last executing test programs: 24.264865935s ago: executing program 0 (id=2638): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) (async) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=0xffffffffffffffff, 0xa, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f0000000240)="19ff3eedf4eb1a1c736c1398da58d90035e89f095db4f527e02f52dc053ab534b675939223754c883f4d183bd4ad68d1656869688084f3b4b77a1b81b36a375b564bd24c5f0c7d3095f146eae3776a33892ce814354e83f45cfbbc70fd90a0efbad899086d8ffa3e0f58e631ab68c96a9eff6b03eb97813c179ea3fa56c2253569046d007e82516b5b8243ed3985f3e9b7b6e45e9d0e5e2e1ce3898759ae", &(0x7f0000000300)=""/67, &(0x7f0000000380)="ab5fe428ffd8534764430180856673d0f69d8b7cfdbd5139b6f6200a05ff1eb35682046ec694a23687c049731dc47a3ce9fb714c7d0979e2338676f0f0764d14e648fdf8c9dd6c60f13704d45725a44e237e7021a454b92898dc38fbb4ec97e7bcae7fad3708", &(0x7f0000000400)="32ea0bcb14342bb074d9c91b0ccb89ec5a72f3e79197edbda4a2dabfddfcebb91e97cc9653a65561432e826e3073b628d0c1db2b77da11a4e947437e835eb4e6b77c9d318ea06a75eef1f4593b3fb7fcd38ba738b05b2ec4b690b069fe0f0ce01386eaec4d8ac1b46a3b", 0x8, r2}, 0x38) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}], &(0x7f00000005c0)='syzkaller\x00', 0x80000001, 0xcc, &(0x7f0000000600)=""/204, 0x41100, 0x50, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xc, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r2], &(0x7f00000007c0)=[{0x1, 0x3, 0xb, 0x3}, {0x2, 0x2, 0x2, 0x1}, {0x4, 0x5, 0xc, 0x3}, {0x5, 0x4, 0x5, 0x6}, {0x2, 0x4, 0x10, 0x9}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000940)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) syz_clone(0x80000000, &(0x7f0000000c00)="760d1a44560247c584be257acc8ec72148b26cdb60ee3d80fe6ffe09839e24729b6415ea7bda3e60654d019b649c71ad7238295233d567b985c21030e23ea723109f8d3287", 0x45, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)="4ddd9d704dd1d2c96f3b95e98ff316e791ea6ae656f646c3b7db090965845b605f44103a71bcde440e0535d68f62ae190fdf5b86a97081bb08b94fa3cfc525c4c02f79ba4cf914daf7a8b45e53068e2a16a5cddf0b6681e751103abda57bc0dae93a33e31a45a721a9d19b2c0a2f5925712cf7bf7382c9bc5127c5785e85959d4edca79434de61de9006d541f1658361ac35d027d2a594324e1a4f7b94915f90025f028823fd1ebcb29ed059c7b2e1d31b64ed") r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000dc0)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x9, 0x7, 0xfffffffffffffffe, 0xffffffffffffffec}], &(0x7f0000000e80)='GPL\x00', 0x829b, 0x4e, &(0x7f0000000ec0)=""/78, 0x40f00, 0x66, '\x00', 0x0, 0x35, r1, 0x8, &(0x7f0000000f40)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x145e0, r1, 0x2, &(0x7f0000000f80)=[0xffffffffffffffff], &(0x7f0000000fc0)=[{0x1, 0x3, 0x10}, {0x0, 0x1, 0x7, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x0, 0x20, 0x39, &(0x7f00000010c0)="7c475c257993bc2c2d3326e9d1164241ef7efc429dc265533fb24eb33209803c", &(0x7f0000001100)=""/57, 0x66, 0x0, 0xb, 0x41, &(0x7f0000001140)="5ffefaa1805394d6ca0f39", &(0x7f0000001180)="eaa55e83067e3222a24d58162196e0685fd79e68b98b43081157ee8fba058b2f138e0d0a5d965dc602cb3b087f004224311761ea02c51bbf03189613aa1c866120", 0x2, 0x0, 0x3}, 0x50) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x16, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8f1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x2, 0x1, 0x2, 0x4, 0x7, 0x6, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='syzkaller\x00', 0xc, 0x87, &(0x7f0000001380)=""/135, 0x41000, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0xb, 0x10, 0xfffffffc}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000014c0)=[{0x0, 0x3, 0xd, 0x9}, {0x2, 0x3, 0xf, 0x1}, {0x3, 0x3, 0xb, 0x5}, {0x1, 0x2, 0x9, 0x9}, {0x0, 0x2, 0x6, 0xb}, {0x5, 0x3, 0xa, 0x6}, {0x2, 0x1, 0xa, 0x9}, {0x2, 0x7fffffff, 0x0, 0x8}, {0x0, 0x1, 0x9, 0x7}, {0x2, 0x3, 0x7, 0x6}], 0x10, 0x3}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001640)={r6, r2}, 0xc) (async) sendmsg$unix(r6, &(0x7f0000004b40)={&(0x7f0000001680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000001700)="eca80a0e4d4c4a0e2c83a8b40ca82157182c480e9e7b70ac9315ad7ab1c6c64abc1ffabbf9ed4f020e19be7a215b36f82d545ba73384d75dd4fe3ecdc86969f9a078ccc722fa033c06441bdf2a68b61088bdd0a85e63bfd383d785d77b584409b2c87b06cf7ceb17ed005e2a4c241e1a896af8bc7fa445e33998194bcb361607f2314694bb2807e066", 0x89}, {&(0x7f00000017c0)="3191b873c3af77124fc75885726d69b8be95b45b8bd00a5fdb2ad03a0441ea4124a3d09f8f97", 0x26}, {&(0x7f0000001800)="29ae3096d4b8fc28886427b8408d13ad716fd0507ba196665b07169c7004d482189e9442ba18bc52204b4a64620e7fad5a70b7085031e466f8b069ed228df5fec9e81fd50975927e870e0caccf5adb1afd3520381bbae7e8b25e79fb93ce44794aaa9db89f5925b9fb2f86d8d372e87ab4453013ce44bf322349e4c36cf20de862010272929e69a9afe37381f00715a2d2e8fb642190f31eb0d5be6fd8fb09d9d52f45f916f240fa044ebfb7480335f774166d2127eae2e33ad25bf316d3da9bcc00d4c2d914b003aef4ac7265627314dd", 0xd1}, {&(0x7f0000001900)="f0fe98b2ffbbcecfa2bd2eeddba8ebdb30e8e58bbc26fed1412624b474914135d17f1bf9790d1c341a6a5cf254cab4d2e4db16bfb7d608175974b81b93ffbcf557b7b88aa3c159e7321e5baa74a2027a669d0ee3c9588a31155d3e56ee44fda4bc720dca05e844f66010b2b1ae0f44ab5c381470678efd281921bd873f1a0a5a7d67dfce1e0e7d5c2b933aa3dd5586915c4574b1e87bfc0c6be7f987f0cd5701aea26714430b3133b4b3311ba3f53c23a1f245e82dd8bc80395e62e27b1f536831c8551f5878c5a544aef0c52c528772a87a81a76839c1677ae7495523e35bc8a2cbffe91b5c67ebff56a2b06721aa82", 0xf0}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="d16a1484a917b0b6274f6ed378402a7df13402d1d6f77913e8a09cbc29f2b21efbf48cb75bf561ae513880fb99ad44ecda8830cbfc6994598ccef31db89ba6854bd9dfc60a5d39dadd4de3bdca4f8255ca374bb09559795c30c37001b256c7519cd3fbc54e1ed5282fefbc2a", 0x6c}], 0x8, &(0x7f0000004b00)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee01}}}], 0x20, 0x24040005}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000004b80), 0x80, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004d80)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004e40)=@bpf_lsm={0x1d, 0x12, &(0x7f0000004bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @generic={0xc, 0x5, 0x7, 0x7f}, @alu={0x7, 0x1, 0x3, 0x5, 0x7, 0x18, 0x3}, @ldst={0x1, 0x0, 0x0, 0x3, 0x3, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000004c80)='GPL\x00', 0xfffffff7, 0x36, &(0x7f0000004cc0)=""/54, 0x41100, 0x1e, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000004d00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000004d40)={0x2, 0x6, 0x8e8d, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004e00)=[r1, r2, r1, r8, r2], 0x0, 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000004f00)={r1}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000004f40)=r9, 0x4) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000004f80)=r1, 0x4) write$cgroup_subtree(r1, &(0x7f0000004fc0)={[{0x2b, 'net_prio'}, {0x2b, 'cpu'}]}, 0xf) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005000)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4661c09, '\x00', r5, r1, 0x1, 0x3}, 0x50) (async) socketpair(0x1e, 0x1, 0x4, &(0x7f0000005080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000050c0)=""/17, 0x11}, {&(0x7f0000005100)=""/90, 0x5a}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000006180)=""/215, 0xd7}, {&(0x7f0000006280)=""/88, 0x58}, {&(0x7f0000006300)=""/151, 0x97}], 0x6, &(0x7f0000006440)=""/111, 0x6f}, 0x2020) (async) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006500)={0x0, 0x0, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006840)={0x6, 0x2f, &(0x7f0000006540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcaa39a8c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x0, 0x2, 0x5, 0x1ff, 0xeb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x60b0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x59}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000066c0)='GPL\x00', 0x0, 0x45, &(0x7f0000006700)=""/69, 0x41000, 0x40, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000006780)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000067c0)={0x3, 0x7, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000006800)=[{0x1, 0x5, 0x5, 0xc}, {0x1, 0x5, 0x8, 0xa}, {0x2, 0x3, 0xe, 0x6}, {0x1, 0x1, 0x10, 0xa}], 0x10, 0x1ff}, 0x94) (async) r14 = perf_event_open(&(0x7f0000006900)={0x1, 0x80, 0x9, 0x4, 0xff, 0xbf, 0x0, 0x3, 0x80872, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x8, 0x1}, 0x800, 0xfffffffffffffffb, 0x4, 0x7, 0x200b4a54, 0x3, 0x1, 0x0, 0x9, 0x0, 0x100000001}, 0xffffffffffffffff, 0xf, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r7) 23.914596142s ago: executing program 0 (id=2640): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff45) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 23.799993148s ago: executing program 0 (id=2641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) close(r0) (async, rerun: 32) r1 = socket$kcm(0x2, 0x5, 0x84) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x2400c885) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000100)=r0, 0x4) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) close(0xffffffffffffffff) (async) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) (async, rerun: 64) r6 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r6, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) close(r6) close(0x3) 22.763686126s ago: executing program 3 (id=2649): r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x7, 0x6, 0x8, 0x0, 0x6, 0x1840b, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x78e, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x4184, 0x8, 0x5, 0x1, 0x6, 0x7ff, 0x1, 0x0, 0x1, 0x0, 0x1c0000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfff, 0xfffa}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xff, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x50, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x95fd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4000900062f2c25fe80000000000000dc8b850f238466ccfec07a000000ad6e911b51818462b4002c0033", 0x2b}], 0x1}, 0x0) 22.68636816s ago: executing program 0 (id=2650): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80030002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x40, 0xfff, 0xfffffffd, 0x2, 0x10001, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0xaf, 0xa, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4802, 0x6, 0x6, 0x4, 0xcbc0, 0x5, 0x6, 0x0, 0x1, 0x0, 0xd4bf}, r6, 0x0, 0xffffffffffffffff, 0x18) openat$cgroup_subtree(r6, &(0x7f0000000000), 0x2, 0x0) 22.485755979s ago: executing program 3 (id=2652): r0 = socket$kcm(0x2, 0x7, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES32=r2], 0x48) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000b5000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)) (async) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x121, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x400002, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xf9, 0x4, 0xff, 0x4, 0x0, 0x3, 0xc9014, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_config_ext={0x7, 0x7}, 0x404, 0xf, 0xfffffff9, 0x3, 0x1, 0x2, 0x2, 0x0, 0x6, 0x0, 0xb}, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) (async) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) 21.974575094s ago: executing program 1 (id=2653): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) (async) close(0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000d200, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 19.774015157s ago: executing program 3 (id=2656): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006105830000000000850000002700000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) close(0x4) recvmsg(r6, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r8, 0x400454cd, 0x336) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) close(r8) (rerun: 64) 19.69860183s ago: executing program 0 (id=2657): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000000)=""/57, 0x39, 0x0, &(0x7f0000000240)=""/221, 0xdd}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 19.69521257s ago: executing program 1 (id=2658): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="170000000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f0000000080)="ca568a2e7a04eab773708bbb1eafae44b889c2e925c0b65ba76d9709eb5290c5b892de037640", &(0x7f0000000240)=""/67, &(0x7f00000002c0)="2c128fbcbb813ba18b6c2933f95ebf33b6a1a59a4ba2f7ac59645e0a2aabcd6bea55494abdce50d206cb74cc49cdf1e2e9526de355846d9d62d395a4046ee0961d961619090afbd1a8f884a62b8031cdfa8a0ddac55876b0afa0039d9f7e8eadf4637f72a3620683a635fccfa9a723fa102af763", &(0x7f0000000340)="0e32be41fd8f7f295e1057553c74b088c35c0160a4efac00a752e02b55a281f88e5b9f08a328e5d174ec5760dd680a3b3f265937e507bc33e1b3320c4d939194a4dcf82f97684780c90d6a19d1cf80a87e7988308b538642b55cdcc9ab2d", 0x6, r4}, 0x38) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="0207000a02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 19.446371173s ago: executing program 0 (id=2660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3d6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)='GPL\x00', 0x6, 0xb1, &(0x7f00000005c0)=""/177, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000740)=[{0x0, 0x4, 0xb, 0x9}, {0x2, 0x4, 0x4, 0xc}, {0x3, 0x4, 0x1, 0x5}, {0x3, 0x5, 0xb, 0x2}, {0x1, 0x2, 0x2, 0x2}, {0x4, 0x3, 0x1, 0x2}, {0x2, 0x3, 0xd, 0x1}], 0x10, 0xc}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 19.396443865s ago: executing program 1 (id=2661): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1cb166f505d03d525cb9e899fcd581322876185a7c653fe3d7cbce50e451b34b99fbeb915f74a469a80cf6216cb40b9a3418e491cba5090ef325731ae83bcb81998b75949f2e29f330c0b1719bcbdfc32e03c29aa9536df1d695cf2ad532b0800211922a601aa433e1bc3832ec4e66311e0cb8612fa0bb8d4c22063d07a80ec1ab551639141d9e8c027f3565f55448f708d64c07c7b832598b81dda778b0e41d69444f8073a82471c154bb5fa82d8814a6a849e8e6ab61a8492149d69dc4678ca424f6db9cbe92f4", 0xc8}, {&(0x7f0000000440)="bb112e43aa2ad387accd6555e186d1679d3d0310000000524061632a056120a218db80514591ec8c68b236cf67ad03d20347f13a0a3023a2ea01164e91c56fb0cd1e5eb5d2e17a6af70910efc109865fba6c25f8455c7a4bae51ce14e2f427c7811cc569e9e7a3d02173ad5832c0a127ee5edd7b190e7bd41166d7c67784d22c564cc1940b1b2cfcff5b1ae096f4f5d47e902f0ad84b55f46574b1ac1d6fec7f059550b4c49ba028bf72be5ee767e61d5cd921a941e81e0b7191eb7f819717b9489dae27248d1d75cae29cf53b4c2ff4ff7dc79141050000000000000082cb2c92079d90cd094f590202b2ebe644757b58b953f28f9857d87692ee62ce3b478e7d2d71ab99c5d5757ff0f0bf828a", 0xfe}, {&(0x7f00000002c0)="26f82feadf614831dc56a42eff03e6f839f90877c19907b97a57893692380d5be240bfb48996d48b9ebc905beb7960ee1cc25219", 0x34}, {&(0x7f0000000300)="d52e46aa0ec002ae908c19d08cb642d32eed11a53c3189e72459ad4cde943147f2a3709445b85b2fea8697ff297adb12be4e761cd69b52c0a09985469eb329bda4482c325ea0b5dade5c6f00596afb47f2eb251b7916ba302a3ba58ab0bc822201d0996c3d4fdc8fd1541183dd3ab4fba425b2a135b2353602ad8d6d433dd4b06ae63654288d8d3926fca8485b3d72af4070ecabe925bf4adc3a49492bcc548ee984f02cf4de333dc75de661bfd1ccea025670a4c17c13a0508a69d3f5a02b82", 0xffffff77}], 0x4}, 0x8040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x10, 0xca, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107983, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES8=r7], 0x12) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000040)=@caif=@dbg={0x25, 0x5, 0xff}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)="aa8b4828e04c538ddcc8a90814abe6638f1d56b246ec864734bf6f622aa413d5f51fedcb800a61fa0d7dc1819516c185f3a07489c7c35065ea56c61d561a74cb1ff1c8e521ae1fb9b6dbc9316b371da1d1644d6b1c32bc9bb857602eaab25b698a84f4295baab2d5e850052ecbdc26a476b4d7adc1a40f27a9a900b6046b62b809c277fa603cab945cecbc095bdfb28438d46201e769501bf89713398911718e1283c262033289c3b59c389029a0", 0xae}, {&(0x7f0000000580)="9f3b1db5c4c300418b7d84360262cd0a30fdf646b162c26168e12ec4a194f84beb3edb6b977432f8655906274271d59d43ef480d764e105c787000288359afb63c798ff1f4236ae054d01e107eefa62f5d9ab832f7497bc9de850eb018d85ce11de87e3cbb9bf699c26a953124862c41db8e850bade1ce2634733806461c25cc62f73f648ed9976fb4fae9ab83d191b1f539461fa6026c343fcdb8a027022ac94d45c1ec9d2ec3ee33ce54c4fd79eb436e480f8dfe5548451a8daf", 0xbb}, {&(0x7f0000000640)="443a419356733cfa63e457beb687ef4983340aec7b93f6f397f0f103813ece035fb8d7d51bf0a880a7c71db4864ab3434262c224f6555f15e090576e51bc56c363b19264c0636c29d80a9647ea56c3a30bd4102cdab765f7ffd16f9c09f2a0e20f2fa7a05c9158c9806df7116fde96f61f", 0x71}, {&(0x7f00000006c0)="8c7fa0c653bb652bc1dea3fe6afef9864c95e27182d156d02746cec69231f156f54430defaf977b284c328a703bee93250a8c3695beef8185bac70b14198b75437fb58b069c09e8850e938373fc068447be13fcc", 0x54}], 0x4, &(0x7f0000000780)=[{0x18, 0x88, 0x6be, "eec96ab6"}, {0x10, 0x6, 0x1}, {0xc8, 0x10b, 0x12, "1275250d3f2b0a8c973be3ffab6109089a208ffb13458908b57cb753ecb26664280d1361d53608e0a5d854cc48743c24a993b33fe35cddeeb60e5a9bb399225180bcf6ca0f613683904e1fbd685415a6af2d412811fbce38f185190417c04de8a6bcc06b1641112910c412c67d6819c0acbdee7ec68da0a9d225a1755559ecd2a7a100983dec266d2a006d4f911b2ff3c4003cf5cfbbbfeacf9fb4d24f3111eec05c897f1ea6271e0ae6fac8a5e682326d0f0cb907"}, {0xc8, 0x0, 0x3, "34bbdf79010b86cbc4cf27ddfd4069fd2dd692bfce708ba9ce1aa4b0935b0ed583b0b051f22f5028521d176603f672c15c7af19101a5e8e5429a88c79b984fe06c78ddfb124952e9b8b5d75f2527bfb6ca9e90b1e1a935c5cdf72d6d0886d7a2e597202c3cdde26cbe7cee82fe6f127fc95c6871a23a6da6bddb8f84d79dda26315defb35a4150911dbc6faf819ddd636f9642a894f8d2506a51e4131d37549883efbfba3f7e5a40e8c5a05ef6765cfa8f7b"}, {0x60, 0x10b, 0x6, "010f009c24ac2850e5725e7d92ad53646f78b511c3a7c391a918e5b34322b04b2092d37df118bb569b0bb04c1658205b0a95b2e3a35280bff5a8f7b1bd65f43dbd6cb0bb925f47c671b00702"}, {0x88, 0x1, 0x800, "d1cb8cf3c3d63f0574f35fcbfc8163125f95c3460ff9db825391c60cce09fc453463b1227e23455e34c989a3b3b26f35c1df9fe15cf51e4bef429c0dc99fc886bf7ca541e2d11183d0d768586e1ed68c0a9212f663554816a63fc5980b2913016c08b78f83fbfc8b45099013e16869eaef"}, {0xc0, 0x118, 0x9, "b74afb78f08a7a1c8059ccc9be12564a9375e5bb4fe8c0035fe8a635e4be7e405d32a47ebace850862f6647cf34aa8ddc0239c8f5e04326e5acc413d9294764c2545b760673441504d33a007ef17099a06927f9e8da00a4f684492426eb475a8792d1f59e46796d9e83d9b712573cbe39b8a6012ecd637ba21c18278bbba258571684f4dc68dfe51b0d4b5c4f544e35608cdfbd5b0afbef1f91dc4438e968f225390fdbd59e21b54ad15aeae"}], 0x360}, 0x20010) 18.811111632s ago: executing program 2 (id=2664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x71, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 18.739840246s ago: executing program 3 (id=2665): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x100, 0x9, 0x1, 0x1, 0x40000000}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) socketpair(0x1a, 0x80000, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x6, 0x0, 0xfffffffffffffc97, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7e}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 18.582110993s ago: executing program 4 (id=2666): socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401120016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800", 0x28}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020002010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'a', ' *:* ', 