last executing test programs: 5.140658807s ago: executing program 2 (id=12396): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 5.002979008s ago: executing program 2 (id=12397): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x3e, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000004c0), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', r3, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d00000000000000000000008500000005", @ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x29, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fe000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0x12, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001880)={0x2, 0xe, 0xed, 0x67}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001980)=[r4, r5, r6, r7], &(0x7f00000019c0)=[{0x3, 0x3, 0x1, 0x4}, {0x1, 0x5, 0xf, 0x7}, {0x2, 0x4, 0xb, 0x1}]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) socketpair(0xb, 0x1, 0x6, 0x0) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200400c4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a3, &(0x7f0000000080)) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 4.89101779s ago: executing program 2 (id=12398): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.940112403s ago: executing program 1 (id=12399): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x8, 0x0, 0x100, 0xa6f, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x80000001, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) syz_clone(0x18000, &(0x7f0000000780)="e614b88d1aee7fe48ed21e7689dca6cc644f69aeb192d52329fead6775a407401cfdabcc6ad950ed7e1b60d4508dc4c8cbca31ff984c0b91ee2c2c6f276691", 0x3f, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000680)="88fbfbbdd405f7c73bfb83d0315ab0afeb1522d2d827c7b9af07d111817f1b014653e76c349c92232f934c7e051ca2259113d2d6817fb712cab86e04d1caa6437140959d73791ed4be9b9a820fc352e89287bdba71098a62e61465cc985b40b6b54db15c5374bf4241d72a8318269daf69af68ee079138e93a614c973e4e696269a626f44dd6a2a5bd44d4af36267bba9606d58988676b77028042b6eca376c270e905773aaa98241a71e8e75f3ec7f281836941fc51a4a708ffa897ced4edf742a4023fe6e8edfa1118d623976ec356fc494b4ae80dd2df820f3d") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x1, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) 3.925419924s ago: executing program 4 (id=12409): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.908832984s ago: executing program 0 (id=12400): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d08000606", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffff00000000850000188200000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="bf6c923eb403efd6af29b403d7f6011a36d5e7e4d18612529850a7b2649cd8534865c44c0af77d7bbec959707ee6d226", 0x30}], 0x1, &(0x7f0000000500)=[{0x10, 0x107, 0x8}, {0x68, 0xff, 0x7, "fd9775198b6d98b75ab856c14931ec18ca209e269446f79f3f3cab578dfa8b5ed5bf3e3212f50cea934495c9be6e4a7a1ac3b7eeeac8b4076f2b2336fd245cec5cb3d7f7265f906298e13fb4a8d81af8ae30430e2388"}, {0x50, 0x112, 0x100, "5e5d89f5594ad825e5c9ecb4b9460b8743885cf8af42bbd14dfc747187e8ee1d6d2445cc051a5a0c1b84a5a60dc1c8d426fc27bd16882791a1"}], 0xc8}, 0x61) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0x4}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d00010002", 0x25}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) 3.908581574s ago: executing program 2 (id=12401): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000400000001000000", @ANYRES32, @ANYBLOB='\x00\x00@u\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6c", 0x41}], 0x1}, 0x4000050) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.379982732s ago: executing program 1 (id=12403): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r3}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x880) sendmsg$kcm(r2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x30}, 0x40880) 3.378401742s ago: executing program 3 (id=12404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2762], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r4}, 0x8) setsockopt$sock_attach_bpf(r3, 0x0, 0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x2, 0x4, 0x0) socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 3.377453122s ago: executing program 4 (id=12405): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x22, &(0x7f0000000200)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r4}) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.145400015s ago: executing program 1 (id=12406): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @noop, @end, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x1b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x71}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xf9, 0x4, 0xb, 0x0, 0x80000000}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x22, r4, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x3, 0x0, 0x7}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.143246055s ago: executing program 0 (id=12417): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, &(0x7f0000001380), &(0x7f00000013c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000a00), 0x0, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000000d80)=""/149, 0x1e, 0x95, 0x1, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x0, 0x0, 0x0, 0x4c4dc, 0xffffffffffffffff, 0x8, '\x00', r5, r6, 0x4, 0x5, 0x1, 0x0, @value=r6}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) 2.204967978s ago: executing program 0 (id=12407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180118002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.194244028s ago: executing program 3 (id=12408): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2.136696269s ago: executing program 4 (id=12410): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.06292339s ago: executing program 0 (id=12411): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4e00, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ffb0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) close(0x3) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="c7", 0x1}], 0x1}, 0x5) 2.06155727s ago: executing program 1 (id=12412): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d21, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x2000000000000020, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="06000000a9f6b55c77c11e6e8d01f431ee80433d03595d6f68ea9411231d9a8e38de57960a641ae3df82b1794b272c3d20941adda85436b8468c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000061146c000000000005000000000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, 