last executing test programs: 27.617007462s ago: executing program 1 (id=1898): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300000000000085c60d000ce9cde92fd62da8000000b70000000000000085000000570000004892e0ff00b02bbcded6000000186b00000500000000000000ff0100000e1705"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x97, &(0x7f0000000200)=""/151, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x6, 0xfffffffe}, 0x10, 0x14b44, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x5, 0x3, 0x9, 0x6}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000900), &(0x7f00000009c0)="d50b2bb6bc3bc3", 0x2, 0x0, 0x8}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0001006f0521449006fda50000000000850000001b000100"/39], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, 0x0, 0x40000) recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'blkio'}]}, 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10000, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1}, 0x48004) 26.629227275s ago: executing program 1 (id=1914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r2 = syz_clone(0x41280000, &(0x7f0000000000)="b49b769d4048dcefb22bdee41024fbdbb1", 0x11, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)="38b0708973e4221aa15a8318f1e00153bf957c4f4e445306f528cdf5fbb8523f44d246005d2517f61d5429536b0e8df2cdc6fb5e8b5eeaeb26b37033d0f7fdbf3d1a7b0cc6b855ffa8eb73fe412295481ced102d1c10b84e810eed7b360ae62bdc50b53ffec64ce7542387312a0e4d3c9111c8860404b9bd555164a96a3207da0df47a9831c0d0ad5fb6c12702844afa04cdfbd6613531f6880895aee5c5c9a00c490e8bc71671a0fcfa4b539a61dfd17e93f5bc14e54c9231c5c600a04a7539bcba359c2606270ece0aa5c0fa78e4da730ccc141fb646e68eb7fdbf5372d3797cc2") perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) 25.634865198s ago: executing program 0 (id=1920): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0xf, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xd}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000004000000000000000000079100e000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 25.50568766s ago: executing program 0 (id=1921): r0 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r1, 0x8) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r1, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) (async) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) 25.343127722s ago: executing program 1 (id=1922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300000000000085c60d000ce9cde92fd62da8000000b70000000000000085000000570000004892e0ff00b02bbcded6000000186b00000500000000000000ff0100000e1705"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x97, &(0x7f0000000200)=""/151, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x6, 0xfffffffe}, 0x10, 0x14b44, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x5, 0x3, 0x9, 0x6}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000900), &(0x7f00000009c0)="d50b2bb6bc3bc3", 0x2, 0x0, 0x8}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0001006f0521449006fda50000000000850000001b000100"/39], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20048884}, 0x40000) recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'blkio'}]}, 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10000, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1}, 0x48004) 24.971779697s ago: executing program 2 (id=1924): r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb11, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)=r2}, 0x20) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, r5, 0x3, 0x5, 0x2}, 0x50) 24.73289553s ago: executing program 2 (id=1925): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x49, &(0x7f0000000180), 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="1c0000000988"}) 24.506592213s ago: executing program 0 (id=1926): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x9985bc4687b29dcf) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="378303076844268cb89e14f008004ee0fffe00febabec41177fbfbdd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x78, &(0x7f0000000b80)=""/120, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffd6}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r0}) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x11210, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0xa, 0x6d90}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x3, r6, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYRESHEX], 0x0, 0x3a, 0x0, 0x1, 0x5}, 0x28) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000d4e5c4a3687a92cec7a9a949f8210422010fd7484ef4bac6d8ec67da7a965a74198acc196cad81fa2d8b0074e61cd3dcf321907790e5403d934597ab0b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r8}, &(0x7f0000000580), &(0x7f0000000600)=r2}, 0x20) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x7252, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) 24.372942714s ago: executing program 3 (id=1927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="fd44af11efebb3e600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711238000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0xf9, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000009, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x6b, 0x1ef7}, 0x11efa, 0x6, 0x27c6, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000020000850000008600000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000683a3f0a000018df37f505568500", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.293006065s ago: executing program 2 (id=1928): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@llc={0x1a, 0x305, 0x7f, 0x80, 0x4, 0xc0, @broadcast}, 0x80, 0x0}, 0x42000844) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x7}, 0x0) recvmsg$unix(r0, 0x0, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r3, @ANYBLOB="a55e775cb857343bfb62bce43c6d7a1f3fb7e42b1c29519451e5225965d8f848d50fb8947a9b479ef4638a74fca9f2ea45d5179bb05c887b0939d22cef2eb1fc8f0265f26336a10a665235c58333c094a051aead9fb55c2b0579fd7d1bdbc5763b3e1c1b80bd562a369c325090d81abdde10fb99a11c7992ed16ce"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000100)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0xfa, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x16) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 24.252631856s ago: executing program 1 (id=1929): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x80) recvmsg(r0, 0x0, 0x102) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/14], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 24.185059337s ago: executing program 0 (id=1930): perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x82311, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x5}, 0x109824, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) recvmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x33c, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x14, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB="00e000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000040)}, 0x20) 24.117071238s ago: executing program 2 (id=1931): r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='-\x00') r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000004b80)={&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffffc, @dev, 0x805, 0x10000}, 0x80, 0x0, 0xfffffffffffffd67}, 0x50a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710036000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r8, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/109, 0x6d, 0x0, &(0x7f0000000680)=""/104, 0x68}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1a, 0x33, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf5a3a333, 0x0, 0x0, 0x0, 0xfffffc01}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0xf5, 0x71, &(0x7f0000000540)=""/113, 0x41100, 0x3, '\x00', r10, @tracing=0x19, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0x9, 0x5, 0x6}, 0x10, r11, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[r8, r7], &(0x7f0000000980)=[{0x4, 0x4, 0x7, 0xb}, {0x0, 0x4, 0x0, 0x8}, {0x5, 0x5, 0x4, 0x2}, {0x4, 0x2, 0xa, 0x1}, {0x3, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) 24.108429588s ago: executing program 3 (id=1932): bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x23, 0x7, 0x0) syz_clone(0xd0084400, 0x0, 0x15, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000002000000000000001f00000071b6c101000000009500000000000000c5e9470436a6a0e03a6a2e93f876193345f644a6ab06a9c9f2d2ce8a643db218090734a625451308a3c10ed3acb7549a0535b1c2a24c21e1de1d0ecbebe74da14c6b59cd589fe6f26930a8f59559464ff36385183918264dd62f64a260c000897f7e26e37795eec86460d85a47d5b8316a8ad5f3287cfa723103498a600512daa3c47b1c4c87de06300bfe04439b3f89958430fda1d7b29a8427ec36d748621fe23b87074f79de0cf5ccafd2d47b714a9a547983e713495ded9201c52de0f3a1eefab92060a3b9ba379bdebd06f828d2f63700"/252], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000400000023f5d45871f96c33eb080000000000000045df482ed9dbc79a11", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r4, 0x58, &(0x7f0000000700)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x35, 0x8e, &(0x7f0000000340)="09765e162a7268d8f7b72e966122813c19545e5acd5a3069d6495d08481859a0cf7a4c0403b208a8cb3edb791ede6492f6704f1653", &(0x7f0000000380)=""/142, 0x8000, 0x0, 0x8e, 0xd7, &(0x7f0000000440)="eeab4ba748b87a04eba45b9b8bd36a2c43425ef93e8414719916d75c5e90afda3423ebb3df3717c474da8bc9e48ae566a3e8a328e13ed4feecb1ace9656a66fc3ae64c84e69a266051563dd4b7212d6db332ed7857e48fc31faa915558b5cdc4b4732edec9468f7181048a055936e5ab11c37e3760bc639ddc6705933f78f7c31ffa8bc69dccb603ac70a1f7a470", &(0x7f0000000500)="8656ce587fbc07236fec01da206cf4f2a19bb7c306a2042cd4d5a50dd60be18b6dfdf1901f7ddb1f17d5f1d5a0cdc0dfc459d18d3290478e7715f88553bd7ee8f9b144e318f2a2dc984c0b3d5e1d1cc52780ba3f354065541f098052054c91406153c7678ad32515a11b6455645c1151a06de842d7b41f8c001ebaedc77d97ed1f2e8f7fc4395f3fb48bd9f73797154216a2bc6bffb3963c56053342bf30eedb21ba06c1b8ed6ed1202a3c276902b5bb9d38054071e7c99d81d3e4426ea8edda87571c05d3d257415f5c1b9aa422505f15db1e3c506302", 0x3, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x6, 0x0, &(0x7f0000000040)=""/8, 0x4001f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, &(0x7f00000001c0)=""/81, 0x51}, 0x10060) 24.012984169s ago: executing program 0 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x3, 0x5, 0xffffffff}, {0x6}]}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8994, &(0x7f0000000200)={'bond0\x00', @local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x3, 0x5, 0xffffffff}, {0x6}]}) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8994, &(0x7f0000000200)={'bond0\x00', @local}) (async) 23.829523511s ago: executing program 2 (id=1934): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x4016000, &(0x7f0000000140)="6eb5674d5c5cbedb0bf6e2e5a3c141e2cd474d1dbf50b8174f836bcdd4a4db416843005c6a751342", 0x28, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001e00)="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") r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xde, 0x0, 0x0, 0x2, 0x0, 0xffffffffffff9e04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, r1, 0xf, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) (async) r3 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00'}, 0x94) (async, rerun: 64) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='-:]\x00') 23.755041062s ago: executing program 3 (id=1935): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x645b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_bp={0x0, 0x4}, 0x8100, 0xcdd, 0x43a1bd76, 0x4, 0x200009, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7feffffd}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000004abc3bf700000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000100"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000300)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f00000000c0), 0xd8) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x7ac}}, @fwd={0x4}]}, {0x0, [0x0, 0x61, 0x30, 0x2e, 0x30]}}, &(0x7f0000000980)=""/247, 0x43, 0xf7, 0x0, 0x81}, 0x28) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x6, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r0}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000100010000000000", @ANYRES32, @ANYBLOB="040300735f819ef2b099684fdb22421cbb2bd1a6c875276b84a2702ca6391bb8d973d41280bfcf87d88c2509531864c4729fccec4ca364d6e042", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={r10, 0x58, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_ext={0x1c, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='syzkaller\x00', 0x4, 0xfe, &(0x7f00000010c0)=""/254, 0x41000, 0x21, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2eba3, r0, 0x3, 0x0, &(0x7f00000012c0)=[{0x2, 0x3, 0xa, 0x6}, {0x3, 0x3, 0x10, 0x2}, {0x1, 0x2, 0x9, 0x2}], 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4d}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}]}, &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0xac, 0x100, 0x2, 0x4, r13, 0x4, '\x00', r12, r6, 0x5, 0x3, 0x3}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000e020000000000000000000000085964b4fe98d21873a63e2d6cde32d1ac3792b00577f0500e1ef4e9fbbaa987d132f84c367c35e639be307ab0a4aed6079e762dc4241f68ce29dfff29e941cb64200d21e5398fc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r15}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x1d, 0x2a, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000ffffffff00000000000000006d880200ff7f00001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001020000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000851000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000184b0000f9ffffff0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0x1, 0x7a, &(0x7f0000000880)=""/122, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x4, 0x0, 0x6, 0x80}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000ec0)=[r7, r8, r9, r10, r11, r14, 0xffffffffffffffff, r15, r17], &(0x7f0000000f00)=[{0x4, 0x3, 0x6, 0x5}, {0x5, 0x1, 0xb, 0xf}, {0x4, 0x5, 0x6}, {0x5, 0x1, 0x7, 0x7}, {0x5, 0x4, 0x5, 0x13}, {0x5, 0x2, 0xe, 0xa}, {0x5, 0x2, 0x2, 0x9}, {0x1, 0x3, 0xc, 0x3}, {0x3, 0x5, 0x3}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) 23.548929515s ago: executing program 2 (id=1936): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r5, 0x6, 0xc, &(0x7f0000000500)=r8, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x23, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x6}, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, 0x0, 0x0) 23.505896235s ago: executing program 0 (id=1937): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300000000000085c60d000ce9cde92fd62da8000000b70000000000000085000000570000004892e0ff00b02bbcded6000000186b00000500000000000000ff0100000e1705"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x97, &(0x7f0000000200)=""/151, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x6, 0xfffffffe}, 0x10, 0x14b44, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x5, 0x3, 0x9, 0x6}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000900), &(0x7f00000009c0)="d50b2bb6bc3bc3", 0x2, 0x0, 0x8}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0001006f0521449006fda50000000000850000001b000100"/39], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20048884}, 0x40000) recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'blkio'}]}, 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10000, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1}, 0x48004) 23.461791596s ago: executing program 1 (id=1938): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x6912, 0x0, 0x3, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffff7fffffffffb, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="0b89ce32f9c5ebc089a139254e997a1136c627bf3088c91a66b66c675074cffa7fc606bc7706bdbd31f7a2a350101970833b3cf2a37afdafad5e52cf5e8a23c512919614218c3d494eec26fd2f336d03dd3cae223040f00489ec4e96420e4d8a5663e14881905e92111a0933a0fef3f3c2fa56d633ce1f353404e8e1c8414d936f8363cc39e49b461e88a4a903044e3dba8ded45672735309f", 0x99}, {&(0x7f0000000200)="11e4ba05816068193c908038082e6f01772afd5d51d3d9ba48fe47489ce0a6c3d5671094058521f6d8c6b14ac2e0485f450024296b741c2599d12a9835b00a488875893fffee6ccbf00ed6be1de61c4664403abe184c5be681f800b7e5d38ec340f87706c39b2c208df7ab847069bcfaa39f39df2801dd00197690aa", 0x7c}, {&(0x7f0000000280)="2eb94822fe24df8b82a1fd62ea366a20e3c7e6516180e08a9801a5b2e15381c046b54f35de25922a8f7f4ee0a7d923d348d446681ec9eef251ea62d407da1fed5dc098220a80ab75e7f982c14a", 0x4d}], 0x3, &(0x7f0000000340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x30}, 0x8090) socket$kcm(0xa, 0x7, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800f6ff000000000000000000000000fe0000000087080000000000007bcaff0700000000bda100007f00000027000000205c17ff764c8d1fba5cf8e347d1e2a400000000000007040000f0ffffffb70200000000000018230000f15f75", @ANYRES32=r3, @ANYRESHEX=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 23.384849097s ago: executing program 3 (id=1939): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r0}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4001000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x8, 0x5, 0x0, 0x4}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800e40dd292c9d421e9000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000085000000080000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.016916872s ago: executing program 1 (id=1940): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002980)={r1, &(0x7f0000000740)="f213e10a3ce27898f9dc0d1bea4d45a04f23f91c230b964ae7aa96105410016a69dfed5009fa16bcf7f554443f8a1f932f45efafbe5301c9597e094c54eae3ba5584c241e085e307559fa52b931fc9d4757c01fbf9c598212d934c788da8207c901ecd38ae00925fe8574858545cbdac29e4ff48c607a0c5aaf5bc8c5fdc7878c362613e69d5794f982666ad88544dfcb621570e13fd9abf8b164ab83ea4227992fe88bd344e541670ec6e3fe6bf8f7e8245bc860384f850175d033540217683dd11", &(0x7f0000001980)=""/4096}, 0x20) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x32}, 0x1}}, 0x80, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000900)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032f"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) 22.980307762s