11196] netlink: 'syz.0.1829': attribute type 29 has an invalid length. [ 374.812728][T11193] netlink: 'syz.0.1829': attribute type 29 has an invalid length. [ 374.825276][T11193] netlink: 'syz.0.1829': attribute type 29 has an invalid length. [ 375.108214][T11207] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 376.203117][T11214] netlink: 'syz.1.1835': attribute type 10 has an invalid length. [ 376.822988][T11243] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1844'. [ 376.885860][T11243] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1844'. [ 376.912662][T11239] can: request_module (can-proto-0) failed. [ 377.085175][T11250] can: request_module (can-proto-4) failed. [ 377.159409][T11261] netlink: 'syz.2.1849': attribute type 10 has an invalid length. [ 378.039966][T11309] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1864'. [ 378.262129][T11318] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1867'. [ 378.332230][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.338665][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.464511][T11325] netlink: 'syz.4.1869': attribute type 10 has an invalid length. [ 378.577649][T11330] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1870'. [ 378.809093][T11344] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1873'. [ 378.844933][T11344] bridge_slave_1: default FDB implementation only supports local addresses [ 379.052116][T11356] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 379.065420][T11356] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1878'. [ 380.423109][T11386] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1888'. [ 380.615276][ T4434] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.029548][T11404] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1892'. [ 381.309861][T11412] validate_nla: 1 callbacks suppressed [ 381.309901][T11412] netlink: 'syz.4.1896': attribute type 10 has an invalid length. [ 381.350562][T11412] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1896'. [ 381.365165][T11412] device hsr0 entered promiscuous mode [ 381.392383][T11412] bridge0: port 3(hsr0) entered blocking state [ 381.406568][T11412] bridge0: port 3(hsr0) entered disabled state [ 381.562469][T11412] bridge0: port 3(hsr0) entered blocking state [ 381.568836][T11412] bridge0: port 3(hsr0) entered forwarding state [ 381.860912][T11427] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 382.017353][T11436] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 382.031496][T11436] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 382.050172][T11436] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 382.146670][T11443] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 382.225057][T11436] can: request_module (can-proto-0) failed. [ 382.434203][T11453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1907'. [ 382.538505][T11457] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 382.558791][T11457] device syz_tun entered promiscuous mode [ 383.032978][T11486] netlink: 'syz.4.1918': attribute type 21 has an invalid length. [ 383.052325][T11486] netlink: 'syz.4.1918': attribute type 1 has an invalid length. [ 383.062387][T11486] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1918'. [ 383.069800][T11489] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 383.087509][T11489] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.1919'. [ 383.088730][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1917'. [ 383.238197][T11496] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1920'. [ 385.684525][T11551] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.1937'. [ 385.705503][T11553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1935'. [ 385.873556][T11570] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1939'. [ 387.049360][T11608] validate_nla: 1 callbacks suppressed [ 387.049404][T11608] netlink: 'syz.4.1954': attribute type 2 has an invalid length. [ 387.070955][T11608] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 387.083876][T11608] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1954'. [ 390.050760][T11639] netlink: 'syz.0.1961': attribute type 29 has an invalid length. [ 390.075995][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 390.106182][T11641] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1962'. [ 390.117300][T11641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.134768][T11639] netlink: 'syz.0.1961': attribute type 29 has an invalid length. [ 390.148640][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 390.199456][T11647] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1965'. [ 390.351089][T11657] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.365984][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 392.567206][ T4611] wlan1: Trigger new scan to find an IBSS to join [ 393.176374][T11686] : port 1(ip6gretap0) entered blocking state [ 393.190661][T11686] : port 1(ip6gretap0) entered disabled state [ 393.277839][T11686] device ip6gretap0 entered promiscuous mode [ 395.094350][T11701] syzkaller0: create flow: hash 1020174612 index 2 [ 395.359893][ T4260] syzkaller0: tun_net_xmit 76 [ 395.371151][ T4260] syzkaller0: tun_net_xmit 48 [ 395.482166][ T41] syzkaller0: tun_net_xmit 76 [ 395.492409][T11700] syzkaller0: delete flow: hash 1020174612 index 2 [ 396.560910][ T4444] wlan1: Trigger new scan to find an IBSS to join [ 396.808274][T11721] netlink: 'syz.4.1980': attribute type 10 has an invalid length. [ 396.824612][T11721] netlink: 3819 bytes leftover after parsing attributes in process `syz.4.1980'. [ 397.069568][T11723] cgroup: fork rejected by pids controller