'm\x00'}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT, @ANYBLOB="0f2726389713661b7849f305ceb0e7fbc4507382ac37cd5e9385c3c2a403162325ed857e4e095c8e93a9311bf14e8adbc537c9a6c8e9430e96997de477c1907248f9198a3a59299af32d0b85cbae8404f2a6bbaff57ca81a0c20baba295be3912d8960780bb8cc98de43ba811e3aaca73d174157db8ceaa1aed56dedebbacaf3a73f5d14f85bdc426cef596662c95f66bf3598385ea7d0ecc878c7", @ANYRES32=r0, @ANYRESHEX=r7, @ANYRES16=r2, @ANYBLOB="050ca01ed659ef65c69e50e961582c325f41cee8553eb7861ddbbbc744487b9a3ee0fac4fc6742d11ac2983de2b8a8bb1aab7e6d237dbdb8aa115a3c75aaf0ce81ed64531ae7245fa9833e3449d5db192d60183b5c3683b7d2e672882ae43e3bd523a4133fbb62b7f369f8d88c326ed83c7f156f3a3a3a9bb0d31fb0b57a7ff7bbb60f7bd6ee18fe526a1248cc5357acc03810623d9611a005405f6bf5cccf7f89c0028a5184ff4e4336f2cf5260005c625c88f30038da79e662749934f41199", @ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES64=r3, @ANYRESOCT=r6], 0x30}, 0x890) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d5c500"/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x49c8, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 18.579614973s ago: executing program 1 (id=2667): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xcf, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x20000810) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x8, r0}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000a00), &(0x7f00000004c0), 0x1000, r9, 0x0, 0x11000000}, 0x38) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1c, 0x7, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x4e}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @alu={0x7, 0x1, 0x8, 0x9, 0x6, 0x40, 0xffffffffffffffff}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x99, &(0x7f0000000240)=""/153, 0x41100, 0x7, '\x00', r2, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x6, 0x5, 0x5}, 0x10, r3, 0xffffffffffffffff, 0x9, &(0x7f0000000e00)=[r4, r5, r6, r8, r9, 0xffffffffffffffff, r10, r11], &(0x7f0000000e40)=[{0x1, 0x1, 0x6, 0x3}, {0x2, 0x3, 0xc, 0x7}, {0x1, 0x2, 0x8, 0x8}, {0x4, 0x2, 0x1, 0x2}, {0x0, 0x4, 0xb, 0x1}, {0x5, 0x3, 0x7, 0xa}, {0x2, 0x3, 0x1, 0x1}, {0x0, 0x4, 0x8}, {0x0, 0x5, 0xa, 0x1}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 18.502376567s ago: executing program 2 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) (async, rerun: 64) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x400005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) (async) r7 = socket$kcm(0x15, 0x5, 0x0) (async) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000940)) (async, rerun: 64) perf_event_open(&(0x7f00000012c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r2}, 0xc) 18.310275186s ago: executing program 4 (id=2669): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(r1, &(0x7f0000002b00)={&(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000940)}, 0x44044) 18.102521436s ago: executing program 4 (id=2670): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 17.962907482s ago: executing program 2 (id=2671): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="2000000020008104090f9becdb4cb92e0a000069bd7d910000eaf60d00086b02", 0x20}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@volatile={0x10, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0xe}, {0x2, 0x1}, {0xb, 0x5}, {0x5, 0x1}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x2}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000001cc0)=""/89, 0x74, 0x59, 0x1, 0x7f, 0x10000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="3e971d"], 0x9a) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e40)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x0, 0x2, 0x0, 0x1, 0x2, 0xffffffffffffffff}]}, &(0x7f0000000340)='syzkaller\x00', 0x800, 0x1000, &(0x7f0000000c40)=""/4096, 0x0, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000001d80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001dc0)={0x5, 0x6, 0xde1, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[r6, r7, r7, r11, 0xffffffffffffffff, r1, r7], 0x0, 0x10, 0x3}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) 17.862516487s ago: executing program 4 (id=2672): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x0, 0x7, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x4004004) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782dbe3ff040220080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20040014) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000001c0)={r3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, 0x0, 0x0) 17.694197485s ago: executing program 3 (id=2673): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4000000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b907ef19ed087d08a6d30704be0f", 0x0, 0x6003, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e371e14018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_clone(0xa43c7506, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 17.525326523s ago: executing program 1 (id=2674): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r0, r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8) 17.017185037s ago: executing program 2 (id=2675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x18, 0x0, 0x0) close(r0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="27030200590214000600002fb96dbcf706e19f855ae0d1157c931144ee4680d4b8bf4a31accbe1ba0777cfbf6ae75246da82f6184b8a34f9015cc99e570000002f21880b0000000000440b21e75349f7198500ffffffce41321ecb2712b2", 0x5e}], 0x1}, 0x4000) 16.918267092s ago: executing program 1 (id=2676): r0 = socket$kcm(0x23, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x486c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1fea54e9}, 0xc0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$kcm(0xa, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r4}, 0xc) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYRESHEX=r6, @ANYRES64=r3], 0x23) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffe6a, &(0x7f0000000400)}, 0x10) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x23, 0x5, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x2, 0x2}, 0x21, 0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff00000000}, 0x0, 0x1, r5, 0x9) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) (async, rerun: 64) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (rerun: 64) 16.886053133s ago: executing program 4 (id=2677): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = getpid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x23, 0x6, 0xf9, 0x8, 0x0, 0x6, 0x2400, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x104b, 0x1, 0x7e60, 0x1, 0x89df, 0x6, 0x4, 0x0, 0x100, 0x0, 0x1}, r7, 0xffffffffffffffff, r6, 0x2) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={r8}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fef74b0000000000080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 16.774572978s ago: executing program 3 (id=2678): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80), 0x1}, 0x100e64, 0xc78, 0x3, 0x0, 0x400000000000009, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000087000000850000000d000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000087000000850000000d000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x0, 0x20, 0xc2ba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80000000004}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80000000004}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xffffff55, &(0x7f0000000bc0), 0x3}, 0x80) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, &(0x7f0000000180), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000f4"], 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000060000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000060000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.73218205s ago: executing program 2 (id=2679): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4008}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000640), &(0x7f0000000780)=""/226}, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x10}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xc}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x81, 0x0, 0x1, 0x4, 0x0, 0x5d30, 0x1012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x9b40, 0x800b937, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x28, 0x5, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xc10a, 0xac5d, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x3d27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.062195112s ago: executing program 4 (id=2680): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, r0, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, r0, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x42, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff000000005d040200000000001d"], &(0x7f00000001c0)='GPL\x00', 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 16.017556664s ago: executing program 2 (id=2681): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) (async) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2161) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.355909974s ago: executing program 32 (id=2660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3d6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000580)='GPL\x00', 0x6, 0xb1, &(0x7f00000005c0)=""/177, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000740)=[{0x0, 0x4, 0xb, 0x9}, {0x2, 0x4, 0x4, 0xc}, {0x3, 0x4, 0x1, 0x5}, {0x3, 0x5, 0xb, 0x2}, {0x1, 0x2, 0x2, 0x2}, {0x4, 0x3, 0x1, 0x2}, {0x2, 0x3, 0xd, 0x1}], 0x10, 0xc}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 1.203039353s ago: executing program 33 (id=2676): r0 = socket$kcm(0x23, 0x8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x486c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1fea54e9}, 0xc0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$kcm(0xa, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r4}, 0xc) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYRESHEX=r6, @ANYRES64=r3], 0x23) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffe6a, &(0x7f0000000400)}, 0x10) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x23, 0x5, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x2, 0x2}, 0x21, 0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x200, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff00000000}, 0x0, 0x1, r5, 0x9) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) (async, rerun: 64) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x9) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (rerun: 64) 1.079979419s ago: executing program 34 (id=2678): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a80), 0x1}, 0x100e64, 0xc78, 0x3, 0x0, 0x400000000000009, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000087000000850000000d000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000087000000850000000d000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x0, 0x20, 0xc2ba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80000000004}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x80000000004}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xffffff55, &(0x7f0000000bc0), 0x3}, 0x80) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, &(0x7f0000000180), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831771400000069bd6e002602eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000f4"], 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000060000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000060000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 306.524355ms ago: executing program 35 (id=2681): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) (async) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2161) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 36 (id=2680): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, r0, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, r0, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x42, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff000000005d040200000000001d"], &(0x7f00000001c0)='GPL\x00', 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 4 phy0 wpan0: encryption failed: -22 [ 317.071843][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.212367][ T8303] netlink: 'syz.0.924': attribute type 22 has an invalid length. [ 317.241776][ T8303] netlink: 14526 bytes leftover after parsing attributes in process `syz.0.924'. [ 317.697660][ T8316] can: request_module (can-proto-0) failed. [ 317.828752][ T8326] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.929'. [ 317.935708][ T8326] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 318.136489][ T8325] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 318.191331][ T8325] CPU: 0 PID: 8325 Comm: syz.3.929 Not tainted syzkaller #0 [ 318.198718][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.208854][ T8325] Call Trace: [ 318.212220][ T8325] [ 318.215207][ T8325] dump_stack_lvl+0x188/0x24e [ 318.219968][ T8325] ? show_regs_print_info+0x12/0x12 [ 318.225235][ T8325] ? load_image+0x410/0x410 [ 318.229843][ T8325] sysfs_warn_dup+0x8a/0xa0 [ 318.234409][ T8325] sysfs_do_create_link_sd+0xc0/0x110 [ 318.239853][ T8325] device_add+0x83b/0x1050 [ 318.244351][ T8325] wiphy_register+0x1d8b/0x2aa0 [ 318.249328][ T8325] ? cfg80211_event_work+0x40/0x40 [ 318.254509][ T8325] ? minstrel_ht_alloc+0x894/0xa20 [ 318.259708][ T8325] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 318.265851][ T8325] ieee80211_register_hw+0x2d48/0x39f0 [ 318.271407][ T8325] ? ieee80211_register_hw+0xee1/0x39f0 [ 318.277022][ T8325] ? ieee80211_register_hw+0xee1/0x39f0 [ 318.282649][ T8325] ? ieee80211_tasklet_handler+0x20/0x20 [ 318.288352][ T8325] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 318.294323][ T8325] ? __debug_object_init+0xed/0x440 [ 318.299590][ T8325] ? memset+0x1e/0x40 [ 318.303631][ T8325] ? __hrtimer_init+0x189/0x270 [ 318.308559][ T8325] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 318.314380][ T8325] ? memcpy+0x3c/0x60 [ 318.318433][ T8325] hwsim_new_radio_nl+0xab7/0xc90 [ 318.323562][ T8325] genl_family_rcv_msg_doit+0x22f/0x350 [ 318.329180][ T8325] ? end_current_label_crit_section+0x170/0x170 [ 318.335496][ T8325] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 318.341472][ T8325] ? bpf_lsm_capable+0x5/0x10 [ 318.346216][ T8325] ? security_capable+0x85/0xb0 [ 318.351150][ T8325] genl_rcv_msg+0x601/0x790 [ 318.355739][ T8325] ? genl_bind+0x360/0x360 [ 318.360224][ T8325] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 318.366660][ T8325] netlink_rcv_skb+0x1ef/0x440 [ 318.371499][ T8325] ? genl_bind+0x360/0x360 [ 318.375988][ T8325] ? netlink_ack+0x1160/0x1160 [ 318.380854][ T8325] ? down_read+0x1a8/0x2d0 [ 318.385342][ T8325] genl_rcv+0x24/0x40 [ 318.389377][ T8325] netlink_unicast+0x7ad/0x920 [ 318.394238][ T8325] netlink_sendmsg+0x8ad/0xbd0 [ 318.399082][ T8325] ? netlink_getsockopt+0x550/0x550 [ 318.404346][ T8325] ? apparmor_socket_sendmsg+0x8a/0x330 [ 318.409964][ T8325] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 318.415334][ T8325] ? security_socket_sendmsg+0x7c/0xa0 [ 318.421030][ T8325] ? netlink_getsockopt+0x550/0x550 [ 318.426380][ T8325] ____sys_sendmsg+0x5ed/0x9a0 [ 318.431233][ T8325] ? __sys_sendmsg_sock+0x30/0x30 [ 318.436323][ T8325] ? __import_iovec+0x306/0x510 [ 318.441259][ T8325] ? import_iovec+0x6f/0xa0 [ 318.445866][ T8325] ___sys_sendmsg+0x2a2/0x360 [ 318.450627][ T8325] ? __sys_sendmsg+0x2a0/0x2a0 [ 318.455586][ T8325] __se_sys_sendmsg+0x1c3/0x2b0 [ 318.460507][ T8325] ? perf_trace_preemptirq_template+0x268/0x320 [ 318.466827][ T8325] ? __x64_sys_sendmsg+0x80/0x80 [ 318.471868][ T8325] ? lockdep_hardirqs_on+0x94/0x140 [ 318.477119][ T8325] do_syscall_64+0x4c/0xa0 [ 318.481583][ T8325] ? clear_bhb_loop+0x60/0xb0 [ 318.486338][ T8325] ? clear_bhb_loop+0x60/0xb0 [ 318.491127][ T8325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.497107][ T8325] RIP: 0033:0x7f2f7fb9e159 [ 318.501581][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.521246][ T8325] RSP: 002b:00007f2f80a37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.529759][ T8325] RAX: ffffffffffffffda RBX: 00007f2f7fe25fa0 RCX: 00007f2f7fb9e159 [ 318.537804][ T8325] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000017 [ 318.545838][ T8325] RBP: 00007f2f7fc3503b R08: 0000000000000000 R09: 0000000000000000 [ 318.553958][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.561989][ T8325] R13: 00007f2f7fe26038 R14: 00007f2f7fe25fa0 R15: 00007fff9556fb08 [ 318.570143][ T8325] [ 319.883453][ T7398] tipc: Subscription rejected, illegal request [ 320.186100][ T8399] __nla_validate_parse: 7 callbacks suppressed [ 320.186121][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.239346][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.287194][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.301178][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.322377][ T8406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.362853][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.404605][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.445051][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.489430][ T8399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 320.522408][ T8424] validate_nla: 9 callbacks suppressed [ 320.522426][ T8424] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 320.632376][ T8424] device veth0_vlan left promiscuous mode [ 320.650575][ T8424] device veth0_vlan entered promiscuous mode [ 320.673394][ T8412] delete_channel: no stack [ 320.681768][ T8424] team0: Device veth0_vlan failed to register rx_handler [ 320.792913][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 321.140035][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 321.353635][ T8444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.013338][ T8462] openvswitch: netlink: Flow key attr not present in new flow. [ 322.033752][ T8463] openvswitch: netlink: Flow key attr not present in new flow. [ 322.852313][ T8474] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 322.887087][ T8474] netlink: 'syz.1.963': attribute type 8 has an invalid length. [ 323.088448][ T8481] netlink: 'syz.4.965': attribute type 4 has an invalid length. [ 323.359419][ T8494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.619141][ T8531] __nla_validate_parse: 41 callbacks suppressed [ 325.619160][ T8531] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.980'. [ 325.760683][ T8529] netlink: 'syz.1.978': attribute type 39 has an invalid length. [ 326.681970][ T8535] netlink: 'syz.3.980': attribute type 21 has an invalid length. [ 326.725675][ T8539] netlink: 62779 bytes leftover after parsing attributes in process `syz.3.980'. [ 327.793474][ T8612] netlink: 'syz.4.985': attribute type 29 has an invalid length. [ 328.038291][ T8623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.987'. [ 328.064617][ T8612] netlink: 'syz.4.985': attribute type 29 has an invalid length. [ 328.086014][ T8624] netlink: 'syz.4.985': attribute type 29 has an invalid length. [ 328.712679][ T8659] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.996'. [ 332.262159][ T8728] device syzkaller0 entered promiscuous mode [ 332.302103][ T8732] netlink: 'syz.3.1018': attribute type 33 has an invalid length. [ 332.313201][ T8732] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1018'. [ 