last executing test programs: 4.708408448s ago: executing program 3 (id=9456): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6a44b791d5c34b7d, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xb3, 0x1, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r4, r1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x900000000000000) r6 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)="6bdf43517d268fdc6f9615bca7e8af36e635ab2a308bdd5dec5a7aaf7115e664a61bec07756c4a247482ebedca39e712f0f98248f3688d1b25632940b13b739e7c1baa5233974117a5559bcc906092b07bbb71119079ed60f6fa2938cea1db93a0c546ca72fa49ca0f48a6f39c8f44b66c1b3081040aa44323145ec247e8c9641d3073b0c30317dac7f718094b1c1d794368a5296ef6bf705219f439ec852f27d91c", 0xa2}, {&(0x7f0000000ac0)="f787118435e2712a4fc45a208e82b85610a459663313008dd5ddc69c477fe5636bd806129e75d413f97a9170d89e5b8685eedd950f4955cd2142774083259dc1f6ea98ed2911d35a5fe677b2ff23ede907c679de2264bc99c9ca6e4dadf40edb3f3d55bd197e3e2531f3e7f5692a4221e4", 0x71}, {&(0x7f0000000b40)="c62b44b057743daefb62311cdc1295da3eb41f36589a0d7e805a980b7bc1edabffe460c6db332ea67a49cd587702586afc1a2d1b858e1b816952f5ec61f4ab2eaad81cdd61dc9e961ec11210b2d79dafe46b2fc1b0fbe987b485a9a55b5e8cc59a3a14f726221d863e3fccb00d4402051be44a6345f92fdf19", 0x79}, {&(0x7f0000000bc0)="f16a511edcaac410", 0x8}, {&(0x7f0000000c00)="3d7f06c0b06958a92ae00a3ad59f4ca78580bf4b3b94b12fa13d25109352b7fd611eeb2f6a7ad46cc639ad750e5aa1b8a926379c3138f9342c49527450e11a890eeea61745b42a6cafbf69a83ab0365b6959dfbea01de879f66ba86bef68e05c3e6ce88e02cc60934ad7c67cfb2bb9ef2acbf8a0e1a62c06d0f4fc59d005c975d8996c2c626ef730d0f1a56836d1c43db0f5d612e593fc5c03c04ca987258ade3e1146348424fd2f2bd2955484278580ff797c16b1e8e7314e091626014828f9fbc5bbcf1b7b3d634143667f058d98c2d34149f19eed10c3f82a94dc45a814a10573bcfa15ef80d30fb187044ede381317088732353d", 0xf6}, {&(0x7f0000000d40)="2f5c9685d6e3754b896bb8b34a080fa7baa93b25a3b5ecb1af90973a9ec94fa45418d9dcb033ed6dcc4a3246845ec1784830c1a0d709231992a0f03a0ebef78124fbf45ed7bfbfe91dd7fb9f4913c02b44539d906d5a5ef2b418150e04247d85a4f8562d69", 0x65}, {&(0x7f0000000dc0)="1b0150b6272f6cafd8ddd2bbb3c201eac1243e9ea725c6c75ed75451d9f25637a9b05c0bbaad3fa545c90f524a963a4d76f4f3b1514b8c4019467389794804c1d5939809cf2be9851493a7086d9c3ddd62ff303c4b9ddb51908f2f1e4f96d22ef4875855ee3ea54bcd473b57f52f1d622607ddb4f30bb6", 0x77}, {&(0x7f0000000e40)="17d779ca47be357366ceb083eb01ad49cb34e0b693215f0cc776d7dd2bd2f4114edf810cdf8d60d5e0aa37969366805c771b14f264df9d7e5719a7f536ba7fd6869d01414b0b73c1a04a113c79340f84da89d79abaa2f275f08ea511245cb25d27e8c2f59062595f51fe7f10c312656f5f3957069ed86e3ae0ec099b329dd60964a2016398ddf8", 0x87}, {&(0x7f0000000f00)="67ae4f5d8fdecef57a115e9037673ce56856d0a9d5e9702573b12420d6f08fb97314ec0075d3e5aef2919b7c6f46e29405efd989f8b919f06dd4a528f48e39a7dcbdfa4ba9c18023c0d4b25da09333b6f14921552d80820fe9cadba9c5f102fc9ddee7b2170c8a5bd73ec09e269469fe81f50e9a47261841216a07b7cf52", 0x7e}], 0x9}, 0x20044000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x4, 0x3}, {0x4, 0x2}]}]}, {0x0, [0x0, 0x61, 0x0, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f0000001180)=""/42, 0x45, 0x2a, 0x1, 0x1}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x6, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x45}, @generic={0x7, 0x7, 0x4, 0x39, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}], &(0x7f00000002c0)='GPL\x00', 0x4, 0xec, &(0x7f0000000300)=""/236, 0x41100, 0x24, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x401, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r9, 0x1, r10], &(0x7f0000000900)=[{0x0, 0x2, 0xf, 0xa}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1a9) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001080)={0xfffffff8}, 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r11, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 4.396058116s ago: executing program 3 (id=9459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8004}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.482099047s ago: executing program 1 (id=9463): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xd}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000002100000000000300000000030000000200000003000000000000000000000105000000100000010000000000000009020000000000"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) 3.34487874s ago: executing program 3 (id=9464): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000, 0x6}, 0x910, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x5, 0x26, 0x5, 0x1, 0x0, 0xfff, 0x11e48, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000003c0), 0x3}, 0x4a2c, 0x4, 0x1, 0x3, 0x3, 0x681e, 0x10, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x8, 0x8, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r8, r5, 0x4, r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x8, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.229881333s ago: executing program 4 (id=9467): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x2000000) 2.95856867s ago: executing program 3 (id=9468): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x298c40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0xf9, 0x1, 0x9, 0xd29, 0x18}]}, &(0x7f0000000b40)='syzkaller\x00', 0x7ff, 0x48, &(0x7f0000000b80)=""/72, 0x1e00, 0x493852a18bf4116c, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000000c40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x17871, 0xffffffffffffffff, 0x7, &(0x7f0000000cc0)=[0xffffffffffffffff, r0], &(0x7f0000000d00)=[{0x4, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x4, 0x2}, {0x0, 0x4, 0x7, 0x2}, {0x3, 0x2, 0x1}, {0x3, 0x2, 0x1, 0x6}, {0x3, 0x20005, 0x10, 0x3}], 0x10, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x2) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002020702500000000002020000007010000f8ffffffb702000008000000b7030000010000808500000006000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, r6, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x2, 0xff5, 0x7}, 0x10, r4, r6, 0x5, &(0x7f00000005c0)=[r6, r6], &(0x7f00000006c0)=[{0x3, 0x2, 0x1, 0xb}, {0x5, 0x4, 0x4, 0xc}, {0x3, 0x3, 0x8, 0x6}, {0x0, 0x4, 0x6, 0x2}, {0x0, 0x2, 0xb, 0x9}], 0x10, 0x9f}, 0x94) 2.853743562s ago: executing program 0 (id=9469): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6a44b791d5c34b7d, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xb3, 0x1, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r4, r1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x900000000000000) r6 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)="6bdf43517d268fdc6f9615bca7e8af36e635ab2a308bdd5dec5a7aaf7115e664a61bec07756c4a247482ebedca39e712f0f98248f3688d1b25632940b13b739e7c1baa5233974117a5559bcc906092b07bbb71119079ed60f6fa2938cea1db93a0c546ca72fa49ca0f48a6f39c8f44b66c1b3081040aa44323145ec247e8c9641d3073b0c30317dac7f718094b1c1d794368a5296ef6bf705219f439ec852f27d91c", 0xa2}, {&(0x7f0000000ac0)="f787118435e2712a4fc45a208e82b85610a459663313008dd5ddc69c477fe5636bd806129e75d413f97a9170d89e5b8685eedd950f4955cd2142774083259dc1f6ea98ed2911d35a5fe677b2ff23ede907c679de2264bc99c9ca6e4dadf40edb3f3d55bd197e3e2531f3e7f5692a4221e4", 0x71}, {&(0x7f0000000b40)="c62b44b057743daefb62311cdc1295da3eb41f36589a0d7e805a980b7bc1edabffe460c6db332ea67a49cd587702586afc1a2d1b858e1b816952f5ec61f4ab2eaad81cdd61dc9e961ec11210b2d79dafe46b2fc1b0fbe987b485a9a55b5e8cc59a3a14f726221d863e3fccb00d4402051be44a6345f92fdf19", 0x79}, {&(0x7f0000000bc0)="f16a511edcaac410", 0x8}, {&(0x7f0000000c00)="3d7f06c0b06958a92ae00a3ad59f4ca78580bf4b3b94b12fa13d25109352b7fd611eeb2f6a7ad46cc639ad750e5aa1b8a926379c3138f9342c49527450e11a890eeea61745b42a6cafbf69a83ab0365b6959dfbea01de879f66ba86bef68e05c3e6ce88e02cc60934ad7c67cfb2bb9ef2acbf8a0e1a62c06d0f4fc59d005c975d8996c2c626ef730d0f1a56836d1c43db0f5d612e593fc5c03c04ca987258ade3e1146348424fd2f2bd2955484278580ff797c16b1e8e7314e091626014828f9fbc5bbcf1b7b3d634143667f058d98c2d34149f19eed10c3f82a94dc45a814a10573bcfa15ef80d30fb187044ede381317088732353d", 0xf6}, {&(0x7f0000000d40)="2f5c9685d6e3754b896bb8b34a080fa7baa93b25a3b5ecb1af90973a9ec94fa45418d9dcb033ed6dcc4a3246845ec1784830c1a0d709231992a0f03a0ebef78124fbf45ed7bfbfe91dd7fb9f4913c02b44539d906d5a5ef2b418150e04247d85a4f8562d69", 0x65}, {&(0x7f0000000dc0)="1b0150b6272f6cafd8ddd2bbb3c201eac1243e9ea725c6c75ed75451d9f25637a9b05c0bbaad3fa545c90f524a963a4d76f4f3b1514b8c4019467389794804c1d5939809cf2be9851493a7086d9c3ddd62ff303c4b9ddb51908f2f1e4f96d22ef4875855ee3ea54bcd473b57f52f1d622607ddb4f30bb6", 0x77}, {&(0x7f0000000e40)="17d779ca47be357366ceb083eb01ad49cb34e0b693215f0cc776d7dd2bd2f4114edf810cdf8d60d5e0aa37969366805c771b14f264df9d7e5719a7f536ba7fd6869d01414b0b73c1a04a113c79340f84da89d79abaa2f275f08ea511245cb25d27e8c2f59062595f51fe7f10c312656f5f3957069ed86e3ae0ec099b329dd60964a2016398ddf8", 0x87}, {&(0x7f0000000f00)="67ae4f5d8fdecef57a115e9037673ce56856d0a9d5e9702573b12420d6f08fb97314ec0075d3e5aef2919b7c6f46e29405efd989f8b919f06dd4a528f48e39a7dcbdfa4ba9c18023c0d4b25da09333b6f14921552d80820fe9cadba9c5f102fc9ddee7b2170c8a5bd73ec09e269469fe81f50e9a47261841216a07b7cf52", 0x7e}], 0x9}, 0x20044000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0x4, 0x3}, {0x4, 0x2}]}]}, {0x0, [0x0, 0x61, 0x0, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f0000001180)=""/42, 0x45, 0x2a, 0x1, 0x1}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x6, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x45}, @generic={0x7, 0x7, 0x4, 0x39, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x7}], &(0x7f00000002c0)='GPL\x00', 0x4, 0xec, &(0x7f0000000300)=""/236, 0x41100, 0x24, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x401, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r9, 0x1, r10], &(0x7f0000000900)=[{0x0, 0x2, 0xf, 0xa}], 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1a9) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001140)=r2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001080)={0xfffffff8}, 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r11, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 2.686979156s ago: executing program 4 (id=9470): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000a0"], 0x48) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) socket$kcm(0xa, 0x6, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038900fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.568882089s ago: executing program 1 (id=9471): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.489284831s ago: executing program 0 (id=9473): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000a0"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x6, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) 2.267904636s ago: executing program 1 (id=9474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x8, 0x5, 0xaf, 0x9, 0x0, 0x8000000000000001, 0x10, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x8, 0xfff, 0x3, 0x8, 0x4, 0x8eeb, 0x0, 0x0, 0x101, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x2) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000e3041424000800c59a2b86d280000001", @ANYRES64=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x10, 0xf, 0x100}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xd35, 0x0, r8, 0x4, '\x00', 0x0, r10, 0x1, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x2, 0x82d0, 0x4, r8, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syz_tun\x00', 0x1000}) 2.108859559s ago: executing program 1 (id=9476): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4e0d1c98, 0x7}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r0}, &(0x7f0000001c40), &(0x7f0000001c80)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xf7be, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.10843589s ago: executing program 2 (id=9477): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000867a89020000d524e31800010000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000867a89020000d524e31800010000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000700)=""/186, 0xba}, {&(0x7f0000004480)=""/4126, 0x101e}, {&(0x7f0000002180)=""/4063, 0xfdf}], 0x3}, 0x120) (async) recvmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000700)=""/186, 0xba}, {&(0x7f0000004480)=""/4126, 0x101e}, {&(0x7f0000002180)=""/4063, 0xfdf}], 0x3}, 0x120) socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/160}, {&(0x7f00000005c0)=""/70}, {&(0x7f00000002c0)=""/50}], 0x42}, 0x1) (async) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/160}, {&(0x7f00000005c0)=""/70}, {&(0x7f00000002c0)=""/50}], 0x42}, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) sendmsg$kcm(r2, &(0x7f0000000b80)={&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)="ad9726ed9a811b7d9337f99a247361bb1984b544eda1bfabf3514f6fe5", 0x1d}, {&(0x7f0000000880)="130ee4ca6e0127dfc8ec10333d57768e45e508a11523fcd6e9e5680841e43ebe84e1396aed09cc0b909455937b1d80a9fc1a71729ddf307d2a76914b3ddb35e628320b604bf762f19896085b3a9c053c81613f24727377e8b371af1bdbf67813195c64204315fc648eda03f6af904ced05", 0x71}, {&(0x7f0000000900)="e8f86aa966682620d7e4e589b5d58a9c35eb908c5d131996888214e014ccfd45df075bd8e14210997a9119d6727aecd2a000916ab3706cf47b8f36bc31dc8660a6d7d1b5ecd42827ee3992ad311ca6614746491648a7f8df004e21d95a6c2f764e72c3a5ee5a7cb639046c92585a40c6bad7edee7e3a83a5bd008e2b23098dee7f839bc9e0b03fa05d3a", 0x8a}, {&(0x7f00000009c0)="116b5255b37803aa4889be063b8b2797659828943f2ce03d25ce422a29f72c296c255817d78a8e2c94d73c1f174393d4afd75ce98fe0dc717bd268781925da6979581f55e53e92c44a59252625bc072808729449947d00b79c", 0x59}], 0x4, &(0x7f0000000a80)=[{0x98, 0x117, 0x8e02, "7d8fb5f2f5b5f1c7ae59e94122fc5796eb34f18a6fc7f79611f526cb6d4b679ec7b4f0ca30e65e828ea9ada7b2120ce6eeaa758f722d7ad316cce86e6818f87737962c59327eeb95286944633b12267ccbd7e5ce1effc2fa0a18d6f3508ac675feb28fd8f119b697b1d513249849e74237f695f2a03cfe4071b2c538bc56c3e027c78a5a"}], 0x98}, 0x20040011) (async) sendmsg$kcm(r2, &(0x7f0000000b80)={&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)="ad9726ed9a811b7d9337f99a247361bb1984b544eda1bfabf3514f6fe5", 0x1d}, {&(0x7f0000000880)="130ee4ca6e0127dfc8ec10333d57768e45e508a11523fcd6e9e5680841e43ebe84e1396aed09cc0b909455937b1d80a9fc1a71729ddf307d2a76914b3ddb35e628320b604bf762f19896085b3a9c053c81613f24727377e8b371af1bdbf67813195c64204315fc648eda03f6af904ced05", 0x71}, {&(0x7f0000000900)="e8f86aa966682620d7e4e589b5d58a9c35eb908c5d131996888214e014ccfd45df075bd8e14210997a9119d6727aecd2a000916ab3706cf47b8f36bc31dc8660a6d7d1b5ecd42827ee3992ad311ca6614746491648a7f8df004e21d95a6c2f764e72c3a5ee5a7cb639046c92585a40c6bad7edee7e3a83a5bd008e2b23098dee7f839bc9e0b03fa05d3a", 0x8a}, {&(0x7f00000009c0)="116b5255b37803aa4889be063b8b2797659828943f2ce03d25ce422a29f72c296c255817d78a8e2c94d73c1f174393d4afd75ce98fe0dc717bd268781925da6979581f55e53e92c44a59252625bc072808729449947d00b79c", 0x59}], 0x4, &(0x7f0000000a80)=[{0x98, 0x117, 0x8e02, "7d8fb5f2f5b5f1c7ae59e94122fc5796eb34f18a6fc7f79611f526cb6d4b679ec7b4f0ca30e65e828ea9ada7b2120ce6eeaa758f722d7ad316cce86e6818f87737962c59327eeb95286944633b12267ccbd7e5ce1effc2fa0a18d6f3508ac675feb28fd8f119b697b1d513249849e74237f695f2a03cfe4071b2c538bc56c3e027c78a5a"}], 0x98}, 0x20040011) 1.822076097s ago: executing program 1 (id=9478): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff2) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000f8ff00000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d00)={r0, 0xe0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x8, &(0x7f0000002bc0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x844) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.813244867s ago: executing program 4 (id=9479): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) write$cgroup_devices(r2, 0x0, 0xfffffeff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002d80)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002e00)=@generic={&(0x7f0000002dc0)='./file0\x00', 0x0, 0x1c}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="07000000040000001800000001000000000000006612babfb89e190b9164ba4c053cb8487994f2a96493028af6f50b0959ec9f6e689038f5cc5dfdb7e58a9938f1afa5ae32efa6445688faa66df85083d9745ee130b5cc8c79b788663cb5e1dbb67b4a820aff243a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000008850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002940)={r5, &(0x7f0000002840)="d0d5e714d4a1d27c65741012799d70796aa6a44dfb336a36959e00f243c80d19346ce7d301b3f0fe3436f2d3f9c879a5503bb232ef402d549362b44e9de9fb79ef32b716a73df85c9305f02614b46a3c4b7db90b05a53953103d34aaf8810e445d5f02b4d5e0cb768cc687627e7f410df1ee781d911cb0c38a90f96b518365befe1353816e3c6475205cfa94825c31d9c010593f61b123fc92b7be71e66e74d19643df79ce8870fc0f64279cf475b5837f793a018728bee75825eaa0e2789df1cd7151976ed0cb864b8bb0c6bed01c572dfb87e107f2"}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e40)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002ec0), &(0x7f0000002f00)='%ps \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003000)={0x6, 0x26, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@generic={0xb, 0x2, 0x8, 0x8, 0xc44}, @generic={0x69, 0x4, 0xb, 0x0, 0x400}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @printk={@i}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0x2d5b, 0x1000, &(0x7f0000001d40)=""/4096, 0x41000, 0x30, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002d40)={0x5, 0xb, 0xfffff725, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002f80)=[r0, 0xffffffffffffffff, r3, r4, r5, r6, r7], &(0x7f0000002fc0)=[{0x3, 0x2, 0xd439, 0x4}, {0x1, 0x1, 0xc7b, 0x7}, {0x1, 0x4, 0xd, 0x4}, {0x0, 0x5, 0x4, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xba, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0f00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300000000000000100900980000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x0, 0x1}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009", 0x15}], 0x1}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r15 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r13, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000640)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmsg$inet(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r16 = openat$cgroup_int(r12, 0x0, 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRESDEC=r11, @ANYRES64=r9, @ANYRESDEC=r10, @ANYRES16], 0x8b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1812a1a0df8ce5f295182741c40000", @ANYRES32, @ANYBLOB="0000000000000000a5a80500fcffffff186b00000a0000000000000002000000156f8000f0ffffff180000000000f8ff00000000030000009940feff0400000085000000d200000018600000030000000000000006000000"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x28, &(0x7f0000000140)=""/40, 0x41100, 0x4e, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xa, 0x8, 0xc6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r11], 0x0, 0x10, 0x200}, 0x94) 