in /syz4 [ 397.381629][T11731] netlink: 'syz.0.1982': attribute type 29 has an invalid length. [ 398.567444][T11731] netlink: 'syz.0.1982': attribute type 29 has an invalid length. [ 399.002319][T11740] netlink: 'syz.3.1986': attribute type 41 has an invalid length. [ 399.145664][T11744] netlink: 'syz.0.1984': attribute type 10 has an invalid length. [ 399.167661][T11745] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.1986'. [ 399.212330][T11744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1984'. [ 399.275881][T11745] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1986'. [ 399.600455][ T4323] wlan1: Trigger new scan to find an IBSS to join [ 399.620687][T11749] netlink: 'syz.1.1989': attribute type 21 has an invalid length. [ 399.656758][T11749] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1989'. [ 399.680598][T11749] netlink: 'syz.1.1989': attribute type 4 has an invalid length. [ 399.688764][ T4323] wlan1: Creating new IBSS network, BSSID 46:b9:eb:e3:9b:e1 [ 399.708149][T11749] netlink: 'syz.1.1989': attribute type 5 has an invalid length. [ 399.774538][T11749] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1989'. [ 399.847871][ T4609] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.996982][ T4609] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.142085][ T4609] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.283473][ T4609] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.342660][T11781] netlink: 'syz.0.1996': attribute type 3 has an invalid length. [ 400.370446][T11781] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1996'. [ 400.390783][T11783] device lo entered promiscuous mode [ 400.472983][T11788] netlink: 'syz.3.2000': attribute type 16 has an invalid length. [ 400.516295][T11788] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2000'. [ 400.574693][T11788] device macvlan0 left promiscuous mode [ 400.639711][T11788] team0: Port device macvlan0 added [ 400.649419][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.659131][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.667799][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.676379][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.685038][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 400.687813][T11787] delete_channel: no stack [ 400.697667][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.785053][T11795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2001'. [ 401.098874][T11811] device macvlan0 entered promiscuous mode [ 401.428791][T11817] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2006'. [ 401.787273][T11797] chnl_net:caif_netlink_parms(): no params data found [ 401.867889][T11844] __nla_validate_parse: 2 callbacks suppressed [ 401.867907][T11844] netlink: 58351 bytes leftover after parsing attributes in process `syz.1.2010'. [ 401.887812][T11845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2012'. [ 402.081607][T11853] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2013'. [ 402.724318][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 404.456677][T11797] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.490429][T11797] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.506714][T11797] device bridge_slave_0 entered promiscuous mode [ 404.544644][T11797] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.552017][T11797] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.560785][T11797] device bridge_slave_1 entered promiscuous mode [ 404.673870][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.701837][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.788031][T11797] team0: Port device team_slave_0 added [ 404.796997][T11797] team0: Port device team_slave_1 added [ 404.805045][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 404.904145][T11797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.911341][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.945335][T11797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.972542][ T4609] device veth0_to_team left promiscuous mode [ 404.980956][ T4609] Ÿë: port 1(veth0_to_team) entered disabled state [ 405.000164][ T4609] device hsr_slave_0 left promiscuous mode [ 405.008099][ T4609] device hsr_slave_1 left promiscuous mode [ 405.015300][ T4609] bridge0: port 3(hsr0) entered disabled state [ 405.024462][ T4609] bridge0: port 2(dummy0) entered disabled state [ 405.032566][ T4609] device bridge_slave_0 left promiscuous mode [ 405.038879][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.064039][ T4609] device veth1_vlan left promiscuous mode [ 405.515019][ T4609] team0 (unregistering): Port device team_slave_1 removed [ 405.829388][T11797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.838748][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.865239][T11797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.026887][T11797] device hsr_slave_0 entered promiscuous mode [ 406.047985][T11797] device hsr_slave_1 entered promiscuous mode [ 406.067019][T11797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.090393][T11797] Cannot create hsr debugfs directory [ 406.880396][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 407.056964][T11797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.102472][T11797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.137970][T11797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.163889][T11797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.370674][T11797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.409769][T11924] validate_nla: 4 callbacks suppressed [ 407.409784][T11924] netlink: 'syz.3.2026': attribute type 17 