332.329253][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1012'. [ 332.952318][ T8750] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1021'. [ 335.168289][ T8750] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 335.344170][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'. [ 335.558190][ T8763] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1026'. [ 336.169321][ T8775] delete_channel: no stack [ 336.563191][ T8786] Ÿë: port 1(gretap0) entered blocking state [ 336.573381][ T8786] Ÿë: port 1(gretap0) entered disabled state [ 336.621508][ T8786] device gretap0 entered promiscuous mode [ 336.636238][ T8801] bond0: (slave team0): Error: Slave device does not support XDP [ 338.305620][ T8866] netlink: 'syz.3.1048': attribute type 41 has an invalid length. [ 338.361013][ T8866] netlink: 'syz.3.1048': attribute type 41 has an invalid length. [ 340.014874][ T8906] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 340.041741][ T8906] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 340.064717][ T8912] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 340.090036][ T8906] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 340.220374][ T8912] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 340.304972][ T8920] netlink: 'syz.0.1063': attribute type 21 has an invalid length. [ 340.312940][ T8920] netlink: 'syz.0.1063': attribute type 3 has an invalid length. [ 340.336554][ T8920] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1063'. [ 341.663281][ T8955] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1072'. [ 342.106268][ T8969] netlink: 'syz.2.1075': attribute type 15 has an invalid length. [ 342.857311][ T8976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1077'. [ 344.160543][ T8991] validate_nla: 3 callbacks suppressed [ 344.160584][ T8991] netlink: 'syz.0.1081': attribute type 21 has an invalid length. [ 344.415345][ T9019] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1090'. [ 344.599075][ T9026] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1091'. [ 344.711055][ T9026] openvswitch: netlink: Message has 6 unknown bytes. [ 345.028323][ T9040] netlink: 'syz.1.1096': attribute type 2 has an invalid length. [ 345.036597][ T9040] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 345.049086][ T9040] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1096'. [ 346.834181][ T9038] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 346.898079][ T9038] team0: Port device geneve1 added [ 347.213738][ T9056] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 347.268570][ T9056] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1103'. [ 347.413641][ T9054] device bridge_slave_1 left promiscuous mode [ 347.420205][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.448912][ T9054] device bridge_slave_0 left promiscuous mode [ 347.470791][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.982529][ T9085] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 348.095343][ T9085] netlink: 'syz.3.1105': attribute type 8 has an invalid length. [ 348.148468][ T9085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1105'. [ 348.276646][ T9093] netlink: 'syz.0.1107': attribute type 3 has an invalid length. [ 348.393859][ T9093] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1107'. [ 348.529324][ T9095] netlink: 'syz.4.1108': attribute type 10 has an invalid length. [ 348.989566][ T9095] team0: Device gre0 is of different type [ 348.998587][ T9108] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 349.007476][ T9108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1111'. [ 349.322919][ T9117] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1112'. [ 349.606389][ T9123] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 349.644364][ T9123] dvmrp1: linktype set to 768 [ 349.712847][ T9128] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1115'. [ 350.179916][ T9133] validate_nla: 1 callbacks suppressed [ 350.179937][ T9133] netlink: 'syz.0.1116': attribute type 2 has an invalid length. [ 350.232861][ T9133] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.1116'. [ 350.457884][ T9145] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 350.470273][ T9145] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 350.480260][ T9145] syzkaller1: group set to 778 [ 350.527991][ T9145] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 350.537808][ T9145] syzkaller1: ignored: set checksum disabled [ 351.005406][ T9159] device syzkaller0 entered promiscuous mode [ 351.080514][ T9164] netlink: 'syz.1.1123': attribute type 13 has an invalid length. [ 351.134580][ T9164] netlink: 'syz.1.1123': attribute type 14 has an invalid length. [ 351.231390][ T9164] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1123'. [ 354.173410][ T9179] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1129'. [ 354.455163][ T9208] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 354.504290][ T9208] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 354.512115][ T9208] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1138'. [ 354.698948][ T9223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1139'. [ 354.887595][ T9227] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1141'. [ 356.478376][ T9286] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.1155'. [ 356.503658][ T9286] netlink: zone id is out of range [ 356.514656][ T9286] netlink: zone id is out of range [ 356.685960][ T9287] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 356.713556][ T9287] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1155'. [ 357.055072][ T9309] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1162'. [ 357.727037][ T9325] device lo entered promiscuous mode [ 357.732752][ T9325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 358.238287][ T9333] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.1167'. [ 360.412983][ T9371] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 360.482627][ T9375] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 360.872627][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1178'. [ 363.012944][ T9421] netlink: 'syz.2.1190': attribute type 29 has an invalid length. [ 363.060004][ T9421] netlink: 'syz.2.1190': attribute type 29 has an invalid length. [ 363.097627][ T9424] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1191'. [ 363.243473][ T9425] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 363.374388][ T9425] team0: Port device hsr_slave_0 added [ 363.408085][ T9434] netlink: 'syz.0.1193': attribute type 7 has an invalid length. [ 363.429301][ T9434] netlink: 'syz.0.1193': attribute type 6 has an invalid length. [ 363.984532][ T9455] netlink: 'syz.3.1199': attribute type 29 has an invalid length. [ 363.992745][ T9455] netlink: 'syz.3.1199': attribute type 29 has an invalid length. [ 364.081404][ T9459] netlink: 'syz.3.1199': attribute type 29 has an invalid length. [ 364.129552][ T9459] netlink: 'syz.3.1199': attribute type 29 has an invalid length. [ 364.184971][ T9459] netlink: 'syz.3.1199': attribute type 29 has an invalid length. [ 364.253440][ T9463] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1201'. [ 364.295002][ T9463] netlink: zone id is out of range [ 364.300649][ T9463] netlink: zone id is out of range [ 364.346351][ T9463] netlink: zone id is out of range [ 364.395469][ T9463] netlink: zone id is out of range [ 364.401004][ T9463] netlink: zone id is out of range [ 364.411060][ T9463] netlink: zone id is out of range [ 364.473391][ T9463] netlink: zone id is out of range [ 364.478922][ T9463] netlink: zone id is out of range [ 364.568809][ T9463] netlink: zone id is out of range [ 364.575925][ T9483] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1202'. [ 364.603356][ T9463] netlink: zone id is out of range [ 368.028138][ T9519] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1212'. [ 368.058679][ T9515] validate_nla: 23 callbacks suppressed [ 368.058700][ T9515] netlink: 'syz.4.1211': attribute type 2 has an invalid length. [ 368.137717][ T9515] netlink: 'syz.4.1211': attribute type 8 has an invalid length. [ 368.219369][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1211'. [ 368.487682][ T9516] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 368.646556][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1214'. [ 369.668942][ T9560] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 369.725507][ T9555] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 371.598141][ T9610] netlink: 'syz.1.1238': attribute type 3 has an invalid length. [ 371.610894][ T9610] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1238'. [ 372.349289][ T9607] device syzkaller0 entered promiscuous mode [ 377.177515][ T9633] netlink: 'syz.0.1244': attribute type 21 has an invalid length. [ 377.185719][ T9633] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 377.193777][ T9633] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1244'. [ 377.206461][ T9642] tap0: tun_chr_ioctl cmd 35108 [ 377.217119][ T9661] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1250'. [ 377.298466][ T9661] team0: Port device team_slave_0 removed [ 377.313873][ T9661] net_ratelimit: 45 callbacks suppressed [ 377.313889][ T9661] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 378.650951][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657753][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.522524][ T9729] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 379.733811][ T9738] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 379.789200][ T9741] netlink: 'syz.4.1268': attribute type 21 has an invalid length. [ 379.821477][ T9741] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1268'. [ 379.845126][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1268'. [ 379.909710][ T9750] netlink: 'syz.3.1269': attribute type 39 has an invalid length. [ 380.562578][ T9764] netlink: 'syz.0.1274': attribute type 3 has an invalid length. [ 380.576248][ T9764] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.1274'. [ 380.689983][ T9769] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1274'. [ 380.733349][ T9769] device hsr_slave_0 left promiscuous mode [ 380.774522][ T9769] device hsr_slave_1 left promiscuous mode [ 380.922031][ T9775] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1278'. [ 380.967568][ T9775] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1278'. [ 381.011396][ T9776] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1278'. [ 381.252126][ T9781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.265936][ T9781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.089018][ T9781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.097493][ T9781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.269767][ T9793] netlink: 'syz.4.1284': attribute type 16 has an invalid length. [ 382.290811][ T9793] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1284'. [ 382.646895][ T9793] netlink: 'syz.4.1284': attribute type 2 has an invalid length. [ 382.727572][ T9793] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 382.796330][ T9793] netlink: 179340 bytes leftover after parsing attributes in process `syz.4.1284'. [ 383.357910][ T9815] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1289'. [ 383.534592][ T9824] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 383.543387][ T9824] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 383.552892][ T9824] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 383.757835][ T9824] can: request_module (can-proto-0) failed. [ 384.087675][ T9827] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 384.105879][ T9824] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 384.121892][ T9828] netlink: 'syz.3.1291': attribute type 29 has an invalid length. [ 384.250326][ T9832] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1292'. [ 384.470278][ T9843] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.435943][ T9859] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1298'. [ 385.459466][ T9859] openvswitch: netlink: Key type 386 is out of range max 32 [ 385.637935][ T9857] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.726185][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 387.017821][ T9899] netlink: 'syz.4.1308': attribute type 10 has an invalid length. [ 387.050021][ T9895] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1309'. [ 387.077068][ T9899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1308'. [ 387.139183][ T9899] device ipvlan1 entered promiscuous mode [ 387.203887][ T9899] bridge0: port 3(ipvlan1) entered blocking state [ 387.233885][ T9899] bridge0: port 3(ipvlan1) entered disabled state [ 387.293699][ T9899] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 387.367157][ T9895] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 387.518368][ T9895] CPU: 0 PID: 9895 Comm: syz.2.1309 Not tainted syzkaller #0 [ 387.525849][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.535982][ T9895] Call Trace: [ 387.539398][ T9895] [ 387.542379][ T9895] dump_stack_lvl+0x188/0x24e [ 387.547241][ T9895] ? show_regs_print_info+0x12/0x12 [ 387.552513][ T9895] ? load_image+0x410/0x410 [ 387.557213][ T9895] sysfs_warn_dup+0x8a/0xa0 [ 387.561774][ T9895] sysfs_do_create_link_sd+0xc0/0x110 [ 387.567230][ T9895] device_add+0x83b/0x1050 [ 387.571743][ T9895] wiphy_register+0x1d8b/0x2aa0 [ 387.576705][ T9895] ? cfg80211_event_work+0x40/0x40 [ 387.581913][ T9895] ? minstrel_ht_alloc+0x894/0xa20 [ 387.587131][ T9895] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 387.593305][ T9895] ieee80211_register_hw+0x2d48/0x39f0 [ 387.598882][ T9895] ? ieee80211_register_hw+0xee1/0x39f0 [ 387.604509][ T9895] ? ieee80211_register_hw+0xee1/0x39f0 [ 387.610209][ T9895] ? ieee80211_tasklet_handler+0x20/0x20 [ 387.615932][ T9895] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 387.621922][ T9895] ? __debug_object_init+0xed/0x440 [ 387.627207][ T9895] ? memset+0x1e/0x40 [ 387.631274][ T9895] ? __hrtimer_init+0x189/0x270 [ 387.636204][ T9895] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 387.642031][ T9895] ? memcpy+0x3c/0x60 [ 387.646092][ T9895] hwsim_new_radio_nl+0xab7/0xc90 [ 387.651254][ T9895] genl_family_rcv_msg_doit+0x22f/0x350 [ 387.656897][ T9895] ? end_current_label_crit_section+0x170/0x170 [ 387.663245][ T9895] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 387.669243][ T9895] ? bpf_lsm_capable+0x5/0x10 [ 387.674439][ T9895] ? security_capable+0x85/0xb0 [ 387.679403][ T9895] genl_rcv_msg+0x601/0x790 [ 387.684023][ T9895] ? genl_bind+0x360/0x360 [ 387.688514][ T9895] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 387.694978][ T9895] netlink_rcv_skb+0x1ef/0x440 [ 387.699850][ T9895] ? genl_bind+0x360/0x360 [ 387.704366][ T9895] ? netlink_ack+0x1160/0x1160 [ 387.709261][ T9895] ? down_read+0x1a8/0x2d0 [ 387.713779][ T9895] genl_rcv+0x24/0x40 [ 387.717853][ T9895] netlink_unicast+0x7ad/0x920 [ 387.722741][ T9895] netlink_sendmsg+0x8ad/0xbd0 [ 387.727602][ T9895] ? netlink_getsockopt+0x550/0x550 [ 387.732887][ T9895] ? apparmor_socket_sendmsg+0x8a/0x330 [ 387.738536][ T9895] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 387.743904][ T9895] ? security_socket_sendmsg+0x7c/0xa0 [ 387.749466][ T9895] ? netlink_getsockopt+0x550/0x550 [ 387.754759][ T9895] ____sys_sendmsg+0x5ed/0x9a0 [ 387.759652][ T9895] ? __sys_sendmsg_sock+0x30/0x30 [ 387.764767][ T9895] ? __import_iovec+0x306/0x510 [ 387.769743][ T9895] ? import_iovec+0x6f/0xa0 [ 387.774349][ T9895] ___sys_sendmsg+0x2a2/0x360 [ 387.779148][ T9895] ? __sys_sendmsg+0x2a0/0x2a0 [ 387.784053][ T9895] ? ktime_get+0x7b/0x270 [ 387.788535][ T9895] __se_sys_sendmsg+0x1c3/0x2b0 [ 387.793477][ T9895] ? __x64_sys_sendmsg+0x80/0x80 [ 387.798535][ T9895] ? lockdep_hardirqs_on+0x94/0x140 [ 387.803807][ T9895] do_syscall_64+0x4c/0xa0 [ 387.808298][ T9895] ? clear_bhb_loop+0x60/0xb0 [ 387.813073][ T9895] ? clear_bhb_loop+0x60/0xb0 [ 387.817828][ T9895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.823799][ T9895] RIP: 0033:0x7f8e1239e159 [ 387.828274][ T9895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.847926][ T9895] RSP: 002b:00007f8e1319c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.856385][ T9895] RAX: ffffffffffffffda RBX: 00007f8e12626090 RCX: 00007f8e1239e159 [ 387.864385][ T9895] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 387.872384][ T9895] RBP: 00007f8e1243503b R08: 0000000000000000 R09: 0000000000000000 [ 387.880473][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.888473][ T9895] R13: 00007f8e12626128 R14: 00007f8e12626090 R15: 00007fff3f75be38 [ 387.896505][ T9895] [ 387.999732][ T9913] netlink: 'syz.1.1314': attribute type 39 has an invalid length. [ 388.369995][ T9915] netlink: 'syz.1.1314': attribute type 21 has an invalid length. [ 388.380673][ T9915] netlink: 'syz.1.1314': attribute type 6 has an invalid length. [ 388.395818][ T9915] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1314'. [ 388.978803][ T9931] netlink: 'syz.0.1317': attribute type 3 has an invalid length. [ 388.990456][ T9929] netlink: 'syz.2.1318': attribute type 10 has an invalid length. [ 389.073989][ T9931] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1317'. [ 389.381929][ T9929] team0: Device wg1 is of different type [ 389.561080][ T9938] netlink: 'syz.3.1319': attribute type 21 has an invalid length. [ 390.635187][ T9958] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 390.704691][ T9958] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1324'. [ 390.902290][ T9963] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1326'. [ 391.035375][ T9965] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1326'. [ 391.074279][ T9965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.106340][ T4280] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 391.143520][ T9969] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1327'. [ 391.243310][ T9969] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1327'. [ 392.061680][ T9986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1333'. [ 392.291436][T10000] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1336'. [ 392.328442][T10000] bond0: (slave bond_slave_0): Releasing backup interface [ 392.397020][T10000] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 392.641726][T10011] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 392.679939][T10011] bridge0: port 3(netdevsim0) entered blocking state [ 392.742321][T10011] bridge0: port 3(netdevsim0) entered disabled state [ 392.811345][T10011] device netdevsim0 entered promiscuous mode [ 392.851290][T10012] netlink: 'syz.0.1338': attribute type 7 has an invalid length. [ 392.885464][T10012] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1338'. [ 393.143212][ T4280] Bluetooth: hci4: command 0x2016 tx timeout [ 393.258500][T10023] : renamed from caif0 [ 393.271318][T10023] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 393.483841][T10032] netlink: 'syz.2.1345': attribute type 21 has an invalid length. [ 393.589137][T10035] __nla_validate_parse: 1 callbacks suppressed [ 393.589157][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 393.639708][T10035] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1347'. [ 