1.70061152s ago: executing program 0 (id=9480): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x2000000) 1.700132109s ago: executing program 3 (id=9481): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x298c40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0xf9, 0x1, 0x9, 0xd29, 0x18}]}, &(0x7f0000000b40)='syzkaller\x00', 0x7ff, 0x48, &(0x7f0000000b80)=""/72, 0x1e00, 0x493852a18bf4116c, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000000c40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x17871, 0xffffffffffffffff, 0x7, &(0x7f0000000cc0)=[0xffffffffffffffff, r0], &(0x7f0000000d00)=[{0x4, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x4, 0x2}, {0x0, 0x4, 0x7, 0x2}, {0x3, 0x2, 0x1}, {0x3, 0x2, 0x1, 0x6}, {0x3, 0x20005, 0x10, 0x3}], 0x10, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x2) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002020702500000000002020000007010000f8ffffffb702000008000000b7030000010000808500000006000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, r6, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x2, 0xff5, 0x7}, 0x10, r4, r6, 0x5, &(0x7f00000005c0)=[r6, r6], &(0x7f00000006c0)=[{0x3, 0x2, 0x1, 0xb}, {0x5, 0x4, 0x4, 0xc}, {0x3, 0x3, 0x8, 0x6}, {0x0, 0x4, 0x6, 0x2}, {0x0, 0x2, 0xb, 0x9}], 0x10, 0x9f}, 0x94) 1.553808003s ago: executing program 2 (id=9482): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000480)="8af64542", 0x4}, {&(0x7f00000005c0)="1dcd1064d0451d456cb798a0bfaa6c4a8613fb02afefc9db0c14bca15f134aa8865cf8afebb531ee39203b68fdda51888c2af14b00e1f3cde1d37e19f65863c305267ec7051876b6bed3d37359f7199adc6b3ade8a563d49d5cd8c952991b5fc781dce34e34d86609178e68ec9af1662bc855e8e4741f46c32721ac744b5caefb43278ae7bf8e8d8bee6e23c3f399e687d400ba6618d548d80d53e9bd13099ed43437095a881eed84b58b28ec4e58df204ca775825bfbbbb2d8842bb018b4a000ed4354682496bd48313ded25c9655bc08331f7536d8b6302b679d6c70daa1def67e8f745d5e860901100bd132dd", 0xee}, {&(0x7f00000006c0)="c3e4df3d5a13c275706dd1c539452cd3f071f1940c7b58cf53fe845d18894f76a0c9d459e5063040e75c10df3c3cc1e1f014fd6d071e2b076c61b3e4f576e5802b2ffc68967e35cb62247f083483b1a5408407f8de25928c1770618fb541ff9e564390641ba43c4e98be5e39171c0ecd45110dcd27afc87d20da0be49f929e36e8e238430b4d4c077f991d41e0084226ea1ba72353e2", 0x96}, {&(0x7f0000000880)="f84b5320b0412379387e9ac7ae5dfdac7688a3487f3d8223bfd9bd612cbaefe53f296ba05dc321d095d293c0e702feb53f7fe7137b79a05ee307f51de99e37ac7ed2dbb6c199beb9c777ef9cf935b748e4eeddd02ff04e197051cf2a0d9fc7c770c07ebbc8b399c10c5989fd91c6f61c5501fec19de7a18193a98a30a3638514935db5334f96921bc0ceb1c4b0908936757be358876070ad5e6a3b9f9d30cd885aca11a664ba9a143e4931dbade58badb96fa1a6f1a3e492eefe018fd07f5aa8", 0xc0}, {&(0x7f0000000940)="b05a475d01db28f498132a1d825db3dcf7a45fccafba13d5826111f4e6397e09a661a322c948c0fc9602bcdc39c13a1f2f4718fa2e98ceed74fa876d42e897f79268946c18351b891620", 0x4a}, {&(0x7f00000009c0)="d9eea4b7e3b667a1413e97117d6c31d120cf80bde35ba8bd01492ffbab01887b7a68ba219dd6e0ef05781f1a20787be544092efe7537feffec2b49e98a1b105174c388a5a575cc37684270d774b71b998523277c39ad305abfd1de24b88d74056241f018a80cf60956b5da78d5dd1fa9aa1ae68bb4a1b118dab86846ebd1ecc7cf94e800345d6ac76143171d9834a46808d1123915909490239543f2d0c8986bf4caa5b3855a39", 0xa7}], 0x6, &(0x7f0000000bc0)=[{0x98, 0x102, 0x80, "66c9722b58155245efc879818590dd2e38cff370346ff0e27d1c07bacb65471bff968313f8dbb2a1f850f718bb4568439337c6b6c81bc20a283eeda52f9514c8442a2b00646caac5e991c2f0cb7a440dd5f0202ef9aea9acdaa90969a4e6b6820caa32a5593c4dcc05ef3059e69dccb0a1b9cace70dfc4282163875f074dbfd3bfc22748846d6628"}, {0x20, 0x10e, 0x1, "7e2b4eb3db089dc8e339e7c8ef04b5"}, {0xd0, 0x1, 0x100, "bbd0ef337d330bdea772b42ecee24edbc9dd8cdcea75c27bd3935f28922d610454009520cfd651e4237e6a9aaa4aaa99f317323e50df1052507d8856e6a1412963aa04e2f3bf5092978f082b73866e661e1b46831298397edbca4b987cadeafd0609fa72fc5bfc79d75a82252eb5d4266f49f89da534e5007a19f298eb1353c6b7c95e01bfb3950c8029531b09bf1f000257d180f89275004eb7e2ae8f4b2139f95a32282d9034eb056ea5dd0ca026c2a20fb01814c60cd8c6"}, {0x50, 0x19a, 0x10001, "6d3a004840ef79ea7ac765739ba162e29da68e4f66ba02579015bd7ff4d46be0abfa1852ccadb4573530269eef875bb5f7417fc7ef4e6930424c14878a66"}, {0x78, 0xff, 0x10, "79df0c6623ed1ce9ef7f25bbb9e205fc04963af6b9d7695690a3990254ecc06ab9606df574f22e2250ef1f652a8074ae2854c86ee903ab7e63daef5abe6ad6c01778de079df14a1c8c2e7a5c2872fb5d8a6e179e8475657f08618caf1fe3b2da4347ce"}, {0x48, 0x104, 0x6, "aa3cb5c3cd19a4e221c4aa2528e45a48ecf344b1835ea5eb1e1ec0bc447a392bdf6c28b07724f6e535cdfba5b0a99fc2cc5d8142e27a"}], 0x298}, 0x20000000) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x8c0a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff07506706000009000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000070700004c00d6cfcc75000000000000bf54000000000000070400000400f9ffad4301000000000095004000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b9ff129e609f4c787c6002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d559b89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x4040001) getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x104007, 0xac5d, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, 0x0) recvmsg$unix(r4, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0xffffffffffffff05}, 0x40012141) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1}, 0x40002040) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)) sendmsg$unix(r7, &(0x7f00000003c0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="c033eabb2eeac5e77995fac1792bf1d9c35b95bb81a5c243fcb18d4f927bb91d0f879fe05a5265789707c5c4ad3d327d52cc0644758533aa01275640e1119430c29480b2479c1536a2cd655ab81b905441bea21064cb8396adf4fef4fdb9d82ec25161450952b0a92a9c6eda195c8a0b9fd7aa72f0f39d16dce787372fd0bdb5e936e0a0482bfe1944dd7e17af27b7d3aecc02f157601e3ca7cb4704761f83b896b58b060337cf4dae65892b8f2c1bf0be73c35237b6ba7abf198cdcf5ca04b6b188baae5dbef35cc918fa0b11c9baced09512f9df68f0a2068ba16fd04686a765a91c865f", 0xe5}, {&(0x7f0000000280)="bf7eda1c8d18df0bcaaed8f5c9de54c5aae6de6d76dd858a0eddb99d7e5466dbf86eaff5a27dfd98f37fa01a74641e8177007903e9321bb5fc49", 0x3a}, {&(0x7f0000000300)="61b0410f7d97c9b088a1f18d0c2e3bc4b101b55b7ad462ed94ae84ac1b05b6afc8f619eda08fd754ac1e3d4464ce0a41ce7af51b143c2ec98b31d5456330d0d006bdfceb0bcb863dbc81cf20faa94ae380", 0x51}], 0x3, 0x0, 0x0, 0x4010}, 0x20000000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c880) 1.25287121s ago: executing program 4 (id=9483): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x8d91, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e30025", 0x2c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) gettid() gettid() socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0x4000001) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e14060200000fff0e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 1.24873682s ago: executing program 1 (id=9484): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x5}, 0x105a64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x71, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x2323}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006105830000000000850000002700000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d", 0x11}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg(r3, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x12043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r4 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r4, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) 1.120113973s ago: executing program 2 (id=9485): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.104311333s ago: executing program 0 (id=9486): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff6, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 759.663492ms ago: executing program 2 (id=9487): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b"], 0xfdef) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async, rerun: 32) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x2, 0x3, 0x2) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async, rerun: 32) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r0], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x3b) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 502.032478ms ago: executing program 2 (id=9488): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa000000000000711017000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5744935563dc5412) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4a, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d00)={r1, 0xe0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002a80)=[0x0], &(0x7f0000002ac0)=[0x0], 0x0, 0xee, &(0x7f0000002b00)=[{}], 0x8, 0x10, &(0x7f0000002b40), &(0x7f0000002b80), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000002bc0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003080)={r1, 0xe0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000002e00)=[0x0, 0x0], &(0x7f0000002e40)=[0x0, 0x0], 0x0, 0x26, &(0x7f0000002e80)=[{}, {}], 0x10, 0x10, &(0x7f0000002ec0), &(0x7f0000002f00), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000002f40)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003300)={0x6, 0x19, &(0x7f00000030c0)=@raw=[@alu={0x7, 0x0, 0x5, 0x6, 0xe7d5087ec90ac11c, 0x30, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0xe, 0x7, 0x4, 0x389, 0x2}], &(0x7f00000031c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000003240)={0x4, 0x7, 0x5, 0x7b00}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000032c0)=[{0x2, 0x5, 0xa, 0x6}], 0x10, 0x7}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000033c0)={0x1b, 0x0, 0x0, 0xf7, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x10, 0x2f, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x5, 0x2, 0xa, 0xfffffffffffffff0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x108}}}, &(0x7f0000000840)='GPL\x00', 0x2, 0x1000, &(0x7f0000001a40)=""/4096, 0x41100, 0x0, '\x00', r7, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000002d40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002d80)={0x0, 0x7, 0x6, 0xfffffffa}, 0x10, r8, r9, 0x5, &(0x7f0000003440)=[r1, r10, r12], &(0x7f0000003480)=[{0x5, 0x5, 0x0, 0x2}, {0x3, 0x5, 0xb}, {0x1, 0x2, 0x6, 0x4}, {0x0, 0x4, 0x4, 0x9}, {0x3, 0x4, 0x5, 0xa}], 0x10, 0x8}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r13 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r13, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000064006114880000000000a60000000000008395000000000000006cf4071b23cac0bb29df1c12a9fc0271b53103b2c07fbf4f2e0fae94bf99eef92771788d9fdadd45ed204ba205697f05a1d8fe5237270450df007a18b9fa72699a6d5f0d955d1a14633d313000b1f28daf6563aec4ff77133855134e0d65a6ff60ffb9ff9f480d636c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 468.307369ms ago: executing program 0 (id=9489): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000a0"], 0x48) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) socket$kcm(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038900fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 407.46955ms ago: executing program 3 (id=9490): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x298c40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0xf9, 0x1, 0x9, 0xd29, 0x18}]}, &(0x7f0000000b40)='syzkaller\x00', 0x7ff, 0x48, &(0x7f0000000b80)=""/72, 0x1e00, 0x493852a18bf4116c, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000000c40)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0xd, 0x0, 0x4}, 0x10, 0x17871, 0xffffffffffffffff, 0x7, &(0x7f0000000cc0)=[0xffffffffffffffff, r0], &(0x7f0000000d00)=[{0x4, 0x5, 0x6, 0xb}, {0x3, 0x1, 0x3, 0x9}, {0x4, 0x2, 0x4, 0x2}, {0x0, 0x4, 0x7, 0x2}, {0x3, 0x2, 0x1}, {0x3, 0x2, 0x1, 0x6}, {0x3, 0x20005, 0x10, 0x3}], 0x10, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x2) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002020702500000000002020000007010000f8ffffffb702000008000000b7030000010000808500000006000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, r6, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x2, 0xff5, 0x7}, 0x10, r4, r6, 0x5, &(0x7f00000005c0)=[r6, r6], &(0x7f00000006c0)=[{0x3, 0x2, 0x1, 0xb}, {0x5, 0x4, 0x4, 0xc}, {0x3, 0x3, 0x8, 0x6}, {0x0, 0x4, 0x6, 0x2}, {0x0, 0x2, 0xb, 0x9}], 0x10, 0x9f}, 0x94) 333.958162ms ago: executing program 4 (id=9491): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000a0"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x6, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) 261.125634ms ago: executing program 2 (id=9492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 144.458557ms ago: executing program 0 (id=9493): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b24000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 4 (id=9494): socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) kernel console output (not intermixed with test programs): ': attribute type 10 has an invalid length. [ 1617.573504][T31583] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.8557'. [ 1618.598180][T31602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8567'. [ 1618.721094][T31602] ÿÿÿÿÿÿ: renamed from syzkaller0 [ 1619.191752][T31610] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8569'. [ 1619.299221][T31613] validate_nla: 4 callbacks suppressed [ 1619.299239][T31613] netlink: 'syz.1.8580': attribute type 10 has an invalid length. [ 1619.449286][T31613] netlink: 'syz.1.8580': attribute type 2 has an invalid length. [ 1619.475069][T31613] netlink: 'syz.1.8580': attribute type 1 has an invalid length. [ 1619.566043][T31622] netlink: 'syz.0.8571': attribute type 39 has an invalid length. [ 1619.591903][T31613] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.8580'. [ 1619.657786][ T4277] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1620.935350][T31622] device hsr_slave_1 left promiscuous mode [ 1621.014695][T31624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8570'. [ 1621.075978][T31646] netlink: 'syz.2.8578': attribute type 7 has an invalid length. [ 1621.109890][T31646] netlink: 'syz.2.8578': attribute type 6 has an invalid length. [ 1621.970638][T31666] netlink: 'syz.0.8587': attribute type 10 has an invalid length. [ 1622.027137][T31668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8588'. [ 1622.217633][T31669] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8587'. [ 1622.320354][T31673] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8585'. [ 1622.374367][T31678] net_ratelimit: 3661 callbacks suppressed [ 1622.374407][T31678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1622.475252][T31663] ÿÿÿÿÿÿ: renamed from syzkaller0 [ 1622.554275][T31685] netlink: 'syz.0.8592': attribute type 10 has an invalid length. [ 1622.635921][T31682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8591'. [ 1623.030963][ T4277] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1624.274502][T31691] netlink: 'syz.1.8593': attribute type 39 has an invalid length. [ 1624.962274][T31707] netlink: 'syz.0.8596': attribute type 7 has an invalid length. [ 1624.989512][T31707] netlink: 'syz.0.8596': attribute type 6 has an invalid length. [ 1625.057952][T31713] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8600'. [ 1625.408916][T31721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8605'. [ 1625.541752][T31729] netlink: 'syz.0.8607': attribute type 10 has an invalid length. [ 1625.705060][T31729] netlink: 'syz.0.8607': attribute type 2 has an invalid length. [ 1625.728410][T31729] netlink: 'syz.0.8607': attribute type 1 has an invalid length. [ 1625.779879][T31729] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.8607'. [ 1626.421098][T31742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8611'. [ 1626.552045][T31750] netlink: 'syz.2.8615': attribute type 7 has an invalid length. [ 1628.736974][T31793] netlink: 'syz.3.8625': attribute type 10 has an invalid length. [ 1628.855903][T31793] netlink: 'syz.3.8625': attribute type 2 has an invalid length. [ 1628.872711][T31793] netlink: 'syz.3.8625': attribute type 1 has an invalid length. [ 1628.891585][T31793] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8625'. [ 1629.204047][T31799] netlink: 'syz.1.8628': attribute type 10 has an invalid length. [ 1629.228858][T31799] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8628'. [ 1629.270889][T31807] device wlan1 entered promiscuous mode [ 1629.276980][T31807] team0: Device wlan1 is of different type [ 1630.074515][T31829] validate_nla: 1 callbacks suppressed [ 1630.074536][T31829] netlink: 'syz.4.8637': attribute type 39 has an invalid length. [ 1631.059558][T31842] netlink: 'syz.2.8642': attribute type 10 has an invalid length. [ 1631.306422][T31842] netlink: 'syz.2.8642': attribute type 2 has an invalid length. [ 1631.340011][T31842] netlink: 'syz.2.8642': attribute type 1 has an invalid length. [ 1631.348474][T31842] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.8642'. [ 1631.417799][T31851] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1631.809101][T31859] netlink: 'syz.4.8646': attribute type 10 has an invalid length. [ 1631.846535][T31859] team0: Device wg1 is up. Set it down before adding it as a team port [ 1631.936021][T31865] netlink: 'syz.3.8649': attribute type 10 has an invalid length. [ 1632.130861][T31865] netlink: 'syz.3.8649': attribute type 2 has an invalid length. [ 1632.175590][T31865] netlink: 'syz.3.8649': attribute type 1 has an invalid length. [ 1632.210099][T31865] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1633.819995][T31893] netlink: 'syz.3.8659': attribute type 10 has an invalid length. [ 1634.168348][T31902] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8663'. [ 1634.362741][T31906] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8665'. [ 1634.440219][T31906] bridge_slave_1: default FDB implementation only supports local addresses [ 1634.450161][T31910] netlink: 'syz.4.8666': attribute type 3 has an invalid length. [ 1634.469592][T31910] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8666'. [ 1634.745532][T31924] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8669'. [ 1635.135437][T31928] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8673'. [ 1635.214643][T31930] netlink: 'syz.4.8673': attribute type 3 has an invalid length. [ 1635.242919][T31930] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8673'. [ 1635.953635][T31950] bridge0: port 3(hsr0) entered disabled state [ 1636.003970][T31950] device bridge_slave_1 left promiscuous mode [ 1636.029999][T31950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.062379][T31950] device bridge_slave_0 left promiscuous mode [ 1636.068752][T31950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.363224][T31950] device bridge0 left promiscuous mode [ 1636.399014][T31950] team0: Port device bridge0 removed [ 