ago: executing program 3 (id=1941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x78a2}, @ldst={0x3, 0x3, 0x4, 0x7, 0x2, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x0, 0xa5, &(0x7f0000000280)=""/165, 0x41100, 0x44, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, r0, r0], 0x0, 0x10, 0x200}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x78a2}, @ldst={0x3, 0x3, 0x4, 0x7, 0x2, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x0, 0xa5, &(0x7f0000000280)=""/165, 0x41100, 0x44, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0, r0, r0], 0x0, 0x10, 0x200}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100ffffff4c3e06f26e3e572674d166edafff950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100ffffff4c3e06f26e3e572674d166edafff950000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246}, 0x94) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 22.772957785s ago: executing program 3 (id=1942): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffff, 0xf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x28, 0x5, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYBLOB='\x00/\x00\x00\x00\x00\x00\x00\x00F\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f500001000"/16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13300, 0x2, 0xffffff81, 0x0, 0x0, 0x7d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, &(0x7f0000000300)}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 934.397198ms ago: executing program 32 (id=1937): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70300000000000085c60d000ce9cde92fd62da8000000b70000000000000085000000570000004892e0ff00b02bbcded6000000186b00000500000000000000ff0100000e1705"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x97, &(0x7f0000000200)=""/151, 0x41100, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xc, 0x6, 0xfffffffe}, 0x10, 0x14b44, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x5, 0x3, 0x9, 0x6}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000900), &(0x7f00000009c0)="d50b2bb6bc3bc3", 0x2, 0x0, 0x8}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0001006f0521449006fda50000000000850000001b000100"/39], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20048884}, 0x40000) recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2d, 'blkio'}]}, 0x7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x10000, @empty, 0xfffffffb}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x1}, 0x48004) 835.83856ms ago: executing program 33 (id=1940): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002980)={r1, &(0x7f0000000740)="f213e10a3ce27898f9dc0d1bea4d45a04f23f91c230b964ae7aa96105410016a69dfed5009fa16bcf7f554443f8a1f932f45efafbe5301c9597e094c54eae3ba5584c241e085e307559fa52b931fc9d4757c01fbf9c598212d934c788da8207c901ecd38ae00925fe8574858545cbdac29e4ff48c607a0c5aaf5bc8c5fdc7878c362613e69d5794f982666ad88544dfcb621570e13fd9abf8b164ab83ea4227992fe88bd344e541670ec6e3fe6bf8f7e8245bc860384f850175d033540217683dd11", &(0x7f0000001980)=""/4096}, 0x20) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x32}, 0x1}}, 0x80, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000900)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032f"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) 107.389039ms ago: executing program 34 (id=1936): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="000010000b00"}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r5, 0x6, 0xc, &(0x7f0000000500)=r8, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x23, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0xff, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x6}, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, 0x0, 0x0) 0s ago: executing program 35 (id=1942): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffff, 0xf}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x28, 0x5, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYBLOB='\x00/\x00\x00\x00\x00\x00\x00\x00F\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f500001000"/16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x13300, 0x2, 0xffffff81, 0x0, 0x0, 0x7d3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, &(0x7f0000000300)}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): TE or NLM_F_REPLACE [ 173.271426][ T7438] IPv6: NLM_F_CREATE should be set when creating new route [ 173.279041][ T7438] IPv6: NLM_F_CREATE should be set when creating new route [ 173.286546][ T7438] IPv6: NLM_F_CREATE should be set when creating new route [ 174.516491][ T7479] netlink: 112 bytes leftover after parsing attributes in process `syz.0.522'. [ 175.446224][ T7495] netlink: 'syz.3.528': attribute type 10 has an invalid length. [ 175.467599][ T7495] geneve0: entered promiscuous mode [ 175.646613][ T7501] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 175.669520][ T7501] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.531'. [ 176.863297][ T7520] netlink: 68 bytes leftover after parsing attributes in process `syz.3.535'. [ 177.521382][ T7534] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.538'. [ 177.695285][ T7534] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 177.727346][ T7534] CPU: 1 PID: 7534 Comm: syz.3.538 Not tainted syzkaller #0 [ 177.734739][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.744863][ T7534] Call Trace: [ 177.748200][ T7534] [ 177.751174][ T7534] dump_stack_lvl+0x18c/0x250 [ 177.755960][ T7534] ? show_regs_print_info+0x20/0x20 [ 177.761231][ T7534] ? load_image+0x420/0x420 [ 177.765815][ T7534] sysfs_warn_dup+0x8e/0xa0 [ 177.770376][ T7534] sysfs_do_create_link_sd+0xc0/0x110 [ 177.775815][ T7534] device_add_class_symlinks+0x1cf/0x240 [ 177.781523][ T7534] device_add+0x507/0xc20 [ 177.785920][ T7534] wiphy_register+0x1dad/0x2ae0 [ 177.790867][ T7534] ? cfg80211_event_work+0x40/0x40 [ 177.796041][ T7534] ? minstrel_ht_alloc+0x88a/0x990 [ 177.801243][ T7534] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 177.807376][ T7534] ieee80211_register_hw+0x3464/0x4250 [ 177.812905][ T7534] ? ieee80211_tasklet_handler+0x20/0x20 [ 177.818571][ T7534] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 177.824513][ T7534] ? __debug_object_init+0xec/0x450 [ 177.829759][ T7534] ? __asan_memset+0x22/0x40 [ 177.834474][ T7534] ? __hrtimer_init+0x186/0x270 [ 177.839359][ T7534] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 177.845150][ T7534] ? mac80211_hwsim_free+0x220/0x220 [ 177.850469][ T7534] ? rcu_is_watching+0x15/0xb0 [ 177.855268][ T7534] ? kstrndup+0xbd/0x140 [ 177.859552][ T7534] hwsim_new_radio_nl+0xdc9/0x1a90 [ 177.864708][ T7534] ? __nla_validate+0x50/0x50 [ 177.869435][ T7534] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 177.875808][ T7534] ? __nla_parse+0x40/0x50 [ 177.880347][ T7534] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 177.886721][ T7534] genl_family_rcv_msg_doit+0x211/0x310 [ 177.892308][ T7534] ? end_current_label_crit_section+0x170/0x170 [ 177.898680][ T7534] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 177.904623][ T7534] ? bpf_lsm_capable+0x9/0x10 [ 177.909346][ T7534] ? security_capable+0x89/0xb0 [ 177.914242][ T7534] genl_rcv_msg+0x619/0x7a0 [ 177.918785][ T7534] ? genl_bind+0x360/0x360 [ 177.923229][ T7534] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 177.929601][ T7534] netlink_rcv_skb+0x241/0x4d0 [ 177.934416][ T7534] ? genl_bind+0x360/0x360 [ 177.938870][ T7534] ? netlink_ack+0x1180/0x1180 [ 177.943776][ T7534] ? __lock_acquire+0x7d40/0x7d40 [ 177.948933][ T7534] ? net_generic+0x1e/0x240 [ 177.953482][ T7534] ? down_read+0x1ac/0x2e0 [ 177.957931][ T7534] genl_rcv+0x28/0x40 [ 177.961953][ T7534] netlink_unicast+0x751/0x8d0 [ 177.966767][ T7534] netlink_sendmsg+0x8d0/0xbf0 [ 177.971578][ T7534] ? netlink_getsockopt+0x590/0x590 [ 177.976827][ T7534] ? aa_sock_msg_perm+0x94/0x150 [ 177.981802][ T7534] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.987120][ T7534] ? security_socket_sendmsg+0x80/0xa0 [ 177.992607][ T7534] ? netlink_getsockopt+0x590/0x590 [ 177.997845][ T7534] ____sys_sendmsg+0x5ba/0x960 [ 178.002651][ T7534] ? __asan_memset+0x22/0x40 [ 178.007274][ T7534] ? __sys_sendmsg_sock+0x30/0x30 [ 178.012322][ T7534] ? __import_iovec+0x5f2/0x850 [ 178.017214][ T7534] ? import_iovec+0x73/0xa0 [ 178.021752][ T7534] ___sys_sendmsg+0x2a6/0x360 [ 178.026470][ T7534] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.031271][ T7534] ? perf_trace_preemptirq_template+0xac/0x330 [ 178.037529][ T7534] ? __se_sys_sendmsg+0xd9/0x2b0 [ 178.042521][ T7534] __se_sys_sendmsg+0x1c2/0x2b0 [ 178.047428][ T7534] ? __x64_sys_sendmsg+0x80/0x80 [ 178.052423][ T7534] ? lockdep_hardirqs_on+0x98/0x150 [ 178.057755][ T7534] do_syscall_64+0x55/0xa0 [ 178.062347][ T7534] ? clear_bhb_loop+0x40/0x90 [ 178.067062][ T7534] ? clear_bhb_loop+0x40/0x90 [ 178.071776][ T7534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.077715][ T7534] RIP: 0033:0x7f96bdf9cdd9 [ 178.082158][ T7534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.101801][ T7534] RSP: 002b:00007f96bc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.110261][ T7534] RAX: ffffffffffffffda RBX: 00007f96be215fa0 RCX: 00007f96bdf9cdd9 [ 178.118259][ T7534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 178.126259][ T7534] RBP: 00007f96be032d69 R08: 0000000000000000 R09: 0000000000000000 [ 178.134264][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.142264][ T7534] R13: 00007f96be216038 R14: 00007f96be215fa0 R15: 00007ffcb3d9a548 [ 178.150293][ T7534] [ 178.578080][ T7552] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.543'. [ 178.957062][ T7556] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.544'. [ 179.019301][ T7556] netlink: 'syz.3.544': attribute type 21 has an invalid length. [ 179.054732][ T7556] netlink: 'syz.3.544': attribute type 7 has an invalid length. [ 181.183006][ T7573] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.547'. [ 181.226933][ T7568] netlink: 'syz.1.547': attribute type 22 has an invalid length. [ 181.256113][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 181.630398][ T7577] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.549'. [ 181.780054][ T7582] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 181.831557][ T7582] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 181.860450][ T7582] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.552'. [ 181.899778][ T7580] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 182.463255][ T7580] team0 (unregistering): Port device team_slave_0 removed [ 182.568703][ T7580] team0 (unregistering): Port device team_slave_1 removed [ 182.610150][ T7580] team0 (unregistering): Port device .3ãc¤± removed [ 182.683567][ T7582] netlink: 128 bytes leftover after parsing attributes in process `syz.3.552'. [ 182.698622][ T7582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.766887][ T7591] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 182.773965][ T7591] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 182.908562][ T7602] FAULT_INJECTION: forcing a failure. [ 182.908562][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.951728][ T7602] CPU: 1 PID: 7602 Comm: syz.3.556 Not tainted syzkaller #0 [ 182.959289][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.969418][ T7602] Call Trace: [ 182.972856][ T7602] [ 182.975833][ T7602] dump_stack_lvl+0x18c/0x250 [ 182.980667][ T7602] ? show_regs_print_info+0x20/0x20 [ 182.986014][ T7602] ? load_image+0x420/0x420 [ 182.990575][ T7602] ? __lock_acquire+0x7d40/0x7d40 [ 182.995656][ T7602] should_fail_ex+0x39d/0x4d0 [ 183.000426][ T7602] _copy_from_user+0x2f/0xe0 [ 183.005071][ T7602] __copy_msghdr+0x3bb/0x580 [ 183.009714][ T7602] ___sys_sendmsg+0x214/0x360 [ 183.014446][ T7602] ? __sys_sendmsg+0x2a0/0x2a0 [ 183.019282][ T7602] ? __lock_acquire+0x7d40/0x7d40 [ 183.024399][ T7602] __se_sys_sendmsg+0x1c2/0x2b0 [ 183.029306][ T7602] ? __x64_sys_sendmsg+0x80/0x80 [ 183.034310][ T7602] ? lockdep_hardirqs_on+0x98/0x150 [ 183.039553][ T7602] do_syscall_64+0x55/0xa0 [ 183.044004][ T7602] ? clear_bhb_loop+0x40/0x90 [ 183.048719][ T7602] ? clear_bhb_loop+0x40/0x90 [ 183.053431][ T7602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.059365][ T7602] RIP: 0033:0x7f96bdf9cdd9 [ 183.063818][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.083464][ T7602] RSP: 002b:00007f96bc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.091915][ T7602] RAX: ffffffffffffffda RBX: 00007f96be215fa0 RCX: 00007f96bdf9cdd9 [ 183.099922][ T7602] RDX: 0000000000004000 RSI: 0000200000003700 RDI: 0000000000000003 [ 183.107920][ T7602] RBP: 00007f96bc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.115933][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.123950][ T7602] R13: 00007f96be216038 R14: 00007f96be215fa0 R15: 00007ffcb3d9a548 [ 183.132116][ T7602] [ 184.078445][ T7631] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 184.314530][ T7631] bridge0: port 3(team0) entered disabled state [ 184.523714][ T7643] FAULT_INJECTION: forcing a failure. [ 184.523714][ T7643] name failslab, interval 1, probability 0, space 0, times 1 [ 184.553878][ T7631] bridge0: port 3(team0) entered disabled state [ 184.582463][ T7643] CPU: 0 PID: 7643 Comm: syz.3.567 Not tainted syzkaller #0 [ 184.589841][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.599948][ T7643] Call Trace: [ 184.603273][ T7643] [ 184.606238][ T7643] dump_stack_lvl+0x18c/0x250 [ 184.610980][ T7643] ? show_regs_print_info+0x20/0x20 [ 184.616237][ T7643] ? load_image+0x420/0x420 [ 184.620809][ T7643] ? __might_sleep+0xe0/0xe0 [ 184.625453][ T7643] ? __lock_acquire+0x7d40/0x7d40 [ 184.630543][ T7643] should_fail_ex+0x39d/0x4d0 [ 184.635386][ T7643] should_failslab+0x9/0x20 [ 184.639968][ T7643] slab_pre_alloc_hook+0x59/0x310 [ 184.645059][ T7643] ? sock_kmalloc+0x96/0xf0 [ 184.649624][ T7643] ? sock_kmalloc+0x96/0xf0 [ 184.654178][ T7643] __kmem_cache_alloc_node+0x53/0x250 [ 184.659706][ T7643] ? sock_kmalloc+0x96/0xf0 [ 184.664269][ T7643] __kmalloc+0xa4/0x230 [ 184.668494][ T7643] sock_kmalloc+0x96/0xf0 [ 184.672887][ T7643] ____sys_sendmsg+0x1be/0x960 [ 184.677705][ T7643] ? __lock_acquire+0x7d40/0x7d40 [ 184.682786][ T7643] ? __asan_memset+0x22/0x40 [ 184.687514][ T7643] ? __sys_sendmsg_sock+0x30/0x30 [ 184.692566][ T7643] ? __import_iovec+0x3fa/0x850 [ 184.697462][ T7643] ? import_iovec+0x73/0xa0 [ 184.702001][ T7643] ___sys_sendmsg+0x2a6/0x360 [ 184.706720][ T7643] ? __sys_sendmsg+0x2a0/0x2a0 [ 184.711546][ T7643] ? trace_call_bpf+0xc3/0x6c0 [ 184.716368][ T7643] __se_sys_sendmsg+0x1c2/0x2b0 [ 184.721249][ T7643] ? __x64_sys_sendmsg+0x80/0x80 [ 184.726226][ T7643] ? lockdep_hardirqs_on+0x98/0x150 [ 184.731457][ T7643] do_syscall_64+0x55/0xa0 [ 184.735909][ T7643] ? clear_bhb_loop+0x40/0x90 [ 184.740655][ T7643] ? clear_bhb_loop+0x40/0x90 [ 184.745369][ T7643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.751291][ T7643] RIP: 0033:0x7f96bdf9cdd9 [ 184.755738][ T7643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.775376][ T7643] RSP: 002b:00007f96bc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.783815][ T7643] RAX: ffffffffffffffda RBX: 00007f96be215fa0 RCX: 00007f96bdf9cdd9 [ 184.791841][ T7643] RDX: 0000000000004000 RSI: 0000200000003700 RDI: 0000000000000003 [ 184.799847][ T7643] RBP: 00007f96bc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.807857][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.815859][ T7643] R13: 00007f96be216038 R14: 00007f96be215fa0 R15: 00007ffcb3d9a548 [ 184.823875][ T7643] [ 185.012825][ T7631] team_slave_0: left promiscuous mode [ 185.020521][ T7631] team_slave_0: left allmulticast mode [ 185.122480][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 185.162777][ T7631] team_slave_1: left promiscuous mode [ 185.215002][ T7631] team_slave_1: left allmulticast mode [ 185.750335][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 185.839620][ T7660] netlink: 'syz.1.571': attribute type 21 has an invalid length. [ 185.865118][ T7660] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 185.873478][ T7660] netlink: 'syz.1.571': attribute type 2 has an invalid length. [ 185.928098][ T7660] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.571'. [ 185.962318][ T7650] netlink: 'syz.2.569': attribute type 15 has an invalid length. [ 185.976982][ T7650] netlink: 'syz.2.569': attribute type 7 has an invalid length. [ 186.246774][ T7669] delete_channel: no stack [ 186.281965][ T7669] delete_channel: no stack [ 186.556386][ T7679] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 186.675626][ T7679] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.576'. [ 186.701530][ T7687] FAULT_INJECTION: forcing a failure. [ 186.701530][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.754298][ T7679] netlink: 9 bytes leftover after parsing attributes in process `syz.3.576'. [ 186.763543][ T7687] CPU: 1 PID: 7687 Comm: syz.0.578 Not tainted syzkaller #0 [ 186.770903][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.781016][ T7687] Call Trace: [ 186.784338][ T7687] [ 186.787404][ T7687] dump_stack_lvl+0x18c/0x250 [ 186.792151][ T7687] ? show_regs_print_info+0x20/0x20 [ 186.797418][ T7687] ? load_image+0x420/0x420 [ 186.801976][ T7687] ? __might_fault+0xaa/0x120 [ 186.806706][ T7687] ? __lock_acquire+0x7d40/0x7d40 [ 186.811777][ T7687] should_fail_ex+0x39d/0x4d0 [ 186.816509][ T7687] _copy_from_user+0x2f/0xe0 [ 186.821137][ T7687] ____sys_sendmsg+0x2fd/0x960 [ 186.825933][ T7687] ? __lock_acquire+0x7d40/0x7d40 [ 186.830990][ T7687] ? __sys_sendmsg_sock+0x30/0x30 [ 186.836046][ T7687] ? __import_iovec+0x3fa/0x850 [ 186.840938][ T7687] ? import_iovec+0x73/0xa0 [ 186.845475][ T7687] ___sys_sendmsg+0x2a6/0x360 [ 186.850186][ T7687] ? get_pid_task+0x20/0x1e0 [ 186.854824][ T7687] ? __sys_sendmsg+0x2a0/0x2a0 [ 186.859648][ T7687] ? __lock_acquire+0x7d40/0x7d40 [ 186.864776][ T7687] __se_sys_sendmsg+0x1c2/0x2b0 [ 186.869670][ T7687] ? __x64_sys_sendmsg+0x80/0x80 [ 186.874661][ T7687] ? lockdep_hardirqs_on+0x98/0x150 [ 186.879902][ T7687] do_syscall_64+0x55/0xa0 [ 186.884343][ T7687] ? clear_bhb_loop+0x40/0x90 [ 186.889055][ T7687] ? clear_bhb_loop+0x40/0x90 [ 186.893764][ T7687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.899690][ T7687] RIP: 0033:0x7f030579cdd9 [ 186.904127][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.923852][ T7687] RSP: 002b:00007f030661a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.932306][ T7687] RAX: ffffffffffffffda RBX: 00007f0305a15fa0 RCX: 00007f030579cdd9 [ 186.940307][ T7687] RDX: 0000000000004000 RSI: 0000200000003700 RDI: 0000000000000003 [ 186.948302][ T7687] RBP: 00007f030661a090 R08: 0000000000000000 R09: 0000000000000000 [ 186.956298][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.964302][ T7687] R13: 00007f0305a16038 R14: 00007f0305a15fa0 R15: 00007fffebc1eb28 [ 186.972409][ T7687] [ 188.167229][ T7677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.192465][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.3.584'. [ 189.257334][ T7716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.584'. [ 189.360633][ T7726] FAULT_INJECTION: forcing a failure. [ 189.360633][ T7726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.387086][ T7726] CPU: 1 PID: 7726 Comm: syz.3.587 Not tainted syzkaller #0 [ 189.394479][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.404602][ T7726] Call Trace: [ 189.407939][ T7726] [ 189.410910][ T7726] dump_stack_lvl+0x18c/0x250 [ 189.415674][ T7726] ? show_regs_print_info+0x20/0x20 [ 189.420937][ T7726] ? load_image+0x420/0x420 [ 189.425506][ T7726] ? __lock_acquire+0x7d40/0x7d40 [ 189.430593][ T7726] ? snprintf+0xe9/0x140 [ 189.434909][ T7726] should_fail_ex+0x39d/0x4d0 [ 189.439672][ T7726] _copy_to_user+0x2f/0xa0 [ 189.444146][ T7726] simple_read_from_buffer+0xe7/0x150 [ 189.449587][ T7726] proc_fail_nth_read+0x1e8/0x260 [ 189.454722][ T7726] ? proc_fault_inject_write+0x360/0x360 [ 189.460422][ T7726] ? fsnotify_perm+0x271/0x5e0 [ 189.465252][ T7726] ? proc_fault_inject_write+0x360/0x360 [ 189.470947][ T7726] vfs_read+0x28b/0x970 [ 189.475175][ T7726] ? kernel_read+0x1e0/0x1e0 [ 189.479831][ T7726] ? __fget_files+0x28/0x4b0 [ 189.484476][ T7726] ? __fget_files+0x28/0x4b0 [ 189.489120][ T7726] ? __fget_files+0x43d/0x4b0 [ 189.493862][ T7726] ? __fdget_pos+0x2a3/0x330 [ 189.498493][ T7726] ? ksys_read+0x75/0x260 [ 189.502878][ T7726] ksys_read+0x150/0x260 [ 189.507166][ T7726] ? vfs_write+0x990/0x990 [ 189.511624][ T7726] ? lockdep_hardirqs_on+0x98/0x150 [ 189.516873][ T7726] do_syscall_64+0x55/0xa0 [ 189.521322][ T7726] ? clear_bhb_loop+0x40/0x90 [ 189.526044][ T7726] ? clear_bhb_loop+0x40/0x90 [ 189.530763][ T7726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.536692][ T7726] RIP: 0033:0x7f96bdf5d60e [ 189.541143][ T7726] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.560872][ T7726] RSP: 002b:00007f96bc1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.569324][ T7726] RAX: ffffffffffffffda RBX: 00007f96bc1f66c0 RCX: 00007f96bdf5d60e [ 189.577342][ T7726] RDX: 000000000000000f RSI: 00007f96bc1f60a0 RDI: 0000000000000004 [ 189.585342][ T7726] RBP: 00007f96bc1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 189.593339][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.601342][ T7726] R13: 00007f96be216038 R14: 00007f96be215fa0 R15: 00007ffcb3d9a548 [ 189.609365][ T7726] [ 189.986876][ T7733] netlink: 'syz.1.590': attribute type 21 has an invalid length. [ 189.998914][ T7733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.590'. [ 190.073088][ T7729] netlink: 'syz.3.588': attribute type 29 has an invalid length. [ 190.092183][ T7729] netlink: 'syz.3.588': attribute type 29 has an invalid length. [ 190.229618][ T7738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.591'. [ 190.241675][ T7738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.591'. [ 190.267074][ T7738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.591'. [ 190.786558][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 191.462432][ T7774] netlink: 14 bytes leftover after parsing attributes in process `syz.3.600'. [ 191.482937][ T7774] netlink: get zone limit has 4 unknown bytes [ 194.488374][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.496164][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.725811][ T7789] netlink: 'syz.2.602': attribute type 29 has an invalid length. [ 194.758147][ T7789] netlink: 'syz.2.602': attribute type 29 has an invalid length. [ 194.790674][ T7791] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 194.860856][ T7791] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.606'. [ 194.875183][ T7791] netlink: 9 bytes leftover after parsing attributes in process `syz.1.606'. [ 194.893550][ T7794] netlink: 'syz.3.607': attribute type 29 has an invalid length. [ 194.903486][ T7794] netlink: 'syz.3.607': attribute type 29 has an invalid length. [ 195.152685][ T7803] netlink: 'syz.0.610': attribute type 2 has an invalid length. [ 195.171525][ T7801] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.609'. [ 195.218871][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.299172][ T7801] netlink: 'syz.3.609': attribute type 27 has an invalid length. [ 195.312160][ T7801] netlink: 164 bytes leftover after parsing attributes in process `syz.3.609'. [ 195.477374][ T7810] netlink: 'syz.1.614': attribute type 9 has an invalid length. [ 195.497683][ T7810] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.614'. [ 195.607769][ T7817] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 195.621157][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.629283][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.707027][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.714743][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.722538][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.730029][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.747973][ T7817] .`: (slave bridge0): Enslaving as an active interface with an up link [ 196.112703][ T7829] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 197.937065][ T7829] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 199.001653][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 199.959290][ T7897] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.635'. [ 199.969925][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 199.987545][ T7897] netlink: 'syz.1.635': attribute type 10 has an invalid length. [ 200.009421][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.635'. [ 200.035310][ T7897] ipvlan1: entered promiscuous mode [ 200.040613][ T7897] ipvlan1: entered allmulticast mode [ 200.055388][ T7897] veth0_vlan: entered allmulticast mode [ 200.075308][ T7897] bridge0: port 3(ipvlan1) entered blocking state [ 200.096269][ T7897] bridge0: port 3(ipvlan1) entered disabled state [ 200.111231][ T7897] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 200.843026][ T7924] netlink: 14 bytes leftover after parsing attributes in process `syz.3.643'. [ 200.947891][ T7924] veth0_macvtap: left promiscuous mode [ 201.184828][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 201.877003][ T7954] IPv6: Can't replace route, no match found [ 202.271680][ T7969] netlink: 'syz.2.658': attribute type 9 has an invalid length. [ 202.294900][ T7969] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.658'. [ 202.468761][ T7974] netlink: 'syz.2.658': attribute type 10 has an invalid length. [ 202.536824][ T7974] bridge0: port 3(team0) entered disabled state [ 202.543858][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.551995][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.702222][ T7974] bridge0: port 3(team0) entered blocking state [ 202.708844][ T7974] bridge0: port 3(team0) entered forwarding state [ 202.715863][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.723225][ T7974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.731010][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.738435][ T7974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.843261][ T7974] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.309692][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.359476][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.406581][ T7995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.414082][ T7995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.533129][ T8004] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 203.551775][ T8004] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.669'. [ 203.658365][ T7993] netlink: 'syz.3.663': attribute type 21 has an invalid length. [ 203.690366][ T7993] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.073658][ T8013] netlink: 'syz.0.671': attribute type 17 has an invalid length. [ 204.143554][ T8025] syzkaller0: entered allmulticast mode [ 204.496105][ T8030] netlink: 'syz.3.676': attribute type 9 has an invalid length. [ 204.504104][ T8030] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.676'. [ 204.609370][ T8030] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 206.814119][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 206.820545][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.827356][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 206.833445][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 206.845093][ T8030] bridge0: port 3(team0) entered disabled state [ 206.851941][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.934075][ T8030] bridge0: port 3(team0) entered blocking state [ 206.940585][ T8030] bridge0: port 3(team0) entered forwarding state [ 206.947397][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.954669][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.970241][ T8030] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 207.136803][ T8037] netlink: 'syz.3.679': attribute type 21 has an invalid length. [ 207.146867][ T8037] netlink: 'syz.3.679': attribute type 30 has an invalid length. [ 207.188872][ T8038] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.677'. [ 207.413389][ T8045] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.680'. [ 207.852647][ T8055] netlink: 'syz.2.684': attribute type 2 has an invalid length. [ 207.861629][ T8055] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.684'. [ 207.996877][ T8060] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.214654][ T8070] netlink: 'syz.2.687': attribute type 2 has an invalid length. [ 208.427952][ T8079] netlink: 'syz.0.691': attribute type 3 has an invalid length. [ 208.461552][ T8079] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.691'. [ 208.557457][ T8079] netlink: 'syz.0.691': attribute type 10 has an invalid length. [ 208.575182][ T5790] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 208.752381][ T8079] veth1_macvtap: left promiscuous mode [ 209.454821][ T8115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.574214][ T8120] netlink: 'syz.3.703': attribute type 5 has an invalid length. [ 209.589596][ T8120] netlink: 128 bytes leftover after parsing attributes in process `syz.3.703'. [ 210.860023][ T8148] netlink: 'syz.1.713': attribute type 3 has an invalid length. [ 210.880522][ T8148] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 212.171986][ T8164] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 212.195967][ T8164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.720'. [ 212.221123][ T8164] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 212.247025][ T8176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.722'. [ 214.201287][ T8226] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.736'. [ 214.505911][ T8238] sctp: [Deprecated]: syz.1.739 (pid 8238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.505911][ T8238] Use struct sctp_sack_info instead [ 218.537762][ T8296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.746'. [ 218.602982][ T8297] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.746'. [ 218.703477][ T8296] team_slave_0 (unregistering): left promiscuous mode [ 218.710889][ T8296] team_slave_0 (unregistering): left allmulticast mode [ 218.742044][ T8296] team0: Port device team_slave_0 removed [ 218.790638][ T5086] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 220.936530][ T8356] netlink: 'syz.1.762': attribute type 10 has an invalid length. [ 220.993285][ T8361] netlink: 'syz.2.765': attribute type 29 has an invalid length. [ 221.096822][ T8361] netlink: 'syz.2.765': attribute type 29 has an invalid length. [ 221.275120][ T8367] sctp: [Deprecated]: syz.3.766 (pid 8367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.275120][ T8367] Use struct sctp_sack_info instead [ 224.810957][ T8386] tc_dump_action: action bad kind [ 225.065493][ T8402] IPv6: pim6reg1: Disabled Multicast RS [ 225.254313][ T8410] netlink: 'syz.0.778': attribute type 10 has an invalid length. [ 225.297980][ T8410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.778'. [ 225.312841][ T8410] batman_adv: batadv0: Adding interface: virt_wifi0 [ 225.329942][ T8410] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.392605][ T8410] batman_adv: batadv0: Interface activated: virt_wifi0 [ 225.518086][ T8405] netlink: 'syz.0.778': attribute type 10 has an invalid length. [ 225.578730][ T8405] .`: (slave geneve0): Releasing backup interface [ 225.969254][ T8424] sctp: [Deprecated]: syz.0.782 (pid 8424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.969254][ T8424] Use struct sctp_sack_info instead [ 226.650730][ T8439] netlink: 'syz.3.788': attribute type 21 has an invalid length. [ 227.658882][ T8481] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.799'. [ 229.017794][ T8519] netlink: 'syz.0.812': attribute type 12 has an invalid length. [ 229.039346][ T8519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.812'. [ 229.065108][ T8519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.812'. [ 229.099119][ T8519] netlink: 'syz.0.812': attribute type 21 has an invalid length. [ 229.116986][ T8519] netlink: 156 bytes leftover after parsing attributes in process `syz.0.812'. [ 229.513963][ T8533] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.818'. [ 229.604906][ T8533] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 229.642753][ T8537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.819'. [ 230.856530][ T8573] netlink: 'syz.3.828': attribute type 10 has an invalid length. [ 230.967086][ T8573] veth1_macvtap: left promiscuous mode [ 231.979158][ T8587] netlink: 14 bytes leftover after parsing attributes in process `syz.1.833'. [ 232.700043][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.3.836'. [ 234.146938][ T8622] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 234.396458][ T8626] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 234.491571][ T8626] .`: (slave dummy0): Releasing backup interface [ 237.060368][ T8647] syzkaller0: entered promiscuous mode [ 237.069028][ T8647] syzkaller0: entered allmulticast mode [ 237.184891][ T8661] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 237.266458][ T8665] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 237.320160][ T8665] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 237.520091][ T8681] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 237.575272][ T8681] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.860'. [ 240.731906][ T8702] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 240.770062][ T8702] veth1_macvtap: left promiscuous mode [ 240.862869][ T8713] netlink: 'syz.0.868': attribute type 15 has an invalid length. [ 240.872382][ T8713] netlink: 'syz.0.868': attribute type 7 has an invalid length. [ 241.083722][ T8715] netlink: 'syz.2.869': attribute type 4 has an invalid length. [ 241.108400][ T8715] netlink: 168 bytes leftover after parsing attributes in process `syz.2.869'. [ 241.127620][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.872'. [ 241.149124][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.872'. [ 241.160095][ T8721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.872'. [ 241.948908][ T8756] netlink: 'syz.3.882': attribute type 21 has an invalid length. [ 241.957755][ T8756] netlink: 128 bytes leftover after parsing attributes in process `syz.3.882'. [ 241.997901][ T8756] netlink: 3 bytes leftover after parsing attributes in process `syz.3.882'. [ 242.030418][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 243.005454][ T8762] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.881'. [ 244.701685][ T8816] netlink: 'syz.0.901': attribute type 10 has an invalid length. [ 244.724463][ T8816] netlink: 55 bytes leftover after parsing attributes in process `syz.0.901'. [ 244.841236][ T8814] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.900'. [ 245.105686][ T8821] netlink: 'syz.1.903': attribute type 15 has an invalid length. [ 245.128620][ T8821] netlink: 'syz.1.903': attribute type 7 has an invalid length. [ 245.440736][ T8844] netlink: 'syz.2.908': attribute type 21 has an invalid length. [ 245.468687][ T8844] netlink: 128 bytes leftover after parsing attributes in process `syz.2.908'. [ 245.485277][ T8844] netlink: 3 bytes leftover after parsing attributes in process `syz.2.908'. [ 245.790828][ T8853] netlink: 'syz.2.913': attribute type 10 has an invalid length. [ 245.799126][ T8853] netlink: 164 bytes leftover after parsing attributes in process `syz.2.913'. [ 245.816100][ T8853] bridge0: port 3(team0) entered disabled state [ 245.970847][ T8860] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.915'. [ 246.013641][ T8860] netlink: 'syz.1.915': attribute type 9 has an invalid length. [ 246.031294][ T8860] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.915'. [ 246.059945][ T8860] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.915'. [ 246.281043][ T8867] netlink: 'syz.2.917': attribute type 15 has an invalid length. [ 246.296065][ T8867] netlink: 'syz.2.917': attribute type 7 has an invalid length. [ 246.540796][ T8884] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.924'. [ 246.737003][ T8888] netlink: 'syz.0.922': attribute type 21 has an invalid length. [ 251.412048][ T8941] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 251.492822][ T8941] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 251.528322][ T8949] netlink: 'syz.2.940': attribute type 21 has an invalid length. [ 251.659174][ T8952] __nla_validate_parse: 2 