393.712899][T10035] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 393.729433][T10035] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1347'. [ 394.476920][T10047] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1349'. [ 394.526408][T10046] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1349'. [ 394.986163][T10068] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1355'. [ 395.300458][T10076] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.424835][T10078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1359'. [ 396.083822][T10093] netlink: 'syz.2.1361': attribute type 3 has an invalid length. [ 396.097287][T10093] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 396.188614][T10093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1361'. [ 396.268215][T10094] netlink: 'syz.2.1361': attribute type 1 has an invalid length. [ 396.294715][T10094] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1361'. [ 396.418728][T10097] netlink: 'syz.3.1362': attribute type 2 has an invalid length. [ 396.471125][T10097] netlink: 'syz.3.1362': attribute type 8 has an invalid length. [ 396.527077][T10097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1362'. [ 396.913407][T10118] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 397.290105][T10128] netlink: 'syz.0.1370': attribute type 21 has an invalid length. [ 397.508948][T10130] netlink: 'syz.1.1371': attribute type 7 has an invalid length. [ 398.279690][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.345208][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.438480][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.497216][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.543754][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.550665][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.592067][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.622811][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.643112][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.672740][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.688692][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.831535][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.864385][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.895297][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 398.923915][T10142] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 399.849534][T10166] __nla_validate_parse: 3 callbacks suppressed [ 399.849556][T10166] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1380'. [ 403.067871][T10208] validate_nla: 3 callbacks suppressed [ 403.067891][T10208] netlink: 'syz.2.1394': attribute type 7 has an invalid length. [ 403.127854][T10209] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1395'. [ 403.158122][T10211] netlink: 'syz.3.1393': attribute type 10 has an invalid length. [ 407.632959][T10267] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1409'. [ 408.289647][T10273] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.1411'. [ 408.363644][T10273] netlink: zone id is out of range [ 410.690622][T10320] netlink: 'syz.1.1421': attribute type 3 has an invalid length. [ 410.828109][T10320] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1421'. [ 411.153643][T10330] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 411.268702][T10330] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1421'. [ 415.508840][T10383] device veth1_macvtap left promiscuous mode [ 415.956633][T10392] netlink: 'syz.1.1438': attribute type 5 has an invalid length. [ 416.000198][T10392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 416.929939][T10402] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 416.963265][T10402] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1440'. [ 418.160003][T10412] netlink: 'syz.2.1442': attribute type 16 has an invalid length. [ 418.193392][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1442'. [ 418.485505][T10401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1439'. [ 418.533638][T10407] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 418.541726][T10407] device macvlan0 left promiscuous mode [ 418.565873][T10407] team0: Port device macvlan0 added [ 419.452285][T10437] netlink: 'syz.2.1449': attribute type 16 has an invalid length. [ 419.470048][T10437] netlink: 'syz.2.1449': attribute type 3 has an invalid length. [ 419.493376][T10440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.501199][T10437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1449'. [ 419.926767][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1454'. [ 419.963977][T10461] netlink: 'syz.0.1454': attribute type 10 has an invalid length. [ 420.005562][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1454'. [ 420.066140][T10461] device team0 entered promiscuous mode [ 420.105446][T10461] device team_slave_0 entered promiscuous mode [ 420.140464][T10461] device team_slave_1 entered promiscuous mode [ 420.174245][T10461] device macvlan0 entered promiscuous mode [ 420.286977][T10461] device geneve1 entered promiscuous mode [ 420.463014][T10466] netlink: 'syz.1.1455': attribute type 7 has an invalid length. [ 420.466895][T10461] bond0: (slave team0): Releasing backup interface [ 420.481221][T10466] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1455'. [ 420.625974][T10461] bridge0: port 4(team0) entered blocking state [ 420.632602][T10461] bridge0: port 4(team0) entered disabled state [ 421.210920][T10485] netlink: 'syz.4.1457': attribute type 10 has an invalid length. [ 423.988020][T10485] bridge0: port 2(hsr0) entered disabled state [ 423.994498][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.221399][T10485] team0: Port device bridge0 removed [ 424.269296][T10498] netlink: 'syz.3.1462': attribute type 3 has an invalid length. [ 424.278133][T10485] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.329860][T10498] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1462'. [ 424.342159][T10485] bridge0: port 2(hsr0) entered blocking state [ 424.348611][T10485] bridge0: port 2(hsr0) entered forwarding state [ 424.355289][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.362745][T10485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.378166][T10485] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 426.566163][T10526] netlink: 'syz.3.1468': attribute type 21 has an invalid length. [ 426.584242][T10526] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1468'. [ 426.616218][T10526] netlink: 'syz.3.1468': attribute type 4 has an invalid length. [ 426.647103][T10526] netlink: 'syz.3.1468': attribute type 3 has an invalid length. [ 426.660164][T10526] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1468'. [ 427.280041][T10546] netlink: 'syz.1.1471': attribute type 27 has an invalid length. [ 427.303764][T10546] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1471'. [ 427.597385][T10551] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 427.637046][T10551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.027186][T10568] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1479'. [ 428.238420][T10575] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1481'. [ 428.658703][T10583] netlink: 'syz.0.1484': attribute type 2 has an invalid length. [ 428.691365][T10583] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 428.782838][T10587] sctp: [Deprecated]: syz.1.1485 (pid 10587) Use of int in maxseg socket option. [ 428.782838][T10587] Use struct sctp_assoc_value instead [ 429.989776][T10620] tap0: tun_chr_ioctl cmd 1074812118 [ 430.130101][T10626] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 430.187242][T10626] netlink: 'syz.1.1497': attribute type 29 has an invalid length. [ 430.289111][T10632] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1499'. [ 430.630782][T10645] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 430.640656][T10645] team0: Device nlmon0 is of different type [ 430.872135][T10653] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1505'. [ 431.008385][T10658] netlink: 'syz.4.1508': attribute type 3 has an invalid length. [ 431.020473][T10658] netlink: 15922 bytes leftover after parsing attributes in process `syz.4.1508'. [ 431.032845][T10653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.075891][T10658] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1508'. [ 431.126853][T10653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.207070][T10653] bond0 (unregistering): Released all slaves [ 431.246620][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1510'. [ 432.428427][T10707] validate_nla: 7 callbacks suppressed [ 432.428462][T10707] netlink: 'syz.3.1521': attribute type 29 has an invalid length. [ 432.456972][T10707] netlink: 'syz.3.1521': attribute type 29 has an invalid length. [ 433.907966][T10748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1531'. [ 434.213726][T10750] netlink: 'syz.4.1532': attribute type 39 has an invalid length. [ 434.408625][T10758] netlink: 'syz.0.1534': attribute type 21 has an invalid length. [ 434.479788][T10758] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1534'. [ 435.482556][T10775] netlink: 'syz.3.1537': attribute type 16 has an invalid length. [ 435.631057][T10775] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1537'. [ 435.736056][T10771] netlink: 'syz.4.1539': attribute type 10 has an invalid length. [ 436.360154][T10771] bond0: (slave team0): Releasing backup interface [ 436.466684][T10771] team0 (unregistering): Port device team_slave_1 removed [ 436.610988][T10790] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1543'. [ 436.653286][T10790] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 436.673184][T10790] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1543'. [ 436.682468][T10790] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 436.902031][T10798] tap0: tun_chr_ioctl cmd 1074812118 [ 437.300479][T10809] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1548'. [ 437.386982][T10809] bridge_slave_1: default FDB implementation only supports local addresses [ 438.036922][T10825] netlink: 'syz.2.1552': attribute type 2 has an invalid length. [ 438.066054][T10825] netlink: 'syz.2.1552': attribute type 8 has an invalid length. [ 438.099951][T10825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1552'. [ 438.190339][ T4280] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 438.485298][T10847] netlink: 'syz.3.1559': attribute type 23 has an invalid length. [ 439.419254][T10855] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1561'. [ 439.446647][T10857] netlink: 'syz.3.1562': attribute type 9 has an invalid length. [ 439.475584][T10862] netlink: 'syz.2.1561': attribute type 10 has an invalid length. [ 439.483872][T10857] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1562'. [ 439.536221][T10860] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1561'. [ 439.715778][ T4280] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 439.746631][T10862] team0: Port device wlan1 added [ 439.847194][T10873] netlink: 'syz.0.1564': attribute type 2 has an invalid length. [ 439.965446][T10873] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 440.100754][T10873] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1564'. [ 440.216102][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222579][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.309879][T10878] netlink: 'syz.1.1568': attribute type 2 has an invalid length. [ 440.710900][T10878] device 0 entered promiscuous mode [ 443.799461][T10909] netlink: 'syz.0.1576': attribute type 21 has an invalid length. [ 443.867235][T10909] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1576'. [ 444.002148][T10918] netlink: 'syz.2.1579': attribute type 2 has an invalid length. [ 444.044088][T10918] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1579'. [ 444.540961][T10933] netlink: 'syz.4.1583': attribute type 4 has an invalid length. [ 444.607014][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 444.800072][T10933] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 444.882428][T10933] bridge0: port 2(hsr0) entered disabled state [ 444.888931][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.901177][T10931] netlink: 'syz.1.1580': attribute type 2 has an invalid length. [ 444.932204][T10931] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1580'. [ 447.861497][T10933] bond0: (slave bridge0): Releasing backup interface [ 447.868940][T10933] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 449.903475][T10952] netlink: 'syz.0.1587': attribute type 25 has an invalid length. [ 449.923443][T10952] netlink: 'syz.0.1587': attribute type 28 has an invalid length. [ 450.146734][T10956] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1590'. [ 450.211430][T10956] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 450.330494][T10956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.500844][T10968] netlink: 'syz.4.1588': attribute type 3 has an invalid length. [ 450.525850][T10956] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1590'. [ 450.538898][T10968] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1588'. [ 450.643209][T10968] netlink: 'syz.4.1588': attribute type 21 has an invalid length. [ 450.684713][T10968] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1588'. [ 450.742381][T10968] netlink: 'syz.4.1588': attribute type 4 has an invalid length. [ 450.797412][T10968] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1588'. [ 450.921781][T10973] netlink: 'syz.4.1588': attribute type 21 has an invalid length. [ 450.983425][T10973] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1588'. [ 451.162338][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 452.005616][T11008] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1600'. [ 452.981951][T11023] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1604'. [ 453.167354][T11030] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1606'. [ 453.423827][T11023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.483940][T11023] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 453.532557][T11023] bond0 (unregistering): Released all slaves [ 453.995273][T11061] netlink: 'syz.1.1614': attribute type 5 has an invalid length. [ 454.842946][T11066] netlink: 'syz.4.1615': attribute type 29 has an invalid length. [ 454.884055][T11066] netlink: 'syz.4.1615': attribute type 29 has an invalid length. [ 454.972706][T11066] netlink: 'syz.4.1615': attribute type 29 has an invalid length. [ 455.013893][T11066] netlink: 'syz.4.1615': attribute type 29 has an invalid length. [ 456.631619][T11095] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 457.665375][T11107] netlink: 'syz.2.1624': attribute type 13 has an invalid length. [ 457.703167][T11107] __nla_validate_parse: 2 callbacks suppressed [ 457.703184][T11107] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1624'. [ 457.814767][T11107] erspan0: refused to change device tx_queue_len [ 458.233887][T11126] netlink: 'syz.3.1625': attribute type 13 has an invalid length. [ 458.483187][T11126] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1625'. [ 458.868303][T11145] netlink: 'syz.2.1628': attribute type 2 has an invalid length. [ 458.909104][T11126] erspan0: refused to change device tx_queue_len [ 458.910958][T11145] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.1628'. [ 459.018996][T11115] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 459.289084][T11149] netlink: 57923 bytes leftover after parsing attributes in process `syz.0.1629'. [ 459.660551][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1632'. [ 461.015547][T11182] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.142110][T11194] device lo left promiscuous mode [ 462.672880][T11209] netlink: 'syz.3.1644': attribute type 3 has an invalid length. [ 462.800615][T11209] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1644'. [ 462.865232][T11216] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1648'. [ 462.917377][T11224] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1648'. [ 465.762161][T11238] device bridge_slave_1 left promiscuous mode [ 465.787606][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.802859][T11238] device bridge_slave_0 left promiscuous mode [ 465.809770][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.529514][T11269] netlink: 'syz.3.1657': attribute type 39 has an invalid length. [ 466.851837][T11284] netlink: 'syz.3.1662': attribute type 21 has an invalid length. [ 466.870586][T11284] netlink: 'syz.3.1662': attribute type 7 has an invalid length. [ 466.879064][T11284] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1662'. [ 467.175363][T11293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1666'. [ 467.267563][T11293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1666'. [ 467.304198][T11294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1666'. [ 467.380729][T11293] netlink: 'syz.0.1666': attribute type 21 has an invalid length. [ 467.399414][T11293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1666'. [ 467.434108][T11293] netlink: 'syz.0.1666': attribute type 4 has an invalid length. [ 467.472283][T11293] netlink: 'syz.0.1666': attribute type 5 has an invalid length. [ 467.502435][T11293] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1666'. [ 467.532738][T11294] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1666'. [ 467.836033][T11316] netlink: 'syz.0.1673': attribute type 13 has an invalid length. [ 467.898407][T11316] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1673'. [ 468.015317][T11316] erspan0: refused to change device tx_queue_len [ 468.053997][T11317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1673'. [ 468.078146][T11319] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1673'. [ 468.453396][T11331] netlink: 'syz.0.1675': attribute type 39 has an invalid length. [ 468.599654][T11336] device bridge_slave_1 left promiscuous mode [ 468.654407][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.688357][T11336] device bridge_slave_0 left promiscuous mode [ 468.709169][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.864241][T11336] team0: Port device bridge0 removed [ 468.931206][T11339] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1678'. [ 468.969705][T11339] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 469.247825][T11355] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1682'. [ 470.281740][T11384] netlink: 'syz.4.1689': attribute type 10 has an invalid length. [ 470.317695][T11383] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1687'. [ 470.412990][T11387] netlink: 'syz.2.1690': attribute type 10 has an invalid length. [ 470.766540][T11389] netlink: 'syz.2.1690': attribute type 10 has an invalid length. [ 471.040270][T11410] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1693'. [ 471.150982][T11410] device team_slave_0 left promiscuous mode [ 471.164767][T11398] netlink: 'syz.3.1692': attribute type 1 has an invalid length. [ 471.207464][T11398] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1692'. [ 471.287504][T11410] team0: Port device team_slave_0 removed [ 