0x0, 0x101d0) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="c01803002f000b12d25a80648c2594f90123e560b962d8e608c5956b1c2fb024fc60100c020000040000053582c137153e370248", 0x34}, {&(0x7f0000000180)="50f64a207dc16bc7f530236437537178e026fd585f2f7dc03c", 0x19}], 0x2}, 0x14) socket$kcm(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.872801723s ago: executing program 3 (id=12413): socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x9}, 0x112706, 0x400000002, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007800911fdabcf8b3077fa54a07"], 0xfe33) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'nr0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x27) (async) r6 = socket$kcm(0xa, 0x6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x2, &(0x7f0000000040)=r7, 0xf15e) (async) write$cgroup_freezer_state(r7, 0x0, 0x0) 1.714195875s ago: executing program 3 (id=12414): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x8, 0x0, 0x100, 0xa6f, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x80000001, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) syz_clone(0x18000, &(0x7f0000000780)="e614b88d1aee7fe48ed21e7689dca6cc644f69aeb192d52329fead6775a407401cfdabcc6ad950ed7e1b60d4508dc4c8cbca31ff984c0b91ee2c2c6f276691", 0x3f, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000680)="88fbfbbdd405f7c73bfb83d0315ab0afeb1522d2d827c7b9af07d111817f1b014653e76c349c92232f934c7e051ca2259113d2d6817fb712cab86e04d1caa6437140959d73791ed4be9b9a820fc352e89287bdba71098a62e61465cc985b40b6b54db15c5374bf4241d72a8318269daf69af68ee079138e93a614c973e4e696269a626f44dd6a2a5bd44d4af36267bba9606d58988676b77028042b6eca376c270e905773aaa98241a71e8e75f3ec7f281836941fc51a4a708ffa897ced4edf742a4023fe6e8edfa1118d623976ec356fc494b4ae80dd2df820f3d") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x1, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) 852.881178ms ago: executing program 4 (id=12415): socket$kcm(0xa, 0x3, 0x73) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) 808.721608ms ago: executing program 3 (id=12416): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000280), 0x0}, 0x20) write$cgroup_int(r1, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000840000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r4}, 0x38) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r4, &(0x7f0000000080), 0x0}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8915, 0x0) 782.300998ms ago: executing program 1 (id=12418): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffff9) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x77, &(0x7f0000000000)=r2, 0x62) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60a, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ffffffe10000000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x2000000000000003, 0x60d}, 0x2080, 0x1, 0x0, 0x0, 0xa, 0x20000d5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 720.990529ms ago: executing program 0 (id=12419): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r3}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x880) sendmsg$kcm(r2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e02000"], 0x30}, 0x40880) 673.60075ms ago: executing program 4 (id=12420): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) (async) unlink(0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x800) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071103d000000000095000000000000008d2a3e2ef94bdc523268bf798eac7415884f34bc06ebae12494782432edf808a4bf0f0d47f0be69037ab23843e3cf90233d134e03c778597ea4a82984b589ac574e763359b20fc8502dd754b0b31d293dc0ec2c0b593840ef39fc0b2718d44f7ffffff80ef89b0b752eb1a168b209eff5c392b93539da72b8aeadf18"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) (async) socket$kcm(0x2a, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='\v'], 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xa) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a1bc0012000a0014260c673f12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbe54c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7dae4e5de40fad95667e006dcdf63951f215ce3bb9ad809d5e1ca0000ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703921923f9a941", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000002b40)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000280)=""/5, 0x5}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/209, 0xd1}, {&(0x7f0000001740)=""/249, 0xf9}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/158, 0x9e}, {&(0x7f0000002900)=""/24, 0x18}, {&(0x7f0000002940)=""/15, 0xf}], 0x9, &(0x7f0000002a40)=""/212, 0xd4}, 0xc0002123) 550.996172ms ago: executing program 3 (id=12421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88ca", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103a41, 0x0) close(r1) socket$kcm(0x1e, 0x4, 0x0) (async) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x1, 0x0) (async) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x43, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x13) 534.648292ms ago: executing program 0 (id=12422): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x22, &(0x7f0000000200)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000040)={r4}) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 362.655754ms ago: executing program 1 (id=12423): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0x7ff}, 0x482, 0x3, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x53, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000340), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 269.340516ms ago: executing program 4 (id=12424): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @noop, @end, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x1b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x71}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0xf9, 0x4, 0xb, 0x0, 0x80000000}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x22, r4, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x3, 0x0, 0x7}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 462.88µs ago: executing program 2 (id=12425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180119002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=12426): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d08000606", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffff00000000850000188200000085000000070000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="bf6c923eb403efd6af29b403d7f6011a36d5e7e4d18612529850a7b2649cd8534865c44c0af77d7bbec959707ee6d226", 