1637.463090][T31989] netlink: 'syz.3.8693': attribute type 3 has an invalid length. [ 1637.501983][T31989] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1637.708620][T32000] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8697'. [ 1637.750764][T32001] device team0 entered promiscuous mode [ 1637.756395][T32001] device team_slave_0 entered promiscuous mode [ 1637.852706][T32001] device team_slave_1 entered promiscuous mode [ 1637.859144][T32001] device bond0 entered promiscuous mode [ 1637.900087][T32001] device bond_slave_0 entered promiscuous mode [ 1637.915712][T32001] device bond_slave_1 entered promiscuous mode [ 1637.942740][T31997] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8699'. [ 1638.917372][T32028] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8708'. [ 1638.963808][T32028] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1638.990578][T32028] CPU: 1 PID: 32028 Comm: syz.2.8708 Not tainted syzkaller #0 [ 1638.998162][T32028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1639.008287][T32028] Call Trace: [ 1639.011628][T32028] [ 1639.014624][T32028] dump_stack_lvl+0x188/0x24e [ 1639.019413][T32028] ? show_regs_print_info+0x12/0x12 [ 1639.024690][T32028] ? load_image+0x410/0x410 [ 1639.029318][T32028] sysfs_warn_dup+0x8a/0xa0 [ 1639.033904][T32028] sysfs_do_create_link_sd+0xc0/0x110 [ 1639.039375][T32028] device_add+0x83b/0x1050 [ 1639.043910][T32028] wiphy_register+0x1d8b/0x2aa0 [ 1639.048979][T32028] ? cfg80211_event_work+0x40/0x40 [ 1639.054216][T32028] ? minstrel_ht_alloc+0x894/0xa20 [ 1639.059440][T32028] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1639.065623][T32028] ieee80211_register_hw+0x2d48/0x39f0 [ 1639.071213][T32028] ? ieee80211_register_hw+0xee1/0x39f0 [ 1639.076839][T32028] ? ieee80211_register_hw+0xee1/0x39f0 [ 1639.082505][T32028] ? ieee80211_tasklet_handler+0x20/0x20 [ 1639.088211][T32028] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1639.094199][T32028] ? __debug_object_init+0xed/0x440 [ 1639.099540][T32028] ? memset+0x1e/0x40 [ 1639.103609][T32028] ? __hrtimer_init+0x189/0x270 [ 1639.108563][T32028] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1639.114402][T32028] ? memcpy+0x3c/0x60 [ 1639.118490][T32028] hwsim_new_radio_nl+0xab7/0xc90 [ 1639.123665][T32028] genl_family_rcv_msg_doit+0x22f/0x350 [ 1639.129288][T32028] ? end_current_label_crit_section+0x170/0x170 [ 1639.135621][T32028] ? trace_call_bpf+0xbf/0x6b0 [ 1639.140453][T32028] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1639.146449][T32028] ? bpf_lsm_capable+0x5/0x10 [ 1639.151194][T32028] ? security_capable+0x85/0xb0 [ 1639.156151][T32028] genl_rcv_msg+0x601/0x790 [ 1639.160765][T32028] ? genl_bind+0x360/0x360 [ 1639.165256][T32028] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1639.171731][T32028] netlink_rcv_skb+0x1ef/0x440 [ 1639.176573][T32028] ? genl_bind+0x360/0x360 [ 1639.181061][T32028] ? netlink_ack+0x1160/0x1160 [ 1639.185953][T32028] ? down_read+0x1a8/0x2d0 [ 1639.190462][T32028] genl_rcv+0x24/0x40 [ 1639.194517][T32028] netlink_unicast+0x7ad/0x920 [ 1639.199407][T32028] netlink_sendmsg+0x8ad/0xbd0 [ 1639.204311][T32028] ? netlink_getsockopt+0x550/0x550 [ 1639.209609][T32028] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1639.215243][T32028] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1639.220604][T32028] ? security_socket_sendmsg+0x7c/0xa0 [ 1639.226144][T32028] ? netlink_getsockopt+0x550/0x550 [ 1639.231441][T32028] ____sys_sendmsg+0x5ed/0x9a0 [ 1639.236312][T32028] ? __sys_sendmsg_sock+0x30/0x30 [ 1639.241398][T32028] ? __import_iovec+0x306/0x510 [ 1639.246353][T32028] ? import_iovec+0x6f/0xa0 [ 1639.250951][T32028] ___sys_sendmsg+0x2a2/0x360 [ 1639.255730][T32028] ? __sys_sendmsg+0x2a0/0x2a0 [ 1639.260729][T32028] __se_sys_sendmsg+0x1c3/0x2b0 [ 1639.265664][T32028] ? __x64_sys_sendmsg+0x80/0x80 [ 1639.270754][T32028] ? lockdep_hardirqs_on+0x94/0x140 [ 1639.276034][T32028] do_syscall_64+0x4c/0xa0 [ 1639.280528][T32028] ? clear_bhb_loop+0x60/0xb0 [ 1639.285308][T32028] ? clear_bhb_loop+0x60/0xb0 [ 1639.290059][T32028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1639.296022][T32028] RIP: 0033:0x7f623a39e0d9 [ 1639.300501][T32028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.320168][T32028] RSP: 002b:00007f623b2fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1639.328664][T32028] RAX: ffffffffffffffda RBX: 00007f623a625fa0 RCX: 00007f623a39e0d9 [ 1639.336724][T32028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1639.344766][T32028] RBP: 00007f623a435024 R08: 0000000000000000 R09: 0000000000000000 [ 1639.352799][T32028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.360845][T32028] R13: 00007f623a626038 R14: 00007f623a625fa0 R15: 00007ffc9fafe7c8 [ 1639.368945][T32028] [ 1639.548839][T32031] netlink: 'syz.0.8709': attribute type 10 has an invalid length. [ 1639.585072][T32031] team0: Port device bond0 removed [ 1639.813194][T32037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8712'. [ 1641.739853][T32080] netlink: 'syz.0.8727': attribute type 10 has an invalid length. [ 1641.803840][T32080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.887718][T32080] team0: Port device bond0 added [ 1642.322234][T32080] netlink: 'syz.0.8727': attribute type 2 has an invalid length. [ 1642.414611][T32080] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 1642.478584][T32080] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.8727'. [ 1643.645707][T32105] netlink: 'syz.3.8733': attribute type 10 has an invalid length. [ 1643.710380][T32105] device bond0 left promiscuous mode [ 1643.723192][T32105] device bond_slave_0 left promiscuous mode [ 1643.760159][T32105] device bond_slave_1 left promiscuous mode [ 1643.772324][T32105] device bridge_slave_1 left promiscuous mode [ 1643.790176][T32105] device wlan1 left promiscuous mode [ 1643.828653][T32105] device dummy0 left promiscuous mode [ 1643.940177][T32105] team0: Port device bond0 removed [ 1644.423300][T32123] netlink: 'syz.2.8741': attribute type 10 has an invalid length. [ 1644.522037][T32123] netlink: 'syz.2.8741': attribute type 2 has an invalid length. [ 1644.550003][T32123] netlink: 'syz.2.8741': attribute type 1 has an invalid length. [ 1644.570361][T32123] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.8741'. [ 1645.268925][T32142] netlink: 'syz.4.8748': attribute type 10 has an invalid length. [ 1645.357881][T32144] netlink: 'syz.1.8749': attribute type 16 has an invalid length. [ 1645.391249][T32142] device bond0 left promiscuous mode [ 1645.396644][T32142] device bond_slave_0 left promiscuous mode [ 1645.401812][T32144] netlink: 'syz.1.8749': attribute type 3 has an invalid length. [ 1645.415412][T32144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8749'. [ 1645.462128][T32142] device bond_slave_1 left promiscuous mode [ 1645.526531][T32142] team0: Port device bond0 removed [ 1645.772268][T32149] tap0: tun_chr_ioctl cmd 1074025675 [ 1645.777648][T32149] tap0: persist disabled [ 1646.084385][T32159] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.8755'. [ 1646.738206][T32173] team0: Device wg1 is up. Set it down before adding it as a team port [ 1647.018693][T32178] validate_nla: 4 callbacks suppressed [ 1647.018715][T32178] netlink: 'syz.1.8760': attribute type 46 has an invalid length. [ 1649.516382][T32214] netlink: 'syz.1.8773': attribute type 10 has an invalid length. [ 1649.557717][T32214] device veth0_to_bridge entered promiscuous mode [ 1649.788442][T32218] ref_ctr_offset mismatch. inode: 0x10e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1650.348703][T31077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1650.359058][T31077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1650.375045][T11706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1650.384356][T31077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1650.392987][T31077] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1650.400441][T31077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1650.553789][T27256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.831930][T27256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.977323][T27256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.191481][T27256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.650385][T32227] chnl_net:caif_netlink_parms(): no params data found [ 1651.831813][T27256] tipc: Left network mode [ 1651.867395][T32227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.875074][T32227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.883838][T32227] device bridge_slave_0 entered promiscuous mode [ 1651.893742][T32227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.902143][T32227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.910822][T32227] device bridge_slave_1 entered promiscuous mode [ 1651.926047][T32256] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8787'. [ 1652.243851][T32227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.285365][T32227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.451404][T31077] Bluetooth: hci3: command 0x0409 tx timeout [ 1652.464722][T32227] team0: Port device team_slave_0 added [ 1652.583519][T32227] team0: Port device team_slave_1 added [ 1652.808522][T32227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.828224][T32227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.959695][T32227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.156667][T32227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.175757][T32227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.272431][T32227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.300430][T32293] netlink: 'syz.0.8798': attribute type 3 has an invalid length. [ 1653.340913][T32293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1653.649648][T32295] netlink: 'syz.0.8798': attribute type 22 has an invalid length. [ 1653.670811][T32295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8798'. [ 1653.763584][T32227] device hsr_slave_0 entered promiscuous mode [ 1653.797178][T32227] device hsr_slave_1 entered promiscuous mode [ 1653.830076][T32227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1653.837760][T32227] Cannot create hsr debugfs directory [ 1654.451406][T32314] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1654.548031][T31077] Bluetooth: hci3: command 0x041b tx timeout [ 1655.241071][T32327] netlink: 'syz.0.8815': attribute type 2 has an invalid length. [ 1655.261136][T32327] netlink: 'syz.0.8815': attribute type 1 has an invalid length. [ 1655.308331][T32327] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8815'. [ 1655.702933][T27256] device hsr_slave_0 left promiscuous mode [ 1655.758618][T27256] device hsr_slave_1 left promiscuous mode [ 1655.781464][T27256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1655.817417][T27256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1655.841614][T27256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.849096][T27256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1655.900747][T27256] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1655.907882][T27256] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1656.016853][T27256] device veth1_vlan left promiscuous mode [ 1656.034122][T27256] device veth0_vlan left promiscuous mode [ 1656.299223][T32358] netlink: 'syz.3.8810': attribute type 2 has an invalid length. [ 1656.336283][T32358] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8810'. [ 1656.618260][T31077] Bluetooth: hci3: command 0x040f tx timeout [ 1657.070083][T27256] device team_slave_1 left promiscuous mode [ 1657.080955][T27256] team0 (unregistering): Port device team_slave_1 removed [ 1657.125660][T27256] device team_slave_0 left promiscuous mode [ 1657.133065][T27256] team0 (unregistering): Port device team_slave_0 removed [ 1657.501845][T32349] netlink: 'syz.0.8811': attribute type 10 has an invalid length. [ 1657.568265][T32349] team0: Device gre0 is of different type [ 1657.639543][T32352] netlink: 'syz.0.8811': attribute type 10 has an invalid length. [ 1657.648314][T32351] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1657.658869][T32370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8816'. [ 1657.665635][T32351] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1657.678666][T32351] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1658.039445][T32227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1658.175682][T32374] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8817'. [ 1658.257014][T32227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1658.373471][T32227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1658.401660][T32227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1658.690074][T31077] Bluetooth: hci3: command 0x0419 tx timeout [ 1658.716920][T32227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.837405][T32227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.910783][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1658.930391][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1658.990621][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1659.004442][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1659.037371][T29038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.044672][T29038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1659.097894][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1659.128971][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1659.165309][T29038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.172681][T29038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.247480][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1659.282791][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1659.325902][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1659.388277][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1659.436850][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1659.518242][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1659.541756][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1659.571277][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1659.597822][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1659.658061][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1659.709994][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1659.734080][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1659.778035][T32227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1661.617413][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1661.636937][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1661.809219][T32227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.994950][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1662.035887][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1662.103864][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1662.121476][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1662.144372][T32227] device veth0_vlan entered promiscuous mode [ 1662.186160][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1662.206245][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1662.268085][T32227] device veth1_vlan entered promiscuous mode [ 1662.351659][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1662.368168][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1662.404443][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1662.425111][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1662.442473][T32227] device veth0_macvtap entered promiscuous mode [ 1662.497014][T32227] device veth1_macvtap entered promiscuous mode [ 1662.567498][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.579925][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.593932][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.615346][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.645948][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.667340][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.702700][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1662.739700][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.769592][T32227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.827163][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1662.841282][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1662.873188][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1662.911193][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1662.992657][T32493] netlink: 'syz.3.8843': attribute type 10 has an invalid length. [ 1663.142834][T32493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.205417][T32493] device bond0 entered promiscuous mode [ 1663.334122][T32493] device bond_slave_0 entered promiscuous mode [ 1663.385694][T32493] device bond_slave_1 entered promiscuous mode [ 1663.425406][T32493] device bridge_slave_1 entered promiscuous mode [ 1663.486962][T32493] device wlan1 entered promiscuous mode [ 1663.520171][T32493] device dummy0 entered promiscuous mode [ 1663.588331][T32505] netlink: 'syz.3.8843': attribute type 2 has an invalid length. [ 1663.607340][T32505] netlink: 'syz.3.8843': attribute type 1 has an invalid length. [ 1663.619636][T32493] team0: Port device bond0 added [ 1663.650137][T32505] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8843'. [ 1664.165288][T32497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1664.188830][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.209709][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.229740][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.248743][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.265396][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.286315][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.306749][T32227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1664.357141][T32227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.387410][T32227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.419089][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1664.470472][T32518] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1664.478521][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1664.567375][T32227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.589915][T32227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.598709][T32227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.669876][T32227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.970587][T29042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.009029][T29042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.063826][T29033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1665.373301][T29042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.427150][T29042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.509041][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1665.753335][T32550] netlink: 