callbacks suppressed [ 251.659192][ T8952] netlink: 739 bytes leftover after parsing attributes in process `syz.0.941'. [ 251.762338][ T8954] netlink: 'syz.3.942': attribute type 9 has an invalid length. [ 251.805924][ T8954] netlink: 399 bytes leftover after parsing attributes in process `syz.3.942'. [ 251.959763][ T8959] netlink: 'syz.2.943': attribute type 21 has an invalid length. [ 252.013714][ T8962] netlink: 'syz.1.944': attribute type 29 has an invalid length. [ 252.042623][ T8962] netlink: 'syz.1.944': attribute type 29 has an invalid length. [ 252.080251][ T8967] netlink: 'syz.1.944': attribute type 29 has an invalid length. [ 252.130127][ T8962] netlink: 'syz.1.944': attribute type 29 has an invalid length. [ 252.159576][ T8959] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.943'. [ 252.207753][ T8959] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.943'. [ 252.235541][ T8971] netlink: 'syz.1.944': attribute type 29 has an invalid length. [ 252.256524][ T8970] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.946'. [ 252.313056][ T8970] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 252.358105][ T8970] CPU: 1 PID: 8970 Comm: syz.3.946 Not tainted syzkaller #0 [ 252.365497][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.375707][ T8970] Call Trace: [ 252.379046][ T8970] [ 252.382027][ T8970] dump_stack_lvl+0x18c/0x250 [ 252.386791][ T8970] ? show_regs_print_info+0x20/0x20 [ 252.392068][ T8970] ? load_image+0x420/0x420 [ 252.396670][ T8970] sysfs_warn_dup+0x8e/0xa0 [ 252.401239][ T8970] sysfs_do_create_link_sd+0xc0/0x110 [ 252.406681][ T8970] device_add_class_symlinks+0x1cf/0x240 [ 252.412397][ T8970] device_add+0x507/0xc20 [ 252.416806][ T8970] wiphy_register+0x1dad/0x2ae0 [ 252.421748][ T8970] ? cfg80211_event_work+0x40/0x40 [ 252.426923][ T8970] ? minstrel_ht_alloc+0x88a/0x990 [ 252.432116][ T8970] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 252.438265][ T8970] ieee80211_register_hw+0x3464/0x4250 [ 252.443825][ T8970] ? ieee80211_tasklet_handler+0x20/0x20 [ 252.449534][ T8970] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 252.455511][ T8970] ? __debug_object_init+0xec/0x450 [ 252.460805][ T8970] ? __asan_memset+0x22/0x40 [ 252.465469][ T8970] ? __hrtimer_init+0x186/0x270 [ 252.470393][ T8970] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 252.476202][ T8970] ? mac80211_hwsim_free+0x220/0x220 [ 252.481550][ T8970] ? rcu_is_watching+0x15/0xb0 [ 252.486383][ T8970] ? kstrndup+0xbd/0x140 [ 252.490779][ T8970] hwsim_new_radio_nl+0xdc9/0x1a90 [ 252.495963][ T8970] ? __nla_validate+0x50/0x50 [ 252.500717][ T8970] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 252.507129][ T8970] ? __nla_parse+0x40/0x50 [ 252.511621][ T8970] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 252.518019][ T8970] genl_family_rcv_msg_doit+0x211/0x310 [ 252.523712][ T8970] ? end_current_label_crit_section+0x170/0x170 [ 252.530029][ T8970] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 252.536006][ T8970] ? bpf_lsm_capable+0x9/0x10 [ 252.540756][ T8970] ? security_capable+0x89/0xb0 [ 252.545693][ T8970] genl_rcv_msg+0x619/0x7a0 [ 252.550270][ T8970] ? genl_bind+0x360/0x360 [ 252.554756][ T8970] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 252.561183][ T8970] netlink_rcv_skb+0x241/0x4d0 [ 252.566049][ T8970] ? genl_bind+0x360/0x360 [ 252.570533][ T8970] ? netlink_ack+0x1180/0x1180 [ 252.575395][ T8970] ? __lock_acquire+0x7d40/0x7d40 [ 252.580508][ T8970] ? net_generic+0x1e/0x240 [ 252.585350][ T8970] ? down_read+0x1ac/0x2e0 [ 252.589835][ T8970] genl_rcv+0x28/0x40 [ 252.593875][ T8970] netlink_unicast+0x751/0x8d0 [ 252.598732][ T8970] netlink_sendmsg+0x8d0/0xbf0 [ 252.603601][ T8970] ? netlink_getsockopt+0x590/0x590 [ 252.608878][ T8970] ? aa_sock_msg_perm+0x94/0x150 [ 252.613889][ T8970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.619344][ T8970] ? security_socket_sendmsg+0x80/0xa0 [ 252.624867][ T8970] ? netlink_getsockopt+0x590/0x590 [ 252.630233][ T8970] ____sys_sendmsg+0x5ba/0x960 [ 252.635081][ T8970] ? __asan_memset+0x22/0x40 [ 252.639740][ T8970] ? __sys_sendmsg_sock+0x30/0x30 [ 252.644835][ T8970] ? __import_iovec+0x5f2/0x850 [ 252.649763][ T8970] ? import_iovec+0x73/0xa0 [ 252.654337][ T8970] ___sys_sendmsg+0x2a6/0x360 [ 252.659084][ T8970] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.663964][ T8970] __se_sys_sendmsg+0x1c2/0x2b0 [ 252.668878][ T8970] ? __x64_sys_sendmsg+0x80/0x80 [ 252.673895][ T8970] ? lockdep_hardirqs_on+0x98/0x150 [ 252.679176][ T8970] do_syscall_64+0x55/0xa0 [ 252.683658][ T8970] ? clear_bhb_loop+0x40/0x90 [ 252.688400][ T8970] ? clear_bhb_loop+0x40/0x90 [ 252.693141][ T8970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.699195][ T8970] RIP: 0033:0x7f96bdf9cdd9 [ 252.703664][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.723434][ T8970] RSP: 002b:00007f96bc1b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.731923][ T8970] RAX: ffffffffffffffda RBX: 00007f96be216180 RCX: 00007f96bdf9cdd9 [ 252.740139][ T8970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 252.748168][ T8970] RBP: 00007f96be032d69 R08: 0000000000000000 R09: 0000000000000000 [ 252.756200][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.764231][ T8970] R13: 00007f96be216218 R14: 00007f96be216180 R15: 00007ffcb3d9a548 [ 252.772383][ T8970] [ 252.889509][ T8976] syzkaller0: entered promiscuous mode [ 252.895514][ T8976] syzkaller0: entered allmulticast mode [ 253.059696][ T8981] netlink: 'syz.3.949': attribute type 3 has an invalid length. [ 253.069559][ T8981] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.949'. [ 253.139991][ T8983] -: renamed from syzkaller0 [ 253.640434][ T8997] syzkaller0: entered promiscuous mode [ 253.696983][ T8997] syzkaller0: entered allmulticast mode [ 253.723190][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.955'. [ 255.931713][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.938326][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.387495][ T9037] netlink: 2 bytes leftover after parsing attributes in process `syz.1.964'. [ 256.413078][ T9037] hsr0: entered promiscuous mode [ 256.448899][ T9037] bridge0: port 3(hsr0) entered blocking state [ 256.469217][ T9037] bridge0: port 3(hsr0) entered disabled state [ 256.525702][ T9037] hsr0: entered allmulticast mode [ 256.531486][ T9037] hsr_slave_0: entered allmulticast mode [ 256.567314][ T9037] hsr_slave_1: entered allmulticast mode [ 256.675222][ T9037] bridge0: port 3(hsr0) entered blocking state [ 256.681844][ T9037] bridge0: port 3(hsr0) entered forwarding state [ 257.180476][ T9070] validate_nla: 3 callbacks suppressed [ 257.180495][ T9070] netlink: 'syz.1.973': attribute type 21 has an invalid length. [ 257.211342][ T9070] netlink: 'syz.1.973': attribute type 6 has an invalid length. [ 257.235729][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz.1.973'. [ 257.941530][ T9096] netlink: 'syz.0.984': attribute type 7 has an invalid length. [ 258.076911][ T9102] netlink: 'syz.3.983': attribute type 9 has an invalid length. [ 258.109161][ T9102] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.983'. [ 258.214144][ T9105] can: request_module (can-proto-0) failed. [ 258.376004][ T9107] netlink: 'syz.3.983': attribute type 9 has an invalid length. [ 258.383797][ T9107] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.983'. [ 258.452021][ T9113] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.986'. [ 258.613660][ T9116] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.988'. [ 259.369628][ T9130] bridge0: port 3(team0) entered disabled state [ 259.850357][ T9130] bridge_slave_1: left allmulticast mode [ 259.866738][ T9130] bridge_slave_1: left promiscuous mode [ 259.886372][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.904707][ T9130] bridge_slave_0: left allmulticast mode [ 260.950943][ T9130] bridge_slave_0: left promiscuous mode [ 260.977988][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.342520][ T9130] bond0: (slave bridge0): Releasing backup interface [ 261.844778][ T9140] netlink: 'syz.2.993': attribute type 21 has an invalid length. [ 261.852708][ T9140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.993'. [ 262.517196][ T9150] netlink: 'syz.1.997': attribute type 21 has an invalid length. [ 262.532190][ T9150] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 262.556067][ T9150] netlink: 55 bytes leftover after parsing attributes in process `syz.1.997'. [ 262.639228][ T9154] netlink: 160388 bytes leftover after parsing attributes in process `syz.3.998'. [ 263.740857][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 263.753874][ T9147] netlink: 196 bytes leftover after parsing attributes in process `syz.0.996'. [ 263.984906][ T9169] netlink: 'syz.3.1001': attribute type 2 has an invalid length. [ 264.104398][ T9171] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1003'. [ 266.189057][ T9208] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1015'. [ 266.607841][ T9217] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1020'. [ 266.738257][ T9220] netlink: 'syz.0.1019': attribute type 46 has an invalid length. [ 266.802774][ T9220] netlink: 'syz.0.1019': attribute type 46 has an invalid length. [ 267.697517][ T9247] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1028'. [ 268.114345][ T9270] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 268.122344][ T9270] netlink: 'syz.0.1034': attribute type 3 has an invalid length. [ 268.134163][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1034'. [ 268.218022][ T9272] netlink: 'syz.0.1034': attribute type 21 has an invalid length. [ 268.256015][ T9272] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1034'. [ 268.260787][ T9266] delete_channel: no stack [ 268.306548][ T9272] netlink: 'syz.0.1034': attribute type 4 has an invalid length. [ 268.353949][ T9272] netlink: 'syz.0.1034': attribute type 5 has an invalid length. [ 268.399011][ T9272] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1034'. [ 269.549144][ T9289] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1039'. [ 269.977284][ T9301] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1041'. [ 270.179455][ T9303] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1040'. [ 271.168731][ T9334] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1049'. [ 272.249044][ T9365] netlink: 'syz.0.1058': attribute type 19 has an invalid length. [ 272.271753][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'. [ 273.482099][ T9397] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 273.495354][ T9397] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1067'. [ 273.872311][ T9403] syzkaller0: entered promiscuous mode [ 273.880052][ T9403] syzkaller0: entered allmulticast mode [ 276.647527][ T9413] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 276.656321][ T9413] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 277.157663][ T9437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.286872][ T9437] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1077'. [ 278.653097][ T9478] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1089'. [ 278.662945][ T9478] netlink: zone id is out of range [ 278.739372][ T9481] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1089'. [ 278.769462][ T9481] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1089'. [ 278.779745][ T9478] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1089'. [ 278.789527][ T9481] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1089'. [ 279.151740][ T9503] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1095'. [ 279.172833][ T9503] netlink: 'syz.0.1095': attribute type 2 has an invalid length. [ 279.268619][ T9507] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 279.302619][ T9507] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 279.364281][ T9512] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 279.386298][ T9514] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 279.446055][ T9514] veth1_vlan: left promiscuous mode [ 279.544786][ T9512] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 279.585099][ T9519] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 279.603229][ T9521] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 279.625283][ T9524] netlink: 'syz.1.1097': attribute type 29 has an invalid length. [ 279.912332][ T9536] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1105'. [ 280.381210][ T9552] syzkaller0: entered allmulticast mode [ 280.512630][ T9552] syzkaller0: left allmulticast mode [ 280.957929][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.698184][ T9600] netlink: 'syz.1.1121': attribute type 1 has an invalid length. [ 281.706831][ T9600] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1121'. [ 283.386413][ T9636] sctp: [Deprecated]: syz.1.1133 (pid 9636) Use of int in maxseg socket option. [ 283.386413][ T9636] Use struct sctp_assoc_value instead [ 283.576273][ T9642] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1134'. [ 283.800177][ T9645] netlink: 'syz.1.1138': attribute type 4 has an invalid length. [ 283.827686][ T9645] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.1138'. [ 283.841913][ T9645] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 283.922638][ T9649] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1136'. [ 283.988609][ T9631] delete_channel: no stack [ 284.155864][ T9648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1137'. [ 284.343294][ T9661] validate_nla: 1 callbacks suppressed [ 284.343315][ T9661] netlink: 'syz.3.1147': attribute type 39 has an invalid length. [ 284.701945][ T9671] netlink: 'syz.2.1141': attribute type 21 has an invalid length. [ 284.780210][ T9671] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.850781][ T9688] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 285.872394][ T9688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1143'. [ 285.929563][ T9688] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 286.087332][ T9697] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1149'. [ 286.721204][ T9715] netlink: 'syz.2.1153': attribute type 21 has an invalid length. [ 286.767738][ T9715] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1153'. [ 286.791945][ T9715] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 287.191281][ T9730] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 287.377814][ T9734] netlink: 'syz.2.1159': attribute type 21 has an invalid length. [ 287.425678][ T9734] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.486322][ T9734] IPv6: Can't replace route, no match found [ 288.534850][ T5086] Bluetooth: hci2: ISO packet for unknown connection handle 3092 [ 292.809165][ T9771] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 292.825455][ T9771] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 293.697160][ T9790] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1174'. [ 294.606601][ T9790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.642206][ T9790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.664050][ T9790] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 294.682560][ T9790] bond0 (unregistering): Released all slaves [ 294.879728][ T9802] netlink: 'syz.0.1178': attribute type 17 has an invalid length. [ 294.907010][ T9802] netlink: 'syz.0.1178': attribute type 16 has an invalid length. [ 294.926638][ T9802] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1178'. [ 296.159677][ T9822] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1184'. [ 296.552705][ T9829] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1187'. [ 296.590633][ T9829] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1187'. [ 296.629869][ T9829] bridge_slave_1: entered promiscuous mode [ 296.931826][ T9834] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1189'. [ 299.069915][ T9859] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 299.109547][ T9859] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1196'. [ 299.145872][ T9859] hsr0: entered promiscuous mode [ 299.344042][ T9874] netlink: 'syz.2.1200': attribute type 5 has an invalid length. [ 299.439553][ T9883] netlink: 'syz.1.1201': attribute type 3 has an invalid length. [ 299.459910][ T9883] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1201'. [ 299.480846][ T9879] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1202'. [ 299.852258][ T9893] netlink: 'syz.3.1207': attribute type 10 has an invalid length. [ 303.734254][ T9932] netlink: 'syz.1.1221': attribute type 13 has an invalid length. [ 303.794304][ T9932] netlink: 'syz.1.1221': attribute type 58 has an invalid length. [ 303.842096][ T9932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1221'. [ 303.944463][ T9940] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1224'. [ 304.086046][ T9947] netlink: 'syz.0.1227': attribute type 13 has an invalid length. [ 304.093981][ T9947] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1227'. [ 304.126193][ T9947] erspan0: refused to change device tx_queue_len [ 304.309182][ T9953] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1229'. [ 304.425172][ T9955] netlink: 'syz.2.1228': attribute type 10 has an invalid length. [ 304.455185][ T9955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'. [ 304.851946][ T9975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1235'. [ 304.975592][ T9975] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 305.020174][ T9975] hsr_slave_0: left promiscuous mode [ 305.030204][ T9975] hsr_slave_1: left promiscuous mode [ 305.670243][T10002] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1241'. [ 305.686487][T10002] bridge_slave_1: default FDB implementation only supports local addresses [ 306.014129][T10018] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1248'. [ 306.202635][T10028] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1252'. [ 306.247959][T10027] netlink: 'syz.1.1251': attribute type 4 has an invalid length. [ 306.276782][T10027] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1251'. [ 306.359542][T10027] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 306.737889][T10053] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1257'. [ 