471.333551][T11417] netlink: 'syz.3.1692': attribute type 29 has an invalid length. [ 471.380247][T11416] netlink: 'syz.1.1696': attribute type 9 has an invalid length. [ 471.419865][T11410] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 471.439986][T11416] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1696'. [ 471.516618][T11417] netlink: 'syz.3.1692': attribute type 29 has an invalid length. [ 471.937596][T11440] netlink: 'syz.2.1699': attribute type 2 has an invalid length. [ 471.986948][T11440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1699'. [ 473.615423][T11464] validate_nla: 1 callbacks suppressed [ 473.615469][T11464] netlink: 'syz.2.1705': attribute type 19 has an invalid length. [ 473.882075][T11471] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1708'. [ 473.941277][T11474] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1708'. [ 474.067580][T11466] netlink: 'syz.2.1705': attribute type 27 has an invalid length. [ 474.089862][T11466] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1705'. [ 474.137401][T11466] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 474.798249][T11503] netlink: 'syz.2.1713': attribute type 3 has an invalid length. [ 474.899710][T11503] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1713'. [ 475.256647][T11467] netlink: 'syz.3.1707': attribute type 10 has an invalid length. [ 475.319002][T11467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1707'. [ 475.513428][T11467] device ipvlan1 entered promiscuous mode [ 475.520541][T11467] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 475.668164][T11515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1716'. [ 476.639028][T11536] netlink: 'syz.4.1721': attribute type 2 has an invalid length. [ 476.672787][T11536] netlink: 'syz.4.1721': attribute type 8 has an invalid length. [ 476.715215][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1721'. [ 479.905044][T11569] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1730'. [ 480.702476][T11579] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 480.794103][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 480.873504][T11583] netlink: 'syz.4.1734': attribute type 2 has an invalid length. [ 480.903540][T11584] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1734'. [ 483.806700][T11649] netlink: 'syz.1.1750': attribute type 29 has an invalid length. [ 483.880934][T11649] netlink: 'syz.1.1750': attribute type 29 has an invalid length. [ 483.939884][T11652] netlink: 'syz.1.1750': attribute type 29 has an invalid length. [ 486.369648][T11701] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 486.383646][T11701] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 486.392854][T11701] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 486.402097][T11701] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 486.411562][T11701] netlink: 'syz.0.1764': attribute type 29 has an invalid length. [ 486.450254][T11703] netlink: 'syz.2.1765': attribute type 39 has an invalid length. [ 486.464298][T11703] device macvlan0 entered promiscuous mode [ 487.418301][T11724] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 487.439433][T11724] netlink: 'syz.3.1769': attribute type 19 has an invalid length. [ 487.492915][T11724] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1769'. [ 487.613502][T11734] device veth1_macvtap left promiscuous mode [ 487.802734][T11736] netlink: 125520 bytes leftover after parsing attributes in process `syz.0.1771'. [ 488.667876][T11774] device syzkaller0 entered promiscuous mode [ 488.975717][T11779] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1780'. [ 489.792034][T11805] device syzkaller0 entered promiscuous mode [ 489.940892][T11817] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1789'. [ 490.132393][T11823] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 490.163204][T11823] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1790'. [ 491.319452][T11833] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.1792'. [ 491.393833][T11833] netlink: zone id is out of range [ 491.498491][T11839] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1793'. [ 491.918788][T11850] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1796'. [ 492.293750][T11862] netlink: 'syz.2.1799': attribute type 21 has an invalid length. [ 493.483827][T11887] netlink: 'syz.3.1804': attribute type 21 has an invalid length. [ 493.718130][T11892] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1806'. [ 496.587160][T11894] netlink: 'syz.0.1805': attribute type 25 has an invalid length. [ 496.602284][T11894] netlink: 'syz.0.1805': attribute type 29 has an invalid length. [ 496.612018][T11892] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 496.623259][T11892] CPU: 1 PID: 11892 Comm: syz.4.1806 Not tainted syzkaller #0 [ 496.630808][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.640909][T11892] Call Trace: [ 496.644219][T11892] [ 496.647179][T11892] dump_stack_lvl+0x188/0x24e [ 496.651906][T11892] ? show_regs_print_info+0x12/0x12 [ 496.657139][T11892] ? load_image+0x410/0x410 [ 496.661691][T11892] sysfs_warn_dup+0x8a/0xa0 [ 496.666228][T11892] sysfs_do_create_link_sd+0xc0/0x110 [ 496.671639][T11892] device_add+0x83b/0x1050 [ 496.676099][T11892] wiphy_register+0x1d8b/0x2aa0 [ 496.681015][T11892] ? cfg80211_event_work+0x40/0x40 [ 496.686167][T11892] ? minstrel_ht_alloc+0x894/0xa20 [ 496.691322][T11892] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 496.697447][T11892] ieee80211_register_hw+0x2d48/0x39f0 [ 496.702984][T11892] ? ieee80211_register_hw+0xee1/0x39f0 [ 496.708591][T11892] ? ieee80211_register_hw+0xee1/0x39f0 [ 496.714189][T11892] ? ieee80211_tasklet_handler+0x20/0x20 [ 496.719874][T11892] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 496.725821][T11892] ? __debug_object_init+0xed/0x440 [ 496.731061][T11892] ? memset+0x1e/0x40 [ 496.735076][T11892] ? __hrtimer_init+0x189/0x270 [ 496.739966][T11892] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 496.745742][T11892] ? memcpy+0x3c/0x60 [ 496.749769][T11892] hwsim_new_radio_nl+0xab7/0xc90 [ 496.754857][T11892] genl_family_rcv_msg_doit+0x22f/0x350 [ 496.760466][T11892] ? end_current_label_crit_section+0x170/0x170 [ 496.766777][T11892] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 496.772721][T11892] ? bpf_lsm_capable+0x5/0x10 [ 496.777430][T11892] ? security_capable+0x85/0xb0 [ 496.782340][T11892] genl_rcv_msg+0x601/0x790 [ 496.786899][T11892] ? genl_bind+0x360/0x360 [ 496.791346][T11892] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 496.797734][T11892] netlink_rcv_skb+0x1ef/0x440 [ 496.802547][T11892] ? genl_bind+0x360/0x360 [ 496.806993][T11892] ? netlink_ack+0x1160/0x1160 [ 496.811824][T11892] ? down_read+0x1a8/0x2d0 [ 496.816369][T11892] genl_rcv+0x24/0x40 [ 496.820592][T11892] netlink_unicast+0x7ad/0x920 [ 496.825448][T11892] netlink_sendmsg+0x8ad/0xbd0 [ 496.830271][T11892] ? netlink_getsockopt+0x550/0x550 [ 496.835507][T11892] ? apparmor_socket_sendmsg+0x8a/0x330 [ 496.841103][T11892] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 496.846426][T11892] ? security_socket_sendmsg+0x7c/0xa0 [ 496.851924][T11892] ? netlink_getsockopt+0x550/0x550 [ 496.857155][T11892] ____sys_sendmsg+0x5ed/0x9a0 [ 496.861967][T11892] ? __sys_sendmsg_sock+0x30/0x30 [ 496.867027][T11892] ? __import_iovec+0x306/0x510 [ 496.872355][T11892] ? import_iovec+0x6f/0xa0 [ 496.876914][T11892] ___sys_sendmsg+0x2a2/0x360 [ 496.881642][T11892] ? __sys_sendmsg+0x2a0/0x2a0 [ 496.886511][T11892] __se_sys_sendmsg+0x1c3/0x2b0 [ 496.891400][T11892] ? ct_nmi_exit+0x145/0x1c0 [ 496.896029][T11892] ? __x64_sys_sendmsg+0x80/0x80 [ 496.901027][T11892] ? lockdep_hardirqs_on+0x94/0x140 [ 496.906527][T11892] do_syscall_64+0x4c/0xa0 [ 496.911160][T11892] ? clear_bhb_loop+0x60/0xb0 [ 496.915874][T11892] ? clear_bhb_loop+0x60/0xb0 [ 496.920593][T11892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.926530][T11892] RIP: 0033:0x7fd17d19e159 [ 496.930981][T11892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.950790][T11892] RSP: 002b:00007fd17dffa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.959236][T11892] RAX: ffffffffffffffda RBX: 00007fd17d426090 RCX: 00007fd17d19e159 [ 496.967244][T11892] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 496.975240][T11892] RBP: 00007fd17d23503b R08: 0000000000000000 R09: 0000000000000000 [ 496.983263][T11892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.991267][T11892] R13: 00007fd17d426128 R14: 00007fd17d426090 R15: 00007fffb5a93658 [ 496.999321][T11892] [ 497.457435][T11913] netlink: 'syz.2.1813': attribute type 27 has an invalid length. [ 497.491324][T11914] netlink: 'syz.2.1813': attribute type 27 has an invalid length. [ 497.513793][T11913] netlink: 'syz.2.1813': attribute type 3 has an invalid length. [ 497.542454][T11914] netlink: 'syz.2.1813': attribute type 3 has an invalid length. [ 497.566935][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1813'. [ 497.569866][T11917] Â: renamed from pim6reg1 [ 497.609910][T11914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1813'. [ 498.199638][T11934] netlink: 'syz.2.1820': attribute type 13 has an invalid length. [ 498.240084][T11934] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1820'. [ 498.264541][T11934] erspan0: refused to change device tx_queue_len [ 498.397556][T11942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 498.904925][T11962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1827'. [ 499.044500][T11963] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1828'. [ 499.103986][T11967] netlink: 'syz.2.1830': attribute type 3 has an invalid length. [ 499.115377][T11967] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1830'. [ 499.854331][T11993] netlink: 'syz.2.1835': attribute type 5 has an invalid length. [ 500.599055][T12002] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1837'. [ 500.954969][T12026] device lo entered promiscuous mode [ 500.960645][T12026] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 500.981277][T12015] netlink: 'syz.4.1844': attribute type 2 has an invalid length. [ 501.009830][T12015] netlink: 136796 bytes leftover after parsing attributes in process `syz.4.1844'. [ 501.395717][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.402195][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.501178][T12050] netlink: 'syz.1.1852': attribute type 3 has an invalid length. [ 504.515755][T12050] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1852'. [ 505.397693][T12084] netlink: 'syz.3.1862': attribute type 39 has an invalid length. [ 505.589655][T12087] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 505.597287][T12087] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 506.010231][T12104] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1867'. [ 507.386807][T12143] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1876'. [ 508.782838][T12155] netlink: 'syz.1.1878': attribute type 7 has an invalid length. [ 508.803219][T12155] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1878'. [ 508.812560][T12157] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 508.855224][T12157] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 509.121853][T12168] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 509.155724][T12168] netlink: 'syz.1.1881': attribute type 8 has an invalid length. [ 509.225898][T12168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1881'. [ 509.829447][ T4280] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 509.878237][T12191] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1888'. [ 510.381958][T12196] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.1890'. [ 511.305236][T12222] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1898'. [ 511.556690][T12229] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1901'. [ 511.594800][T12226] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1900'. [ 512.284729][T12243] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.1905'. [ 514.907371][T12306] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 514.930027][T12306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.004790][T12306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.073261][T12306] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 518.142868][T12330] netlink: 'syz.3.1928': attribute type 3 has an invalid length. [ 518.161196][T12330] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 518.182331][T12330] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1928'. [ 518.223256][T12324] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.1926'. [ 518.421697][ T4280] Bluetooth: hci3: Unknown advertising packet type: 0x2e70 [ 518.421805][ T4280] Bluetooth: hci3: Malformed LE Event: 0x0d [ 518.585043][T12344] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.840283][T12350] FAULT_INJECTION: forcing a failure. [ 518.840283][T12350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 518.883262][T12350] CPU: 0 PID: 12350 Comm: syz.2.1932 Not tainted syzkaller #0 [ 518.890807][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.900907][T12350] Call Trace: [ 518.904230][T12350] [ 518.907199][T12350] dump_stack_lvl+0x188/0x24e [ 518.911935][T12350] ? show_regs_print_info+0x12/0x12 [ 518.917194][T12350] ? load_image+0x410/0x410 [ 518.921751][T12350] ? __lock_acquire+0x7c40/0x7c40 [ 518.926840][T12350] should_fail_ex+0x390/0x4c0 [ 518.931582][T12350] _copy_from_user+0x2c/0x170 [ 518.936316][T12350] __sys_bpf+0x2ea/0x780 [ 518.940594][T12350] ? bpf_link_show_fdinfo+0x380/0x380 [ 518.946032][T12350] ? lock_chain_count+0x20/0x20 [ 518.950927][T12350] __x64_sys_bpf+0x78/0x90 [ 518.955379][T12350] do_syscall_64+0x4c/0xa0 [ 518.959840][T12350] ? clear_bhb_loop+0x60/0xb0 [ 518.964552][T12350] ? clear_bhb_loop+0x60/0xb0 [ 518.969268][T12350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.975206][T12350] RIP: 0033:0x7f8e1239e159 [ 518.979649][T12350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.999285][T12350] RSP: 002b:00007f8e131bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.007732][T12350] RAX: ffffffffffffffda RBX: 00007f8e12625fa0 RCX: 00007f8e1239e159 [ 519.015731][T12350] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 519.023731][T12350] RBP: 00007f8e131bd090 R08: 0000000000000000 R09: 0000000000000000 [ 519.031727][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.039726][T12350] R13: 00007f8e12626038 R14: 00007f8e12625fa0 R15: 00007fff3f75be38 [ 519.047780][T12350] [ 519.648257][T12367] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1938'. [ 519.807048][T12375] netlink: 'syz.4.1938': attribute type 10 has an invalid length. [ 519.835862][T12375] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1938'. [ 519.956111][T12382] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 520.359746][T12389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1942'. [ 520.701431][T12405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1945'. [ 520.897060][T12407] delete_channel: no stack [ 521.264987][T12419] FAULT_INJECTION: forcing a failure. [ 521.264987][T12419] name failslab, interval 1, probability 0, space 0, times 1 [ 521.329935][T12419] CPU: 1 PID: 12419 Comm: syz.1.1949 Not tainted syzkaller #0 [ 521.337481][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.347583][T12419] Call Trace: [ 521.350901][T12419] [ 521.353873][T12419] dump_stack_lvl+0x188/0x24e [ 521.358616][T12419] ? show_regs_print_info+0x12/0x12 [ 521.363876][T12419] ? load_image+0x410/0x410 [ 521.368457][T12419] ? __lock_acquire+0x7c40/0x7c40 [ 521.373547][T12419] should_fail_ex+0x390/0x4c0 [ 521.378285][T12419] should_failslab+0x5/0x20 [ 521.382831][T12419] slab_pre_alloc_hook+0x59/0x300 [ 521.387908][T12419] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 521.393515][T12419] __kmem_cache_alloc_node+0x4f/0x270 [ 521.398924][T12419] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 521.404504][T12419] __kmalloc+0xa3/0x240 [ 521.408695][T12419] bpf_prog_test_run_skb+0x23e/0x18e0 [ 521.414100][T12419] ? __fget_files+0x28/0x460 [ 521.418725][T12419] ? __fget_files+0x3fc/0x460 [ 521.423451][T12419] ? cpu_online+0xa0/0xa0 [ 521.427830][T12419] bpf_prog_test_run+0x31c/0x390 [ 521.432806][T12419] __sys_bpf+0x62b/0x780 [ 521.437095][T12419] ? bpf_link_show_fdinfo+0x380/0x380 [ 521.442514][T12419] ? lock_chain_count+0x20/0x20 [ 521.447404][T12419] __x64_sys_bpf+0x78/0x90 [ 521.451853][T12419] do_syscall_64+0x4c/0xa0 [ 521.456300][T12419] ? clear_bhb_loop+0x60/0xb0 [ 521.461093][T12419] ? clear_bhb_loop+0x60/0xb0 [ 521.465808][T12419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.471821][T12419] RIP: 0033:0x7fcf9639e159 [ 521.476271][T12419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.495917][T12419] RSP: 002b:00007fcf971cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.504364][T12419] RAX: ffffffffffffffda RBX: 00007fcf96625fa0 RCX: 00007fcf9639e159 [ 521.512363][T12419] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 521.520360][T12419] RBP: 00007fcf971cd090 R08: 0000000000000000 R09: 0000000000000000 [ 521.528379][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.536399][T12419] R13: 00007fcf96626038 R14: 00007fcf96625fa0 R15: 00007ffe782a6cc8 [ 521.544410][T12419] [ 521.560571][T12422] netlink: 'syz.0.1950': attribute type 3 has an invalid length. [ 521.586591][T12422] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.1950'. [ 521.622093][T12423] netlink: 'syz.0.1950': attribute type 2 has an invalid length. [ 521.655783][T12423] netlink: 'syz.0.1950': attribute type 3 has an invalid length. [ 525.721078][T12486] netlink: 'syz.0.1967': attribute type 3 has an invalid length. [ 525.742339][T12486] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 525.771160][T12486] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.1967'. [ 526.078658][T12498] netlink: 'syz.3.1970': attribute type 10 has an invalid length. [ 526.113204][T12498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1970'. [ 526.122473][T12498] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 529.102165][T12527] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1977'. [ 529.137751][T12532] netlink: 'syz.4.1976': attribute type 3 has an invalid length. [ 529.149941][T12532] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1976'. [ 532.681417][T12576] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 532.783192][T12576] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1988'. [ 532.936659][T12590] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 533.009646][T12592] netlink: 'syz.2.1990': attribute type 4 has an invalid length. [ 533.088826][T12592] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 533.134622][T12592] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1990'. [ 533.259777][T12598] netlink: 'syz.4.1991': attribute type 39 has an invalid length. [ 533.470924][T12610] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1995'. [ 533.506833][T12610] netlink: zone id is out of range [ 533.521758][T12610] netlink: zone id is out of range [ 533.534737][T12610] netlink: zone id is out of range [ 533.541657][T12610] netlink: zone id is out of range [ 533.554225][T12610] netlink: get zone limit has 8 unknown bytes [ 533.569386][T12596] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1992'. [ 534.321966][T12630] netlink: 'syz.1.1999': attribute type 11 has an invalid length. [ 534.339184][T12631] device sit0 entered promiscuous mode [ 535.458153][T12653] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2004'. [ 536.522854][T12686] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 536.531061][T12686] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2014'. [ 540.881691][T12732] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2022'. [ 540.923438][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 541.056075][T12732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.977911][T12751] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2027'. [ 543.992476][T12752] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 544.020208][T12753] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 544.065524][T12754] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2027'. [ 544.249569][T12757] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 544.270490][T12757] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2028'. [ 544.297603][T12756] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 544.311223][T12756] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2028'. [ 545.267469][T12784] ªªªªª6: renamed from veth0_vlan [ 545.351483][T12787] netlink: 'syz.2.2034': attribute type 11 has an invalid length. [ 545.544489][T12791] netlink: 'syz.4.2036': attribute type 2 has an invalid length. [ 545.626441][T12791] device 0 entered promiscuous mode [ 546.952865][T12824] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2045'. [ 547.187063][T12834] netlink: 'syz.2.2046': attribute type 10 has an invalid length. [ 547.195586][T12834] netlink: 'syz.2.2046': attribute type 11 has an invalid length. [ 547.204059][T12834] netlink: 5145 bytes leftover after parsing attributes in process `syz.2.2046'. [ 547.267067][T12834] netlink: 'syz.2.2046': attribute type 2 has an invalid length. [ 547.275651][T12834] netlink: 'syz.2.2046': attribute type 1 has an invalid length. [ 547.284957][T12834] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2046'. [ 548.532276][T12852] can: request_module (can-proto-0) failed. [ 550.746548][T12866] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2054'. [ 550.810187][T12871] validate_nla: 1 callbacks suppressed [ 550.810225][T12871] netlink: 'syz.0.2056': attribute type 21 has an invalid length. [ 552.462141][T12880] netlink: 'syz.1.2058': attribute type 8 has an invalid length. [ 552.481545][T12880] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2058'. [ 552.944901][T12893] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2062'. [ 552.984871][T12893] netlink: 4888 bytes leftover after parsing attributes in process `syz.1.2062'. [ 553.065064][T12901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2064'. [ 553.090418][T12901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2064'. [ 553.117036][T12901] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2064'. [ 554.251194][T12944] netlink: 'syz.3.2074': attribute type 11 has an invalid length. [ 554.288512][T12944] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2074'. [ 554.338320][T12950] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2074'. [ 554.399587][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.761703][T12962] netlink: 'syz.2.2077': attribute type 2 has an invalid length. [ 554.813188][T12939] device syzkaller0 entered promiscuous mode [ 554.853197][T12962] device 0 entered promiscuous mode [ 558.477565][T12987] netlink: 'syz.2.2087': attribute type 21 has an invalid length. [ 558.723630][T12996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2090'. [ 558.780702][T12995] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2090'. [ 558.791660][T12995] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 558.960810][T12995] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2090'. [ 558.991622][T12995] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 559.213799][T12995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.259090][T13001] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 560.257662][T13033] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2095'. [ 560.387015][T13033] openvswitch: netlink: Message has 6 unknown bytes. [ 560.979470][T13012] delete_channel: no stack [ 562.834786][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.841169][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.243503][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.251030][T13052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.293405][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.300891][T13052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.525344][T13067] netlink: 'syz.4.2104': attribute type 3 has an invalid length. [ 563.581153][T13067] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2104'. [ 563.611958][T13064] netlink: 'syz.0.2107': attribute type 2 has an invalid length. [ 563.638119][T13064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2107'. [ 563.707711][T13065] netlink: 'syz.0.2107': attribute type 21 has an invalid length. [ 563.774757][T13065] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2107'. [ 563.829874][T13065] netlink: 'syz.0.2107': attribute type 4 has an invalid length. [ 563.852270][T13065] netlink: 'syz.0.2107': attribute type 3 has an invalid length. [ 563.899791][T13065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2107'. [ 563.935176][T13060] netlink: 'syz.4.2104': attribute type 21 has an invalid length. [ 563.961933][T13060] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2104'. [ 563.983913][T13060] netlink: 'syz.4.2104': attribute type 4 has an invalid length. [ 563.991724][T13060] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2104'. [ 564.100418][ T4280] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 564.235648][T13083] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.2110'. [ 564.247588][T13083] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.2110'. [ 564.258295][T13083] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.2110'. [ 565.606458][T13126] netlink: 'syz.4.2119': attribute type 2 has an invalid length. [ 565.654574][T13126] netlink: 'syz.4.2119': attribute type 11 has an invalid length. [ 565.713140][T13126] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2119'. [ 566.281469][T13120] delete_channel: no stack [ 566.765703][T13153] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2125'. [ 566.777550][T13151] netlink: 212928 bytes leftover after parsing attributes in process `syz.1.2124'. [ 566.792457][T13153] netlink: 'syz.0.2125': attribute type 2 has an invalid length. [ 568.449845][T13183] bridge0: port 3(ipvlan1) entered blocking state [ 568.466646][T13183] bridge0: port 3(ipvlan1) entered disabled state [ 568.598275][T13183] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 570.541883][T13240] validate_nla: 1 callbacks suppressed [ 570.541903][T13240] netlink: 'syz.2.2147': attribute type 10 has an invalid length. [ 571.051802][T13240] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.086671][T13246] __nla_validate_parse: 2 callbacks suppressed [ 571.086691][T13246] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2149'. [ 571.117455][T13240] bond0: (slave team0): Enslaving as an active interface with an up link [ 571.161777][T13246] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 571.191595][T13246] CPU: 0 PID: 13246 Comm: syz.4.2149 Not tainted syzkaller #0 [ 571.199163][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.209283][T13246] Call Trace: [ 571.212631][T13246] [ 571.215625][T13246] dump_stack_lvl+0x188/0x24e [ 571.220395][T13246] ? show_regs_print_info+0x12/0x12 [ 571.225685][T13246] ? load_image+0x410/0x410 [ 571.230326][T13246] sysfs_warn_dup+0x8a/0xa0 [ 571.234906][T13246] sysfs_do_create_link_sd+0xc0/0x110 [ 571.240360][T13246] device_add+0x83b/0x1050 [ 571.244861][T13246] wiphy_register+0x1d8b/0x2aa0 [ 571.249800][T13246] ? cfg80211_event_work+0x40/0x40 [ 571.254971][T13246] ? minstrel_ht_alloc+0x894/0xa20 [ 571.260140][T13246] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 571.266273][T13246] ieee80211_register_hw+0x2d48/0x39f0 [ 571.271797][T13246] ? ieee80211_register_hw+0xee1/0x39f0 [ 571.277390][T13246] ? ieee80211_register_hw+0xee1/0x39f0 [ 571.283000][T13246] ? ieee80211_tasklet_handler+0x20/0x20 [ 571.288687][T13246] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 571.294623][T13246] ? __debug_object_init+0xed/0x440 [ 571.299895][T13246] ? memset+0x1e/0x40 [ 571.303916][T13246] ? __hrtimer_init+0x189/0x270 [ 571.308815][T13246] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 571.314592][T13246] ? memcpy+0x3c/0x60 [ 571.318639][T13246] hwsim_new_radio_nl+0xab7/0xc90 [ 571.323734][T13246] genl_family_rcv_msg_doit+0x22f/0x350 [ 571.329357][T13246] ? end_current_label_crit_section+0x170/0x170 [ 571.335702][T13246] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 571.341654][T13246] ? bpf_lsm_capable+0x5/0x10 [ 571.346368][T13246] ? security_capable+0x85/0xb0 [ 571.351275][T13246] genl_rcv_msg+0x601/0x790 [ 571.355838][T13246] ? genl_bind+0x360/0x360 [ 571.360288][T13246] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 571.366695][T13246] netlink_rcv_skb+0x1ef/0x440 [ 571.371516][T13246] ? genl_bind+0x360/0x360 [ 571.375986][T13246] ? netlink_ack+0x1160/0x1160 [ 571.380812][T13246] ? down_read+0x1a8/0x2d0 [ 571.385272][T13246] genl_rcv+0x24/0x40 [ 571.389294][T13246] netlink_unicast+0x7ad/0x920 [ 571.394124][T13246] netlink_sendmsg+0x8ad/0xbd0 [ 571.398941][T13246] ? netlink_getsockopt+0x550/0x550 [ 571.404205][T13246] ? apparmor_socket_sendmsg+0x8a/0x330 [ 571.409798][T13246] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 571.415166][T13246] ? security_socket_sendmsg+0x7c/0xa0 [ 571.420678][T13246] ? netlink_getsockopt+0x550/0x550 [ 571.425927][T13246] ____sys_sendmsg+0x5ed/0x9a0 [ 571.430755][T13246] ? __sys_sendmsg_sock+0x30/0x30 [ 571.435828][T13246] ? __import_iovec+0x306/0x510 [ 571.440737][T13246] ? import_iovec+0x6f/0xa0 [ 571.445294][T13246] ___sys_sendmsg+0x2a2/0x360 [ 571.450026][T13246] ? __sys_sendmsg+0x2a0/0x2a0 [ 571.454920][T13246] __se_sys_sendmsg+0x1c3/0x2b0 [ 571.459817][T13246] ? __x64_sys_sendmsg+0x80/0x80 [ 571.464828][T13246] ? lockdep_hardirqs_on+0x94/0x140 [ 571.470404][T13246] do_syscall_64+0x4c/0xa0 [ 571.475083][T13246] ? clear_bhb_loop+0x60/0xb0 [ 571.479826][T13246] ? clear_bhb_loop+0x60/0xb0 [ 571.484643][T13246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.490614][T13246] RIP: 0033:0x7fd17d19e159 [ 571.495074][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.514717][T13246] RSP: 002b:00007fd17e01b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.523176][T13246] RAX: ffffffffffffffda RBX: 00007fd17d425fa0 RCX: 00007fd17d19e159 [ 571.532255][T13246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 571.540978][T13246] RBP: 00007fd17d23503b R08: 0000000000000000 R09: 0000000000000000 [ 571.549063][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.557074][T13246] R13: 00007fd17d426038 R14: 00007fd17d425fa0 R15: 00007fffb5a93658 [ 571.565204][T13246] [ 571.880026][T13254] netlink: 'syz.1.2153': attribute type 11 has an invalid length. [ 571.922224][T13258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2155'. [ 571.924068][T13260] netlink: 'syz.1.2153': attribute type 10 has an invalid length. [ 571.941872][T13254] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2153'. [ 571.974085][T13255] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 572.000010][T13260] team0: Port device wlan1 added [ 572.027656][T13261] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2154'. [ 572.052030][T13255] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2153'. [ 572.213243][T13253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.291775][T13268] netlink: 'syz.2.2157': attribute type 10 has an invalid length. [ 572.574360][T13268] bond0: (slave team0): Releasing backup interface [ 572.760634][T13286] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2164'. [ 572.798701][T13268] team0 (unregistering): Port device team_slave_0 removed [ 572.921639][T13268] team0 (unregistering): Port device team_slave_1 removed [ 572.954494][T13268] team0 (unregistering): Port device hsr_slave_0 removed [ 572.984687][T13268] team0 (unregistering): Port device macvlan0 removed [ 573.014461][T13268] team0 (unregistering): Port device wlan1 removed [ 573.038298][T13271] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 573.334746][T13301] netlink: 'syz.2.2167': attribute type 21 has an invalid length. [ 573.711431][T13314] netlink: 'syz.3.2172': attribute type 13 has an invalid length. [ 573.750726][T13314] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2172'. [ 573.978689][T13331] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 574.038155][T13331] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 574.073098][T13331] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2174'. [ 574.472866][T13353] netlink: 'syz.2.2179': attribute type 3 has an invalid length. [ 574.532129][T13353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2179'. [ 576.056206][T13397] netlink: 'syz.3.2189': attribute type 3 has an invalid length. [ 576.067840][T13397] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2189'. [ 576.264527][T13409] netlink: 'syz.4.2193': attribute type 3 has an invalid length. [ 576.284208][T13409] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2193'. [ 576.351580][T13414] netlink: 'syz.2.2192': attribute type 3 has an invalid length. [ 576.381077][T13420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.423399][T13420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.462654][T13411] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 576.517303][T13414] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2192'. [ 576.649463][T13423] netlink: 'syz.3.2194': attribute type 21 has an invalid length. [ 576.666453][T13423] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 576.872671][T13434] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2196'. [ 576.906991][T13434] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.968686][T13441] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2198'. [ 577.131475][T13448] netlink: 'syz.1.2200': attribute type 3 has an invalid length. [ 577.148459][T13448] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2200'. [ 577.355933][T13447] device syzkaller0 entered promiscuous mode [ 577.497886][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2203'. [ 580.498082][T13478] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2209'. [ 581.369481][T13509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2216'. [ 585.670625][T13589] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 587.253658][T13646] netlink: 'syz.0.2246': attribute type 21 has an invalid length. [ 587.261794][T13646] IPv6: Can't replace route, no match found [ 587.268303][T13648] netlink: 'syz.0.2246': attribute type 21 has an invalid length. [ 587.289883][T13648] IPv6: Can't replace route, no match found [ 587.330303][T13646] netlink: 'syz.0.2246': attribute type 1 has an invalid length. [ 587.359729][T13646] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2246'. [ 587.422026][T13647] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2246'. [ 587.612206][T13646] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2246'. [ 588.156811][T13694] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2255'. [ 588.618034][T13694] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 588.720189][T13693] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2256'. [ 588.865093][T13704] netlink: 126324 bytes leftover after parsing attributes in process `syz.0.2260'. [ 589.256288][T13720] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2258'. [ 589.464809][T13732] netlink: 'syz.1.2263': attribute type 27 has an invalid length. [ 591.497581][T13775] netlink: 'syz.1.2272': attribute type 21 has an invalid length. [ 591.523335][T13775] netlink: 'syz.1.2272': attribute type 29 has an invalid length. [ 591.550334][T13775] netlink: 'syz.1.2272': attribute type 29 has an invalid length. [ 591.581060][T13776] netlink: 'syz.1.2272': attribute type 29 has an invalid length. [ 591.615060][T13775] netlink: 'syz.1.2272': attribute type 29 has an invalid length. [ 592.218813][T13790] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.231479][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 593.089845][T13846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2286'. [ 593.518064][T13857] netlink: 'syz.1.2289': attribute type 9 has an invalid length. [ 593.526890][T13857] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2289'. [ 594.140470][T13871] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.2293'. [ 594.186562][T13871] netlink: zone id is out of range [ 594.192457][T13871] netlink: zone id is out of range [ 594.238767][T13871] netlink: zone id is out of range [ 594.273455][T13871] netlink: zone id is out of range [ 594.287847][T13871] netlink: zone id is out of range [ 594.312684][T13871] netlink: zone id is out of range [ 594.332877][T13871] netlink: zone id is out of range [ 594.339285][T13871] netlink: zone id is out of range [ 594.356391][T13871] netlink: zone id is out of range [ 594.368798][T13871] netlink: zone id is out of range [ 594.413681][T13876] netlink: 'syz.4.2295': attribute type 10 has an invalid length. [ 595.090401][T13864] delete_channel: no stack [ 595.504673][T13901] device syzkaller0 entered promiscuous mode [ 595.569964][T13899] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2300'. [ 595.613114][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2303'. [ 595.717221][ T26] syzkaller0: tun_net_xmit 48 [ 595.887242][T13921] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2304'. [ 596.348267][T13896] syzkaller0: delete flow: hash 540724775 index 1 [ 596.972238][T13953] netlink: 'syz.3.2309': attribute type 3 has an invalid length. [ 596.981573][T13953] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 596.990825][T13953] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2309'. [ 598.757946][T13928] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 598.987434][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.025014][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.136570][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.156669][T13979] netlink: 'syz.2.2318': attribute type 2 has an invalid length. [ 599.178534][T13979] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2318'. [ 599.204824][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.265327][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.314443][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.374653][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.416005][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.460890][T13974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2313'. [ 599.689515][T13990] netlink: 'syz.3.2320': attribute type 3 has