has an invalid length. [ 407.460997][T11924] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2026'. [ 407.484016][T10037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.503778][T10037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.559498][T11797] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.588462][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.612524][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.678280][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.685446][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.735046][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.756292][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.788367][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.799941][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.807090][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.822195][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.861082][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.909523][T11797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.920528][T11797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.953476][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.981230][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.995317][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 408.017490][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 408.033748][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 408.061413][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.070067][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 408.091168][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.106890][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 408.116504][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.699482][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.717039][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.751393][T11797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.963761][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 409.041212][T11998] netlink: 'syz.0.2041': attribute type 29 has an invalid length. [ 409.049210][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 409.111698][T11998] netlink: 'syz.0.2041': attribute type 29 has an invalid length. [ 409.127238][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 409.353184][T12009] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2043'. [ 409.484885][T12021] device syzkaller0 entered promiscuous mode [ 409.515804][T12021] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 409.543970][T12021] netlink: 'syz.0.2046': attribute type 2 has an invalid length. [ 409.678363][T12021] device 1 entered promiscuous mode [ 409.707826][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 409.719927][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.824105][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.835076][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.866675][T11797] device veth0_vlan entered promiscuous mode [ 409.879252][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.907674][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.928667][T11797] device veth1_vlan entered promiscuous mode [ 409.969013][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.984950][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 409.993658][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.003504][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.024936][T11797] device veth0_macvtap entered promiscuous mode [ 410.047795][T11797] device veth1_macvtap entered promiscuous mode [ 410.103397][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.112770][T12034] syzkaller0: create flow: hash 1020174612 index 2 [ 410.121884][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.138089][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.148971][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.164880][T11797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.178686][ T14] syzkaller0: tun_net_xmit 76 [ 410.186634][ T14] syzkaller0: tun_net_xmit 48 [ 410.192368][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 410.203669][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 410.203725][ T4419] syzkaller0: tun_net_xmit 76 [ 410.222313][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 410.239853][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 410.349758][T12035] syzkaller0: delete flow: hash 1020174612 index 2 [ 410.360681][ T4260] syzkaller0: tun_net_xmit 76 [ 410.374112][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.400291][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.410127][T11797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.421454][ T14] syzkaller0: tun_net_xmit 76 [ 410.426244][T11797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.438674][T11797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.447025][T12045] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 410.464750][T12045] device vxcan1 entered promiscuous mode [ 410.471064][T12045] team0: Device vxcan1 is of different type [ 411.846096][ T4609] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.229680][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.241820][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.260849][T11797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.270411][T11797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.279115][T11797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.308500][T11797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.338045][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 