0x30}], 0x1, &(0x7f0000000500)=[{0x10, 0x107, 0x8}, {0x68, 0xff, 0x7, "fd9775198b6d98b75ab856c14931ec18ca209e269446f79f3f3cab578dfa8b5ed5bf3e3212f50cea934495c9be6e4a7a1ac3b7eeeac8b4076f2b2336fd245cec5cb3d7f7265f906298e13fb4a8d81af8ae30430e2388"}, {0x50, 0x112, 0x100, "5e5d89f5594ad825e5c9ecb4b9460b8743885cf8af42bbd14dfc747187e8ee1d6d2445cc051a5a0c1b84a5a60dc1c8d426fc27bd16882791a1"}], 0xc8}, 0x61) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0x4}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d00010002", 0x25}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) kernel console output (not intermixed with test programs): serve[]: 0 0 1 1 1 [ 1701.241524][ T7550] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1701.269384][ T7561] delete_channel: no stack [ 1701.325737][ T7571] netlink: 'syz.2.11206': attribute type 12 has an invalid length. [ 1701.351484][ T7550] lowmem_reserve[]: 0 0 0 0 0 [ 1701.356381][ T7550] Node 1 Normal free:3913296kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:8928kB local_pcp:0kB free_cma:0kB [ 1701.409734][ T7571] __nla_validate_parse: 8 callbacks suppressed [ 1701.409759][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11206'. [ 1701.494294][ T7550] lowmem_reserve[]: 0 0 0 0 0 [ 1701.527776][ T7550] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1701.602926][ T7573] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11207'. [ 1701.612255][ T7550] Node 0 DMA32: 2430*4kB (UME) 2585*8kB (UME) 2181*16kB (UME) 802*32kB (UME) 464*64kB (UME) 365*128kB (UME) 119*256kB (UM) 63*512kB (UME) 55*1024kB (UM) 10*2048kB (UM) 250*4096kB (UM) = 1330896kB [ 1701.683887][ T7550] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1701.729968][ T7550] Node 1 Normal: 232*4kB (UE) 46*8kB (UE) 34*16kB (UME) 157*32kB (UME) 72*64kB (UME) 17*128kB (UME) 9*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 950*4096kB (M) = 3913296kB [ 1701.790753][ T7550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.824924][ T7550] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1701.845119][ T7550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.866021][ T7550] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1701.888005][ T7550] 63676 total pagecache pages [ 1701.898300][ T7550] 0 pages in swap cache [ 1701.906279][ T7550] Free swap = 124996kB [ 1701.919582][ T7550] Total swap = 124996kB [ 1701.947374][ T7550] 2097051 pages RAM [ 1701.959639][ T7550] 0 pages HighMem/MovableOnly [ 1701.969633][ T7550] 415207 pages reserved [ 1701.974318][ T7550] 0 pages cma reserved [ 1702.141213][ T7582] netlink: 'syz.1.11209': attribute type 27 has an invalid length. [ 1702.149205][ T7582] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.11209'. [ 1702.395913][ T7589] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11212'. [ 1702.441897][ T7589] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1702.476095][ T7589] CPU: 1 PID: 7589 Comm: syz.4.11212 Not tainted syzkaller #0 [ 1702.483645][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1702.493750][ T7589] Call Trace: [ 1702.497078][ T7589] [ 1702.500050][ T7589] dump_stack_lvl+0x188/0x24e [ 1702.504802][ T7589] ? show_regs_print_info+0x12/0x12 [ 1702.510054][ T7589] ? load_image+0x410/0x410 [ 1702.514712][ T7589] sysfs_warn_dup+0x8a/0xa0 [ 1702.519271][ T7589] sysfs_do_create_link_sd+0xc0/0x110 [ 1702.524723][ T7589] device_add+0x83b/0x1050 [ 1702.529196][ T7589] wiphy_register+0x1d8b/0x2aa0 [ 1702.534124][ T7589] ? cfg80211_event_work+0x40/0x40 [ 1702.539297][ T7589] ? minstrel_ht_alloc+0x894/0xa20 [ 1702.544482][ T7589] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1702.550619][ T7589] ieee80211_register_hw+0x2d48/0x39f0 [ 1702.556151][ T7589] ? ieee80211_register_hw+0xed1/0x39f0 [ 1702.561750][ T7589] ? ieee80211_register_hw+0xed1/0x39f0 [ 1702.567366][ T7589] ? ieee80211_tasklet_handler+0x20/0x20 [ 1702.573087][ T7589] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1702.579048][ T7589] ? __debug_object_init+0xed/0x440 [ 1702.584306][ T7589] ? memset+0x1e/0x40 [ 1702.588373][ T7589] ? __hrtimer_init+0x189/0x270 [ 1702.593292][ T7589] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1702.599089][ T7589] ? memcpy+0x3c/0x60 [ 1702.603141][ T7589] hwsim_new_radio_nl+0xab7/0xc90 [ 1702.608250][ T7589] genl_family_rcv_msg_doit+0x22f/0x350 [ 1702.613874][ T7589] ? end_current_label_crit_section+0x170/0x170 [ 1702.620179][ T7589] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1702.626147][ T7589] ? bpf_lsm_capable+0x5/0x10 [ 1702.630889][ T7589] ? security_capable+0x85/0xb0 [ 1702.635811][ T7589] genl_rcv_msg+0x601/0x790 [ 1702.640380][ T7589] ? lock_chain_count+0x20/0x20 [ 1702.645301][ T7589] ? genl_bind+0x360/0x360 [ 1702.649790][ T7589] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1702.656230][ T7589] netlink_rcv_skb+0x1ef/0x440 [ 1702.661062][ T7589] ? genl_bind+0x360/0x360 [ 1702.665547][ T7589] ? netlink_ack+0x1160/0x1160 [ 1702.670386][ T7589] ? down_read+0x1a8/0x2d0 [ 1702.674868][ T7589] genl_rcv+0x24/0x40 [ 1702.678913][ T7589] netlink_unicast+0x7ad/0x920 [ 1702.683746][ T7589] netlink_sendmsg+0x8ad/0xbd0 [ 1702.688675][ T7589] ? netlink_getsockopt+0x550/0x550 [ 1702.693984][ T7589] ? aa_sock_msg_perm+0x94/0x150 [ 1702.699009][ T7589] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1702.704365][ T7589] ? security_socket_sendmsg+0x7c/0xa0 [ 1702.709902][ T7589] ? netlink_getsockopt+0x550/0x550 [ 1702.715160][ T7589] ____sys_sendmsg+0x5ed/0x9a0 [ 1702.719992][ T7589] ? __sys_sendmsg_sock+0x30/0x30 [ 1702.725064][ T7589] ? __import_iovec+0x306/0x510 [ 1702.729980][ T7589] ? import_iovec+0x6f/0xa0 [ 1702.734539][ T7589] ___sys_sendmsg+0x2a2/0x360 [ 1702.739274][ T7589] ? __sys_sendmsg+0x2a0/0x2a0 [ 1702.744156][ T7589] __se_sys_sendmsg+0x1c3/0x2b0 [ 1702.749064][ T7589] ? __x64_sys_sendmsg+0x80/0x80 [ 1702.754072][ T7589] ? lockdep_hardirqs_on+0x94/0x140 [ 1702.759343][ T7589] do_syscall_64+0x4c/0xa0 [ 1702.763809][ T7589] ? clear_bhb_loop+0x60/0xb0 [ 1702.768548][ T7589] ? clear_bhb_loop+0x60/0xb0 [ 1702.773280][ T7589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1702.779252][ T7589] RIP: 0033:0x7fc1d419ce59 [ 1702.783717][ T7589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.803384][ T7589] RSP: 