an invalid length. [ 605.747151][T14035] netlink: 'syz.4.2335': attribute type 10 has an invalid length. [ 605.987295][T14052] __nla_validate_parse: 58 callbacks suppressed [ 605.987316][T14052] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2337'. [ 606.009521][T14048] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2338'. [ 606.053618][T14048] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 606.180303][T14048] net_ratelimit: 3569 callbacks suppressed [ 606.180456][T14048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.258171][T14056] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2338'. [ 606.321380][T14061] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2340'. [ 607.576547][T14096] netlink: 'syz.0.2349': attribute type 3 has an invalid length. [ 607.597920][T14096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2349'. [ 607.821073][T14107] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2352'. [ 608.183191][T14124] netlink: 'syz.1.2357': attribute type 21 has an invalid length. [ 608.233491][T14124] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2357'. [ 608.911737][T14151] netlink: 'syz.3.2363': attribute type 1 has an invalid length. [ 608.951393][T14151] netlink: 'syz.3.2363': attribute type 3 has an invalid length. [ 609.020494][T14151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2363'. [ 609.067080][T14153] netlink: 'syz.0.2365': attribute type 3 has an invalid length. [ 609.143157][T14153] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2365'. [ 609.404911][ T7362] tipc: Subscription rejected, illegal request [ 609.446638][T14151] netlink: 'syz.3.2363': attribute type 16 has an invalid length. [ 609.515113][T14151] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2363'. [ 612.538902][T14179] netlink: 'syz.2.2370': attribute type 21 has an invalid length. [ 612.811335][T14193] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2375'. [ 612.856950][T14193] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2375'. [ 612.958219][T14193] bond0: (slave bond_slave_0): Releasing backup interface [ 613.028114][T14193] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 613.204018][T14203] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2379'. [ 613.270594][T14206] device pim6reg1 entered promiscuous mode [ 614.669975][T14226] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2385'. [ 614.845166][T14234] netlink: 'syz.4.2388': attribute type 11 has an invalid length. [ 614.859883][T14234] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2388'. [ 614.960579][T14241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2390'. [ 615.237643][ T4280] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 615.254813][ T7387] tipc: Subscription rejected, illegal request [ 615.567850][T14268] netlink: 'syz.2.2395': attribute type 2 has an invalid length. [ 615.613073][T14268] netlink: 'syz.2.2395': attribute type 8 has an invalid length. [ 615.635957][T14268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2395'. [ 615.665264][T14267] netlink: 'syz.2.2395': attribute type 2 has an invalid length. [ 615.687192][T14267] netlink: 'syz.2.2395': attribute type 8 has an invalid length. [ 615.710131][T14267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2395'. [ 615.730060][T14273] netlink: 'syz.1.2397': attribute type 21 has an invalid length. [ 615.744446][T14273] netlink: 'syz.1.2397': attribute type 11 has an invalid length. [ 615.791230][T14279] device lo entered promiscuous mode [ 615.820365][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 615.973690][T14284] netlink: 'syz.4.2402': attribute type 3 has an invalid length. [ 615.996073][T14284] netlink: 'syz.4.2402': attribute type 4 has an invalid length. [ 616.014217][T14284] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.2402'. [ 616.481665][T14303] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2405'. [ 616.927098][T14322] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 616.943540][T14322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.570111][T14328] validate_nla: 2 callbacks suppressed [ 617.570133][T14328] netlink: 'syz.3.2408': attribute type 21 has an invalid length. [ 617.611495][T14328] netlink: 'syz.3.2408': attribute type 4 has an invalid length. [ 618.069696][T14352] netlink: 'syz.2.2417': attribute type 2 has an invalid length. [ 618.082361][T14352] netlink: 'syz.2.2417': attribute type 8 has an invalid length. [ 618.091641][T14352] __nla_validate_parse: 4 callbacks suppressed [ 618.091658][T14352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2417'. [ 618.115526][T14353] netlink: 'syz.2.2417': attribute type 2 has an invalid length. [ 618.173110][T14353] netlink: 'syz.2.2417': attribute type 8 has an invalid length. [ 618.181173][T14353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2417'. [ 618.886756][T14379] netlink: 'syz.4.2425': attribute type 2 has an invalid length. [ 618.897743][T14379] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2425'. [ 620.790114][T14399] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2432'. [ 620.877463][T14399] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.2432'. [ 621.651339][T14427] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2436'. [ 621.735595][T14431] netlink: 'syz.1.2437': attribute type 39 has an invalid length. [ 622.081281][T14448] netlink: 'syz.4.2441': attribute type 12 has an invalid length. [ 622.106535][T14448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2441'. [ 622.256408][T14457] netlink: 'syz.1.2443': attribute type 9 has an invalid length. [ 622.268386][T14457] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2443'. [ 622.612631][T14475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2447'. [ 622.654841][T14475] netlink: 6783 bytes leftover after parsing attributes in process `syz.2.2447'. [ 623.538325][T14487] netlink: 'syz.0.2454': attribute type 6 has an invalid length. [ 623.777511][T14502] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2459'. [ 623.811663][T14502] openvswitch: netlink: Key type 386 is out of range max 32 [ 623.840023][T14508] netlink: 'syz.0.2461': attribute type 21 has an invalid length. [ 623.861835][T14508] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2461'. [ 624.090257][T14508] netlink: 'syz.0.2461': attribute type 3 has an invalid length. [ 624.139261][T14508] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2461'. [ 624.205897][T14513] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2462'. [ 624.274950][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.281498][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.808317][T14536] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2470'. [ 624.992915][T14536] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 625.025118][T14536] CPU: 0 PID: 14536 Comm: syz.1.2470 Not tainted syzkaller #0 [ 625.032666][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.042790][T14536] Call Trace: [ 625.046116][T14536] [ 625.049095][T14536] dump_stack_lvl+0x188/0x24e [ 625.053853][T14536] ? show_regs_print_info+0x12/0x12 [ 625.059120][T14536] ? load_image+0x410/0x410 [ 625.063696][T14536] ? kasan_save_alloc_info+0x7/0x20 [ 625.068958][T14536] sysfs_warn_dup+0x8a/0xa0 [ 625.073531][T14536] sysfs_do_create_link_sd+0xc0/0x110 [ 625.079062][T14536] device_add+0x83b/0x1050 [ 625.083556][T14536] wiphy_register+0x1d8b/0x2aa0 [ 625.088482][T14536] ? __rtnl_unlock+0x14/0xe0 [ 625.093153][T14536] ? cfg80211_event_work+0x40/0x40 [ 625.098424][T14536] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 625.104663][T14536] ieee80211_register_hw+0x2d48/0x39f0 [ 625.110169][T14536] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 625.116370][T14536] ? ieee80211_register_hw+0xee1/0x39f0 [ 625.121949][T14536] ? ieee80211_register_hw+0xee1/0x39f0 [ 625.127538][T14536] ? ieee80211_tasklet_handler+0x20/0x20 [ 625.133209][T14536] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 625.139167][T14536] ? __debug_object_init+0xed/0x440 [ 625.144397][T14536] ? memset+0x1e/0x40 [ 625.148405][T14536] ? __hrtimer_init+0x189/0x270 [ 625.153288][T14536] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 625.159054][T14536] ? memcpy+0x3c/0x60 [ 625.163074][T14536] hwsim_new_radio_nl+0xab7/0xc90 [ 625.168163][T14536] genl_family_rcv_msg_doit+0x22f/0x350 [ 625.173775][T14536] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 625.179703][T14536] ? security_capable+0x71/0xb0 [ 625.184602][T14536] ? bpf_lsm_capable+0x5/0x10 [ 625.189307][T14536] ? security_capable+0x85/0xb0 [ 625.194203][T14536] genl_rcv_msg+0x601/0x790 [ 625.198760][T14536] ? genl_bind+0x360/0x360 [ 625.203201][T14536] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 625.209588][T14536] netlink_rcv_skb+0x1ef/0x440 [ 625.214391][T14536] ? genl_bind+0x360/0x360 [ 625.218835][T14536] ? netlink_ack+0x1160/0x1160 [ 625.223636][T14536] ? lockdep_hardirqs_on+0x94/0x140 [ 625.228878][T14536] ? down_read+0x1a8/0x2d0 [ 625.233329][T14536] genl_rcv+0x24/0x40 [ 625.237334][T14536] netlink_unicast+0x7ad/0x920 [ 625.242143][T14536] netlink_sendmsg+0x8ad/0xbd0 [ 625.246957][T14536] ? lockdep_hardirqs_on+0x94/0x140 [ 625.252206][T14536] ? netlink_getsockopt+0x550/0x550 [ 625.257459][T14536] ? security_socket_sendmsg+0x56/0xa0 [ 625.262983][T14536] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 625.268310][T14536] ? security_socket_sendmsg+0x7c/0xa0 [ 625.273812][T14536] ? netlink_getsockopt+0x550/0x550 [ 625.279050][T14536] ____sys_sendmsg+0x5ed/0x9a0 [ 625.283862][T14536] ? __sys_sendmsg_sock+0x30/0x30 [ 625.288925][T14536] ? __import_iovec+0x306/0x510 [ 625.293827][T14536] ? import_iovec+0x6f/0xa0 [ 625.298460][T14536] ___sys_sendmsg+0x2a2/0x360 [ 625.303455][T14536] ? __sys_sendmsg+0x2a0/0x2a0 [ 625.308271][T14536] ? irqentry_enter+0x33/0x50 [ 625.313001][T14536] ? rcu_is_watching+0x11/0xa0 [ 625.317833][T14536] ? __se_sys_sendmsg+0x41/0x2b0 [ 625.322820][T14536] __se_sys_sendmsg+0x1c3/0x2b0 [ 625.327721][T14536] ? __x64_sys_sendmsg+0x80/0x80 [ 625.332732][T14536] ? syscall_enter_from_user_mode+0x2a/0x80 [ 625.338667][T14536] do_syscall_64+0x4c/0xa0 [ 625.343120][T14536] ? clear_bhb_loop+0x60/0xb0 [ 625.347834][T14536] ? clear_bhb_loop+0x60/0xb0 [ 625.352558][T14536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.358487][T14536] RIP: 0033:0x7fcf9639e159 [ 625.362927][T14536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.382573][T14536] RSP: 002b:00007fcf971cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.391024][T14536] RAX: ffffffffffffffda RBX: 00007fcf96625fa0 RCX: 00007fcf9639e159 [ 625.399030][T14536] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 625.407416][T14536] RBP: 00007fcf9643503b R08: 0000000000000000 R09: 0000000000000000 [ 625.415426][T14536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.423433][T14536] R13: 00007fcf96626038 R14: 00007fcf96625fa0 R15: 00007ffe782a6cc8 [ 625.431455][T14536] [ 625.583265][T14541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2472'. [ 626.029363][T14562] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 626.043087][T14562] netlink: 'syz.1.2475': attribute type 8 has an invalid length. [ 626.051215][T14562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2475'. [ 626.146691][T14573] netlink: 'syz.1.2475': attribute type 2 has an invalid length. [ 626.217748][T14573] netlink: 'syz.1.2475': attribute type 8 has an invalid length. [ 626.256355][T14573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2475'. [ 626.293415][T14578] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2476'. [ 626.811953][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller1: link becomes ready [ 626.834642][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 626.844010][T14610] syzkaller1: group set to 778 [ 626.850348][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 626.859725][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 626.869458][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 626.886802][ T22] syzkaller1: tun_net_xmit 90 [ 626.899101][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 626.906369][T14610] syzkaller1: group set to 778 [ 626.912564][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 626.921946][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 626.931053][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 626.939903][ T22] syzkaller1: tun_net_xmit 90 [ 626.945492][T14610] syzkaller1: group set to 778 [ 626.951012][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 626.959547][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 626.966068][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 626.972541][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 626.980551][ T22] syzkaller1: tun_net_xmit 90 [ 626.986167][T14610] syzkaller1: group set to 778 [ 626.991665][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 627.000952][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.008666][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.017079][ T22] syzkaller1: tun_net_xmit 90 [ 627.022383][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.030344][T14610] syzkaller1: group set to 778 [ 627.038672][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 627.046384][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.052719][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.061035][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.067556][ T22] syzkaller1: tun_net_xmit 90 [ 627.072906][T14610] syzkaller1: group set to 778 [ 627.080319][T14606] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 627.087159][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.095339][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.101744][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.109304][ T22] syzkaller1: tun_net_xmit 90 [ 627.117702][T14610] syzkaller1: group set to 778 [ 627.124645][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.131157][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.140348][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.149275][T14610] syzkaller1: group set to 778 [ 627.157005][ T22] syzkaller1: tun_net_xmit 90 [ 627.162784][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.169576][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.177782][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.184312][ T22] syzkaller1: tun_net_xmit 90 [ 627.189647][T14610] syzkaller1: group set to 778 [ 627.197242][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.204217][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.210406][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.218767][T14610] syzkaller1: group set to 778 [ 627.224350][ T22] syzkaller1: tun_net_xmit 90 [ 627.232892][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.241877][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.249448][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.258449][ T22] syzkaller1: tun_net_xmit 90 [ 627.264577][T14610] syzkaller1: group set to 778 [ 627.270227][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.278698][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.285303][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.291495][T14610] syzkaller1: group set to 778 [ 627.298579][ T22] syzkaller1: tun_net_xmit 90 [ 627.304695][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.311210][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.319478][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.326982][T14610] syzkaller1: group set to 778 [ 627.332683][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.342889][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.349998][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.358749][ T22] syzkaller1: tun_net_xmit 90 [ 627.365902][T14610] syzkaller1: group set to 778 [ 627.372608][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.381669][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.388048][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.397663][ T22] syzkaller1: tun_net_xmit 90 [ 627.402925][T14610] syzkaller1: group set to 778 [ 627.408627][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.416483][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.423574][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.429535][T14610] syzkaller1: group set to 778 [ 627.436160][ T22] syzkaller1: tun_net_xmit 90 [ 627.441672][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.454636][T14612] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 627.463311][ T22] syzkaller1: tun_net_xmit 90 [ 627.468771][T14610] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 627.477083][T14610] syzkaller1: group set to 778 [ 627.503346][ T22] syzkaller1: tun_net_xmit 90 [ 627.720377][T14614] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 627.753498][T14614] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2483'. [ 627.773159][T14615] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 628.284357][T14640] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 628.517116][T14632] netlink: 'syz.4.2487': attribute type 39 has an invalid length. [ 628.651122][T14638] can: request_module (can-proto-0) failed. [ 628.755505][T14647] netlink: zone id is out of range [ 628.775791][T14647] netlink: zone id is out of range [ 628.794681][T14647] netlink: zone id is out of range [ 629.511407][T14663] netlink: 'syz.2.2492': attribute type 6 has an invalid length. [ 629.653091][T14667] __nla_validate_parse: 2 callbacks suppressed [ 629.653199][T14667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2495'. [ 629.922121][T14678] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2497'. [ 630.063422][T14684] netlink: 'syz.1.2498': attribute type 10 has an invalid length. [ 630.376984][T14684] team0: Port device wlan1 removed [ 630.802324][T14684] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.811297][T14685] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2498'. [ 630.898281][T14685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.956788][T14685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.995991][T14685] bond0 (unregistering): (slave team0): Releasing backup interface [ 631.008120][T14685] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 631.027583][T14685] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 631.067301][T14685] bond0 (unregistering): Released all slaves [ 631.128313][T14701] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2502'. [ 631.163470][T14712] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 631.247769][T14702] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2502'. [ 631.795892][T14725] delete_channel: no stack [ 631.829188][T14705] device syzkaller0 entered promiscuous mode [ 632.001549][T14725] netlink: 'syz.3.2506': attribute type 3 has an invalid length. [ 632.111084][T14725] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2506'. [ 635.491728][T14732] netlink: 'syz.0.2517': attribute type 2 has an invalid length. [ 635.500156][T14732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2517'. [ 635.509776][T14736] netlink: 'syz.3.2507': attribute type 6 has an invalid length. [ 636.278054][T14796] netlink: 