412.368478][T12056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2051'. [ 412.391090][T12062] netlink: 'syz.0.2053': attribute type 41 has an invalid length. [ 412.456296][ T46] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 412.495243][ T46] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 412.517085][ T4434] ------------[ cut here ]------------ [ 412.523135][ T4434] WARNING: CPU: 0 PID: 4434 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 412.533148][ T4434] Modules linked in: [ 412.537055][ T4434] CPU: 0 PID: 4434 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 412.544750][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.554854][ T4434] Workqueue: cfg80211 cfg80211_event_work [ 412.560645][ T4434] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 412.566855][ T4434] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 d3 ea f7 0f 0b eb bf e8 c7 d3 ea f7 <0f> 0b eb b6 e8 be d3 ea f7 0f 0b e9 82 fd ff ff e8 b2 d3 ea f7 0f [ 412.586534][ T4434] RSP: 0018:ffffc900047a7ac0 EFLAGS: 00010293 [ 412.592656][ T4434] RAX: ffffffff89975a59 RBX: 1ffff920008f4f5c RCX: ffff888051473c00 [ 412.600691][ T4434] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 412.608678][ T4434] RBP: ffffc900047a7b70 R08: ffffffff90b102a7 R09: 1ffffffff2162054 [ 412.616719][ T4434] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff8880522f35f8 [ 412.624742][ T4434] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888023494c90 [ 412.632781][ T4434] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 412.641764][ T4434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.648371][ T4434] CR2: 00007fcdd703dfe8 CR3: 000000003710a000 CR4: 00000000003506f0 [ 412.656415][ T4434] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 412.664435][ T4434] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 412.672471][ T4434] Call Trace: [ 412.675760][ T4434] [ 412.678700][ T4434] ? trace_rdev_return_void+0x240/0x240 [ 412.684329][ T4434] cfg80211_process_wdev_events+0x359/0x4d0 [ 412.690282][ T4434] ? process_one_work+0x7b4/0x1160 [ 412.695532][ T4434] cfg80211_process_rdev_events+0x9d/0x110 [ 412.701416][ T4434] cfg80211_event_work+0x2b/0x40 [ 412.706371][ T4434] process_one_work+0x8ab/0x1160 [ 412.711386][ T4434] ? worker_detach_from_pool+0x240/0x240 [ 412.717037][ T4434] ? _raw_spin_lock_irq+0x86/0xf0 [ 412.722131][ T4434] ? _raw_spin_lock_irq+0xb7/0xf0 [ 412.727175][ T4434] ? _raw_spin_lock_irqsave+0x100/0x100 [ 412.732786][ T4434] ? wq_worker_running+0x97/0x190 [ 412.737929][ T4434] worker_thread+0xaf5/0x12a0 [ 412.742701][ T4434] kthread+0x29d/0x330 [ 412.746786][ T4434] ? worker_clr_flags+0x1a0/0x1a0 [ 412.751880][ T4434] ? kthread_blkcg+0xd0/0xd0 [ 412.756488][ T4434] ret_from_fork+0x1f/0x30 [ 412.761011][ T4434] [ 412.764055][ T4434] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.771336][ T4434] CPU: 0 PID: 4434 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 412.778974][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.789042][ T4434] Workqueue: cfg80211 cfg80211_event_work [ 412.794786][ T4434] Call Trace: [ 412.798075][ T4434] [ 412.801007][ T4434] dump_stack_lvl+0x188/0x24e [ 412.805698][ T4434] ? memcpy+0x3c/0x60 [ 412.809687][ T4434] ? show_regs_print_info+0x12/0x12 [ 412.814905][ T4434] ? load_image+0x410/0x410 [ 412.819428][ T4434] panic+0x2d3/0x710 [ 412.823342][ T4434] ? bpf_jit_dump+0xd0/0xd0 [ 412.827862][ T4434] ? ret_from_fork+0x1f/0x30 [ 412.832471][ T4434] __warn+0x2f8/0x4f0 [ 412.836457][ T4434] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.842017][ T4434] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.847574][ T4434] report_bug+0x2ba/0x4f0 [ 412.851947][ T4434] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.857507][ T4434] handle_bug+0x3a/0x70 [ 412.861677][ T4434] exc_invalid_op+0x16/0x40 [ 412.866199][ T4434] asm_exc_invalid_op+0x16/0x20 [ 412.871062][ T4434] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 412.877232][ T4434] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 d3 ea f7 0f 0b eb bf e8 c7 d3 ea f7 <0f> 0b eb b6 e8 be d3 ea f7 0f 0b e9 82 fd ff ff e8 b2 d3 ea f7 0f [ 412.896853][ T4434] RSP: 0018:ffffc900047a7ac0 EFLAGS: 00010293 [ 412.902936][ T4434] RAX: ffffffff89975a59 RBX: 1ffff920008f4f5c RCX: ffff888051473c00 [ 412.910926][ T4434] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 412.918910][ T4434] RBP: ffffc900047a7b70 R08: ffffffff90b102a7 R09: 1ffffffff2162054 [ 412.926897][ T4434] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff8880522f35f8 [ 412.934881][ T4434] R13: dffffc0000000000 R14: 000000000000001f R15: ffff888023494c90 [ 412.942875][ T4434] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 412.948456][ T4434] ? trace_rdev_return_void+0x240/0x240 [ 412.954034][ T4434] cfg80211_process_wdev_events+0x359/0x4d0 [ 412.959958][ T4434] ? process_one_work+0x7b4/0x1160 [ 412.965086][ T4434] cfg80211_process_rdev_events+0x9d/0x110 [ 412.970913][ T4434] cfg80211_event_work+0x2b/0x40 [ 412.975864][ T4434] process_one_work+0x8ab/0x1160 [ 412.980830][ T4434] ? worker_detach_from_pool+0x240/0x240 [ 412.986473][ T4434] ? _raw_spin_lock_irq+0x86/0xf0 [ 412.991520][ T4434] ? _raw_spin_lock_irq+0xb7/0xf0 [ 412.996565][ T4434] ? _raw_spin_lock_irqsave+0x100/0x100 [ 413.002133][ T4434] ? wq_worker_running+0x97/0x190 [ 413.007180][ T4434] worker_thread+0xaf5/0x12a0 [ 413.011894][ T4434] kthread+0x29d/0x330 [ 413.015978][ T4434] ? worker_clr_flags+0x1a0/0x1a0 [ 413.021017][ T4434] ? kthread_blkcg+0xd0/0xd0 [ 413.025623][ T4434] ret_from_fork+0x1f/0x30 [ 413.030066][ T4434] [ 413.033334][ T4434] Kernel Offset: disabled [ 413.037694][ T4434] Rebooting in 86400 seconds..