307.092013][T10065] netlink: 'syz.3.1262': attribute type 10 has an invalid length. [ 307.513140][T10094] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 307.521322][T10094] netlink: 'syz.2.1270': attribute type 4 has an invalid length. [ 307.530888][T10094] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1270'. [ 307.653756][T10103] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 307.832013][T10108] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1272'. [ 307.843077][T10108] bridge_slave_1: default FDB implementation only supports local addresses [ 307.931722][T10108] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 307.942863][T10108] CPU: 0 PID: 10108 Comm: syz.2.1272 Not tainted syzkaller #0 [ 307.950405][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.960528][T10108] Call Trace: [ 307.963864][T10108] [ 307.966861][T10108] dump_stack_lvl+0x18c/0x250 [ 307.971615][T10108] ? show_regs_print_info+0x20/0x20 [ 307.976913][T10108] ? load_image+0x420/0x420 [ 307.981514][T10108] sysfs_warn_dup+0x8e/0xa0 [ 307.986076][T10108] sysfs_do_create_link_sd+0xc0/0x110 [ 307.991521][T10108] device_add_class_symlinks+0x1cf/0x240 [ 307.997230][T10108] device_add+0x507/0xc20 [ 308.001637][T10108] wiphy_register+0x1dad/0x2ae0 [ 308.006574][T10108] ? cfg80211_event_work+0x40/0x40 [ 308.011754][T10108] ? minstrel_ht_alloc+0x88a/0x990 [ 308.016960][T10108] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 308.023087][T10108] ieee80211_register_hw+0x3464/0x4250 [ 308.028712][T10108] ? ieee80211_tasklet_handler+0x20/0x20 [ 308.034409][T10108] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 308.040383][T10108] ? __debug_object_init+0xec/0x450 [ 308.045650][T10108] ? __asan_memset+0x22/0x40 [ 308.050310][T10108] ? __hrtimer_init+0x186/0x270 [ 308.055218][T10108] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 308.061008][T10108] ? mac80211_hwsim_free+0x220/0x220 [ 308.066323][T10108] ? rcu_is_watching+0x15/0xb0 [ 308.071130][T10108] ? kstrndup+0xbd/0x140 [ 308.075423][T10108] hwsim_new_radio_nl+0xdc9/0x1a90 [ 308.080600][T10108] ? __nla_validate+0x50/0x50 [ 308.085482][T10108] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 308.091876][T10108] ? __nla_parse+0x40/0x50 [ 308.096342][T10108] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 308.102733][T10108] genl_family_rcv_msg_doit+0x211/0x310 [ 308.108316][T10108] ? end_current_label_crit_section+0x170/0x170 [ 308.114921][T10108] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 308.120863][T10108] ? bpf_lsm_capable+0x9/0x10 [ 308.125592][T10108] ? security_capable+0x89/0xb0 [ 308.130489][T10108] genl_rcv_msg+0x619/0x7a0 [ 308.135036][T10108] ? genl_bind+0x360/0x360 [ 308.139950][T10108] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 308.146326][T10108] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 308.152954][T10108] ? perf_trace_lock+0xfc/0x3b0 [ 308.157847][T10108] netlink_rcv_skb+0x241/0x4d0 [ 308.162656][T10108] ? genl_bind+0x360/0x360 [ 308.167100][T10108] ? netlink_ack+0x1180/0x1180 [ 308.171918][T10108] ? __lock_acquire+0x7d40/0x7d40 [ 308.176994][T10108] ? down_read+0x1ac/0x2e0 [ 308.181462][T10108] genl_rcv+0x28/0x40 [ 308.185487][T10108] netlink_unicast+0x751/0x8d0 [ 308.190404][T10108] netlink_sendmsg+0x8d0/0xbf0 [ 308.195268][T10108] ? lockdep_hardirqs_on+0x98/0x150 [ 308.200537][T10108] ? netlink_getsockopt+0x590/0x590 [ 308.205784][T10108] ? aa_sock_msg_perm+0x94/0x150 [ 308.210773][T10108] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 308.216101][T10108] ? security_socket_sendmsg+0x80/0xa0 [ 308.221593][T10108] ? netlink_getsockopt+0x590/0x590 [ 308.226904][T10108] ____sys_sendmsg+0x5ba/0x960 [ 308.231713][T10108] ? __asan_memset+0x22/0x40 [ 308.236346][T10108] ? __sys_sendmsg_sock+0x30/0x30 [ 308.241400][T10108] ? __import_iovec+0x5f2/0x850 [ 308.246302][T10108] ? import_iovec+0x73/0xa0 [ 308.250851][T10108] ___sys_sendmsg+0x2a6/0x360 [ 308.255568][T10108] ? __sys_sendmsg+0x2a0/0x2a0 [ 308.260390][T10108] ? trace_call_bpf+0xc3/0x6c0 [ 308.265219][T10108] __se_sys_sendmsg+0x1c2/0x2b0 [ 308.270104][T10108] ? __x64_sys_sendmsg+0x80/0x80 [ 308.275097][T10108] ? lockdep_hardirqs_on+0x98/0x150 [ 308.280335][T10108] do_syscall_64+0x55/0xa0 [ 308.284782][T10108] ? clear_bhb_loop+0x40/0x90 [ 308.289498][T10108] ? clear_bhb_loop+0x40/0x90 [ 308.294210][T10108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.300136][T10108] RIP: 0033:0x7f74b079cdd9 [ 308.304588][T10108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.324237][T10108] RSP: 002b:00007f74b15df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.332685][T10108] RAX: ffffffffffffffda RBX: 00007f74b0a16090 RCX: 00007f74b079cdd9 [ 308.340779][T10108] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 308.348799][T10108] RBP: 00007f74b0832d69 R08: 0000000000000000 R09: 0000000000000000 [ 308.356836][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.364853][T10108] R13: 00007f74b0a16128 R14: 00007f74b0a16090 R15: 00007ffcd8ec09e8 [ 308.372911][T10108] [ 308.644229][T10117] netlink: 'syz.2.1275': attribute type 15 has an invalid length. [ 309.838703][T10156] __nla_validate_parse: 2 callbacks suppressed [ 309.838719][T10156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1291'. [ 309.942688][ T5086] Bluetooth: hci1: ISO packet for unknown connection handle 2671 [ 310.898362][T10176] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1297'. [ 313.499938][T10190] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1296'. [ 313.510755][T10190] bridge_slave_1: default FDB implementation only supports local addresses [ 313.682438][T10204] netlink: 'syz.3.1305': attribute type 2 has an invalid length. [ 313.701005][T10204] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1305'. [ 313.728411][T10204] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1305'. [ 313.790555][T10205] netlink: 'syz.2.1304': attribute type 19 has an invalid length. [ 315.280962][T10227] syzkaller0: entered promiscuous mode [ 315.298318][T10227] syzkaller0: entered allmulticast mode [ 315.433091][T10243] netlink: 'syz.3.1315': attribute type 9 has an invalid length. [ 315.449371][T10243] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1315'. [ 317.349943][T10242] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1314'. [ 317.365025][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.365555][T10242] bridge_slave_1: default FDB implementation only supports local addresses [ 317.371475][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.618030][T10264] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1319'. [ 317.733166][T10270] netlink: 13907 bytes leftover after parsing attributes in process `syz.3.1320'. [ 318.212384][T10295] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1328'. [ 318.760850][T10313] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1334'. [ 318.884102][T10315] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 318.898350][T10315] team0: Device ipvlan1 failed to register rx_handler [ 319.832379][T10353] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 319.842630][T10358] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 319.854658][T10353] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1345'. [ 319.865608][T10353] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 319.996771][T10362] netlink: 'syz.0.1348': attribute type 21 has an invalid length. [ 320.020000][T10362] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1348'. [ 320.104385][T10367] netlink: 'syz.1.1349': attribute type 21 has an invalid length. [ 320.123450][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 320.163429][T10367] netlink: 'syz.1.1349': attribute type 21 has an invalid length. [ 320.271631][T10373] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1350'. [ 320.284454][T10373] netlink: del zone limit has 4 unknown bytes [ 322.009609][T10389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1355'. [ 322.110121][T10395] netlink: 'syz.2.1357': attribute type 28 has an invalid length. [ 322.129034][T10395] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1357'. [ 322.275776][T10402] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1358'. [ 322.310221][T10402] netlink: 'syz.2.1358': attribute type 21 has an invalid length. [ 323.041089][T10416] netlink: 'syz.1.1363': attribute type 19 has an invalid length. [ 323.150016][T10421] ÿÿÿÿÿÿ: renamed from bond_slave_1 (while UP) [ 323.289233][T10427] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 323.298366][T10427] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 323.487994][T10431] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 323.524861][T10431] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 324.308638][T10457] netlink: 'syz.2.1373': attribute type 10 has an invalid length. [ 324.429617][T10459] netlink: 'syz.0.1374': attribute type 9 has an invalid length. [ 324.447472][T10459] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1374'. [ 324.506232][T10457] team_slave_0: left promiscuous mode [ 324.516167][T10457] team_slave_0: left allmulticast mode [ 324.548304][T10457] team0 (unregistering): Port device team_slave_0 removed [ 324.588095][T10457] team_slave_1: left promiscuous mode [ 324.612718][T10457] team_slave_1: left allmulticast mode [ 324.661816][T10457] team0 (unregistering): Port device team_slave_1 removed [ 324.745074][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 326.170734][T10509] cgroup: fork rejected by pids controller in /syz1 [ 326.197017][T10512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1391'. [ 326.224765][T10512] tc_dump_action: action bad kind [ 326.410663][ T5774] cgroup: fork rejected by pids controller in /syz2 [ 326.509676][T10519] netlink: 'syz.3.1393': attribute type 21 has an invalid length. [ 328.651435][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.661391][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.669831][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.679718][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.691187][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 328.704917][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.203376][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.233142][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.243198][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.252239][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.261758][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.269666][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.404460][ T3522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.465895][T10541] chnl_net:caif_netlink_parms(): no params data found [ 329.558315][ T3522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.730172][ T3522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.877689][ T3522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.031214][T10541] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.055891][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.063191][T10541] bridge_slave_0: entered allmulticast mode [ 330.090685][T10541] bridge_slave_0: entered promiscuous mode [ 330.126581][T10541] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.134127][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.147886][T10541] bridge_slave_1: entered allmulticast mode [ 330.169676][T10541] bridge_slave_1: entered promiscuous mode [ 330.222290][T10563] netlink: 'syz.3.1404': attribute type 9 has an invalid length. [ 330.230218][T10563] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1404'. [ 330.278569][T10561] netlink: 'syz.0.1412': attribute type 3 has an invalid length. [ 330.298844][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1412'. [ 330.482477][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 330.568986][T10541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.662154][T10541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.715085][T10547] chnl_net:caif_netlink_parms(): no params data found [ 330.799134][ T5790] Bluetooth: hci0: command tx timeout [ 330.819556][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.912281][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.993275][T10541] team0: Port device team_slave_0 added [ 331.031999][T10541] team0: Port device team_slave_1 added [ 331.108793][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.227770][T10587] netlink: 'syz.3.1408': attribute type 21 has an invalid length. [ 331.353737][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.367221][ T5790] Bluetooth: hci1: command tx timeout [ 331.555352][T10541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.562384][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.683245][T10541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.698781][T10541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.705888][T10541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.733193][T10541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.796196][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.803489][T10547] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.833351][T10547] bridge_slave_0: entered allmulticast mode [ 331.851428][T10547] bridge_slave_0: entered promiscuous mode [ 331.888072][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.904821][T10547] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.922601][T10547] bridge_slave_1: entered allmulticast mode [ 331.947679][T10547] bridge_slave_1: entered promiscuous mode [ 332.295958][T10547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.322007][T10541] hsr_slave_0: entered promiscuous mode [ 332.336140][T10541] hsr_slave_1: entered promiscuous mode [ 332.352727][T10541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.380803][T10541] Cannot create hsr debugfs directory [ 332.474177][T10547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.505911][ T3522] tipc: Left network mode [ 332.685268][T10547] team0: Port device team_slave_0 added [ 332.749334][T10547] team0: Port device team_slave_1 added [ 332.874732][ T5790] Bluetooth: hci0: command tx timeout [ 333.435065][ T5790] Bluetooth: hci1: command tx timeout [ 333.503137][T10547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.517459][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.610325][T10547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.967014][T10547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.994691][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.064583][T10547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.136947][T10652] IPv6: …: Disabled Multicast RS [ 334.298452][T10663] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1420'. [ 334.500170][T10547] hsr_slave_0: entered promiscuous mode [ 334.509645][T10547] hsr_slave_1: entered promiscuous mode [ 334.516393][T10547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.524001][T10547] Cannot create hsr debugfs directory [ 334.956344][ T5790] Bluetooth: hci0: command tx timeout [ 335.242229][T10541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.273499][T10541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.318001][T10541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.382056][T10541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.514668][ T5790] Bluetooth: hci1: command tx timeout [ 335.769859][T10541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.830723][T10541] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.881771][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.889074][ T9261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.921280][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.928530][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.953553][T10547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.967593][T10547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.993991][T10547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.029651][T10547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.279187][T10547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.337364][ T3522] hsr_slave_0: left promiscuous mode [ 336.349691][ T3522] hsr_slave_1: left promiscuous mode [ 336.356864][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.364356][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.372667][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.380788][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.388886][ T3522] hsr0: left allmulticast mode [ 336.395123][ T3522] bridge0: port 3(hsr0) entered disabled state [ 336.405651][ T3522] bridge_slave_1: left allmulticast mode [ 336.411340][ T3522] bridge_slave_1: left promiscuous mode [ 336.417488][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.427728][ T3522] bridge_slave_0: left allmulticast mode [ 336.433401][ T3522] bridge_slave_0: left promiscuous mode [ 336.439958][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.453309][ T3522] hsr_slave_0: left promiscuous mode [ 336.459987][ T3522] hsr_slave_1: left promiscuous mode [ 336.468918][ T3522] bridge_slave_1: left allmulticast mode [ 336.475530][ T3522] bridge_slave_1: left promiscuous mode [ 336.481289][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.491124][ T3522] bridge_slave_0: left allmulticast mode [ 336.497109][ T3522] bridge_slave_0: left promiscuous mode [ 336.502808][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.536409][ T3522] veth0_macvtap: left promiscuous mode [ 336.545562][ T3522] veth1_macvtap: left promiscuous mode [ 336.551163][ T3522] veth0_macvtap: left promiscuous mode [ 336.822670][ T3522] .` (unregistering): (slave geneve0): Releasing backup interface [ 337.050440][ T5790] Bluetooth: hci0: command tx timeout [ 337.196133][ T3522] .` (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface [ 337.241380][ T3522] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.555639][ T3522] .` (unregistering): (slave bridge0): Releasing backup interface [ 337.565604][ T3522] .` (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 337.578812][ T3522] .