'syz.3.8856': attribute type 10 has an invalid length. [ 1665.980302][T32550] device veth0_to_bridge entered promiscuous mode [ 1666.063230][T32550] bond0: (slave veth0_to_bridge): Enslaving as an active interface with an up link [ 1666.354543][T32560] netlink: 'syz.0.8859': attribute type 10 has an invalid length. [ 1666.628001][T32560] netlink: 'syz.0.8859': attribute type 2 has an invalid length. [ 1666.716715][T32560] netlink: 'syz.0.8859': attribute type 1 has an invalid length. [ 1666.779551][T32560] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.8859'. [ 1667.778910][T32592] netlink: 'syz.3.8869': attribute type 10 has an invalid length. [ 1668.073450][T32595] can: request_module (can-proto-0) failed. [ 1668.426008][T32608] netlink: 'syz.2.8874': attribute type 8 has an invalid length. [ 1668.460591][T32608] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8874'. [ 1668.783421][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.789897][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.337281][T32620] netlink: 'syz.3.8879': attribute type 2 has an invalid length. [ 1669.354401][T32620] netlink: 'syz.3.8879': attribute type 1 has an invalid length. [ 1669.396177][T32620] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8879'. [ 1673.863147][T32619] netlink: 'syz.3.8879': attribute type 10 has an invalid length. [ 1673.887096][T32626] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.8881'. [ 1673.909750][T32626] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.8881'. [ 1673.919087][T32626] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.8881'. [ 1674.073811][T32642] netlink: 'syz.0.8896': attribute type 10 has an invalid length. [ 1674.246021][T32642] netlink: 'syz.0.8896': attribute type 2 has an invalid length. [ 1674.342361][T32648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1674.359546][T32642] netlink: 'syz.0.8896': attribute type 1 has an invalid length. [ 1674.393068][T32642] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1674.451559][T32653] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8889'. [ 1674.474436][T32653] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1674.507875][T32655] netlink: 'syz.1.8890': attribute type 3 has an invalid length. [ 1674.526827][T32655] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8890'. [ 1674.626195][T32655] netlink: 'syz.1.8890': attribute type 22 has an invalid length. [ 1674.645066][T32655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8890'. [ 1675.068676][T32672] netlink: 'syz.2.8898': attribute type 17 has an invalid length. [ 1675.178969][T32674] FAULT_INJECTION: forcing a failure. [ 1675.178969][T32674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.250082][T32674] CPU: 0 PID: 32674 Comm: syz.1.8899 Not tainted syzkaller #0 [ 1675.257616][T32674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1675.267707][T32674] Call Trace: [ 1675.271010][T32674] [ 1675.273968][T32674] dump_stack_lvl+0x188/0x24e [ 1675.278710][T32674] ? show_regs_print_info+0x12/0x12 [ 1675.283960][T32674] ? load_image+0x410/0x410 [ 1675.288506][T32674] ? __lock_acquire+0x7c40/0x7c40 [ 1675.293571][T32674] should_fail_ex+0x390/0x4c0 [ 1675.298340][T32674] strncpy_from_user+0x32/0x340 [ 1675.303238][T32674] bpf_prog_load+0x200/0x1530 [ 1675.307945][T32674] ? map_freeze+0x390/0x390 [ 1675.312467][T32674] ? __might_fault+0xa6/0x120 [ 1675.317175][T32674] ? __might_fault+0xa6/0x120 [ 1675.321871][T32674] ? __might_fault+0xc2/0x120 [ 1675.326571][T32674] ? __might_fault+0xa6/0x120 [ 1675.331272][T32674] ? bpf_lsm_bpf+0x5/0x10 [ 1675.335620][T32674] ? security_bpf+0x7a/0xa0 [ 1675.340152][T32674] __sys_bpf+0x5b8/0x780 [ 1675.344418][T32674] ? bpf_link_show_fdinfo+0x380/0x380 [ 1675.349828][T32674] ? lock_chain_count+0x20/0x20 [ 1675.354735][T32674] __x64_sys_bpf+0x78/0x90 [ 1675.359175][T32674] do_syscall_64+0x4c/0xa0 [ 1675.363614][T32674] ? clear_bhb_loop+0x60/0xb0 [ 1675.368319][T32674] ? clear_bhb_loop+0x60/0xb0 [ 1675.373036][T32674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1675.378973][T32674] RIP: 0033:0x7f75fc59e0d9 [ 1675.383411][T32674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.403037][T32674] RSP: 002b:00007f75fd518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1675.411496][T32674] RAX: ffffffffffffffda RBX: 00007f75fc825fa0 RCX: 00007f75fc59e0d9 [ 1675.419499][T32674] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1675.427488][T32674] RBP: 00007f75fd518090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.435470][T32674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.443464][T32674] R13: 00007f75fc826038 R14: 00007f75fc825fa0 R15: 00007ffc0f9d7e48 [ 1675.451471][T32674] [ 1675.726722][T32686] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8903'. [ 1675.767028][T32686] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1675.795456][T32689] netlink: 'syz.2.8901': attribute type 1 has an invalid length. [ 1675.879889][T32689] netlink: 'syz.2.8901': attribute type 3 has an invalid length. [ 1675.893923][T32689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8901'. [ 1675.988122][T32693] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8905'. [ 1676.039764][T32693] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1676.105867][T32696] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1676.296548][T32702] delete_channel: no stack [ 1676.969832][T32717] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8911'. [ 1677.014493][T32717] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1677.035936][T32717] CPU: 0 PID: 32717 Comm: syz.3.8911 Not tainted syzkaller #0 [ 1677.043510][T32717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1677.053660][T32717] Call Trace: [ 1677.056997][T32717] [ 1677.059987][T32717] dump_stack_lvl+0x188/0x24e [ 1677.064772][T32717] ? show_regs_print_info+0x12/0x12 [ 1677.070055][T32717] ? load_image+0x410/0x410 [ 1677.074690][T32717] sysfs_warn_dup+0x8a/0xa0 [ 1677.079292][T32717] sysfs_do_create_link_sd+0xc0/0x110 [ 1677.084769][T32717] device_add+0x83b/0x1050 [ 1677.089292][T32717] wiphy_register+0x1d8b/0x2aa0 [ 1677.094300][T32717] ? cfg80211_event_work+0x40/0x40 [ 1677.099490][T32717] ? minstrel_ht_alloc+0x894/0xa20 [ 1677.104742][T32717] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1677.110898][T32717] ieee80211_register_hw+0x2d48/0x39f0 [ 1677.116471][T32717] ? ieee80211_register_hw+0xee1/0x39f0 [ 1677.122084][T32717] ? ieee80211_register_hw+0xee1/0x39f0 [ 1677.127733][T32717] ? ieee80211_tasklet_handler+0x20/0x20 [ 1677.133436][T32717] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1677.139416][T32717] ? __debug_object_init+0xed/0x440 [ 1677.144726][T32717] ? memset+0x1e/0x40 [ 1677.148794][T32717] ? __hrtimer_init+0x189/0x270 [ 1677.153741][T32717] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1677.159570][T32717] ? memcpy+0x3c/0x60 [ 1677.163673][T32717] hwsim_new_radio_nl+0xab7/0xc90 [ 1677.168836][T32717] genl_family_rcv_msg_doit+0x22f/0x350 [ 1677.174453][T32717] ? end_current_label_crit_section+0x170/0x170 [ 1677.180793][T32717] ? trace_call_bpf+0xbf/0x6b0 [ 1677.185637][T32717] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1677.191633][T32717] ? bpf_lsm_capable+0x5/0x10 [ 1677.196379][T32717] ? security_capable+0x85/0xb0 [ 1677.201348][T32717] genl_rcv_msg+0x601/0x790 [ 1677.205959][T32717] ? genl_bind+0x360/0x360 [ 1677.210434][T32717] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1677.216917][T32717] netlink_rcv_skb+0x1ef/0x440 [ 1677.221768][T32717] ? genl_bind+0x360/0x360 [ 1677.226269][T32717] ? netlink_ack+0x1160/0x1160 [ 1677.231153][T32717] ? down_read+0x1a8/0x2d0 [ 1677.235670][T32717] genl_rcv+0x24/0x40 [ 1677.239703][T32717] netlink_unicast+0x7ad/0x920 [ 1677.244587][T32717] netlink_sendmsg+0x8ad/0xbd0 [ 1677.249477][T32717] ? netlink_getsockopt+0x550/0x550 [ 1677.254772][T32717] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1677.260441][T32717] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1677.265797][T32717] ? security_socket_sendmsg+0x7c/0xa0 [ 1677.271331][T32717] ? netlink_getsockopt+0x550/0x550 [ 1677.276619][T32717] ____sys_sendmsg+0x5ed/0x9a0 [ 1677.281509][T32717] ? __sys_sendmsg_sock+0x30/0x30 [ 1677.286611][T32717] ? __import_iovec+0x306/0x510 [ 1677.291573][T32717] ? import_iovec+0x6f/0xa0 [ 1677.296182][T32717] ___sys_sendmsg+0x2a2/0x360 [ 1677.300960][T32717] ? __sys_sendmsg+0x2a0/0x2a0 [ 1677.306004][T32717] __se_sys_sendmsg+0x1c3/0x2b0 [ 1677.310947][T32717] ? __x64_sys_sendmsg+0x80/0x80 [ 1677.316054][T32717] ? lockdep_hardirqs_on+0x94/0x140 [ 1677.321340][T32717] do_syscall_64+0x4c/0xa0 [ 1677.325832][T32717] ? clear_bhb_loop+0x60/0xb0 [ 1677.330576][T32717] ? clear_bhb_loop+0x60/0xb0 [ 1677.335334][T32717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.341312][T32717] RIP: 0033:0x7fa74479e0d9 [ 1677.345893][T32717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.365582][T32717] RSP: 002b:00007fa745612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.374086][T32717] RAX: ffffffffffffffda RBX: 00007fa744a25fa0 RCX: 00007fa74479e0d9 [ 1677.382128][T32717] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1677.390173][T32717] RBP: 00007fa744835024 R08: 0000000000000000 R09: 0000000000000000 [ 1677.398212][T32717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1677.406253][T32717] R13: 00007fa744a26038 R14: 00007fa744a25fa0 R15: 00007ffd134d7358 [ 1677.414355][T32717] [ 1678.892564][T32745] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1678.967750][T32745] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1679.026432][T32745] CPU: 1 PID: 32745 Comm: syz.3.8922 Not tainted syzkaller #0 [ 1679.033998][T32745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1679.044118][T32745] Call Trace: [ 1679.047434][T32745] [ 1679.050406][T32745] dump_stack_lvl+0x188/0x24e [ 1679.055143][T32745] ? show_regs_print_info+0x12/0x12 [ 1679.060396][T32745] ? load_image+0x410/0x410 [ 1679.064985][T32745] sysfs_warn_dup+0x8a/0xa0 [ 1679.069532][T32745] sysfs_do_create_link_sd+0xc0/0x110 [ 1679.074952][T32745] device_add+0x83b/0x1050 [ 1679.079422][T32745] wiphy_register+0x1d8b/0x2aa0 [ 1679.084346][T32745] ? cfg80211_event_work+0x40/0x40 [ 1679.089511][T32745] ? minstrel_ht_alloc+0x894/0xa20 [ 1679.094706][T32745] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1679.100835][T32745] ieee80211_register_hw+0x2d48/0x39f0 [ 1679.106387][T32745] ? ieee80211_register_hw+0xee1/0x39f0 [ 1679.112005][T32745] ? ieee80211_register_hw+0xee1/0x39f0 [ 1679.117602][T32745] ? ieee80211_tasklet_handler+0x20/0x20 [ 1679.123281][T32745] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1679.129226][T32745] ? __debug_object_init+0xed/0x440 [ 1679.134482][T32745] ? memset+0x1e/0x40 [ 1679.138525][T32745] ? __hrtimer_init+0x189/0x270 [ 1679.143437][T32745] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1679.149202][T32745] ? memcpy+0x3c/0x60 [ 1679.153211][T32745] hwsim_new_radio_nl+0xab7/0xc90 [ 1679.158277][T32745] genl_family_rcv_msg_doit+0x22f/0x350 [ 1679.163844][T32745] ? end_current_label_crit_section+0x170/0x170 [ 1679.170122][T32745] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1679.176038][T32745] ? bpf_lsm_capable+0x5/0x10 [ 1679.180736][T32745] ? security_capable+0x85/0xb0 [ 1679.185636][T32745] genl_rcv_msg+0x601/0x790 [ 1679.190176][T32745] ? genl_bind+0x360/0x360 [ 1679.194612][T32745] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1679.200990][T32745] netlink_rcv_skb+0x1ef/0x440 [ 1679.205799][T32745] ? genl_bind+0x360/0x360 [ 1679.210240][T32745] ? netlink_ack+0x1160/0x1160 [ 1679.215043][T32745] ? down_read+0x1a8/0x2d0 [ 1679.219480][T32745] genl_rcv+0x24/0x40 [ 1679.223500][T32745] netlink_unicast+0x7ad/0x920 [ 1679.228303][T32745] netlink_sendmsg+0x8ad/0xbd0 [ 1679.233123][T32745] ? netlink_getsockopt+0x550/0x550 [ 1679.238355][T32745] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1679.243936][T32745] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1679.249240][T32745] ? security_socket_sendmsg+0x7c/0xa0 [ 1679.254764][T32745] ? netlink_getsockopt+0x550/0x550 [ 1679.260022][T32745] ____sys_sendmsg+0x5ed/0x9a0 [ 1679.264829][T32745] ? __sys_sendmsg_sock+0x30/0x30 [ 1679.269890][T32745] ? __import_iovec+0x306/0x510 [ 1679.274789][T32745] ? import_iovec+0x6f/0xa0 [ 1679.279328][T32745] ___sys_sendmsg+0x2a2/0x360 [ 1679.284039][T32745] ? __sys_sendmsg+0x2a0/0x2a0 [ 1679.288867][T32745] __se_sys_sendmsg+0x1c3/0x2b0 [ 1679.293746][T32745] ? __x64_sys_sendmsg+0x80/0x80 [ 1679.298743][T32745] ? lockdep_hardirqs_on+0x94/0x140 [ 1679.303967][T32745] do_syscall_64+0x4c/0xa0 [ 1679.308409][T32745] ? clear_bhb_loop+0x60/0xb0 [ 1679.313109][T32745] ? clear_bhb_loop+0x60/0xb0 [ 1679.317825][T32745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1679.323741][T32745] RIP: 0033:0x7fa74479e0d9 [ 1679.328180][T32745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1679.347818][T32745] RSP: 002b:00007fa745612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1679.356260][T32745] RAX: ffffffffffffffda RBX: 00007fa744a25fa0 RCX: 00007fa74479e0d9 [ 1679.364257][T32745] RDX: 0000000000000600 RSI: 0000200000000000 RDI: 0000000000000003 [ 1679.372257][T32745] RBP: 00007fa744835024 R08: 0000000000000000 R09: 0000000000000000 [ 1679.380252][T32745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1679.388253][T32745] R13: 00007fa744a26038 R14: 00007fa744a25fa0 R15: 00007ffd134d7358 [ 1679.396268][T32745] [ 1679.542847][T32749] netlink: 'syz.1.8924': attribute type 3 has an invalid length. [ 1679.562061][T32749] netlink: 'syz.1.8924': attribute type 16 has an invalid length. [ 1679.579344][T32749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8924'. [ 1680.668250][ T304] netlink: 'syz.2.8933': attribute type 3 has an invalid length. [ 1680.694936][ T304] netlink: 71840 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1682.305736][T31077] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 1682.485997][ T341] netlink: 'syz.4.8945': attribute type 10 has an invalid length. [ 1682.543493][ T341] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8945'. [ 1682.612520][ T341] device bond0 entered promiscuous mode [ 1682.660124][ T341] device bond_slave_0 entered promiscuous mode [ 1682.733544][ T341] device bond_slave_1 entered promiscuous mode [ 1682.826066][ T341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.865750][ T341] bridge0: port 3(bond0) entered blocking state [ 1682.904724][ T341] bridge0: port 3(bond0) entered disabled state [ 1682.931165][ T341] bridge0: port 3(bond0) entered blocking state [ 1682.937603][ T341] bridge0: port 3(bond0) entered forwarding state [ 1682.992221][ T345] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8946'. [ 1683.547457][ T360] syz.3.8950[360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1683.547623][ T360] syz.3.8950[360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1683.925284][ T362] netlink: 'syz.3.8950': attribute type 11 has an invalid length. [ 1685.625045][ T394] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8961'. [ 1686.800719][ T405] netlink: 'syz.3.8967': attribute type 10 has an invalid length. [ 1686.999468][ T405] netlink: 'syz.3.8967': attribute type 2 has an invalid length. [ 1687.019621][ T405] netlink: 'syz.3.8967': attribute type 1 has an invalid length. [ 1687.090520][ T409] netlink: 'syz.1.8969': attribute type 3 has an invalid length. [ 1687.092864][ T405] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8967'. [ 1687.138354][ T413] netlink: 'syz.2.8970': attribute type 10 has an invalid length. [ 1689.388412][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 81 is 1143 jiffies old. [ 1689.998548][ T438] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8976'. [ 1690.353242][ T451] device bridge_slave_1 left promiscuous mode [ 1690.380207][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.389464][ T451] device bridge_slave_0 left promiscuous mode [ 1690.429473][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.724563][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1690.758324][ T460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1691.110072][ T467] netlink: 'syz.3.8991': attribute type 10 has an invalid length. [ 1691.131691][ T469] netlink: 'syz.4.8993': attribute type 10 has an invalid length. [ 1691.184230][ T469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8993'. [ 1691.231664][ T474] netlink: 'syz.2.8992': attribute type 3 has an invalid length. [ 1691.239503][ T469] bridge0: port 4(team0) entered blocking state [ 1691.266045][ T469] bridge0: port 4(team0) entered disabled state [ 1691.272641][ T474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8992'. [ 1691.338016][ T467] netlink: 'syz.3.8991': attribute type 2 has an invalid length. [ 1691.363268][ T477] netlink: 'syz.0.8994': attribute type 1 has an invalid length. [ 1691.406958][ T467] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8991'. [ 1691.939611][ T482] validate_nla: 1 callbacks suppressed [ 1691.939632][ T482] netlink: 'syz.1.8997': attribute type 10 has an invalid length. [ 1692.242979][ T492] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9009'. [ 1692.441619][ T485] bridge0: port 3(bond0) entered disabled state [ 1692.486108][ T492] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1692.511491][ T492] CPU: 0 PID: 492 Comm: syz.0.9009 Not tainted syzkaller #0 [ 1692.518903][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.529059][ T492] Call Trace: [ 1692.532404][ T492] [ 1692.535406][ T492] dump_stack_lvl+0x188/0x24e [ 1692.540206][ T492] ? show_regs_print_info+0x12/0x12 [ 1692.545487][ T492] ? load_image+0x410/0x410 [ 1692.550096][ T492] sysfs_warn_dup+0x8a/0xa0 [ 1692.554689][ T492] sysfs_do_create_link_sd+0xc0/0x110 [ 1692.560162][ T492] device_add+0x83b/0x1050 [ 1692.564710][ T492] wiphy_register+0x1d8b/0x2aa0 [ 1692.569730][ T492] ? cfg80211_event_work+0x40/0x40 [ 1692.574939][ T492] ? minstrel_ht_alloc+0x894/0xa20 [ 1692.580178][ T492] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1692.586340][ T492] ieee80211_register_hw+0x2d48/0x39f0 [ 1692.591926][ T492] ? ieee80211_register_hw+0xee1/0x39f0 [ 1692.597549][ T492] ? ieee80211_register_hw+0xee1/0x39f0 [ 1692.603216][ T492] ? ieee80211_tasklet_handler+0x20/0x20 [ 1692.608921][ T492] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1692.614894][ T492] ? __debug_object_init+0xed/0x440 [ 1692.620207][ T492] ? memset+0x1e/0x40 [ 1692.624268][ T492] ? __hrtimer_init+0x189/0x270 [ 1692.629208][ T492] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1692.635031][ T492] ? memcpy+0x3c/0x60 [ 1692.639131][ T492] hwsim_new_radio_nl+0xab7/0xc90 [ 1692.644309][ T492] genl_family_rcv_msg_doit+0x22f/0x350 [ 1692.649929][ T492] ? end_current_label_crit_section+0x170/0x170 [ 1692.656249][ T492] ? trace_call_bpf+0xbf/0x6b0 [ 1692.661121][ T492] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1692.667109][ T492] ? bpf_lsm_capable+0x5/0x10 [ 1692.671864][ T492] ? security_capable+0x85/0xb0 [ 1692.676841][ T492] genl_rcv_msg+0x601/0x790 [ 1692.681466][ T492] ? genl_bind+0x360/0x360 [ 1692.685951][ T492] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1692.692411][ T492] netlink_rcv_skb+0x1ef/0x440 [ 1692.697255][ T492] ? genl_bind+0x360/0x360 [ 1692.701752][ T492] ? netlink_ack+0x1160/0x1160 [ 1692.706650][ T492] ? down_read+0x1a8/0x2d0 [ 1692.711144][ T492] genl_rcv+0x24/0x40 [ 1692.715198][ T492] netlink_unicast+0x7ad/0x920 [ 1692.720086][ T492] netlink_sendmsg+0x8ad/0xbd0 [ 1692.725017][ T492] ? netlink_getsockopt+0x550/0x550 [ 1692.730303][ T492] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1692.735933][ T492] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1692.741303][ T492] ? security_socket_sendmsg+0x7c/0xa0 [ 1692.746846][ T492] ? netlink_getsockopt+0x550/0x550 [ 1692.752127][ T492] ____sys_sendmsg+0x5ed/0x9a0 [ 1692.757029][ T492] ? __sys_sendmsg_sock+0x30/0x30 [ 1692.762123][ T492] ? __import_iovec+0x306/0x510 [ 1692.767084][ T492] ? import_iovec+0x6f/0xa0 [ 1692.771685][ T492] ___sys_sendmsg+0x2a2/0x360 [ 1692.776490][ T492] ? __sys_sendmsg+0x2a0/0x2a0 [ 1692.781510][ T492] __se_sys_sendmsg+0x1c3/0x2b0 [ 1692.786433][ T492] ? ct_nmi_exit+0x145/0x1c0 [ 1692.791129][ T492] ? __x64_sys_sendmsg+0x80/0x80 [ 1692.796213][ T492] ? lockdep_hardirqs_on+0x94/0x140 [ 1692.801517][ T492] do_syscall_64+0x4c/0xa0 [ 1692.806008][ T492] ? clear_bhb_loop+0x60/0xb0 [ 1692.810764][ T492] ? clear_bhb_loop+0x60/0xb0 [ 1692.815515][ T492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.821481][ T492] RIP: 0033:0x7f59abd9e0d9 [ 1692.825969][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1692.845651][ T492] RSP: 002b:00007f59acd12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1692.854156][ T492] RAX: ffffffffffffffda RBX: 00007f59ac025fa0 RCX: 00007f59abd9e0d9 [ 1692.862200][ T492] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1692.870229][ T492] RBP: 00007f59abe35024 R08: 0000000000000000 R09: 0000000000000000 [ 1692.878260][ T492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1692.886290][ T492] R13: 00007f59ac026038 R14: 00007f59ac025fa0 R15: 00007ffe80bdb568 [ 1692.894394][ T492] [ 1694.117910][ T529] netlink: 'syz.2.9010': attribute type 10 has an invalid length. [ 1694.295241][ T529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.353493][ T529] team0: Port device bond0 added [ 1694.431052][ T529] netlink: 'syz.2.9010': attribute type 2 has an invalid length. [ 1694.495638][ T529] netlink: 'syz.2.9010': attribute type 1 has an invalid length. [ 1694.530359][ T529] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9010'. [ 1695.372263][ T559] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9018'. [ 1695.407079][ T559] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1695.439808][ T559] CPU: 1 PID: 559 Comm: syz.0.9018 Not tainted syzkaller #0 [ 1695.447277][ T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1695.457456][ T559] Call Trace: [ 1695.460764][ T559] [ 1695.463741][ T559] dump_stack_lvl+0x188/0x24e [ 1695.468481][ T559] ? show_regs_print_info+0x12/0x12 [ 1695.473846][ T559] ? load_image+0x410/0x410 [ 1695.478414][ T559] sysfs_warn_dup+0x8a/0xa0 [ 1695.482960][ T559] sysfs_do_create_link_sd+0xc0/0x110 [ 1695.488380][ T559] device_add+0x83b/0x1050 [ 1695.492855][ T559] wiphy_register+0x1d8b/0x2aa0 [ 1695.497792][ T559] ? cfg80211_event_work+0x40/0x40 [ 1695.502956][ T559] ? minstrel_ht_alloc+0x894/0xa20 [ 1695.508128][ T559] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1695.514250][ T559] ieee80211_register_hw+0x2d48/0x39f0 [ 1695.519776][ T559] ? ieee80211_register_hw+0xee1/0x39f0 [ 1695.525377][ T559] ? ieee80211_register_hw+0xee1/0x39f0 [ 1695.530988][ T559] ? ieee80211_tasklet_handler+0x20/0x20 [ 1695.536673][ T559] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1695.542607][ T559] ? __debug_object_init+0xed/0x440 [ 1695.547858][ T559] ? memset+0x1e/0x40 [ 1695.551891][ T559] ? __hrtimer_init+0x189/0x270 [ 1695.556874][ T559] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1695.562763][ T559] ? memcpy+0x3c/0x60 [ 1695.566813][ T559] hwsim_new_radio_nl+0xab7/0xc90 [ 1695.571913][ T559] genl_family_rcv_msg_doit+0x22f/0x350 [ 1695.577498][ T559] ? end_current_label_crit_section+0x170/0x170 [ 1695.583793][ T559] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1695.589755][ T559] ? bpf_lsm_capable+0x5/0x10 [ 1695.594484][ T559] ? security_capable+0x85/0xb0 [ 1695.599403][ T559] genl_rcv_msg+0x601/0x790 [ 1695.603966][ T559] ? genl_bind+0x360/0x360 [ 1695.608426][ T559] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1695.614821][ T559] netlink_rcv_skb+0x1ef/0x440 [ 1695.619651][ T559] ? genl_bind+0x360/0x360 [ 1695.624125][ T559] ? netlink_ack+0x1160/0x1160 [ 1695.628961][ T559] ? down_read+0x1a8/0x2d0 [ 1695.633420][ T559] genl_rcv+0x24/0x40 [ 1695.637435][ T559] netlink_unicast+0x7ad/0x920 [ 1695.642258][ T559] netlink_sendmsg+0x8ad/0xbd0 [ 1695.647078][ T559] ? netlink_getsockopt+0x550/0x550 [ 1695.652363][ T559] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1695.657961][ T559] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1695.663275][ T559] ? security_socket_sendmsg+0x7c/0xa0 [ 1695.668767][ T559] ? netlink_getsockopt+0x550/0x550 [ 1695.674010][ T559] ____sys_sendmsg+0x5ed/0x9a0 [ 1695.678849][ T559] ? __sys_sendmsg_sock+0x30/0x30 [ 1695.683938][ T559] ? __import_iovec+0x306/0x510 [ 1695.688861][ T559] ? import_iovec+0x6f/0xa0 [ 1695.693421][ T559] ___sys_sendmsg+0x2a2/0x360 [ 1695.698158][ T559] ? __sys_sendmsg+0x2a0/0x2a0 [ 1695.703032][ T559] __se_sys_sendmsg+0x1c3/0x2b0 [ 1695.707939][ T559] ? __x64_sys_sendmsg+0x80/0x80 [ 1695.712937][ T559] ? lockdep_hardirqs_on+0x94/0x140 [ 1695.718218][ T559] do_syscall_64+0x4c/0xa0 [ 1695.722682][ T559] ? clear_bhb_loop+0x60/0xb0 [ 1695.727401][ T559] ? clear_bhb_loop+0x60/0xb0 [ 1695.732120][ T559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.738047][ T559] RIP: 0033:0x7f59abd9e0d9 [ 1695.742516][ T559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.762154][ T559] RSP: 002b:00007f59acd12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1695.770583][ T559] RAX: ffffffffffffffda RBX: 00007f59ac025fa0 RCX: 00007f59abd9e0d9 [ 1695.778572][ T559] RDX: 0000000000000700 RSI: 0000200000000000 RDI: 0000000000000003 [ 1695.786559][ T559] RBP: 00007f59abe35024 R08: 0000000000000000 R09: 0000000000000000 [ 1695.794641][ T559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.802632][ T559] R13: 00007f59ac026038 R14: 00007f59ac025fa0 R15: 00007ffe80bdb568 [ 1695.810651][ T559] [ 1696.302392][ T576] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.9023'. [ 1697.422822][ T590] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.9027'. [ 1697.792436][ T596] netlink: 'syz.0.9030': attribute type 10 has an invalid length. [ 1697.896530][ T596] netlink: 'syz.0.9030': attribute type 2 has an invalid length. [ 1697.941915][ T596] netlink: 'syz.0.9030': attribute type 1 has an invalid length. [ 1697.997690][ T596] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.9030'. [ 1699.170808][ T637] netlink: 'syz.0.9044': attribute type 10 has an invalid length. [ 1699.178780][ T637] team0: Device wg1 is up. Set it down before adding it as a team port [ 1699.395573][ T641] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9046'. [ 1699.426043][ T641] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1699.445336][ T641] CPU: 1 PID: 641 Comm: syz.3.9046 Not tainted syzkaller #0 [ 1699.452774][ T641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1699.462897][ T641] Call Trace: [ 1699.466233][ T641] [ 1699.469223][ T641] dump_stack_lvl+0x188/0x24e [ 1699.473993][ T641] ? show_regs_print_info+0x12/0x12 [ 1699.479287][ T641] ? load_image+0x410/0x410 [ 1699.483917][ T641] sysfs_warn_dup+0x8a/0xa0 [ 1699.488503][ T641] sysfs_do_create_link_sd+0xc0/0x110 [ 1699.493968][ T641] device_add+0x83b/0x1050 [ 1699.498523][ T641] wiphy_register+0x1d8b/0x2aa0 [ 1699.503553][ T641] ? cfg80211_event_work+0x40/0x40 [ 1699.508764][ T641] ? minstrel_ht_alloc+0x894/0xa20 [ 1699.513972][ T641] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1699.520130][ T641] ieee80211_register_hw+0x2d48/0x39f0 [ 1699.525717][ T641] ? ieee80211_register_hw+0xee1/0x39f0 [ 1699.531340][ T641] ? ieee80211_register_hw+0xee1/0x39f0 [ 1699.536993][ T641] ? ieee80211_tasklet_handler+0x20/0x20 [ 1699.542704][ T641] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1699.548766][ T641] ? __debug_object_init+0xed/0x440 [ 1699.554071][ T641] ? memset+0x1e/0x40 [ 1699.558157][ T641] ? __hrtimer_init+0x189/0x270 [ 1699.563101][ T641] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1699.568939][ T641] ? memcpy+0x3c/0x60 [ 1699.573015][ T641] hwsim_new_radio_nl+0xab7/0xc90 [ 1699.578166][ T641] genl_family_rcv_msg_doit+0x22f/0x350 [ 1699.583784][ T641] ? end_current_label_crit_section+0x170/0x170 [ 1699.590115][ T641] ? trace_call_bpf+0xbf/0x6b0 [ 1699.594980][ T641] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1699.600952][ T641] ? bpf_lsm_capable+0x5/0x10 [ 1699.605682][ T641] ? security_capable+0x85/0xb0 [ 1699.610620][ T641] genl_rcv_msg+0x601/0x790 [ 1699.615242][ T641] ? genl_bind+0x360/0x360 [ 1699.619732][ T641] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1699.626204][ T641] netlink_rcv_skb+0x1ef/0x440 [ 1699.631058][ T641] ? genl_bind+0x360/0x360 [ 1699.635570][ T641] ? netlink_ack+0x1160/0x1160 [ 1699.640429][ T641] ? down_read+0x1a8/0x2d0 [ 1699.644916][ T641] genl_rcv+0x24/0x40 [ 1699.648961][ T641] netlink_unicast+0x7ad/0x920 [ 1699.653831][ T641] netlink_sendmsg+0x8ad/0xbd0 [ 1699.658726][ T641] ? netlink_getsockopt+0x550/0x550 [ 1699.664013][ T641] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1699.669641][ T641] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1699.675003][ T641] ? security_socket_sendmsg+0x7c/0xa0 [ 1699.680521][ T641] ? netlink_getsockopt+0x550/0x550 [ 1699.685797][ T641] ____sys_sendmsg+0x5ed/0x9a0 [ 1699.690657][ T641] ? __sys_sendmsg_sock+0x30/0x30 [ 1699.695748][ T641] ? __import_iovec+0x306/0x510 [ 1699.700724][ T641] ? import_iovec+0x6f/0xa0 [ 1699.705323][ T641] ___sys_sendmsg+0x2a2/0x360 [ 1699.710097][ T641] ? __sys_sendmsg+0x2a0/0x2a0 [ 1699.715121][ T641] __se_sys_sendmsg+0x1c3/0x2b0 [ 1699.720063][ T641] ? __x64_sys_sendmsg+0x80/0x80 [ 1699.725125][ T641] ? lockdep_hardirqs_on+0x94/0x140 [ 1699.730401][ T641] do_syscall_64+0x4c/0xa0 [ 1699.734890][ T641] ? clear_bhb_loop+0x60/0xb0 [ 1699.739636][ T641] ? clear_bhb_loop+0x60/0xb0 [ 1699.744400][ T641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1699.750367][ T641] RIP: 0033:0x7fa74479e0d9 [ 1699.754859][ T641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.758392][ T640] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.9045'. [ 1699.774499][ T641] RSP: 002b:00007fa745612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1699.774602][ T641] RAX: ffffffffffffffda RBX: 00007fa744a25fa0 RCX: 00007fa74479e0d9 [ 1699.774626][ T641] RDX: 0000000000000700 RSI: 0000200000000000 RDI: 0000000000000003 [ 1699.774647][ T641] RBP: 00007fa744835024 R08: 0000000000000000 R09: 0000000000000000 [ 1699.774667][ T641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.774687][ T641] R13: 00007fa744a26038 R14: 00007fa744a25fa0 R15: 00007ffd134d7358 [ 1699.774790][ T641] [ 1700.419730][ T649] netlink: 'syz.4.9049': attribute type 10 has an invalid length. [ 1700.428495][ T649] device bond0 left promiscuous mode [ 1700.434692][ T649] device bond_slave_0 left promiscuous mode [ 1700.447461][ T649] device bond_slave_1 left promiscuous mode [ 1700.460670][ T649] bridge0: port 3(bond0) entered disabled state [ 1700.500876][ T649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.576106][ T649] device bond0 entered promiscuous mode [ 1700.603306][ T653] netlink: 'syz.4.9049': attribute type 2 has an invalid length. [ 1700.637373][ T649] device bond_slave_0 entered promiscuous mode [ 1700.668041][ T653] netlink: 'syz.4.9049': attribute type 1 has an invalid length. [ 1700.709864][ T649] device bond_slave_1 entered promiscuous mode [ 1700.716941][ T649] team0: Port device bond0 added [ 1700.754316][ T653] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9049'. [ 1700.818767][ T667] netlink: 'syz.2.9051': attribute type 29 has an invalid length. [ 1700.873859][ T667] netlink: 'syz.2.9051': attribute type 29 has an invalid length. [ 1700.884677][ T664] netlink: 'syz.2.9051': attribute type 29 has an invalid length. [ 1701.726643][ T692] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9061'. [ 1702.564067][ T714] syz.2.9064[714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1702.564331][ T714] syz.2.9064[714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1703.109394][ T725] ref_ctr_offset mismatch. inode: 0x278 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1703.295232][ T727] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1704.012826][ T747] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9077'. [ 1704.065942][ T747] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1704.862226][ T770] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.9084'. [ 1705.522944][ T778] validate_nla: 3 callbacks suppressed [ 1705.522990][ T778] netlink: 'syz.3.9087': attribute type 10 has an invalid length. [ 1705.818497][ T781] netlink: 'syz.2.9088': attribute type 2 has an invalid length. [ 1705.850753][ T783] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9090'. [ 1705.860352][ T781] netlink: 'syz.2.9088': attribute type 2 has an invalid length. [ 1705.868215][ T781] netlink: 194740 bytes leftover after parsing attributes in process `syz.2.9088'. [ 1705.878134][ T783] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1706.101418][T31077] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1706.182875][ T802] netlink: 'syz.3.9097': attribute type 10 has an invalid length. [ 1706.554876][ T806] Q±6ã`Ò˜: renamed from lo [ 1706.582545][ T812] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1707.878902][ T842] netlink: 'syz.1.9115': attribute type 10 has an invalid length. [ 1707.899441][ T844] netlink: 'syz.2.9116': attribute type 2 has an invalid length. [ 1707.912474][ T844] device 0 entered promiscuous mode [ 1708.025633][ T846] netlink: 'syz.1.9115': attribute type 2 has an invalid length. [ 1708.061719][ T846] netlink: 'syz.1.9115': attribute type 1 has an invalid length. [ 1708.111964][ T846] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.9115'. [ 1708.702072][T23816] bond0: (slave syz_tun): Releasing backup interface [ 1708.735789][ T4277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1708.760489][ T4277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1708.779163][ T4277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1708.788686][ T4277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1708.796373][ T4277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1708.804871][ T4277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1708.961718][T27256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.073924][ T866] netlink: 'syz.1.9125': attribute type 10 has an invalid length. [ 1709.081922][ T866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1709.212355][T27256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.367929][T27256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.552390][T27256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.063077][ T857] chnl_net:caif_netlink_parms(): no params data found [ 1710.366008][ T897] netlink: 'syz.4.9134': attribute type 10 has an invalid length. [ 1710.585389][ T897] netlink: 'syz.4.9134': attribute type 2 has an invalid length. [ 1710.632090][ T897] netlink: 'syz.4.9134': attribute type 1 has an invalid length. [ 1710.666557][ T897] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9134'. [ 1710.882727][T31077] Bluetooth: hci4: command 0x0409 tx timeout [ 1711.295898][ T926] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1711.329277][ T926] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1711.457463][ T857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.468175][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.494420][ T857] device bridge_slave_0 entered promiscuous mode [ 1711.579763][ T857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.599994][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.608499][ T857] device bridge_slave_1 entered promiscuous mode [ 1711.809821][T31077] Bluetooth: hci0: command 0x0406 tx timeout [ 1711.829194][ T857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.842465][ T857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.101660][ T857] team0: Port device team_slave_0 added [ 1712.140195][ T857] team0: Port device team_slave_1 added [ 1712.284561][ T857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1712.332698][ T857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.368348][ T952] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9143'. [ 1712.402806][ T857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.491123][ T857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.534081][ T857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.627903][ T857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.689083][ T952] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1712.930002][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 1713.108975][ T857] device hsr_slave_0 entered promiscuous mode [ 1713.170500][ T857] device hsr_slave_1 entered promiscuous mode [ 1713.210020][ T857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1713.249557][ T857] Cannot create hsr debugfs directory [ 1713.697364][ T973] netlink: 'syz.4.9148': attribute type 10 has an invalid length. [ 1713.717096][ T975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1713.789031][ T973] netlink: 'syz.4.9148': attribute type 2 has an invalid length. [ 1713.798182][ T973] netlink: 'syz.4.9148': attribute type 1 has an invalid length. [ 1713.857681][ T973] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9148'. [ 1714.263162][ T987] netlink: 'syz.1.9152': attribute type 16 has an invalid length. [ 1714.299483][ T987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9152'. [ 1714.420332][ T987] netlink: 'syz.1.9152': attribute type 2 has an invalid length. [ 1714.440813][ T987] netlink: 'syz.1.9152': attribute type 1 has an invalid length. [ 