'syz.2.2523': attribute type 15 has an invalid length. [ 636.383003][T14796] netlink: 'syz.2.2523': attribute type 7 has an invalid length. [ 636.541249][T14799] netlink: 'syz.2.2523': attribute type 39 has an invalid length. [ 637.054120][T14807] netlink: 'syz.0.2526': attribute type 21 has an invalid length. [ 637.064252][T14807] netlink: 'syz.0.2526': attribute type 5 has an invalid length. [ 637.363567][T14830] netlink: 'syz.2.2531': attribute type 2 has an invalid length. [ 637.412161][T14830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2531'. [ 639.090806][T14830] bond0: (slave dummy0): Releasing backup interface [ 639.297293][T14893] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.2541'. [ 639.368387][T14847] netlink: 'syz.2.2531': attribute type 21 has an invalid length. [ 639.414362][T14847] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2531'. [ 639.565083][T14899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2542'. [ 642.853744][T14886] team0: Port device macvlan0 removed [ 642.895395][T14899] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2542'. [ 642.909745][T14907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2544'. [ 642.923090][T14909] tap0: tun_chr_ioctl cmd 1074812118 [ 643.471159][T14950] device syzkaller0 entered promiscuous mode [ 643.854037][ T7367] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 649.899750][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 650.303838][T15045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2572'. [ 652.012743][T15079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2581'. [ 652.048808][T15081] device syzkaller0 entered promiscuous mode [ 652.218846][T15083] device sit0 left promiscuous mode [ 652.319066][T15089] netlink: 'syz.3.2585': attribute type 2 has an invalid length. [ 652.327157][T15089] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2585'. [ 652.857215][T15087] device sit0 entered promiscuous mode [ 653.431278][T15101] netlink: 'syz.0.2588': attribute type 3 has an invalid length. [ 653.485511][T15105] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 653.528185][T15101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2588'. [ 653.539884][T15105] netlink: 'syz.2.2600': attribute type 3 has an invalid length. [ 653.612237][T15105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2600'. [ 653.873086][T15107] netlink: 'syz.0.2588': attribute type 21 has an invalid length. [ 656.946355][T15131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 656.956238][T15131] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2594'. [ 657.256547][T15155] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2601'. [ 657.833760][T15163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2604'. [ 658.812812][T15180] device sit0 left promiscuous mode [ 659.093422][T15183] device sit0 entered promiscuous mode [ 661.491592][T15238] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2621'. [ 661.748998][T15249] netlink: 'syz.3.2622': attribute type 10 has an invalid length. [ 661.823341][T15249] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.855380][T15249] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.912830][T15249] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.930399][T15249] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.654497][T15249] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.666939][T15249] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.689405][T15249] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.699427][T15249] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.713288][T15249] team0: Port device geneve1 added [ 665.037954][T15270] netlink: 'syz.0.2628': attribute type 12 has an invalid length. [ 665.115568][T15277] netlink: 'syz.1.2631': attribute type 2 has an invalid length. [ 665.201127][T15270] netlink: 'syz.0.2628': attribute type 21 has an invalid length. [ 665.233294][T15270] IPv6: NLM_F_CREATE should be specified when creating new route [ 665.445845][ T4280] Bluetooth: hci1: ISO packet for unknown connection handle 3583 [ 667.157850][T15334] netlink: 'syz.2.2644': attribute type 9 has an invalid length. [ 667.214252][T15334] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2644'. [ 667.226042][T15336] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2645'. [ 667.409579][T15341] netlink: 'syz.2.2646': attribute type 21 has an invalid length. [ 667.556278][T15345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2648'. [ 667.608340][T15345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2648'. [ 667.684498][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2648'. [ 667.793930][T15345] netlink: 'syz.1.2648': attribute type 21 has an invalid length. [ 667.820953][T15345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2648'. [ 667.859346][T15345] netlink: 'syz.1.2648': attribute type 4 has an invalid length. [ 667.895183][T15345] netlink: 'syz.1.2648': attribute type 5 has an invalid length. [ 667.924759][T15345] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2648'. [ 668.009755][T15352] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2648'. [ 670.662521][T15395] tipc: Started in network mode [ 670.670357][T15395] tipc: Node identity 9215a268, cluster identity 4711 [ 670.677766][T15395] tipc: Node number set to 2450891368 [ 671.160004][ T4280] Bluetooth: hci2: ISO packet for unknown connection handle 3891 [ 671.747924][T15423] netlink: 'syz.4.2666': attribute type 22 has an invalid length. [ 671.761087][T15423] netlink: 14526 bytes leftover after parsing attributes in process `syz.4.2666'. [ 672.552398][T15453] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.2673'. [ 672.592304][T15453] netlink: zone id is out of range [ 672.633545][T15453] netlink: zone id is out of range [ 672.638874][T15453] netlink: zone id is out of range [ 672.706448][T15453] netlink: zone id is out of range [ 672.761591][T15450] netlink: 'syz.4.2672': attribute type 2 has an invalid length. [ 672.783732][T15450] netlink: 'syz.4.2672': attribute type 4 has an invalid length. [ 672.798828][T15450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2672'. [ 673.186282][T15454] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2673'. [ 673.201146][T15454] bridge_slave_1: default FDB implementation only supports local addresses [ 673.478964][T15468] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 673.687927][T15477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2677'. [ 673.772519][T15468] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2676'. [ 674.347467][T15493] netlink: 'syz.2.2681': attribute type 2 has an invalid length. [ 674.376104][T15493] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2681'. [ 686.405732][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.417056][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.425805][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.435112][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.443105][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 686.451023][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 686.782693][T15497] chnl_net:caif_netlink_parms(): no params data found [ 686.936164][T15497] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.945608][T15497] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.956667][T15497] device bridge_slave_0 entered promiscuous mode [ 686.968833][T15497] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.978744][T15497] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.991287][T15497] device bridge_slave_1 entered promiscuous mode [ 687.032403][T15497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.057644][T15497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.102174][T15497] team0: Port device team_slave_0 added [ 687.116951][T15497] team0: Port device team_slave_1 added [ 687.160358][T15497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.171476][T15497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.201933][T15497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.219604][T15497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.227040][T15497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.257505][T15497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.503146][T15500] Bluetooth: hci5: command 0x0409 tx timeout [ 690.455022][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 690.471902][ T4280] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 690.482607][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 690.491213][ T4280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 690.499653][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 690.510249][ T4280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 690.519928][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 690.528076][ T4280] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 690.536779][ T4280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 690.544386][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 690.551955][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 690.560019][ T4280] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 690.583123][T15500] Bluetooth: hci5: command 0x041b tx timeout [ 691.350609][T15500] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 691.362006][T15500] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 691.375103][T15500] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 691.388288][T15500] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 691.408515][T15500] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 691.416211][T15500] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 691.477874][ T4280] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 691.487509][ T4280] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 691.500327][ T4280] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 691.521355][ T4280] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 691.529557][ T4280] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 691.537607][ T4280] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 692.663239][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 692.669910][ T4280] Bluetooth: hci7: command 0x0409 tx timeout [ 692.676655][T15516] Bluetooth: hci5: command 0x040f tx timeout [ 693.463144][ T4280] Bluetooth: hci9: command 0x0409 tx timeout [ 693.623101][ T4280] Bluetooth: hci8: command 0x0409 tx timeout [ 694.743265][ T4280] Bluetooth: hci7: command 0x041b tx timeout [ 694.749453][ T4280] Bluetooth: hci6: command 0x041b tx timeout [ 694.755939][T15516] Bluetooth: hci5: command 0x0419 tx timeout [ 695.543231][ T4280] Bluetooth: hci9: command 0x041b tx timeout [ 695.703149][ T4280] Bluetooth: hci8: command 0x041b tx timeout [ 696.823141][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 696.829300][ T4280] Bluetooth: hci7: command 0x040f tx timeout [ 697.623110][ T4280] Bluetooth: hci9: command 0x040f tx timeout [ 697.783135][ T4280] Bluetooth: hci8: command 0x040f tx timeout [ 698.903199][ T4280] Bluetooth: hci7: command 0x0419 tx timeout [ 698.909303][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 699.703094][ T4280] Bluetooth: hci9: command 0x0419 tx timeout [ 699.863258][ T4280] Bluetooth: hci8: command 0x0419 tx timeout [ 700.423445][ T26] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2632 jiffies s: 58533 root: 0x1/. [ 700.449679][ T26] rcu: blocking rcu_node structures (internal RCU debug): [ 700.459357][ T26] Sending NMI from CPU 1 to CPUs 0: [ 700.464813][ C0] NMI backtrace for cpu 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 700.464824][ C0] CPU: 0 PID: 15401 Comm: syz.0.2660 Not tainted syzkaller #0 [ 700.464842][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.464853][ C0] RIP: 0010:kasan_check_range+0x7a/0x290 [ 700.464885][ C0] Code: 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb <48> f7 d3 4c 01 f3 41 80 3b 00 0f 85 86 01 00 00 49 ff c3 48 ff c3 [ 700.464900][ C0] RSP: 0018:ffffc90000007210 EFLAGS: 00000002 [ 700.464915][ C0] RAX: 0000000000000001 RBX: 1ffff110171c7777 RCX: ffffffff816d0611 [ 700.464928][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff8880b8e3bbb0 [ 700.464939][ C0] RBP: 0000000000000000 R08: ffff8880b8e3bbbf R09: 1ffff110171c7777 [ 700.464952][ C0] R10: dffffc0000000000 R11: ffffed10171c7776 R12: dffffc0000000001 [ 700.464965][ C0] R13: dffffc0000000000 R14: 1ffff110171c7776 R15: 0000000000000002 [ 700.464977][ C0] FS: 00007f79100136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 700.464993][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.465005][ C0] CR2: 00007f2f809b3d58 CR3: 000000007fb09000 CR4: 00000000003506f0 [ 700.465021][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 700.465032][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 700.465043][ C0] Call Trace: [ 700.465048][ C0] [ 700.465057][ C0] memset+0x1e/0x40 [ 700.465075][ C0] rcu_read_unlock_special+0x351/0x510 [ 700.465098][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 700.465125][ C0] __rcu_read_unlock+0x78/0xd0 [ 700.465141][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 700.465165][ C0] trace_call_bpf+0x5bb/0x6b0 [ 700.465189][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 700.465216][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 700.465244][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 700.465260][ C0] ? sched_clock_cpu+0x6e/0x260 [ 700.465284][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 700.465314][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 700.465340][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 700.465367][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 700.465393][ C0] ? __irq_exit_rcu+0x147/0x230 [ 700.465410][ C0] ? irq_exit_rcu+0x20/0x20 [ 700.465429][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 700.465453][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 700.465479][ C0] trace_hardirqs_on+0x24/0x40 [ 700.465501][ C0] asm_sysvec_irq_work+0x16/0x20 [ 700.465524][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 700.465543][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 6c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 700.465564][ C0] RSP: 0018:ffffc900000076c0 EFLAGS: 00000206 [ 700.465577][ C0] RAX: 8a429557c53f2500 RBX: 1ffff92000000ee0 RCX: 8a429557c53f2500 [ 700.465591][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420 [ 700.465604][ C0] RBP: ffffc900000077c0 R08: ffffffff90b1330f R09: 1ffffffff2162661 [ 700.465617][ C0] R10: dffffc0000000000 R11: fffffbfff2162662 R12: 0000000000000246 [ 700.465629][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 700.465657][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 700.465674][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 700.465694][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 700.465725][ C0] __rcu_read_unlock+0x78/0xd0 [ 700.465743][ C0] ndisc_send_skb+0xdc2/0x1520 [ 700.465770][ C0] ? ndisc_send_skb+0x1f0/0x1520 [ 700.465798][ C0] ? ndisc_mc_map+0x800/0x800 [ 700.465821][ C0] ? skb_dst+0xd0/0xd0 [ 700.465852][ C0] ? ndisc_ns_create+0x48c/0x620 [ 700.465878][ C0] ndisc_solicit+0x36b/0x660 [ 700.465906][ C0] ? ndisc_cleanup+0x30/0x30 [ 700.465929][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 700.465953][ C0] ? __skb_clone+0x446/0x6c0 [ 700.465985][ C0] ? ndisc_cleanup+0x30/0x30 [ 700.466008][ C0] neigh_timer_handler+0xaba/0x1090 [ 700.466034][ C0] call_timer_fn+0x1ac/0x670 [ 700.466051][ C0] ? neigh_release+0x80/0x80 [ 700.466073][ C0] ? call_timer_fn+0xcf/0x670 [ 700.466090][ C0] ? __run_timers+0x810/0x810 [ 700.466115][ C0] ? neigh_release+0x80/0x80 [ 700.466137][ C0] __run_timers+0x56c/0x810 [ 700.466165][ C0] ? detach_timer+0x350/0x350 [ 700.466193][ C0] run_timer_softirq+0x63/0xf0 [ 700.466210][ C0] handle_softirqs+0x291/0x910 [ 700.466230][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 700.466249][ C0] ? do_softirq+0x210/0x210 [ 700.466263][ C0] ? hrtimer_interrupt+0x775/0x980 [ 700.466289][ C0] __irq_exit_rcu+0x13b/0x230 [ 700.466305][ C0] ? irq_exit_rcu+0x20/0x20 [ 700.466328][ C0] irq_exit_rcu+0x5/0x20 [ 700.466342][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 700.466361][ C0] [ 700.466366][ C0] [ 700.466372][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 700.466396][ C0] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 700.466414][ C0] Code: 8a e8 06 12 e2 08 65 66 8b 05 7e 56 b4 7e 66 85 c0 75 54 bf 01 00 00 00 e8 6f 82 09 00 e8 4a 5e 39 00 fb 65 8b 05 6a 23 b3 7e <85> c0 75 05 e8 79 37 b1 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 700.466427][ C0] RSP: 0018:ffffc90003507760 EFLAGS: 00000286 [ 700.466440][ C0] RAX: 0000000080000000 RBX: 0000000000000201 RCX: 8a429557c53f2500 [ 700.466452][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420 [ 700.466465][ C0] RBP: ffffc900035077e8 R08: ffffffff90b1324f R09: 1ffffffff2162649 [ 700.466478][ C0] R10: dffffc0000000000 R11: fffffbfff216264a R12: ffffffff88c37a60 [ 700.466491][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006a0eec [ 700.466505][ C0] ? tcp_metrics_flush_all+0x280/0x330 [ 700.466540][ C0] ? _local_bh_enable+0xa0/0xa0 [ 700.466563][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 700.466579][ C0] ? tcp_metrics_flush_all+0x280/0x330 [ 700.466606][ C0] tcp_metrics_flush_all+0x280/0x330 [ 700.466632][ C0] ? tcp_net_metrics_init+0x150/0x150 [ 700.466659][ C0] setup_net+0x994/0xbd0 [ 700.466683][ C0] ? copy_net_ns+0x5b0/0x5b0 [ 700.466710][ C0] ? down_read_killable+0x1cc/0x340 [ 700.466731][ C0] copy_net_ns+0x33e/0x5b0 [ 700.466756][ C0] create_new_namespaces+0x3ce/0x700 [ 700.466783][ C0] ? copy_namespaces+0x55/0x410 [ 700.466801][ C0] copy_namespaces+0x3ae/0x410 [ 700.466821][ C0] copy_process+0x199b/0x4070 [ 700.466849][ C0] ? copy_process+0x974/0x4070 [ 700.466866][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 700.466899][ C0] ? idle_dummy+0x10/0x10 [ 700.466918][ C0] ? wake_up_q+0x8c/0xc0 [ 700.466943][ C0] kernel_clone+0x24b/0x900 [ 700.466961][ C0] ? futex_wake_mark+0x150/0x150 [ 700.466981][ C0] ? create_io_thread+0x170/0x170 [ 700.467004][ C0] ? perf_trace_preemptirq_template+0xa8/0x320 [ 700.467027][ C0] ? irqentry_enter+0x33/0x50 [ 700.467051][ C0] __x64_sys_clone+0x1a7/0x220 [ 700.467072][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 700.467105][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 700.467128][ C0] do_syscall_64+0x4c/0xa0 [ 700.467153][ C0] ? clear_bhb_loop+0x60/0xb0 [ 700.467176][ C0] ? clear_bhb_loop+0x60/0xb0 [ 700.467202][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.467226][ C0] RIP: 0033:0x7f790f19e159 [ 700.467240][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.467254][ C0] RSP: 002b:00007f7910012fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 700.467270][ C0] RAX: ffffffffffffffda RBX: 00007f790f425fa0 RCX: 00007f790f19e159 [ 700.467282][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 700.467293][ C0] RBP: 00007f790f23503b R08: 0000000000000000 R09: 0000000000000000 [ 700.467304][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 700.467314][ C0] R13: 00007f790f426038 R14: 00007f790f425fa0 R15: 00007fffb8edfd08 [ 700.467336][ C0]