` (unregistering): Released all slaves [ 337.610205][ T5790] Bluetooth: hci1: command tx timeout [ 337.701097][ T3522] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 338.099075][ T3522] bond0 (unregistering): (slave 5AþÿÙ): Releasing backup interface [ 338.150030][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.432239][ T3522] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 338.441151][ T3522] bond0 (unregistering): Released all slaves [ 338.571758][T10547] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.604059][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.612136][ T9263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.682326][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.689578][ T9263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.862491][T10541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.978539][T10541] veth0_vlan: entered promiscuous mode [ 339.020998][T10541] veth1_vlan: entered promiscuous mode [ 339.143452][T10541] veth0_macvtap: entered promiscuous mode [ 339.171693][T10541] veth1_macvtap: entered promiscuous mode [ 339.232655][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.259081][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.274280][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.294401][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.326784][T10541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.384266][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.400779][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.411486][T10541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 339.421523][T10541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.433895][T10541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.485749][T10541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.506783][T10541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.524404][T10541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.533797][T10541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.565024][T10547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.759563][T10547] veth0_vlan: entered promiscuous mode [ 339.781483][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.796221][T10547] veth1_vlan: entered promiscuous mode [ 339.813324][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.872313][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.884098][T10547] veth0_macvtap: entered promiscuous mode [ 339.891560][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.919669][T10547] veth1_macvtap: entered promiscuous mode [ 339.973843][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.004651][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.024123][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.035702][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.055119][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.084784][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.096891][T10547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.128550][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.156263][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.194352][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 340.214606][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.249459][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.276673][T10718] netlink: 'syz.2.1421': attribute type 9 has an invalid length. [ 340.286159][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.304925][T10718] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1421'. [ 340.323801][T10547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.342355][T10716] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1429'. [ 340.378096][T10715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.399503][T10715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.423787][T10715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.488114][T10715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.662914][T10547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.679624][T10547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.689005][T10547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.698225][T10547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.711645][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 340.794381][T10729] netlink: 'syz.0.1423': attribute type 4 has an invalid length. [ 341.031910][ T9046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.080498][ T9046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.255031][ T9046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.262939][ T9046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.414158][T10744] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1425'. [ 341.467592][T10744] bridge_slave_1: default FDB implementation only supports local addresses [ 342.203545][T10770] netlink: 'syz.3.1433': attribute type 21 has an invalid length. [ 342.225002][T10770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1433'. [ 342.389251][T10770] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1433'. [ 342.611021][T10770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.754161][T10788] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1437'. [ 342.821530][T10790] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1437'. [ 343.393261][T10810] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1441'. [ 343.414756][T10803] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1439'. [ 343.690913][T10809] bridge_slave_1: default FDB implementation only supports local addresses [ 344.203904][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.226768][T10836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.285815][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.300232][T10836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.648420][T10844] netlink: 'syz.1.1447': attribute type 21 has an invalid length. [ 344.720134][T10848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.798965][T10857] sock: sock_set_timeout: `syz.0.1450' (pid 10857) tries to set negative timeout [ 345.011468][T10863] IPv6: pim6reg1: Disabled Multicast RS [ 345.395550][T10874] netlink: 'syz.1.1452': attribute type 2 has an invalid length. [ 345.434256][T10874] netlink: 'syz.1.1452': attribute type 8 has an invalid length. [ 345.494979][T10874] __nla_validate_parse: 4 callbacks suppressed [ 345.494999][T10874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1452'. [ 345.836683][T10880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1452'. [ 345.871339][T10876] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1453'. [ 346.015211][T10876] bridge_slave_1: default FDB implementation only supports local addresses [ 346.141007][T10881] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 346.470166][T10881] team0 (unregistering): Port device team_slave_0 removed [ 346.523225][T10881] team0 (unregistering): Port device team_slave_1 removed [ 346.598236][T10889] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1458'. [ 346.764297][T10894] netlink: 'syz.3.1459': attribute type 21 has an invalid length. [ 346.813747][T10896] netlink: 'syz.0.1461': attribute type 21 has an invalid length. [ 346.828784][T10896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1461'. [ 346.878198][T10898] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1462'. [ 346.908422][T10896] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1461'. [ 346.958827][T10896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.015751][T10901] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1463'. [ 347.329525][T10909] netlink: 'syz.0.1466': attribute type 6 has an invalid length. [ 347.359359][T10909] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1466'. [ 347.397346][T10914] netlink: 'syz.0.1466': attribute type 6 has an invalid length. [ 347.425050][T10914] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1466'. [ 347.697542][T10920] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 348.200910][T10932] bridge_slave_1: default FDB implementation only supports local addresses [ 350.060492][T10960] €Â0: renamed from batadv_slave_1 (while UP) [ 351.583809][T10958] netlink: 'syz.0.1480': attribute type 6 has an invalid length. [ 351.612333][T10958] __nla_validate_parse: 3 callbacks suppressed [ 351.612352][T10958] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1480'. [ 351.688877][T10961] tap0: tun_chr_ioctl cmd 1074025677 [ 351.696059][T10961] tap0: linktype set to 17 [ 351.701264][T10966] tap0: tun_chr_ioctl cmd 2147767511 [ 353.175998][T11001] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 353.184001][T11001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1490'. [ 353.258304][T11001] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 353.296062][T11002] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 353.333545][T11001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1490'. [ 353.360225][T11002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1490'. [ 353.392221][T11002] netlink: 'syz.3.1490': attribute type 10 has an invalid length. [ 353.404738][T11002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1490'. [ 353.608848][T11014] netlink: 'syz.0.1493': attribute type 7 has an invalid length. [ 353.678645][T11017] netlink: 'syz.1.1494': attribute type 2 has an invalid length. [ 353.695571][T11017] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1494'. [ 354.012561][T11014] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 354.034694][T11014] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1493'. [ 355.153901][T11030] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 355.166799][T11030] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1499'. [ 355.177860][T11040] netlink: 'syz.2.1499': attribute type 4 has an invalid length. [ 355.200650][T11040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1499'. [ 355.259739][T11040] .`: renamed from bond0 (while UP) [ 356.021790][T11066] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1508'. [ 356.085925][T11066] openvswitch: netlink: Key type 4112 is out of range max 32 [ 358.234213][T11135] validate_nla: 1 callbacks suppressed [ 358.234247][T11135] netlink: 'syz.3.1526': attribute type 21 has an invalid length. [ 358.295325][T11135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.302883][T11135] IPv6: NLM_F_CREATE should be set when creating new route [ 358.310781][T11135] IPv6: NLM_F_CREATE should be set when creating new route [ 358.318418][T11135] IPv6: NLM_F_CREATE should be set when creating new route [ 361.882985][T11211] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 361.891389][T11211] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1546'. [ 361.900654][T11211] .`: entered promiscuous mode [ 361.906815][T11211] bond_slave_0: entered promiscuous mode [ 361.915544][T11211] bond_slave_1: entered promiscuous mode [ 361.922469][T11211] 8021q: adding VLAN 0 to HW filter on device .` [ 361.933356][T11211] bridge0: port 3(.`) entered blocking state [ 361.939794][T11211] bridge0: port 3(.`) entered disabled state [ 361.946594][T11211] .`: entered allmulticast mode [ 361.953049][T11211] bond_slave_0: entered allmulticast mode [ 361.974687][T11211] bond_slave_1: entered allmulticast mode [ 361.995112][T11211] bridge0: port 3(.`) entered blocking state [ 362.001336][T11211] bridge0: port 3(.`) entered forwarding state [ 362.035395][T11214] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 362.049131][T11214] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1546'. [ 362.266663][T11226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1550'. [ 362.288832][T11226] bridge0: port 3(.`) entered disabled state [ 362.329640][T11229] netlink: 'syz.0.1551': attribute type 4 has an invalid length. [ 362.341159][T11229] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1551'. [ 362.358550][T11226] .` (unregistering): left allmulticast mode [ 362.370451][T11226] bond_slave_0: left allmulticast mode [ 362.379553][T11226] bond_slave_1: left allmulticast mode [ 362.386492][T11226] bridge0: port 3(.`) entered disabled state [ 362.456409][T11226] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.489121][T11226] bond_slave_0: left promiscuous mode [ 362.521197][T11226] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.534222][T11226] bond_slave_1: left promiscuous mode [ 362.563998][T11226] .` (unregistering): Released all slaves [ 362.603177][T11232] netlink: 63747 bytes leftover after parsing attributes in process `syz.0.1552'. [ 362.697384][T11226] syz.2.1550 (11226) used greatest stack depth: 16552 bytes left [ 363.724821][T11282] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1566'. [ 364.282195][T11305] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1577'. [ 365.424341][T11338] netlink: 'syz.2.1586': attribute type 5 has an invalid length. [ 365.436387][T11338] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1586'. [ 365.557978][T11349] sock: sock_timestamping_bind_phc: sock not bind to device [ 365.997868][T11359] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1591'. [ 366.094863][T11359] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 366.104418][T11360] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.1592'. [ 366.148202][T11361] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 366.724394][T11353] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 366.739478][T11369] netlink: 'syz.2.1594': attribute type 3 has an invalid length. [ 366.780986][T11369] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 366.803611][T11369] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 366.825543][T11353] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 367.035952][T11353] .`: renamed from bond0 (while UP) [ 367.321379][T11364] tap0: tun_chr_ioctl cmd 1074025677 [ 367.337469][T11364] tap0: linktype set to 17 [ 367.365092][T11377] tap0: tun_chr_ioctl cmd 2147767511 [ 367.864759][T11398] netlink: 'syz.2.1602': attribute type 21 has an invalid length. [ 368.187864][T11408] __nla_validate_parse: 5 callbacks suppressed [ 368.187883][T11408] netlink: 64855 bytes leftover after parsing attributes in process `syz.3.1605'. [ 370.123922][T11437] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1610'. [ 370.474027][T11437] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.579330][T11437] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.633148][T11437] .` (unregistering): Released all slaves [ 371.677839][T11453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1616'. [ 372.934956][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 372.944143][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 373.045002][T11478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 373.078230][T11479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1632'. [ 373.295732][T11481] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1625'. [ 373.299867][T11486] netlink: 'syz.2.1626': attribute type 29 has an invalid length. [ 373.331700][T11486] netlink: 'syz.2.1626': attribute type 29 has an invalid length. [ 373.348970][T11489] netlink: 'syz.2.1626': attribute type 29 has an invalid length. [ 373.369814][T11486] netlink: 'syz.2.1626': attribute type 29 has an invalid length. [ 373.392312][T11486] netlink: 'syz.2.1626': attribute type 29 has an invalid length. [ 373.593936][T11494] netlink: 'syz.3.1629': attribute type 29 has an invalid length. [ 373.626653][T11494] netlink: 'syz.3.1629': attribute type 29 has an invalid length. [ 373.897070][T11505] pim6reg1: entered promiscuous mode [ 373.930320][T11505] pim6reg1: entered allmulticast mode [ 377.264303][T11536] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1639'. [ 377.322457][T11536] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 377.333530][T11536] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 377.526232][T11542] tap0: tun_chr_ioctl cmd 1074025677 [ 377.587666][T11542] tap0: linktype set to 17 [ 377.685810][T11547] tap0: tun_chr_ioctl cmd 2147767511 [ 377.766609][T11548] delete_channel: no stack [ 377.788767][T11548] delete_channel: no stack [ 378.845699][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.855256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.970634][T11573] netlink: 'syz.0.1649': attribute type 10 has an invalid length. [ 378.985182][T11573] .