1714.530963][ T987] netlink: 'syz.1.9152': attribute type 4 has an invalid length. [ 1714.617623][ T987] netlink: 'syz.1.9152': attribute type 6 has an invalid length. [ 1714.639471][T27256] bond0: (slave wlan1): Releasing backup interface [ 1714.678792][T27256] device wlan1 left promiscuous mode [ 1714.697363][ T987] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.9152'. [ 1715.009744][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 1715.288628][T27256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1715.333988][T27256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1715.354068][T27256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1715.362684][T27256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.420050][T27256] device bridge_slave_0 left promiscuous mode [ 1715.442744][T27256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.526940][T27256] device veth1_macvtap left promiscuous mode [ 1715.546910][T27256] device veth0_macvtap left promiscuous mode [ 1715.554387][T27256] device veth1_vlan left promiscuous mode [ 1715.600969][T27256] device veth0_vlan left promiscuous mode [ 1715.875415][ T1037] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9162'. [ 1716.867565][T27256] device team_slave_1 left promiscuous mode [ 1716.877633][T27256] team0 (unregistering): Port device team_slave_1 removed [ 1716.920576][T27256] device team_slave_0 left promiscuous mode [ 1716.927706][T27256] team0 (unregistering): Port device team_slave_0 removed [ 1716.971467][T27256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.980618][T27256] device bond_slave_1 left promiscuous mode [ 1717.026088][T27256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.035268][T27256] device bond_slave_0 left promiscuous mode [ 1717.080704][T27256] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1717.089858][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 1717.090070][T27256] device bridge_slave_1 left promiscuous mode [ 1717.158034][T27256] bond0 (unregistering): (slave veth0_to_bridge): Releasing backup interface [ 1717.293499][T27256] device batadv0 left promiscuous mode [ 1717.300422][T27256] team0 (unregistering): Port device batadv0 removed [ 1717.343766][T27256] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1717.353466][T27256] device dummy0 left promiscuous mode [ 1717.376835][T27256] device bridge0 left promiscuous mode [ 1717.384242][T27256] team0 (unregistering): Port device bridge0 removed [ 1717.391109][T27256] device bond0 left promiscuous mode [ 1717.397502][T27256] team0 (unregistering): Port device bond0 removed [ 1717.429331][T27256] bond0 (unregistering): Released all slaves [ 1717.578215][ T1037] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1717.589996][ T1037] CPU: 0 PID: 1037 Comm: syz.2.9162 Not tainted syzkaller #0 [ 1717.597437][ T1037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1717.607515][ T1037] Call Trace: [ 1717.610826][ T1037] [ 1717.613779][ T1037] dump_stack_lvl+0x188/0x24e [ 1717.618491][ T1037] ? show_regs_print_info+0x12/0x12 [ 1717.623728][ T1037] ? load_image+0x410/0x410 [ 1717.628257][ T1037] sysfs_warn_dup+0x8a/0xa0 [ 1717.632804][ T1037] sysfs_do_create_link_sd+0xc0/0x110 [ 1717.638199][ T1037] device_add+0x83b/0x1050 [ 1717.642648][ T1037] wiphy_register+0x1d8b/0x2aa0 [ 1717.647539][ T1037] ? cfg80211_event_work+0x40/0x40 [ 1717.652676][ T1037] ? minstrel_ht_alloc+0x894/0xa20 [ 1717.657825][ T1037] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1717.663932][ T1037] ieee80211_register_hw+0x2d48/0x39f0 [ 1717.669426][ T1037] ? ieee80211_register_hw+0xee1/0x39f0 [ 1717.674990][ T1037] ? ieee80211_register_hw+0xee1/0x39f0 [ 1717.680572][ T1037] ? ieee80211_tasklet_handler+0x20/0x20 [ 1717.686235][ T1037] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1717.692159][ T1037] ? __debug_object_init+0xed/0x440 [ 1717.697405][ T1037] ? memset+0x1e/0x40 [ 1717.701412][ T1037] ? __hrtimer_init+0x189/0x270 [ 1717.706305][ T1037] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1717.712082][ T1037] ? memcpy+0x3c/0x60 [ 1717.716091][ T1037] hwsim_new_radio_nl+0xab7/0xc90 [ 1717.721169][ T1037] genl_family_rcv_msg_doit+0x22f/0x350 [ 1717.726740][ T1037] ? end_current_label_crit_section+0x170/0x170 [ 1717.733013][ T1037] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1717.738929][ T1037] ? bpf_lsm_capable+0x5/0x10 [ 1717.743644][ T1037] ? security_capable+0x85/0xb0 [ 1717.748528][ T1037] genl_rcv_msg+0x601/0x790 [ 1717.753056][ T1037] ? genl_bind+0x360/0x360 [ 1717.757504][ T1037] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1717.763877][ T1037] netlink_rcv_skb+0x1ef/0x440 [ 1717.768678][ T1037] ? genl_bind+0x360/0x360 [ 1717.773115][ T1037] ? netlink_ack+0x1160/0x1160 [ 1717.777932][ T1037] ? down_read+0x1a8/0x2d0 [ 1717.782379][ T1037] genl_rcv+0x24/0x40 [ 1717.786389][ T1037] netlink_unicast+0x7ad/0x920 [ 1717.791182][ T1037] netlink_sendmsg+0x8ad/0xbd0 [ 1717.795969][ T1037] ? netlink_getsockopt+0x550/0x550 [ 1717.801191][ T1037] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1717.806765][ T1037] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1717.812066][ T1037] ? security_socket_sendmsg+0x7c/0xa0 [ 1717.817557][ T1037] ? netlink_getsockopt+0x550/0x550 [ 1717.822797][ T1037] ____sys_sendmsg+0x5ed/0x9a0 [ 1717.827600][ T1037] ? __sys_sendmsg_sock+0x30/0x30 [ 1717.832651][ T1037] ? __import_iovec+0x306/0x510 [ 1717.837533][ T1037] ? import_iovec+0x6f/0xa0 [ 1717.842068][ T1037] ___sys_sendmsg+0x2a2/0x360 [ 1717.846776][ T1037] ? __sys_sendmsg+0x2a0/0x2a0 [ 1717.851595][ T1037] __se_sys_sendmsg+0x1c3/0x2b0 [ 1717.856466][ T1037] ? __x64_sys_sendmsg+0x80/0x80 [ 1717.861436][ T1037] ? lockdep_hardirqs_on+0x94/0x140 [ 1717.866646][ T1037] do_syscall_64+0x4c/0xa0 [ 1717.871082][ T1037] ? clear_bhb_loop+0x60/0xb0 [ 1717.875785][ T1037] ? clear_bhb_loop+0x60/0xb0 [ 1717.880489][ T1037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1717.886406][ T1037] RIP: 0033:0x7f164a19e0d9 [ 1717.890862][ T1037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.910481][ T1037] RSP: 002b:00007f164b119028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1717.918917][ T1037] RAX: ffffffffffffffda RBX: 00007f164a425fa0 RCX: 00007f164a19e0d9 [ 1717.926905][ T1037] RDX: 0000000000000900 RSI: 0000200000000000 RDI: 0000000000000003 [ 1717.934887][ T1037] RBP: 00007f164a235024 R08: 0000000000000000 R09: 0000000000000000 [ 1717.942873][ T1037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1717.950858][ T1037] R13: 00007f164a426038 R14: 00007f164a425fa0 R15: 00007ffe43e89c98 [ 1717.958855][ T1037] [ 1717.985382][ T1039] validate_nla: 2 callbacks suppressed [ 1717.985396][ T1039] netlink: 'syz.1.9163': attribute type 10 has an invalid length. [ 1718.119344][ T1044] netlink: 'syz.1.9163': attribute type 2 has an invalid length. [ 1718.140330][ T1044] netlink: 'syz.1.9163': attribute type 1 has an invalid length. [ 1718.182352][ T1044] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.9163'. [ 1718.421805][ T857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1718.470207][ T857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1718.688384][ T857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1718.750963][ T857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1719.185373][ T857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.209309][ T1084] syz.0.9171[1084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.209525][ T1084] syz.0.9171[1084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1719.231546][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1719.358880][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1719.378373][ T857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.405982][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1719.420721][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1719.450901][T15655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.458086][T15655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.536865][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1719.550704][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1719.592814][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1719.610554][T15655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.617737][T15655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.656115][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1719.675639][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1719.704106][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1719.764128][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1719.801103][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1719.875091][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1720.036003][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1720.051815][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1720.102744][ T1100] netlink: 'syz.4.9178': attribute type 16 has an invalid length. [ 1720.129428][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1720.153429][ T1100] netlink: 'syz.4.9178': attribute type 3 has an invalid length. [ 1720.181158][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1720.191495][ T1100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9178'. [ 1720.215083][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1720.262259][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1720.283825][ T1104] netlink: 'syz.2.9179': attribute type 10 has an invalid length. [ 1720.326704][ T1107] netlink: 'syz.2.9179': attribute type 2 has an invalid length. [ 1720.345686][ T1107] netlink: 'syz.2.9179': attribute type 1 has an invalid length. [ 1720.400228][ T1107] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1720.696257][ T1112] netlink: 'syz.1.9180': attribute type 10 has an invalid length. [ 1721.329634][ T1112] team0: Device wg1 is of different type [ 1721.799048][T29033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1721.810215][T29033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1721.875539][ T857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.944118][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1721.957368][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1721.991103][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1722.006656][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1722.021843][ T857] device veth0_vlan entered promiscuous mode [ 1722.036187][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1722.046949][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1722.068243][ T857] device veth1_vlan entered promiscuous mode [ 1722.106808][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1722.123848][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1722.140007][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1722.149005][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1722.163861][ T857] device veth0_macvtap entered promiscuous mode [ 1722.177778][ T857] device veth1_macvtap entered promiscuous mode [ 1722.204115][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1722.226935][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.248389][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1722.261072][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.284184][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1722.308208][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.329494][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1722.359356][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.394395][ T857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1722.417488][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1722.447877][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.466055][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1722.488226][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.511457][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1722.534501][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.575872][ T857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1722.598204][ T857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1722.611316][ T857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1722.628598][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1722.638095][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1722.647443][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1722.678612][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1722.707877][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1722.740991][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1722.793949][ T857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.814517][ T857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.838561][ T857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1722.888190][ T857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1723.196787][T29033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.224708][T29033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1723.278988][T29033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1723.317665][T15655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1723.354680][ T1174] netlink: 'syz.1.9192': attribute type 10 has an invalid length. [ 1723.360980][T15655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1723.416108][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1723.441511][ T1176] netlink: 'syz.2.9193': attribute type 10 has an invalid length. [ 1723.529609][ T1174] netlink: 'syz.1.9192': attribute type 2 has an invalid length. [ 1723.548634][ T1174] netlink: 'syz.1.9192': attribute type 1 has an invalid length. [ 1723.599925][ T1174] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.9192'. [ 1724.771314][ T1214] netlink: 'syz.4.9205': attribute type 10 has an invalid length. [ 1725.254100][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1725.289517][T11706] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1725.299839][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1725.323759][T11706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1725.346844][T11706] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1725.354463][T11706] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1725.665822][ T1224] chnl_net:caif_netlink_parms(): no params data found [ 1725.826319][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.857332][ T1224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.868234][ T1224] device bridge_slave_0 entered promiscuous mode [ 1725.883050][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.890914][ T1224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.899134][ T1224] device bridge_slave_1 entered promiscuous mode [ 1725.926198][ T1224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.938270][ T1224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.051368][T23439] bond0: (slave syz_tun): Releasing backup interface [ 1726.124239][ T1224] team0: Port device team_slave_0 added [ 1726.140170][ T1224] team0: Port device team_slave_1 added [ 1726.505461][ T1250] netlink: 'syz.2.9211': attribute type 2 has an invalid length. [ 1726.521740][ T1250] netlink: 'syz.2.9211': attribute type 1 has an invalid length. [ 1726.536849][ T1250] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9211'. [ 1727.139381][T29033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.195696][ T1246] netlink: 'syz.4.9209': attribute type 10 has an invalid length. [ 1727.211479][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.219001][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.267135][ T1246] team0: Device bridge0 is already an upper device of the team interface [ 1727.289151][ T1260] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.9215'. [ 1727.294785][ T1249] netlink: 'syz.2.9211': attribute type 10 has an invalid length. [ 1727.489889][T31077] Bluetooth: hci5: command 0x0409 tx timeout [ 1727.753848][ T1224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.761091][ T1224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.802012][ T1224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.864121][T29033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.876872][ T1258] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9214'. [ 1727.899919][ T1258] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1727.924014][ T1224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.945548][ T1224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.989716][ T1224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.079430][T29033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.221181][ T1274] netlink: 'syz.1.9220': attribute type 3 has an invalid length. [ 1728.246720][T29033] bond0: (slave netdevsim0): Releasing backup interface [ 1728.250095][ T1274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9220'. [ 1728.298454][T29033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.357577][ T1224] device hsr_slave_0 entered promiscuous mode [ 1728.365619][ T1224] device hsr_slave_1 entered promiscuous mode [ 1728.379061][ T1224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1728.412356][ T1224] Cannot create hsr debugfs directory [ 1728.427804][ T1274] netlink: 'syz.1.9220': attribute type 22 has an invalid length. [ 1728.459587][ T1274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9220'. [ 1728.684201][ T1296] netlink: 'syz.3.9226': attribute type 10 has an invalid length. [ 1728.750514][ T1296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.782672][ T1296] team0: Port device bond0 added [ 1728.930587][ T1298] netlink: 'syz.3.9226': attribute type 2 has an invalid length. [ 1728.939593][ T1298] netlink: 'syz.3.9226': attribute type 1 has an invalid length. [ 1729.063131][ T1298] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.9226'. [ 1729.118713][ T1305] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9229'. [ 1729.180463][ T1305] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1729.216084][ T1305] CPU: 0 PID: 1305 Comm: syz.4.9229 Not tainted syzkaller #0 [ 1729.223688][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1729.233818][ T1305] Call Trace: [ 1729.237155][ T1305] [ 1729.240158][ T1305] dump_stack_lvl+0x188/0x24e [ 1729.244940][ T1305] ? show_regs_print_info+0x12/0x12 [ 1729.250236][ T1305] ? load_image+0x410/0x410 [ 1729.254884][ T1305] sysfs_warn_dup+0x8a/0xa0 [ 1729.259471][ T1305] sysfs_do_create_link_sd+0xc0/0x110 [ 1729.264931][ T1305] device_add+0x83b/0x1050 [ 1729.269438][ T1305] wiphy_register+0x1d8b/0x2aa0 [ 1729.274451][ T1305] ? cfg80211_event_work+0x40/0x40 [ 1729.279649][ T1305] ? minstrel_ht_alloc+0x894/0xa20 [ 1729.284936][ T1305] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1729.291091][ T1305] ieee80211_register_hw+0x2d48/0x39f0 [ 