`: (slave dummy0): Enslaving as an active interface with an up link [ 379.085918][T11573] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1649'. [ 381.117524][T11616] netlink: 'syz.0.1660': attribute type 10 has an invalid length. [ 381.131456][T11616] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1660'. [ 381.383471][T11620] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 381.421502][T11620] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 382.125357][T11644] netlink: 'syz.1.1669': attribute type 29 has an invalid length. [ 382.141933][T11644] netlink: 'syz.1.1669': attribute type 29 has an invalid length. [ 382.160551][T11644] netlink: 'syz.1.1669': attribute type 29 has an invalid length. [ 382.184986][T11644] netlink: 'syz.1.1669': attribute type 29 has an invalid length. [ 382.398661][T11654] netlink: 'syz.0.1670': attribute type 10 has an invalid length. [ 382.415578][T11657] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1671'. [ 382.779544][T11666] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 382.795483][T11666] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 383.218958][T11688] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1680'. [ 383.587055][T11704] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 383.608474][T11704] netlink: 'syz.2.1686': attribute type 4 has an invalid length. [ 383.624548][T11704] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1686'. [ 383.965594][T11713] netlink: 'syz.3.1688': attribute type 10 has an invalid length. [ 384.412468][T11713] wg1: entered promiscuous mode [ 384.426621][T11713] wg1: entered allmulticast mode [ 384.433465][T11713] team0: Device wg1 is of different type [ 384.499814][T11712] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 384.740629][T11729] netlink: 127924 bytes leftover after parsing attributes in process `syz.2.1692'. [ 384.767231][T11729] netlink: 16384 bytes leftover after parsing attributes in process `syz.2.1692'. [ 385.918238][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 385.987127][T11776] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 386.146615][T11776] team0: Device wg1 is of different type [ 386.729839][T11793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1710'. [ 386.762952][T11793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1710'. [ 387.888176][ T9262] tipc: Subscription rejected, illegal request [ 388.057067][ T5790] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 388.069872][ T5790] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 388.573563][T11832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.581292][T11832] IPv6: NLM_F_CREATE should be set when creating new route [ 388.589352][T11832] IPv6: NLM_F_CREATE should be set when creating new route [ 388.597127][T11832] IPv6: NLM_F_CREATE should be set when creating new route [ 388.758965][T11830] netlink: 'syz.0.1720': attribute type 10 has an invalid length. [ 390.203115][T11846] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1725'. [ 390.217056][T11846] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 390.233320][T11846] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 391.459286][T11870] netlink: 'syz.2.1734': attribute type 29 has an invalid length. [ 391.575039][T11870] netlink: 'syz.2.1734': attribute type 29 has an invalid length. [ 391.688018][T11871] netlink: 'syz.2.1734': attribute type 29 has an invalid length. [ 392.077337][T11878] netlink: 'syz.2.1736': attribute type 10 has an invalid length. [ 393.874142][T11923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1749'. [ 394.535668][T11933] sock: sock_set_timeout: `syz.0.1751' (pid 11933) tries to set negative timeout [ 397.546125][T11944] netlink: 'syz.2.1753': attribute type 10 has an invalid length. [ 398.064411][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1757'. [ 398.088123][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1757'. [ 398.106555][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1757'. [ 398.128952][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1757'. [ 398.600541][T11969] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 398.618773][T11969] netlink: 'syz.1.1763': attribute type 10 has an invalid length. [ 398.664801][T11969] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1763'. [ 398.674348][T11969] openvswitch: netlink: Message has 4 unknown bytes. [ 398.848788][T11982] netlink: 'syz.0.1767': attribute type 10 has an invalid length. [ 398.955707][T11982] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.963253][T11982] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.233046][T11991] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1770'. [ 399.792526][T12014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1778'. [ 399.988986][T12024] sctp: [Deprecated]: syz.3.1780 (pid 12024) Use of int in maxseg socket option. [ 399.988986][T12024] Use struct sctp_assoc_value instead [ 400.049673][T12028] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1783'. [ 400.078768][T12028] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1783'. [ 400.091533][T12028] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1783'. [ 400.143925][T12034] C: renamed from team_slave_0 [ 400.152865][T12034] netlink: 'syz.0.1784': attribute type 3 has an invalid length. [ 400.162855][T12034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 401.459641][T12048] syzkaller0: entered promiscuous mode [ 401.467290][T12048] syzkaller0: entered allmulticast mode [ 401.575565][T12070] netlink: 'syz.0.1796': attribute type 10 has an invalid length. [ 401.962103][T12095] netlink: 'syz.1.1803': attribute type 2 has an invalid length. [ 401.990834][T12095] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 402.011734][T12095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.039849][T12097] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 402.140162][T12095] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 402.155881][T12095] hsr0: entered promiscuous mode [ 402.162229][T12095] bridge0: port 3(hsr0) entered blocking state [ 402.179980][T12095] bridge0: port 3(hsr0) entered disabled state [ 402.197118][T12095] hsr0: entered allmulticast mode [ 402.203180][T12095] hsr_slave_0: entered allmulticast mode [ 402.215342][T12095] hsr_slave_1: entered allmulticast mode [ 402.276179][T12095] bridge0: port 3(hsr0) entered blocking state [ 402.283321][T12095] bridge0: port 3(hsr0) entered forwarding state [ 402.735807][T12119] validate_nla: 1 callbacks suppressed [ 402.735825][T12119] netlink: 'syz.2.1808': attribute type 13 has an invalid length. [ 403.085564][T12132] netlink: 'syz.2.1813': attribute type 2 has an invalid length. [ 403.093545][T12132] __nla_validate_parse: 9 callbacks suppressed [ 403.093559][T12132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1813'. [ 403.111566][T12132] netlink: 'syz.2.1813': attribute type 2 has an invalid length. [ 403.122421][T12132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1813'. [ 403.214819][T12136] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1812'. [ 403.225902][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1812'. [ 404.033744][T12157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1818'. [ 404.066001][T12157] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1818'. [ 404.100746][T12157] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1818'. [ 404.129079][T12165] netlink: 'syz.1.1818': attribute type 28 has an invalid length. [ 404.142743][T12165] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1818'. [ 404.159630][T12167] IPv6: Can't replace route, no match found [ 404.301872][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1824'. [ 404.319717][T12174] netlink: 'syz.0.1824': attribute type 12 has an invalid length. [ 404.333521][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1824'. [ 404.538153][T12175] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 404.975007][T12192] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 405.220972][T12200] netlink: 'syz.3.1832': attribute type 9 has an invalid length. [ 405.799125][T12219] netlink: del zone limit has 4 unknown bytes [ 406.932013][T12243] netlink: 'syz.1.1841': attribute type 21 has an invalid length. [ 406.942848][T12243] netlink: 'syz.1.1841': attribute type 1 has an invalid length. [ 408.128834][T12271] netlink: 'syz.2.1847': attribute type 10 has an invalid length. [ 408.159375][T12271] __nla_validate_parse: 5 callbacks suppressed [ 408.159390][T12271] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1847'. [ 408.180271][T12274] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1849'. [ 408.204733][T12274] ksmbd: Unknown IPC event: 0, ignore. [ 408.211807][T12271] hsr0: entered promiscuous mode [ 408.238514][T12271] bridge0: port 3(hsr0) entered blocking state [ 408.254878][T12271] bridge0: port 3(hsr0) entered disabled state [ 408.261424][T12271] hsr0: entered allmulticast mode [ 408.292827][T12271] hsr_slave_0: entered allmulticast mode [ 408.299005][T12271] hsr_slave_1: entered allmulticast mode [ 408.311746][T12271] bridge0: port 3(hsr0) entered blocking state [ 408.318137][T12271] bridge0: port 3(hsr0) entered forwarding state [ 408.497061][T12283] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1850'. [ 408.835280][T12294] netlink: 'syz.1.1852': attribute type 21 has an invalid length. [ 408.843670][T12294] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1852'. [ 408.859186][T12294] netlink: 'syz.1.1852': attribute type 2 has an invalid length. [ 408.868809][T12294] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 408.936470][T12294] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1852'. [ 409.290515][T12305] delete_channel: no stack [ 409.570532][T12317] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.1859'. [ 409.595648][T12317] netlink: 'syz.1.1859': attribute type 33 has an invalid length. [ 412.547388][T12395] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.1882'. [ 412.592788][T12397] netlink: 'syz.0.1883': attribute type 16 has an invalid length. [ 412.603088][T12397] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1883'. [ 413.383574][T12423] pim6reg1: entered promiscuous mode [ 413.390994][T12423] pim6reg1: entered allmulticast mode [ 413.406358][T12426] delete_channel: no stack [ 413.410953][T12426] delete_channel: no stack [ 414.015444][T12453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.212293][T12469] netlink: 'syz.0.1903': attribute type 2 has an invalid length. [ 414.224280][T12469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1903'. [ 414.352343][T12473] netlink: 539 bytes leftover after parsing attributes in process `syz.2.1904'. [ 414.999420][T12500] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1911'. [ 415.230531][T12509] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1917'. [ 415.265522][T12510] netlink: 'syz.0.1916': attribute type 21 has an invalid length. [ 415.334924][T12511] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 416.992497][T12543] bridge0: port 4(veth0_to_bridge) entered blocking state [ 417.027387][T12543] bridge0: port 4(veth0_to_bridge) entered disabled state [ 417.057211][T12543] veth0_to_bridge: entered allmulticast mode [ 417.088187][T12543] veth0_to_bridge: entered promiscuous mode [ 417.109113][T12543] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.166434][T12543] bridge0: port 4(veth0_to_bridge) entered blocking state [ 417.174228][T12543] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 417.195027][T12546] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1926'. [ 417.619989][T12560] netlink: 'syz.3.1932': attribute type 21 has an invalid length. [ 417.634211][T12560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1932'. [ 418.617792][T12595] netlink: 'syz.1.1940': attribute type 10 has an invalid length. [ 418.626031][T12595] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.1940'. [ 442.262119][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.272289][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.280747][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.289607][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.298069][ T5786] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 442.305813][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.889876][ T5783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 442.899283][ T5783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 442.909900][ T5783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 442.918146][ T5783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 442.929506][ T5783] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 442.937255][ T5783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 443.096783][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.109781][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.118096][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.126954][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.135513][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 443.145052][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.590233][ T5790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 443.606959][ T5790] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 443.615691][ T5790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 443.634410][ T5790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 443.642410][ T5790] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 443.650101][ T5790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.395018][ T5790] Bluetooth: hci5: command tx timeout [ 444.427717][T12620] chnl_net:caif_netlink_parms(): no params data found [ 444.545099][T12620] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.552502][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.563646][T12620] bridge_slave_0: entered allmulticast mode [ 444.571539][T12620] bridge_slave_0: entered promiscuous mode [ 444.591119][T12620] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.599907][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.609792][T12620] bridge_slave_1: entered allmulticast mode [ 444.618771][T12620] bridge_slave_1: entered promiscuous mode [ 444.664265][T12620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.680898][T12620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.742703][T12620] team0: Port device team_slave_0 added [ 444.753014][T12620] team0: Port device team_slave_1 added [ 444.824242][T12620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.858062][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.890886][T12620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.910626][T12609] chnl_net:caif_netlink_parms(): no params data found [ 444.933980][T12620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.944663][T12620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.974804][T12620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.044934][ T5790] Bluetooth: hci7: command tx timeout [ 445.194897][ T5790] Bluetooth: hci4: command tx timeout [ 445.674903][ T5790] Bluetooth: hci6: command tx timeout [ 446.474821][ T5790] Bluetooth: hci5: command tx timeout [ 447.119037][ T5790] Bluetooth: hci7: command tx timeout [ 447.274638][ T5790] Bluetooth: hci4: command tx timeout [ 447.760859][ T5790] Bluetooth: hci6: command tx timeout [ 448.564797][ T5790] Bluetooth: hci5: command tx timeout [ 449.195154][ T5786] Bluetooth: hci7: command tx timeout [ 449.354695][ T5790] Bluetooth: hci4: command tx timeout [ 449.845107][ T5790] Bluetooth: hci6: command tx timeout [ 450.644846][ T5790] Bluetooth: hci5: command tx timeout [ 451.284846][ T5790] Bluetooth: hci7: command tx timeout [ 451.434797][ T5790] Bluetooth: hci4: command tx timeout [ 451.924959][ T5790] Bluetooth: hci6: command tx timeout [ 452.559346][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 463.598866][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.611349][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.103124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.116237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 476.131326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.144247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 476.158898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.171830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 476.186513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.199423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 476.214828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.227861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 481.105641][ C1] net_ratelimit: 2882 callbacks suppressed [ 481.105663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.124611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 481.139511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.152487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 481.167312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.180373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 481.195013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.207897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 481.222433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.235477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 486.115062][ C1] net_ratelimit: 2935 callbacks suppressed [ 486.115082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 486.135486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.148380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 486.162989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.175845][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 486.190301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.203190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 486.217768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.230652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 486.245102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.483424][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 491.126717][ C1] net_ratelimit: 2895 callbacks suppressed [ 491.126745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.145550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 491.160163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.173048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 491.187576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.200479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 491.215111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.228116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 491.242817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 491.255705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 496.135679][ C1] net_ratelimit: 2898 callbacks suppressed [ 496.135707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.154560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 496.169189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.182188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 496.196903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.209894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 496.224487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.237451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 496.252020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.264998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 501.145152][ C1] net_ratelimit: 2884 callbacks suppressed [ 501.145174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.163975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 501.178548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.191437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 501.205991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.219028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 501.233553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.246482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 501.261024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 