1729.296690][ T1305] ? ieee80211_register_hw+0xee1/0x39f0 [ 1729.302316][ T1305] ? ieee80211_register_hw+0xee1/0x39f0 [ 1729.307966][ T1305] ? ieee80211_tasklet_handler+0x20/0x20 [ 1729.313693][ T1305] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1729.319690][ T1305] ? __debug_object_init+0xed/0x440 [ 1729.324987][ T1305] ? memset+0x1e/0x40 [ 1729.329055][ T1305] ? __hrtimer_init+0x189/0x270 [ 1729.334003][ T1305] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1729.339842][ T1305] ? memcpy+0x3c/0x60 [ 1729.343917][ T1305] hwsim_new_radio_nl+0xab7/0xc90 [ 1729.349068][ T1305] genl_family_rcv_msg_doit+0x22f/0x350 [ 1729.354690][ T1305] ? end_current_label_crit_section+0x170/0x170 [ 1729.361035][ T1305] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1729.367029][ T1305] ? bpf_lsm_capable+0x5/0x10 [ 1729.371767][ T1305] ? security_capable+0x85/0xb0 [ 1729.376739][ T1305] genl_rcv_msg+0x601/0x790 [ 1729.381349][ T1305] ? genl_bind+0x360/0x360 [ 1729.385819][ T1305] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1729.392323][ T1305] netlink_rcv_skb+0x1ef/0x440 [ 1729.397190][ T1305] ? genl_bind+0x360/0x360 [ 1729.401715][ T1305] ? netlink_ack+0x1160/0x1160 [ 1729.406650][ T1305] ? down_read+0x1a8/0x2d0 [ 1729.411154][ T1305] genl_rcv+0x24/0x40 [ 1729.415201][ T1305] netlink_unicast+0x7ad/0x920 [ 1729.420089][ T1305] netlink_sendmsg+0x8ad/0xbd0 [ 1729.425004][ T1305] ? netlink_getsockopt+0x550/0x550 [ 1729.430287][ T1305] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1729.435914][ T1305] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1729.441269][ T1305] ? security_socket_sendmsg+0x7c/0xa0 [ 1729.446804][ T1305] ? netlink_getsockopt+0x550/0x550 [ 1729.452086][ T1305] ____sys_sendmsg+0x5ed/0x9a0 [ 1729.456994][ T1305] ? __sys_sendmsg_sock+0x30/0x30 [ 1729.462093][ T1305] ? __import_iovec+0x306/0x510 [ 1729.467054][ T1305] ? import_iovec+0x6f/0xa0 [ 1729.471669][ T1305] ___sys_sendmsg+0x2a2/0x360 [ 1729.476479][ T1305] ? __sys_sendmsg+0x2a0/0x2a0 [ 1729.481518][ T1305] __se_sys_sendmsg+0x1c3/0x2b0 [ 1729.486432][ T1305] ? ct_nmi_exit+0x145/0x1c0 [ 1729.491097][ T1305] ? __x64_sys_sendmsg+0x80/0x80 [ 1729.496157][ T1305] ? lockdep_hardirqs_on+0x94/0x140 [ 1729.501443][ T1305] do_syscall_64+0x4c/0xa0 [ 1729.505932][ T1305] ? clear_bhb_loop+0x60/0xb0 [ 1729.510683][ T1305] ? clear_bhb_loop+0x60/0xb0 [ 1729.515437][ T1305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1729.521397][ T1305] RIP: 0033:0x7f5c73b9e0d9 [ 1729.525880][ T1305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.545561][ T1305] RSP: 002b:00007f5c749a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1729.554063][ T1305] RAX: ffffffffffffffda RBX: 00007f5c73e25fa0 RCX: 00007f5c73b9e0d9 [ 1729.562111][ T1305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1729.570149][ T1305] RBP: 00007f5c73c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1729.578178][ T1305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1729.586209][ T1305] R13: 00007f5c73e26038 R14: 00007f5c73e25fa0 R15: 00007fff37c261e8 [ 1729.594351][ T1305] [ 1729.603430][T31077] Bluetooth: hci5: command 0x041b tx timeout [ 1730.211886][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.218326][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.638817][ T1345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9238'. [ 1730.780427][ T1356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9239'. [ 1730.811397][ T1359] netlink: 'syz.1.9241': attribute type 10 has an invalid length. [ 1731.208347][ T1224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1731.263746][ T1370] netlink: 'syz.4.9245': attribute type 10 has an invalid length. [ 1731.339287][ T1224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1731.359838][ T1372] netlink: 'syz.3.9246': attribute type 41 has an invalid length. [ 1731.368699][ T1224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1731.396611][ T1370] netlink: 'syz.4.9245': attribute type 2 has an invalid length. [ 1731.422464][ T1224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1731.440001][ T1370] netlink: 'syz.4.9245': attribute type 1 has an invalid length. [ 1731.458496][ T1370] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9245'. [ 1731.660946][T31077] Bluetooth: hci5: command 0x040f tx timeout [ 1731.887654][ T1224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1731.988644][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1732.013395][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1732.038558][ T1224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1732.067016][ T1395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9251'. [ 1732.148622][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1732.158132][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1732.167277][T27256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.174532][T27256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1732.189596][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1732.237331][ T1398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9252'. [ 1732.254892][ T1398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9252'. [ 1732.331094][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1732.355709][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1732.375683][T27256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.382902][T27256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.447211][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1732.478970][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1732.526228][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1732.557431][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1732.600872][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1732.678423][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1732.704034][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1732.752390][ T1413] netlink: 'syz.2.9256': attribute type 11 has an invalid length. [ 1732.792165][ T1413] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1732.833359][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1732.860369][T29038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1732.875977][ T1413] netlink: 'syz.2.9256': attribute type 11 has an invalid length. [ 1732.902797][ T1413] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1732.920728][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1732.962561][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1732.993697][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1733.030356][ T1411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1733.088455][T29033] bond0: (slave wlan1): Releasing backup interface [ 1733.731256][T31077] Bluetooth: hci5: command 0x0419 tx timeout [ 1733.783794][T29033] device hsr_slave_0 left promiscuous mode [ 1733.810614][T29033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1733.838479][T29033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.916902][T29033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.940385][T29033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.960625][T29033] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1733.990376][T29033] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1734.020499][T29033] device bridge_slave_1 left promiscuous mode [ 1734.026817][T29033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.052182][T29033] device bridge_slave_0 left promiscuous mode [ 1734.058507][T29033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.104350][ T1450] netlink: 'syz.3.9265': attribute type 2 has an invalid length. [ 1734.200921][ T1450] netlink: 'syz.3.9265': attribute type 1 has an invalid length. [ 1734.208752][ T1450] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.9265'. [ 1734.230724][T29033] device veth1_macvtap left promiscuous mode [ 1734.236874][T29033] device veth0_macvtap left promiscuous mode [ 1734.251737][T29033] device veth1_vlan left promiscuous mode [ 1734.257752][T29033] device veth0_vlan left promiscuous mode [ 1737.018356][ T1473] netlink: 39083 bytes leftover after parsing attributes in process `syz.3.9272'. [ 1737.083679][T29033] team0 (unregistering): Port device team_slave_1 removed [ 1737.171673][T29033] team0 (unregistering): Port device team_slave_0 removed [ 1737.217702][T29033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1737.446288][T29033] team0 (unregistering): Port device batadv0 removed [ 1737.492253][T29033] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1737.522810][T29033] team0 (unregistering): Port device bridge0 removed [ 1737.534156][T29033] team0 (unregistering): Port device bond0 removed [ 1737.567188][T29033] bond0 (unregistering): Released all slaves [ 1737.676154][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1737.686030][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1737.704286][ T1452] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9266'. [ 1737.764039][ T1224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1737.876525][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1737.895279][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1737.989416][ T1224] device veth0_vlan entered promiscuous mode [ 1737.999486][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1738.011008][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1738.032144][ T1479] netlink: 'syz.4.9275': attribute type 10 has an invalid length. [ 1738.151396][ T1479] device wg1 entered promiscuous mode [ 1738.163733][ T1479] team0: Device wg1 is of different type [ 1738.212921][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1738.223625][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1738.270395][ T1224] device veth1_vlan entered promiscuous mode [ 1738.364369][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1738.402275][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1738.431441][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1738.453216][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1738.490098][ T1224] device veth0_macvtap entered promiscuous mode [ 1738.513072][ T1224] device veth1_macvtap entered promiscuous mode [ 1738.571064][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.595572][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.638061][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.654575][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.664893][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.682917][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.694554][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1738.709742][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.726326][ T1224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1738.740737][ T1495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1738.767778][ T1497] ref_ctr_offset mismatch. inode: 0x89 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1738.769020][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1738.797212][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1738.807277][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1738.816550][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1738.827057][ T1495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1738.859017][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.880061][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.891338][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.903439][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.914105][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.924905][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.935192][ T1224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1738.958950][ T1224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1738.971919][ T1224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1738.987930][ T1498] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1739.019230][ T1499] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1739.046324][ T1495] netlink: 'syz.4.9281': attribute type 21 has an invalid length. [ 1739.120923][ T1495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1739.172924][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1739.190671][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1739.236374][ T1224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.264989][ T1224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.302549][ T1224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.345923][ T1224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.052061][ T1512] netlink: 'syz.4.9285': attribute type 10 has an invalid length. [ 1740.177042][T15642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.209878][T15642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.238005][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1740.258273][T29036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.272716][T29036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1740.299544][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1741.082301][ T1534] netlink: 'syz.2.9291': attribute type 2 has an invalid length. [ 1741.273109][ T1534] netlink: 'syz.2.9291': attribute type 1 has an invalid length. [ 1741.389932][ T1534] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9291'. [ 1742.168040][ T1546] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9298'. [ 1742.226952][ T1546] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1742.328219][T31077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1742.347780][T31077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1742.357396][T31077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1742.382500][T31077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1742.391310][T31077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1742.399826][T31077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1742.767962][ T1558] netlink: 'syz.2.9303': attribute type 10 has an invalid length. [ 1742.953244][ T1558] netlink: 'syz.2.9303': attribute type 2 has an invalid length. [ 1743.065956][ T1558] netlink: 'syz.2.9303': attribute type 1 has an invalid length. [ 1743.147698][ T1558] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9303'. [ 1743.202454][ T1548] chnl_net:caif_netlink_parms(): no params data found [ 1743.219489][ T1567] netlink: 'syz.0.9305': attribute type 10 has an invalid length. [ 1743.375792][ T1548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.391441][ T1548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.420563][ T1548] device bridge_slave_0 entered promiscuous mode [ 1743.451867][ T1548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.464969][ T1548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.493122][ T1548] device bridge_slave_1 entered promiscuous mode [ 1743.854446][ T1548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.912407][ T1548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.035373][ T1589] netlink: 'syz.2.9311': attribute type 21 has an invalid length. [ 1744.070077][ T1589] netlink: 'syz.2.9311': attribute type 6 has an invalid length. [ 1744.115574][ T1548] team0: Port device team_slave_0 added [ 1744.197499][T29033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.268263][ T1548] team0: Port device team_slave_1 added [ 1744.430136][T29033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.451723][T11706] Bluetooth: hci1: command 0x0409 tx timeout [ 1744.534514][ T1548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.554174][ T1548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.697883][ T1548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.737557][T29033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.757746][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1744.782209][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1744.855730][ T1605] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.9317'. [ 1744.861247][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1744.909119][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.275354][ T1548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1745.282582][ T1548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1745.308681][ T1548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1745.359286][T29033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.406179][ T1607] netlink: 'syz.4.9318': attribute type 21 has an invalid length. [ 1745.419881][ T1607] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9318'. [ 1745.498639][ T1548] device hsr_slave_0 entered promiscuous mode [ 1745.527134][ T1548] device hsr_slave_1 entered promiscuous mode [ 1745.539080][ T1548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1745.557215][ T1548] Cannot create hsr debugfs directory [ 1745.587438][ T1617] netlink: 'syz.0.9321': attribute type 10 has an invalid length. [ 1745.710922][ T1620] netlink: 'syz.0.9321': attribute type 2 has an invalid length. [ 1745.720075][ T1617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1745.736435][ T1620] netlink: 'syz.0.9321': attribute type 1 has an invalid length. [ 1745.750427][ T1617] team0: Port device bond0 added [ 1745.757790][ T1619] netlink: 'syz.2.9322': attribute type 10 has an invalid length. [ 1745.778597][ T1619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9322'. [ 1745.788268][ T1620] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.9321'. [ 1745.798940][ T1619] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1745.850359][ T1624] device bridge_slave_1 left promiscuous mode [ 1745.856807][ T1624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.529776][T11706] Bluetooth: hci1: command 0x041b tx timeout [ 1746.827774][ T1624] device bridge_slave_0 left promiscuous mode [ 1746.846476][ T1624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.260784][ T1649] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9330'. [ 1747.304357][ T1649] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1747.981136][ T1654] netlink: 'syz.0.9331': attribute type 1 has an invalid length. [ 1747.989947][ T1654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9331'. [ 1748.228448][ T1664] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9333'. [ 1748.607844][ T1669] netlink: 'syz.2.9335': attribute type 10 has an invalid length. [ 1748.616279][T31077] Bluetooth: hci1: command 0x040f tx timeout [ 1748.681410][ T1669] team0: Port device bond0 removed [ 1748.720950][ T1672] netlink: 'syz.4.9334': attribute type 7 has an invalid length. [ 1748.763979][ T1664] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1749.620246][ T1695] netlink: 'syz.4.9341': attribute type 10 has an invalid length. [ 1749.822783][ T1695] netlink: 'syz.4.9341': attribute type 2 has an invalid length. [ 1749.849266][ T1698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9342'. [ 1749.873715][ T1695] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9341'. [ 1750.003871][ T1700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9343'. [ 1750.032286][ T1700] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1750.044112][ T1700] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1750.078382][ T1700] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1750.500031][ T1548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1750.544575][ T1548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1750.700963][T11706] Bluetooth: hci1: command 0x0419 tx timeout [ 1750.744439][ T1548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1750.931576][ T1715] IPv6: pim6reg1: Disabled Multicast RS [ 1751.182973][ T1548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1752.752103][ T1548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.858672][ T1548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.904431][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1752.940436][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1753.167305][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1753.195570][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1753.236381][T15642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.243738][T15642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.333279][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1753.400580][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1753.475852][T15642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.483125][T15642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.596031][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1753.612504][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1753.751259][T15642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1753.816044][T29033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.837281][T29033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.858636][T29033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.889244][T29033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.914762][T29033] bridge0: port 3(team0) entered disabled state [ 1753.975899][T29033] device bridge_slave_1 left promiscuous mode [ 1753.996979][T29033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.022813][T29033] device bridge_slave_0 left promiscuous mode [ 1754.048467][T29033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.065476][ T1805] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.9366'. [ 1754.138655][T29033] device veth1_macvtap left promiscuous mode [ 1754.169150][T29033] device veth1_vlan left promiscuous mode [ 1754.189149][T29033] device veth0_vlan left promiscuous mode [ 1755.186344][ T1823] validate_nla: 2 callbacks suppressed [ 1755.186384][ T1823] netlink: 'syz.4.9371': attribute type 16 has an invalid length. [ 1755.208484][ T1823] netlink: 'syz.4.9371': attribute type 3 has an invalid length. [ 1755.223827][ T1823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9371'. [ 1756.014654][T29033] device team_slave_1 left promiscuous mode [ 1756.038150][T29033] team0 (unregistering): Port device team_slave_1 removed [ 1756.143124][T29033] device team_slave_0 left promiscuous mode [ 1756.159083][T29033] team0 (unregistering): Port device team_slave_0 removed [ 1756.729093][ T1793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1756.736692][ T1793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1756.745320][ T1793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1756.753475][ T1793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1756.816253][ T1805] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1756.825873][ T1805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1756.835707][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1756.844115][ T1805] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1756.858582][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1756.873041][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1756.891954][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1756.905589][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1756.916022][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1756.949245][ T1849] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.9378'. [ 1756.972866][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1757.021419][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1757.050849][T27256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1757.082865][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1757.905497][T29044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1757.916819][T29044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1757.951735][ T1548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1758.128775][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1758.143963][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1758.241981][ T1548] device veth0_vlan entered promiscuous mode [ 1758.259034][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1758.274859][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1758.298355][ T1548] device veth1_vlan entered promiscuous mode [ 1758.318929][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1758.333277][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1758.346517][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1758.401206][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1758.414191][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1758.423983][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1758.444734][ T1548] device veth0_macvtap entered promiscuous mode [ 1758.466753][ T1548] device veth1_macvtap entered promiscuous mode [ 1758.504385][ T1548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.519692][ T1548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.540342][ T1548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.560728][ T1548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.577269][ T1548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.585260][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1758.595720][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1758.606284][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1758.616528][T29042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1758.628986][ T1548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.641130][ T1548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.653235][ T1548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.664424][ T1548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.677050][ T1548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.693781][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1758.703212][T29036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1758.725986][ T1548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.735369][ T1548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.745840][ T1548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.756501][ T1548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.168270][T29044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.223078][T29044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.299193][T29033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1759.306681][T29036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.322927][T29036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.378604][T29044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1762.492246][ T1947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9408'. [ 1762.755234][ T1951] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9410'. [ 1762.776452][ T1951] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1763.857443][ T1958] netlink: 'syz.4.9412': attribute type 2 has an invalid length. [ 1763.886912][ T1958] netlink: 'syz.4.9412': attribute type 1 has an invalid length. [ 1763.910996][ T1958] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9412'. [ 1765.089120][ T1955] netlink: 'syz.4.9412': attribute type 10 has an invalid length. [ 1765.480063][ T1973] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.9416'. [ 1765.888493][ T1987] netlink: 'syz.0.9420': attribute type 29 has an invalid length. [ 1765.902010][ T1987] netlink: 'syz.0.9420': attribute type 29 has an invalid length. [ 1765.912140][ T1987] netlink: 'syz.0.9420': attribute type 29 has an invalid length. [ 1765.945587][ T1991] netlink: 'syz.1.9421': attribute type 10 has an invalid length. [ 1767.027931][ T1991] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1767.233314][ T2007] netlink: 'syz.4.9426': attribute type 10 has an invalid length. [ 1767.328489][ T2007] netlink: 'syz.4.9426': attribute type 2 has an invalid length. [ 1767.350111][ T2007] netlink: 'syz.4.9426': attribute type 1 has an invalid length. [ 1767.372015][ T2007] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9426'. [ 1767.545299][ T2023] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9431'. [ 1768.997848][ T2048] validate_nla: 1 callbacks suppressed [ 1768.997866][ T2048] netlink: 'syz.4.9440': attribute type 21 has an invalid length. [ 1769.059379][ T2048] netlink: 'syz.4.9440': attribute type 2 has an invalid length. [ 1769.091083][ T2048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9440'. [ 1770.284027][ T2057] netlink: 'syz.2.9443': attribute type 6 has an invalid length. [ 1770.299492][ T2057] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.9443'. [ 1770.496053][ T2062] netlink: 'syz.2.9445': attribute type 10 has an invalid length. [ 1770.528529][ T2062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.563818][ T2062] team0: Port device bond0 added [ 1770.795146][ T2062] netlink: 'syz.2.9445': attribute type 2 has an invalid length. [ 1770.804901][ T2062] netlink: 'syz.2.9445': attribute type 1 has an invalid length. [ 1770.817747][ T2062] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1770.961439][ T2078] netlink: 'syz.3.9451': attribute type 1 has an invalid length. [ 1770.985099][ T2078] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1771.466807][ T2094] netlink: 'syz.3.9456': attribute type 6 has an invalid length. [ 1771.475344][ T2094] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.9456'. [ 1773.022792][ T2123] netlink: 'syz.2.9465': attribute type 16 has an invalid length. [ 1773.061229][ T2123] netlink: 'syz.2.9465': attribute type 3 has an invalid length. [ 1773.124806][ T2123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9465'. [ 1773.249882][T31077] Bluetooth: hci3: command 0x0406 tx timeout [ 1773.383804][ T2131] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1773.639323][ T2129] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.9468'. [ 1774.132417][ T2152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1774.145603][ T2152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1774.155500][ T2154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1774.175700][ T2152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1774.383106][ T2158] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9479'. [ 1774.546623][ T2162] validate_nla: 4 callbacks suppressed [ 1774.546642][ T2162] netlink: 'syz.3.9481': attribute type 10 has an invalid length. [ 1774.705843][ T2167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9482'. [ 1774.834246][ T2162] netlink: 'syz.3.9481': attribute type 2 has an invalid length. [ 1774.886492][ T2162] netlink: 'syz.3.9481': attribute type 1 has an invalid length. [ 1774.961557][ T2162] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1775.045627][ T2170] netlink: 'syz.4.9483': attribute type 10 has an invalid length. [ 1775.283506][ T2170] team0: Device wg1 is of different type [ 1775.435872][ T2177] ref_ctr_offset mismatch. inode: 0xe2 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1775.903429][ T2190] netlink: 'syz.3.9490': attribute type 10 has an invalid length. [ 1776.001008][ T2190] netlink: 'syz.3.9490': attribute type 2 has an invalid length. [ 1776.032868][ T2190] netlink: 'syz.3.9490': attribute type 1 has an invalid length. [ 1776.087503][ T2197] netlink: 'syz.0.9493': attribute type 10 has an invalid length. [ 1776.088480][ C1] [ 1776.088498][ C1] ================================ [ 1776.088515][ C1] WARNING: inconsistent lock state [ 1776.088544][ C1] syzkaller #0 Not tainted [ 1776.088570][ C1] -------------------------------- [ 1776.088581][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1776.088600][ C1] syz.2.9492/2194 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1776.088645][ C1] ffff88807cbdca18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 1776.088861][ C1] {INITIAL USE} state was registered at: [ 1776.088880][ C1] lock_acquire+0x1bb/0x4a0 [ 1776.088946][ C1] _raw_spin_lock+0x2a/0x40 [ 1776.088992][ C1] htab_lock_bucket+0x179/0x2f0 [ 1776.089057][ C1] htab_lru_map_update_elem+0x2eb/0xe60 [ 1776.089114][ C1] bpf_map_update_value+0x59d/0x670 [ 1776.089174][ C1] generic_map_update_batch+0x52e/0x7f0 [ 1776.089222][ C1] bpf_map_do_batch+0x475/0x5f0 [ 1776.089273][ C1] __sys_bpf+0x6f7/0x780 [ 1776.089320][ C1] __x64_sys_bpf+0x78/0x90 [ 1776.089374][ C1] do_syscall_64+0x4c/0xa0 [ 1776.089435][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1776.089497][ C1] irq event stamp: 3418 [ 1776.089509][ C1] hardirqs last enabled at (3417): [] ___slab_alloc+0x1046/0x1240 [ 1776.089573][ C1] hardirqs last disabled at (3418): [] exc_debug+0x6e/0x130 [ 1776.089649][ C1] softirqs last enabled at (3158): [] bpf_prog_load+0x111d/0x1530 [ 1776.089723][ C1] softirqs last disabled at (3156): [] bpf_ksym_add+0x28/0x330 [ 1776.089796][ C1] [ 1776.089796][ C1] other info that might help us debug this: [ 1776.089807][ C1] Possible unsafe locking scenario: [ 1776.089807][ C1] [ 1776.089823][ C1] CPU0 [ 1776.089832][ C1] ---- [ 1776.089841][ C1] lock(&htab->lockdep_key); [ 1776.089869][ C1] [ 1776.089878][ C1] lock(&htab->lockdep_key); [ 1776.089906][ C1] [ 1776.089906][ C1] *** DEADLOCK *** [ 1776.089906][ C1] [ 1776.089924][ C1] no locks held by syz.2.9492/2194. [ 1776.089942][ C1] [ 1776.089942][ C1] stack backtrace: [ 1776.089959][ C1] CPU: 1 PID: 2194 Comm: syz.2.9492 Not tainted syzkaller #0 [ 1776.090009][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1776.090035][ C1] Call Trace: [ 1776.090052][ C1] <#DB> [ 1776.090069][ C1] dump_stack_lvl+0x188/0x24e [ 1776.090134][ C1] ? show_regs_print_info+0x12/0x12 [ 1776.090221][ C1] ? print_usage_bug+0x42a/0x690 [ 1776.090283][ C1] ? verify_lock_unused+0x15/0x140 [ 1776.090358][ C1] lock_acquire+0x2df/0x4a0 [ 1776.090436][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 1776.090509][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1776.090599][ C1] ? perf_trace_lock+0x301/0x390 [ 1776.090650][ C1] ? perf_output_begin_forward+0xa7/0xa70 [ 1776.090754][ C1] _raw_spin_lock+0x2a/0x40 [ 1776.090799][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 1776.090863][ C1] htab_lock_bucket+0x179/0x2f0 [ 1776.090936][ C1] ? htab_lru_map_delete_node+0x610/0x610 [ 1776.090992][ C1] ? look_up_lock_class+0x75/0x140 [ 1776.091053][ C1] ? verify_lock_unused+0x15/0x140 [ 1776.091113][ C1] ? htab_map_hash+0x329/0x6d0 [ 1776.091180][ C1] htab_lru_map_delete_elem+0x1a1/0x760 [ 1776.091243][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 1776.091307][ C1] ? htab_lru_map_update_elem+0xe60/0xe60 [ 1776.091410][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 1776.091490][ C1] bpf_overflow_handler+0x6d1/0x790 [ 1776.091543][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1776.091645][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 1776.091705][ C1] ? perf_swevent_overflow+0x230/0x230 [ 1776.091786][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1776.091907][ C1] __perf_event_overflow+0x457/0x630 [ 1776.092023][ C1] perf_swevent_event+0x315/0x570 [ 1776.092111][ C1] ? perf_tp_event+0xc10/0xc10 [ 1776.092229][ C1] perf_bp_event+0x311/0x3f0 [ 1776.092326][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 1776.092522][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1776.092590][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1776.092707][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 1776.092811][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 1776.092864][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1776.092941][ C1] notify_die+0x141/0x1a0 [ 1776.093015][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1776.093121][ C1] notify_debug+0x20/0x30 [ 1776.093199][ C1] exc_debug+0xd9/0x130 [ 1776.093303][ C1] asm_exc_debug+0x1a/0x40 [ 1776.093349][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1776.093418][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1776.093448][ C1] RSP: 0018:ffffc900030c7b40 EFLAGS: 00050206 [ 1776.093482][ C1] RAX: ffffffff8415c301 RBX: 0000000000000b68 RCX: 0000000000000840 [ 1776.093510][ C1] RDX: 0000000000000b68 RSI: 0000200000000328 RDI: ffff88805e2284c0 [ 1776.093543][ C1] RBP: 0000000000000000 R08: ffff88805e228cff R09: 1ffff1100bc4519f [ 1776.093571][ C1] R10: dffffc0000000000 R11: ffffed100bc451a0 R12: 00007fffffffe498 [ 1776.093598][ C1] R13: 0000000000000d40 R14: ffff88805e228198 R15: 0000200000000000 [ 1776.093704][ C1] ? _copy_from_user+0x21/0x170 [ 1776.093773][ C1] [ 1776.093785][ C1] [ 1776.093804][ C1] _copy_from_user+0xf4/0x170 [ 1776.093866][ C1] bpf_test_init+0xde/0x140 [ 1776.093966][ C1] bpf_prog_test_run_xdp+0x488/0xf80 [ 1776.094028][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1776.094157][ C1] ? dev_put+0x80/0x80 [ 1776.094260][ C1] ? dev_put+0x80/0x80 [ 1776.094328][ C1] bpf_prog_test_run+0x31c/0x390 [ 1776.094411][ C1] __sys_bpf+0x62b/0x780 [ 1776.094495][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1776.094658][ C1] ? lock_chain_count+0x20/0x20 [ 1776.094760][ C1] __x64_sys_bpf+0x78/0x90 [ 1776.094833][ C1] do_syscall_64+0x4c/0xa0 [ 1776.094903][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1776.094978][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1776.095044][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1776.095097][ C1] RIP: 0033:0x7f164a19e0d9 [ 1776.095132][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.095161][ C1] RSP: 002b:00007f164b119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1776.095202][ C1] RAX: ffffffffffffffda RBX: 00007f164a425fa0 RCX: 00007f164a19e0d9 [ 1776.095235][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1776.095262][ C1] RBP: 00007f164a235024 R08: 0000000000000000 R09: 0000000000000000 [ 1776.095288][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1776.095313][ C1] R13: 00007f164a426038 R14: 00007f164a425fa0 R15: 00007ffe43e89c98 [ 1776.095373][ C1]