501.273923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 506.155131][ C1] net_ratelimit: 2906 callbacks suppressed [ 506.155152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.174036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 506.188604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.201639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 506.216204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.229184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 506.243725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.256659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 506.271162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.284100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 511.166476][ C1] net_ratelimit: 2878 callbacks suppressed [ 511.166498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.185837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 511.200387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.213368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 511.227961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.240936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 511.255656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.268678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 511.283568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.296636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 516.176109][ C1] net_ratelimit: 2866 callbacks suppressed [ 516.176131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.195008][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 516.209859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.223315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 516.238293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.251313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 516.266521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.279618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 516.294644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.307712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 521.185105][ C1] net_ratelimit: 2918 callbacks suppressed [ 521.185125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.203881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 521.218484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.231338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 521.245839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.258718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 521.273257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.286197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 521.300631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.313540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 523.824434][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 523.831124][ C0] rcu: 0-....: (1 GPs behind) idle=b6c4/1/0x4000000000000000 softirq=42282/42283 fqs=1982 [ 523.842462][ C0] rcu: hardirqs softirqs csw/system [ 523.848922][ C0] rcu: number: 1000619 0 0 [ 523.855381][ C0] rcu: cputime: 20493 31620 45 ==> 52120(ms) [ 523.863222][ C0] rcu: (t=10500 jiffies g=52845 q=3498 ncpus=2) [ 523.869604][ C0] rcu: rcu_preempt kthread starved for 411 jiffies! g52845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 523.880668][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 523.890852][ C0] rcu: RCU grace-period kthread stack dump: [ 523.896788][ C0] task:rcu_preempt state:R running task stack:27112 pid:17 ppid:2 flags:0x00004000 [ 523.907628][ C0] Call Trace: [ 523.910947][ C0] [ 523.913924][ C0] __schedule+0x1553/0x45a0 [ 523.918513][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 523.924472][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 523.930424][ C0] ? asan.module_dtor+0x20/0x20 [ 523.935338][ C0] ? enqueue_timer+0x23d/0x550 [ 523.940164][ C0] ? __mod_timer+0x984/0xdb0 [ 523.944839][ C0] schedule+0xbd/0x170 [ 523.948962][ C0] schedule_timeout+0x188/0x2d0 [ 523.953871][ C0] ? console_conditional_schedule+0x40/0x40 [ 523.959834][ C0] ? update_process_times+0x1b0/0x1b0 [ 523.965353][ C0] ? prepare_to_swait_event+0x339/0x360 [ 523.970973][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 523.975881][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 523.982085][ C0] ? rcu_gp_init+0x1560/0x1560 [ 523.986902][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 523.991809][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.997067][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 524.002324][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 524.007028][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 524.012207][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 524.017200][ C0] ? __kthread_parkme+0x162/0x1c0 [ 524.022283][ C0] kthread+0x2fa/0x390 [ 524.026410][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 524.031579][ C0] ? kthread_blkcg+0xd0/0xd0 [ 524.036213][ C0] ret_from_fork+0x48/0x80 [ 524.040681][ C0] ? kthread_blkcg+0xd0/0xd0 [ 524.045316][ C0] ret_from_fork_asm+0x11/0x20 [ 524.050148][ C0] [ 524.053218][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 524.059615][ C0] Sending NMI from CPU 0 to CPUs 1: [ 524.064873][ C1] NMI backtrace for cpu 1 [ 524.064885][ C1] CPU: 1 PID: 9265 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 524.064901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.064917][ C1] Workqueue: bat_events batadv_dat_purge [ 524.064943][ C1] RIP: 0010:__unwind_start+0x34/0x7e0 [ 524.064962][ C1] Code: 55 41 54 53 48 83 ec 30 48 89 4c 24 10 49 89 d4 49 89 f5 48 89 fb 48 bd 00 00 00 00 00 fc ff df e8 a1 bb 4b 00 ba 60 00 00 00 <48> 89 df 31 f6 e8 c2 f4 a3 00 4c 8d 73 28 4d 89 f7 49 c1 ef 03 41 [ 524.064977][ C1] RSP: 0018:ffffc900001f0220 EFLAGS: 00000246 [ 524.064990][ C1] RAX: ffffffff813b665f RBX: ffffc900001f0288 RCX: ffff888028ad9e00 [ 524.065003][ C1] RDX: 0000000000000060 RSI: ffff888028ad9e00 RDI: ffffc900001f0288 [ 524.065015][ C1] RBP: dffffc0000000000 R08: ffffc900001f06a0 R09: 0000000000000000 [ 524.065027][ C1] R10: ffffc900001f03c0 R11: ffffed10108c44a8 R12: 0000000000000000 [ 524.065038][ C1] R13: ffff888028ad9e00 R14: ffffffff8175c250 R15: 0000000000000000 [ 524.065050][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 524.065064][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.065076][ C1] CR2: 0000557751581028 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 524.065090][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.065100][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 524.065110][ C1] Call Trace: [ 524.065115][ C1] [ 524.065136][ C1] ? rt6_score_route+0x179/0x380 [ 524.065155][ C1] ? stack_trace_save+0x100/0x100 [ 524.065176][ C1] arch_stack_walk+0xf8/0x190 [ 524.065198][ C1] stack_trace_save+0xaa/0x100 [ 524.065218][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 524.065242][ C1] kasan_set_track+0x4e/0x70 [ 524.065285][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 524.065306][ C1] __kasan_slab_alloc+0x6c/0x80 [ 524.065326][ C1] slab_post_alloc_hook+0x6e/0x4b0 [ 524.065354][ C1] kmem_cache_alloc+0x11a/0x2d0 [ 524.065377][ C1] ? skb_ext_add+0x145/0x8e0 [ 524.065400][ C1] skb_ext_add+0x145/0x8e0 [ 524.065425][ C1] br_nf_pre_routing_ipv6+0x131/0x6b0 [ 524.065446][ C1] ? br_validate_ipv6+0x730/0x730 [ 524.065465][ C1] ? br_nf_pre_routing+0x70f/0x1420 [ 524.065484][ C1] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 524.065502][ C1] br_handle_frame+0x1245/0x14d0 [ 524.065529][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 524.065553][ C1] ? brport_get_ownership+0x80/0x80 [ 524.065580][ C1] ? ip6_mc_input+0xaa0/0xcb0 [ 524.065605][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 524.065627][ C1] __netif_receive_skb_core+0xfab/0x3af0 [ 524.065647][ C1] ? ip6_input_finish+0x2c0/0x2c0 [ 524.065670][ C1] ? ip6_rcv_finish+0x19a/0x230 [ 524.065692][ C1] ? NF_HOOK+0x32d/0x3b0 [ 524.065714][ C1] ? qdisc_run+0x230/0x230 [ 524.065733][ C1] ? process_backlog+0x2cf/0x6f0 [ 524.065751][ C1] ? read_lock_is_recursive+0x20/0x20 [ 524.065771][ C1] ? process_backlog+0x2cf/0x6f0 [ 524.065788][ C1] __netif_receive_skb+0x74/0x290 [ 524.065808][ C1] ? process_backlog+0x2cf/0x6f0 [ 524.065825][ C1] process_backlog+0x391/0x6f0 [ 524.065850][ C1] ? trigger_rx_softirq+0x60/0x60 [ 524.065866][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 524.065887][ C1] ? lock_chain_count+0x20/0x20 [ 524.065905][ C1] __napi_poll+0xc0/0x460 [ 524.065921][ C1] ? net_rx_action+0x3a0/0xc40 [ 524.065939][ C1] net_rx_action+0x616/0xc40 [ 524.065962][ C1] ? net_tx_action+0x980/0x980 [ 524.065979][ C1] ? detach_timer+0x2b0/0x2b0 [ 524.065997][ C1] ? lock_chain_count+0x20/0x20 [ 524.066018][ C1] handle_softirqs+0x280/0x820 [ 524.066037][ C1] ? do_softirq+0xfa/0x1a0 [ 524.066055][ C1] ? do_softirq+0x1a0/0x1a0 [ 524.066072][ C1] ? batadv_dat_purge+0x2da/0x3c0 [ 524.066093][ C1] do_softirq+0xfa/0x1a0 [ 524.066108][ C1] [ 524.066113][ C1] [ 524.066118][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 524.066134][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 524.066155][ C1] ? rcu_is_watching+0x15/0xb0 [ 524.066178][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 524.066194][ C1] ? _local_bh_enable+0xa0/0xa0 [ 524.066211][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 524.066232][ C1] ? batadv_dat_purge+0x2da/0x3c0 [ 524.066254][ C1] batadv_dat_purge+0x2da/0x3c0 [ 524.066278][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 524.066299][ C1] process_scheduled_works+0xa5d/0x15d0 [ 524.066334][ C1] ? worker_attach_to_pool+0x380/0x380 [ 524.066357][ C1] ? assign_work+0x3d2/0x5d0 [ 524.066399][ C1] worker_thread+0xa55/0xfc0 [ 524.066419][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 524.066441][ C1] ? _raw_spin_unlock+0x40/0x40 [ 524.066459][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 524.066490][ C1] kthread+0x2fa/0x390 [ 524.066505][ C1] ? pr_cont_work+0x560/0x560 [ 524.066526][ C1] ? kthread_blkcg+0xd0/0xd0 [ 524.066542][ C1] ret_from_fork+0x48/0x80 [ 524.066562][ C1] ? kthread_blkcg+0xd0/0xd0 [ 524.066585][ C1] ret_from_fork_asm+0x11/0x20 [ 524.066615][ C1] [ 524.066872][ C0] CPU: 0 PID: 12600 Comm: syz.3.1942 Not tainted syzkaller #0 [ 524.564179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.574254][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 524.581115][ C0] Code: 00 4d 85 e4 75 16 e8 95 c6 0f 00 eb 15 e8 8e c6 0f 00 e8 69 0f 0f 09 4d 85 e4 74 ea e8 7f c6 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 524.600733][ C0] RSP: 0018:ffffc90000007240 EFLAGS: 00000246 [ 524.606898][ C0] RAX: ffffffff81775b81 RBX: 0000000000000000 RCX: ffff88802f21da00 [ 524.614874][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.622859][ C0] RBP: ffffc900000072f8 R08: ffffffff911c65ff R09: 1ffffffff2238cbf [ 524.630837][ C0] R10: dffffc0000000000 R11: fffffbfff2238cc0 R12: 0000000000000200 [ 524.638811][ C0] R13: 000001fb63109b96 R14: 1ffff92000000e48 R15: dffffc0000000000 [ 524.646784][ C0] FS: 00007f96bc1f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 524.655738][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.662325][ C0] CR2: 0000001b2dd23ffc CR3: 0000000048551000 CR4: 00000000003506f0 [ 524.670310][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.678288][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 524.686259][ C0] Call Trace: [ 524.689543][ C0] [ 524.692404][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 524.697698][ C0] ? skb_network_protocol+0x529/0x780 [ 524.703171][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 524.709171][ C0] ktime_get_with_offset+0x103/0x330 [ 524.714474][ C0] netif_rx_internal+0x344/0x4e0 [ 524.719426][ C0] ? dev_forward_skb+0x50/0x50 [ 524.724200][ C0] ? rcu_is_watching+0x15/0xb0 [ 524.728981][ C0] __netif_rx+0x78/0xc0 [ 524.733161][ C0] veth_xmit+0x550/0x9f0 [ 524.737418][ C0] ? veth_xmit+0x60/0x9f0 [ 524.741764][ C0] dev_hard_start_xmit+0x246/0x740 [ 524.746908][ C0] __dev_queue_xmit+0x19a3/0x3660 [ 524.751953][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 524.757071][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 524.762277][ C0] ? read_seqbegin+0x1c8/0x270 [ 524.767056][ C0] ? neigh_event_send+0x110/0x110 [ 524.772092][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 524.777387][ C0] ? __asan_memcpy+0x40/0x70 [ 524.781988][ C0] ? eth_header+0x11b/0x200 [ 524.786499][ C0] ? llc_sysctl_exit+0x70/0x70 [ 524.791278][ C0] ? neigh_resolve_output+0x618/0x730 [ 524.796668][ C0] ip6_finish_output2+0xe3d/0x1630 [ 524.801795][ C0] ? ip6_finish_output2+0x645/0x1630 [ 524.807093][ C0] ? ip6_mtu+0x7d/0x3f0 [ 524.811260][ C0] ? nf_hook+0x390/0x390 [ 524.815512][ C0] ? ip6_finish_output+0x57b/0x820 [ 524.820656][ C0] ndisc_send_skb+0xc26/0x14f0 [ 524.825425][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 524.830377][ C0] ? ndisc_mc_map+0x680/0x680 [ 524.835060][ C0] ? skb_dst+0xd0/0xd0 [ 524.839147][ C0] addrconf_rs_timer+0x2d5/0x630 [ 524.844093][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 524.850181][ C0] call_timer_fn+0x189/0x540 [ 524.854773][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 524.860841][ C0] ? call_timer_fn+0xd2/0x540 [ 524.865529][ C0] ? __run_timers+0x800/0x800 [ 524.870218][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.875421][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 524.880627][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 524.886698][ C0] __run_timers+0x542/0x800 [ 524.891220][ C0] ? detach_timer+0x2b0/0x2b0 [ 524.895933][ C0] run_timer_softirq+0x67/0xf0 [ 524.900702][ C0] handle_softirqs+0x280/0x820 [ 524.905476][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 524.910264][ C0] ? do_softirq+0x1a0/0x1a0 [ 524.914774][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 524.919984][ C0] __irq_exit_rcu+0xd3/0x190 [ 524.924581][ C0] ? irq_exit_rcu+0x20/0x20 [ 524.929094][ C0] irq_exit_rcu+0x9/0x20 [ 524.933336][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 524.938978][ C0] [ 524.941939][ C0] [ 524.944872][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.950862][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 524.956774][ C0] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 4e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 524.976392][ C0] RSP: 0018:ffffc90005257a00 EFLAGS: 00000246 [ 524.982468][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 524.990440][ C0] RDX: ffffc9000dafc000 RSI: 000000000000261c RDI: 000000000000261d [ 524.998423][ C0] RBP: ffffc90005257ad0 R08: ffffffff911c65ff R09: 1ffffffff2238cbf [ 525.006400][ C0] R10: dffffc0000000000 R11: fffffbfff2238cc0 R12: 1ffff92000a4af44 [ 525.014379][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000a4af65 [ 525.022386][ C0] ? event_function+0x300/0x300 [ 525.027257][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 525.032991][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 525.038878][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 525.044090][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 525.049734][ C0] smp_call_function_single+0x36d/0x5a0 [ 525.055294][ C0] ? event_function+0x300/0x300 [ 525.060169][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 525.066342][ C0] ? event_function+0x300/0x300 [ 525.071219][ C0] perf_install_in_context+0x5be/0x920 [ 525.076711][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 525.082707][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 525.087924][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 525.093134][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.099321][ C0] ? __se_sys_perf_event_open+0x1123/0x1c50 [ 525.105241][ C0] ? perf_event__header_size+0x165/0x220 [ 525.110922][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 525.116682][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 525.122363][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 525.128276][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 525.133921][ C0] do_syscall_64+0x55/0xa0 [ 525.138342][ C0] ? clear_bhb_loop+0x40/0x90 [ 525.143026][ C0] ? clear_bhb_loop+0x40/0x90 [ 525.147712][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.153612][ C0] RIP: 0033:0x7f96bdf9cdd9 [ 525.158036][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.177648][ C0] RSP: 002b:00007f96bc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 525.186071][ C0] RAX: ffffffffffffffda RBX: 00007f96be215fa0 RCX: 00007f96bdf9cdd9 [ 525.194048][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 525.202025][ C0] RBP: 00007f96be032d69 R08: 0000000000000002 R09: 0000000000000000 [ 525.210011][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 525.217996][ C0] R13: 00007f96be216038 R14: 00007f96be215fa0 R15: 00007ffcb3d9a548 [ 525.225986][ C0] [ 526.194886][ C1] net_ratelimit: 2208 callbacks suppressed [ 526.194907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.213770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 526.228351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.241283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 526.255853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.268806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 526.283397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.296310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 526.311007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.323973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 531.206675][ C1] net_ratelimit: 2944 callbacks suppressed [ 531.206696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.225518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 531.239990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.252848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 531.267419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.280814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 531.295419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.308374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0) [ 531.322964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.335924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:0d:82:73:9f:d7, vlan:0)