002b:00007fc1d5066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1702.811871][ T7589] RAX: ffffffffffffffda RBX: 00007fc1d4415fa0 RCX: 00007fc1d419ce59 [ 1702.819995][ T7589] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1702.828025][ T7589] RBP: 00007fc1d4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1702.836054][ T7589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.844142][ T7589] R13: 00007fc1d4416038 R14: 00007fc1d4415fa0 R15: 00007ffe568fdc28 [ 1702.852230][ T7589] [ 1702.886265][ T7590] netlink: 'syz.2.11213': attribute type 21 has an invalid length. [ 1702.901850][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11213'. [ 1703.242090][ T7607] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11217'. [ 1703.253082][ T7605] netlink: 'syz.4.11218': attribute type 21 has an invalid length. [ 1703.275697][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11218'. [ 1703.514725][ T7612] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11220'. [ 1703.987156][ T7629] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11228'. [ 1704.014014][ T7629] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1704.047739][ T7629] CPU: 1 PID: 7629 Comm: syz.2.11228 Not tainted syzkaller #0 [ 1704.055292][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1704.065471][ T7629] Call Trace: [ 1704.068803][ T7629] [ 1704.071784][ T7629] dump_stack_lvl+0x188/0x24e [ 1704.076531][ T7629] ? show_regs_print_info+0x12/0x12 [ 1704.081785][ T7629] ? load_image+0x410/0x410 [ 1704.086368][ T7629] sysfs_warn_dup+0x8a/0xa0 [ 1704.090937][ T7629] sysfs_do_create_link_sd+0xc0/0x110 [ 1704.096374][ T7629] device_add+0x83b/0x1050 [ 1704.100855][ T7629] wiphy_register+0x1d8b/0x2aa0 [ 1704.105781][ T7629] ? cfg80211_event_work+0x40/0x40 [ 1704.110952][ T7629] ? minstrel_ht_alloc+0x894/0xa20 [ 1704.116125][ T7629] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1704.122261][ T7629] ieee80211_register_hw+0x2d48/0x39f0 [ 1704.127789][ T7629] ? ieee80211_register_hw+0xed1/0x39f0 [ 1704.133382][ T7629] ? ieee80211_register_hw+0xed1/0x39f0 [ 1704.138994][ T7629] ? ieee80211_tasklet_handler+0x20/0x20 [ 1704.144685][ T7629] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1704.150652][ T7629] ? __debug_object_init+0xed/0x440 [ 1704.155922][ T7629] ? memset+0x1e/0x40 [ 1704.159963][ T7629] ? __hrtimer_init+0x189/0x270 [ 1704.164877][ T7629] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1704.170702][ T7629] ? memcpy+0x3c/0x60 [ 1704.174749][ T7629] hwsim_new_radio_nl+0xab7/0xc90 [ 1704.179901][ T7629] genl_family_rcv_msg_doit+0x22f/0x350 [ 1704.185516][ T7629] ? end_current_label_crit_section+0x170/0x170 [ 1704.191846][ T7629] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1704.197841][ T7629] ? bpf_lsm_capable+0x5/0x10 [ 1704.202602][ T7629] ? security_capable+0x85/0xb0 [ 1704.207554][ T7629] genl_rcv_msg+0x601/0x790 [ 1704.212138][ T7629] ? lock_chain_count+0x20/0x20 [ 1704.217096][ T7629] ? genl_bind+0x360/0x360 [ 1704.221599][ T7629] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1704.228024][ T7629] netlink_rcv_skb+0x1ef/0x440 [ 1704.232870][ T7629] ? genl_bind+0x360/0x360 [ 1704.237377][ T7629] ? netlink_ack+0x1160/0x1160 [ 1704.242310][ T7629] ? down_read+0x1a8/0x2d0 [ 1704.246801][ T7629] genl_rcv+0x24/0x40 [ 1704.250853][ T7629] netlink_unicast+0x7ad/0x920 [ 1704.255726][ T7629] netlink_sendmsg+0x8ad/0xbd0 [ 1704.260576][ T7629] ? netlink_getsockopt+0x550/0x550 [ 1704.265855][ T7629] ? aa_sock_msg_perm+0x94/0x150 [ 1704.270872][ T7629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1704.276220][ T7629] ? security_socket_sendmsg+0x7c/0xa0 [ 1704.281740][ T7629] ? netlink_getsockopt+0x550/0x550 [ 1704.287002][ T7629] ____sys_sendmsg+0x5ed/0x9a0 [ 1704.291837][ T7629] ? __sys_sendmsg_sock+0x30/0x30 [ 1704.296924][ T7629] ? __import_iovec+0x306/0x510 [ 1704.301858][ T7629] ? import_iovec+0x6f/0xa0 [ 1704.306455][ T7629] ___sys_sendmsg+0x2a2/0x360 [ 1704.311203][ T7629] ? __sys_sendmsg+0x2a0/0x2a0 [ 1704.316095][ T7629] __se_sys_sendmsg+0x1c3/0x2b0 [ 1704.321142][ T7629] ? __x64_sys_sendmsg+0x80/0x80 [ 1704.326175][ T7629] ? lockdep_hardirqs_on+0x94/0x140 [ 1704.331467][ T7629] do_syscall_64+0x4c/0xa0 [ 1704.335952][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 1704.340702][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 1704.345449][ T7629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1704.351457][ T7629] RIP: 0033:0x7f9dd279ce59 [ 1704.355943][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.375786][ T7629] RSP: 002b:00007f9dd35cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.384290][ T7629] RAX: ffffffffffffffda RBX: 00007f9dd2a15fa0 RCX: 00007f9dd279ce59 [ 1704.392370][ T7629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1704.400409][ T7629] RBP: 00007f9dd2832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1704.408455][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.416516][ T7629] R13: 00007f9dd2a16038 R14: 00007f9dd2a15fa0 R15: 00007fff24a8ba08 [ 1704.424587][ T7629] [ 1704.476167][ T7637] netlink: 'syz.4.11230': attribute type 10 has an invalid length. [ 1704.646978][ T7643] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1704.679006][ T7645] netlink: 'syz.4.11233': attribute type 21 has an invalid length. [ 1704.724023][ T7641] netlink: 'syz.1.11231': attribute type 21 has an invalid length. [ 1705.282556][ T7653] delete_channel: no stack [ 1705.636204][ T7666] netlink: 'syz.0.11241': attribute type 6 has an invalid length. [ 1705.701220][ T7666] netlink: 'syz.0.11241': attribute type 39 has an invalid length. [ 1706.241098][ T7680] netlink: 'syz.3.11242': attribute type 10 has an invalid length. [ 1706.397006][ T7677] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1706.429908][ T7677] CPU: 0 PID: 7677 Comm: syz.2.11244 Not tainted syzkaller #0 [ 1706.437524][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1706.447635][ T7677] Call Trace: [ 1706.450976][ T7677] [ 1706.454006][ T7677] dump_stack_lvl+0x188/0x24e [ 1706.458749][ T7677] ? show_regs_print_info+0x12/0x12 [ 1706.464012][ T7677] ? load_image+0x410/0x410 [ 1706.468597][ T7677] sysfs_warn_dup+0x8a/0xa0 [ 1706.473175][ T7677] sysfs_do_create_link_sd+0xc0/0x110 [ 1706.478620][ T7677] device_add+0x83b/0x1050 [ 1706.483102][ T7677] wiphy_register+0x1d8b/0x2aa0 [ 1706.488036][ T7677] ? cfg80211_event_work+0x40/0x40 [ 1706.493204][ T7677] ? minstrel_ht_alloc+0x894/0xa20 [ 1706.498364][ T7677] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1706.504512][ T7677] ieee80211_register_hw+0x2d48/0x39f0 [ 1706.510016][ T7677] ? ieee80211_register_hw+0xed1/0x39f0 [ 1706.515589][ T7677] ? ieee80211_register_hw+0xed1/0x39f0 [ 1706.521170][ T7677] ? ieee80211_tasklet_handler+0x20/0x20 [ 1706.526859][ T7677] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1706.532830][ T7677] ? __debug_object_init+0xed/0x440 [ 1706.538098][ T7677] ? memset+0x1e/0x40 [ 1706.542131][ T7677] ? __hrtimer_init+0x189/0x270 [ 1706.547038][ T7677] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1706.552825][ T7677] ? memcpy+0x3c/0x60 [ 1706.556856][ T7677] hwsim_new_radio_nl+0xab7/0xc90 [ 1706.561946][ T7677] genl_family_rcv_msg_doit+0x22f/0x350 [ 1706.567543][ T7677] ? end_current_label_crit_section+0x170/0x170 [ 1706.573924][ T7677] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1706.579872][ T7677] ? bpf_lsm_capable+0x5/0x10 [ 1706.584594][ T7677] ? security_capable+0x85/0xb0 [ 1706.589508][ T7677] genl_rcv_msg+0x601/0x790 [ 1706.594084][ T7677] ? genl_bind+0x360/0x360 [ 1706.598545][ T7677] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1706.604939][ T7677] netlink_rcv_skb+0x1ef/0x440 [ 1706.609748][ T7677] ? genl_bind+0x360/0x360 [ 1706.614218][ T7677] ? netlink_ack+0x1160/0x1160 [ 1706.619038][ T7677] ? down_read+0x1a8/0x2d0 [ 1706.623515][ T7677] genl_rcv+0x24/0x40 [ 1706.627540][ T7677] netlink_unicast+0x7ad/0x920 [ 1706.632353][ T7677] netlink_sendmsg+0x8ad/0xbd0 [ 1706.637176][ T7677] ? netlink_getsockopt+0x550/0x550 [ 1706.642432][ T7677] ? aa_sock_msg_perm+0x94/0x150 [ 1706.647424][ T7677] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1706.652764][ T7677] ? security_socket_sendmsg+0x7c/0xa0 [ 1706.658275][ T7677] ? netlink_getsockopt+0x550/0x550 [ 1706.663530][ T7677] ____sys_sendmsg+0x5ed/0x9a0 [ 1706.668353][ T7677] ? __sys_sendmsg_sock+0x30/0x30 [ 1706.673417][ T7677] ? __import_iovec+0x306/0x510 [ 1706.678329][ T7677] ? import_iovec+0x6f/0xa0 [ 1706.682882][ T7677] ___sys_sendmsg+0x2a2/0x360 [ 1706.687621][ T7677] ? __sys_sendmsg+0x2a0/0x2a0 [ 1706.692481][ T7677] __se_sys_sendmsg+0x1c3/0x2b0 [ 1706.697386][ T7677] ? ct_nmi_exit+0x145/0x1c0 [ 1706.702029][ T7677] ? __x64_sys_sendmsg+0x80/0x80 [ 1706.707038][ T7677] ? lockdep_hardirqs_on+0x94/0x140 [ 1706.712289][ T7677] do_syscall_64+0x4c/0xa0 [ 1706.716754][ T7677] ? clear_bhb_loop+0x60/0xb0 [ 1706.721472][ T7677] ? clear_bhb_loop+0x60/0xb0 [ 1706.726196][ T7677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1706.732140][ T7677] RIP: 0033:0x7f9dd279ce59 [ 1706.736603][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.756254][ T7677] RSP: 002b:00007f9dd35cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.764724][ T7677] RAX: ffffffffffffffda RBX: 00007f9dd2a15fa0 RCX: 00007f9dd279ce59 [ 1706.772831][ T7677] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1706.780845][ T7677] RBP: 00007f9dd2832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1706.788860][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.796872][ T7677] R13: 00007f9dd2a16038 R14: 00007f9dd2a15fa0 R15: 00007fff24a8ba08 [ 1706.804909][ T7677] [ 1706.961825][ T7684] __nla_validate_parse: 3 callbacks suppressed [ 1706.961866][ T7684] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11246'. [ 1707.272255][ T7689] netlink: 4091 bytes leftover after parsing attributes in process `syz.1.11245'. [ 1707.308630][ T7693] netlink: 'syz.2.11248': attribute type 21 has an invalid length. [ 1707.329125][ T7693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11248'. [ 1707.460654][ T7694] delete_channel: no stack [ 1707.592154][ T7703] netlink: 'syz.1.11253': attribute type 21 has an invalid length. [ 1707.629943][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11253'. [ 1707.894066][ T7710] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11256'. [ 1708.104141][ T7714] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11258'. [ 1708.161999][ T7714] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1708.238804][ T7714] CPU: 0 PID: 7714 Comm: syz.2.11258 Not tainted syzkaller #0 [ 1708.246350][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1708.256458][ T7714] Call Trace: [ 1708.259798][ T7714] [ 1708.262755][ T7714] dump_stack_lvl+0x188/0x24e [ 1708.267472][ T7714] ? show_regs_print_info+0x12/0x12 [ 1708.272711][ T7714] ? load_image+0x410/0x410 [ 1708.277262][ T7714] sysfs_warn_dup+0x8a/0xa0 [ 1708.281811][ T7714] sysfs_do_create_link_sd+0xc0/0x110 [ 1708.287223][ T7714] device_add+0x83b/0x1050 [ 1708.291683][ T7714] wiphy_register+0x1d8b/0x2aa0 [ 1708.296588][ T7714] ? cfg80211_event_work+0x40/0x40 [ 1708.301739][ T7714] ? minstrel_ht_alloc+0x894/0xa20 [ 1708.306887][ T7714] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1708.312996][ T7714] ieee80211_register_hw+0x2d48/0x39f0 [ 1708.318504][ T7714] ? ieee80211_register_hw+0xed1/0x39f0 [ 1708.324089][ T7714] ? ieee80211_register_hw+0xed1/0x39f0 [ 1708.329698][ T7714] ? ieee80211_tasklet_handler+0x20/0x20 [ 1708.335359][ T7714] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1708.341352][ T7714] ? __debug_object_init+0xed/0x440 [ 1708.346595][ T7714] ? memset+0x1e/0x40 [ 1708.350606][ T7714] ? __hrtimer_init+0x189/0x270 [ 1708.355496][ T7714] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1708.361264][ T7714] ? memcpy+0x3c/0x60 [ 1708.365304][ T7714] hwsim_new_radio_nl+0xab7/0xc90 [ 1708.370374][ T7714] genl_family_rcv_msg_doit+0x22f/0x350 [ 1708.375956][ T7714] ? end_current_label_crit_section+0x170/0x170 [ 1708.382234][ T7714] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1708.388176][ T7714] ? bpf_lsm_capable+0x5/0x10 [ 1708.392885][ T7714] ? security_capable+0x85/0xb0 [ 1708.397783][ T7714] genl_rcv_msg+0x601/0x790 [ 1708.402322][ T7714] ? lock_chain_count+0x20/0x20 [ 1708.407219][ T7714] ? genl_bind+0x360/0x360 [ 1708.411677][ T7714] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1708.418046][ T7714] netlink_rcv_skb+0x1ef/0x440 [ 1708.422847][ T7714] ? genl_bind+0x360/0x360 [ 1708.427294][ T7714] ? netlink_ack+0x1160/0x1160 [ 1708.432102][ T7714] ? down_read+0x1a8/0x2d0 [ 1708.436551][ T7714] genl_rcv+0x24/0x40 [ 1708.440573][ T7714] netlink_unicast+0x7ad/0x920 [ 1708.445406][ T7714] netlink_sendmsg+0x8ad/0xbd0 [ 1708.450207][ T7714] ? netlink_getsockopt+0x550/0x550 [ 1708.455526][ T7714] ? aa_sock_msg_perm+0x94/0x150 [ 1708.460496][ T7714] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1708.465809][ T7714] ? security_socket_sendmsg+0x7c/0xa0 [ 1708.471319][ T7714] ? netlink_getsockopt+0x550/0x550 [ 1708.476551][ T7714] ____sys_sendmsg+0x5ed/0x9a0 [ 1708.481358][ T7714] ? __sys_sendmsg_sock+0x30/0x30 [ 1708.486417][ T7714] ? __import_iovec+0x306/0x510 [ 1708.491303][ T7714] ? import_iovec+0x6f/0xa0 [ 1708.495838][ T7714] ___sys_sendmsg+0x2a2/0x360 [ 1708.500553][ T7714] ? __sys_sendmsg+0x2a0/0x2a0 [ 1708.505385][ T7714] __se_sys_sendmsg+0x1c3/0x2b0 [ 1708.510270][ T7714] ? ct_nmi_exit+0x145/0x1c0 [ 1708.514898][ T7714] ? __x64_sys_sendmsg+0x80/0x80 [ 1708.519875][ T7714] ? lockdep_hardirqs_on+0x94/0x140 [ 1708.525106][ T7714] do_syscall_64+0x4c/0xa0 [ 1708.529557][ T7714] ? clear_bhb_loop+0x60/0xb0 [ 1708.534263][ T7714] ? clear_bhb_loop+0x60/0xb0 [ 1708.538970][ T7714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1708.544908][ T7714] RIP: 0033:0x7f9dd279ce59 [ 1708.549440][ T7714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.569079][ T7714] RSP: 002b:00007f9dd35cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1708.577550][ T7714] RAX: ffffffffffffffda RBX: 00007f9dd2a15fa0 RCX: 00007f9dd279ce59 [ 1708.585549][ T7714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1708.593633][ T7714] RBP: 00007f9dd2832e6f R08: 0000000000000000 R09: 0000000000000000 [ 1708.601630][ T7714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.609627][ T7714] R13: 00007f9dd2a16038 R14: 00007f9dd2a15fa0 R15: 00007fff24a8ba08 [ 1708.617639][ T7714] [ 1708.628250][ T7718] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1709.057411][ T7729] delete_channel: no stack [ 1709.493047][ T7748] netlink: 'syz.4.11271': attribute type 21 has an invalid length. [ 1709.521578][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11271'. [ 1709.563444][ T7744] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11270'. [ 1709.904755][ T7754] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11273'. [ 1710.129232][ T7757] sctp: [Deprecated]: syz.2.11275 (pid 7757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1710.129232][ T7757] Use struct sctp_sack_info instead [ 1710.658841][ T7767] delete_channel: no stack [ 1711.349309][ T7798] netlink: 'syz.2.11290': attribute type 21 has an invalid length. [ 1711.377098][ T7800] -1: renamed from syzkaller0 [ 1711.968559][ T7814] delete_channel: no stack [ 1712.098287][ T7818] __nla_validate_parse: 4 callbacks suppressed [ 1712.098325][ T7818] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11297'. [ 1712.255417][ T7823] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11300'. [ 1712.363039][ T7823] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1712.429726][ T7823] CPU: 1 PID: 7823 Comm: syz.3.11300 Not tainted syzkaller #0 [ 1712.437283][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1712.447419][ T7823] Call Trace: [ 1712.450757][ T7823] [ 1712.453740][ T7823] dump_stack_lvl+0x188/0x24e [ 1712.458493][ T7823] ? show_regs_print_info+0x12/0x12 [ 1712.463764][ T7823] ? load_image+0x410/0x410 [ 1712.468353][ T7823] sysfs_warn_dup+0x8a/0xa0 [ 1712.472941][ T7823] sysfs_do_create_link_sd+0xc0/0x110 [ 1712.478399][ T7823] device_add+0x83b/0x1050 [ 1712.482886][ T7823] wiphy_register+0x1d8b/0x2aa0 [ 1712.487828][ T7823] ? cfg80211_event_work+0x40/0x40 [ 1712.493024][ T7823] ? minstrel_ht_alloc+0x894/0xa20 [ 1712.498202][ T7823] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1712.504336][ T7823] ieee80211_register_hw+0x2d48/0x39f0 [ 1712.509860][ T7823] ? ieee80211_register_hw+0xed1/0x39f0 [ 1712.515439][ T7823] ? ieee80211_register_hw+0xed1/0x39f0 [ 1712.521022][ T7823] ? ieee80211_tasklet_handler+0x20/0x20 [ 1712.526683][ T7823] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1712.532645][ T7823] ? __debug_object_init+0xed/0x440 [ 1712.538056][ T7823] ? memset+0x1e/0x40 [ 1712.542163][ T7823] ? __hrtimer_init+0x189/0x270 [ 1712.547047][ T7823] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1712.552813][ T7823] ? memcpy+0x3c/0x60 [ 1712.556832][ T7823] hwsim_new_radio_nl+0xab7/0xc90 [ 1712.561909][ T7823] genl_family_rcv_msg_doit+0x22f/0x350 [ 1712.567525][ T7823] ? end_current_label_crit_section+0x170/0x170 [ 1712.573809][ T7823] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1712.579757][ T7823] ? bpf_lsm_capable+0x5/0x10 [ 1712.584471][ T7823] ? security_capable+0x85/0xb0 [ 1712.589368][ T7823] genl_rcv_msg+0x601/0x790 [ 1712.593918][ T7823] ? genl_bind+0x360/0x360 [ 1712.598370][ T7823] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1712.604776][ T7823] netlink_rcv_skb+0x1ef/0x440 [ 1712.609583][ T7823] ? genl_bind+0x360/0x360 [ 1712.614043][ T7823] ? netlink_ack+0x1160/0x1160 [ 1712.618845][ T7823] ? down_read+0x1a8/0x2d0 [ 1712.623293][ T7823] genl_rcv+0x24/0x40 [ 1712.627337][ T7823] netlink_unicast+0x7ad/0x920 [ 1712.632144][ T7823] netlink_sendmsg+0x8ad/0xbd0 [ 1712.636951][ T7823] ? netlink_getsockopt+0x550/0x550 [ 1712.642188][ T7823] ? aa_sock_msg_perm+0x94/0x150 [ 1712.647153][ T7823] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1712.652465][ T7823] ? security_socket_sendmsg+0x7c/0xa0 [ 1712.657952][ T7823] ? netlink_getsockopt+0x550/0x550 [ 1712.663194][ T7823] ____sys_sendmsg+0x5ed/0x9a0 [ 1712.668003][ T7823] ? __sys_sendmsg_sock+0x30/0x30 [ 1712.673058][ T7823] ? __import_iovec+0x306/0x510 [ 1712.677947][ T7823] ? import_iovec+0x6f/0xa0 [ 1712.682487][ T7823] ___sys_sendmsg+0x2a2/0x360 [ 1712.687208][ T7823] ? __sys_sendmsg+0x2a0/0x2a0 [ 1712.692019][ T7823] ? trace_call_bpf+0xbf/0x6b0 [ 1712.696842][ T7823] __se_sys_sendmsg+0x1c3/0x2b0 [ 1712.701725][ T7823] ? perf_trace_preemptirq_template+0x268/0x320 [ 1712.708006][ T7823] ? __x64_sys_sendmsg+0x80/0x80 [ 1712.712999][ T7823] ? lockdep_hardirqs_on+0x94/0x140 [ 1712.718245][ T7823] do_syscall_64+0x4c/0xa0 [ 1712.722692][ T7823] ? clear_bhb_loop+0x60/0xb0 [ 1712.727408][ T7823] ? clear_bhb_loop+0x60/0xb0 [ 1712.732113][ T7823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1712.738047][ T7823] RIP: 0033:0x7f481a19ce59 [ 1712.742492][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.762129][ T7823] RSP: 002b:00007f481af97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1712.770578][ T7823] RAX: ffffffffffffffda RBX: 00007f481a415fa0 RCX: 00007f481a19ce59 [ 1712.778574][ T7823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1712.786569][ T7823] RBP: 00007f481a232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1712.794567][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1712.802564][ T7823] R13: 00007f481a416038 R14: 00007f481a415fa0 R15: 00007ffe623e8768 [ 1712.810581][ T7823] [ 1712.835136][ T7830] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11302'. [ 1713.151292][ T7833] device syzkaller0 entered promiscuous mode [ 1714.469023][ T7850] delete_channel: no stack [ 1717.081361][ T7855] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11306'. [ 1717.094735][ T7860] netlink: 'syz.1.11311': attribute type 21 has an invalid length. [ 1717.126163][ T7860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11311'. [ 1717.324804][ T7865] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11312'. [ 1717.652937][ T7877] netlink: 'syz.4.11313': attribute type 10 has an invalid length. [ 1717.691503][ T7878] netlink: 'syz.3.11317': attribute type 21 has an invalid length. [ 1717.710352][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11317'. [ 1717.747406][ T7879] netlink: 'syz.1.11316': attribute type 21 has an invalid length. [ 1717.830459][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11316'. [ 1718.454036][ T7908] netlink: 'syz.3.11326': attribute type 21 has an invalid length. [ 1718.486938][ T7908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11326'. [ 1718.529057][ T7902] delete_channel: no stack [ 1718.755553][ T7911] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11327'. [ 1719.132334][ T7934] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1719.540845][ T7941] device syzkaller0 entered promiscuous mode [ 1719.575810][ T7947] netlink: 'syz.3.11336': attribute type 10 has an invalid length. [ 1720.782495][ T7955] delete_channel: no stack [ 1722.190567][ T7965] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1722.485552][ T7976] netlink: 'syz.2.11346': attribute type 21 has an invalid length. [ 1722.517582][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11346'. [ 1722.609146][ T7980] netlink: 'syz.1.11347': attribute type 27 has an invalid length. [ 1722.662648][ T7980] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.11347'. [ 1723.480558][ T8000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11351'. [ 1723.703982][ T8004] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1723.765806][ T7990] device syzkaller0 entered promiscuous mode [ 1723.782261][ T8000] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11351'. [ 1723.803973][ T7997] netlink: 'syz.0.11360': attribute type 10 has an invalid length. [ 1723.849257][ T8002] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11351'. [ 1723.949479][ T8005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11351'. [ 1724.172629][ T8009] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11354'. [ 1724.183495][ T7983] netlink: 'syz.4.11349': attribute type 11 has an invalid length. [ 1724.200286][ T7983] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.11349'. [ 1724.256427][ T8010] delete_channel: no stack [ 1724.371120][ T8016] netlink: 'syz.0.11357': attribute type 2 has an invalid length. [ 1724.561800][ T8019] netlink: 'syz.1.11359': attribute type 10 has an invalid length. [ 1724.903070][ T8026] netlink: 'syz.0.11363': attribute type 21 has an invalid length. [ 1728.466353][ T8045] netlink: 'syz.1.11370': attribute type 10 has an invalid length. [ 1728.479902][ T8045] device dummy0 left promiscuous mode [ 1728.485530][ T8045] bridge0: port 2(dummy0) entered disabled state [ 1728.523770][ T8045] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1728.540577][ T8046] __nla_validate_parse: 5 callbacks suppressed [ 1728.540596][ T8046] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11369'. [ 1728.650864][ T8049] delete_channel: no stack [ 1728.895437][ T8063] netlink: 'syz.2.11376': attribute type 10 has an invalid length. [ 1728.922412][ T8061] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11377'. [ 1728.969197][ T8060] netlink: 'syz.1.11375': attribute type 1 has an invalid length. [ 1729.261685][ T8070] netlink: 'syz.4.11379': attribute type 21 has an invalid length. [ 1729.384655][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11379'. [ 1729.622054][ T8078] netlink: 'syz.0.11381': attribute type 21 has an invalid length. [ 1729.642606][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11381'. [ 1729.906239][ T8086] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.11385'. [ 1729.948462][ T8084] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11384'. [ 1730.020712][ T8087] delete_channel: no stack [ 1730.274250][ T8093] netlink: 'syz.3.11387': attribute type 10 has an invalid length. [ 1730.356250][ T8099] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1730.464331][ T8092] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.11388'. [ 1730.804168][ T8112] netlink: 'syz.1.11396': attribute type 21 has an invalid length. [ 1730.834679][ T8112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11396'. [ 1730.861879][ T8115] netlink: 'syz.3.11398': attribute type 29 has an invalid length. [ 1730.906392][ T8115] netlink: 'syz.3.11398': attribute type 29 has an invalid length. [ 1731.363608][ T8123] netlink: 'syz.4.11399': attribute type 21 has an invalid length. [ 1731.372958][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11399'. [ 1731.655275][ T8127] delete_channel: no stack [ 1732.361568][ T8151] team0: Port device team_slave_0 removed [ 1732.400279][ T8151] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1733.220788][ T8171] delete_channel: no stack [ 1733.537985][ T8181] validate_nla: 1 callbacks suppressed [ 1733.538025][ T8181] netlink: 'syz.2.11420': attribute type 27 has an invalid length. [ 1733.587471][ T8181] __nla_validate_parse: 6 callbacks suppressed [ 1733.587561][ T8181] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.11420'. [ 1733.715656][ T8192] netlink: 'syz.0.11422': attribute type 1 has an invalid length. [ 1733.754238][ T8192] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.11422'. [ 1733.937027][ T8198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11424'. [ 1734.150452][ T8200] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11426'. [ 1734.281681][ T8203] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11427'. [ 1734.544932][ T8209] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11430'. [ 1734.670814][ T8210] delete_channel: no stack [ 1734.791330][ T8215] netlink: 'syz.2.11432': attribute type 29 has an invalid length. [ 1734.799394][ T8215] netlink: 'syz.2.11432': attribute type 29 has an invalid length. [ 1735.044609][ T8223] netlink: 'syz.0.11436': attribute type 27 has an invalid length. [ 1735.053883][ T8223] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.11436'. [ 1735.328431][ T8231] netlink: 'syz.2.11437': attribute type 10 has an invalid length. [ 1735.356144][ T8233] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11438'. [ 1735.668765][ T8242] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11443'. [ 1735.678883][ T8245] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11444'. [ 1735.748475][ T8243] netlink: 'syz.3.11441': attribute type 21 has an invalid length. [ 1735.893912][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.900554][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.990862][ T8249] delete_channel: no stack [ 1736.327290][ T8261] netlink: 'syz.1.11450': attribute type 27 has an invalid length. [ 1737.132885][ T8284] delete_channel: no stack [ 1737.378719][ T8288] netlink: 'syz.3.11458': attribute type 10 has an invalid length. [ 1737.635897][ T8297] netlink: 'syz.4.11463': attribute type 27 has an invalid length. [ 1738.413768][ T8317] delete_channel: no stack [ 1738.677860][ T8328] __nla_validate_parse: 10 callbacks suppressed [ 1738.677888][ T8328] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.11477'. [ 1739.046236][ T8332] validate_nla: 5 callbacks suppressed [ 1739.046278][ T8332] netlink: 'syz.0.11479': attribute type 27 has an invalid length. [ 1739.172017][ T8332] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.11479'. [ 1739.249069][ T8336] device bridge_slave_0 left promiscuous mode [ 1739.289361][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.751591][ T8348] netlink: 'syz.4.11484': attribute type 21 has an invalid length. [ 1739.786223][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11484'. [ 1739.952416][ T8351] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11486'. [ 1740.092279][ T8355] delete_channel: no stack [ 1740.237823][ T8361] netlink: 'syz.4.11489': attribute type 21 has an invalid length. [ 1740.280471][ T8361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11489'. [ 1740.374815][ T8364] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11490'. [ 1740.509685][ T8367] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11491'. [ 1740.788644][ T8375] netlink: 'syz.0.11493': attribute type 27 has an invalid length. [ 1740.807261][ T8375] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.11493'. [ 1740.839379][ T8367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.922126][ T8367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.985905][ T8367] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1741.030541][ T8367] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1741.054387][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.106054][ T8367] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1741.125692][ T8367] bond0 (unregistering): Released all slaves [ 1741.481613][ T8377] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.11495'. [ 1741.528782][ T8379] netlink: 'syz.2.11494': attribute type 27 has an invalid length. [ 1741.552132][ T8379] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.11494'. [ 1741.588693][ T8377] openvswitch: netlink: Key type 386 is out of range max 32 [ 1741.811395][ T8391] netlink: 'syz.3.11499': attribute type 29 has an invalid length. [ 1741.996103][ T8394] netlink: 'syz.1.11497': attribute type 10 has an invalid length. [ 1742.059792][ T8391] netlink: 'syz.3.11499': attribute type 29 has an invalid length. [ 1742.108246][ T8395] netlink: 'syz.3.11499': attribute type 29 has an invalid length. [ 1742.555824][ T8401] delete_channel: no stack [ 1742.953191][ T8413] netlink: 'syz.3.11506': attribute type 27 has an invalid length. [ 1743.137840][ T8421] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1743.197061][ T8421] CPU: 0 PID: 8421 Comm: syz.4.11510 Not tainted syzkaller #0 [ 1743.204650][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1743.214770][ T8421] Call Trace: [ 1743.218107][ T8421] [ 1743.221094][ T8421] dump_stack_lvl+0x188/0x24e [ 1743.225861][ T8421] ? show_regs_print_info+0x12/0x12 [ 1743.231125][ T8421] ? load_image+0x410/0x410 [ 1743.235752][ T8421] sysfs_warn_dup+0x8a/0xa0 [ 1743.240339][ T8421] sysfs_do_create_link_sd+0xc0/0x110 [ 1743.245803][ T8421] device_add+0x83b/0x1050 [ 1743.250347][ T8421] wiphy_register+0x1d8b/0x2aa0 [ 1743.255341][ T8421] ? cfg80211_event_work+0x40/0x40 [ 1743.260508][ T8421] ? minstrel_ht_alloc+0x894/0xa20 [ 1743.265715][ T8421] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1743.271978][ T8421] ieee80211_register_hw+0x2d48/0x39f0 [ 1743.277545][ T8421] ? ieee80211_register_hw+0xed1/0x39f0 [ 1743.283408][ T8421] ? ieee80211_register_hw+0xed1/0x39f0 [ 1743.289035][ T8421] ? ieee80211_tasklet_handler+0x20/0x20 [ 1743.294727][ T8421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1743.300718][ T8421] ? __debug_object_init+0xed/0x440 [ 1743.306088][ T8421] ? memset+0x1e/0x40 [ 1743.310173][ T8421] ? __hrtimer_init+0x189/0x270 [ 1743.315095][ T8421] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1743.320917][ T8421] ? memcpy+0x3c/0x60 [ 1743.324980][ T8421] hwsim_new_radio_nl+0xab7/0xc90 [ 1743.330140][ T8421] genl_family_rcv_msg_doit+0x22f/0x350 [ 1743.335763][ T8421] ? end_current_label_crit_section+0x170/0x170 [ 1743.342087][ T8421] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1743.348108][ T8421] ? bpf_lsm_capable+0x5/0x10 [ 1743.352846][ T8421] ? security_capable+0x85/0xb0 [ 1743.357821][ T8421] genl_rcv_msg+0x601/0x790 [ 1743.362423][ T8421] ? genl_bind+0x360/0x360 [ 1743.366895][ T8421] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1743.373337][ T8421] netlink_rcv_skb+0x1ef/0x440 [ 1743.378161][ T8421] ? genl_bind+0x360/0x360 [ 1743.382655][ T8421] ? netlink_ack+0x1160/0x1160 [ 1743.387518][ T8421] ? down_read+0x1a8/0x2d0 [ 1743.392008][ T8421] genl_rcv+0x24/0x40 [ 1743.396051][ T8421] netlink_unicast+0x7ad/0x920 [ 1743.400918][ T8421] netlink_sendmsg+0x8ad/0xbd0 [ 1743.405828][ T8421] ? netlink_getsockopt+0x550/0x550 [ 1743.411123][ T8421] ? aa_sock_msg_perm+0x94/0x150 [ 1743.416128][ T8421] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1743.421482][ T8421] ? security_socket_sendmsg+0x7c/0xa0 [ 1743.427016][ T8421] ? netlink_getsockopt+0x550/0x550 [ 1743.432311][ T8421] ____sys_sendmsg+0x5ed/0x9a0 [ 1743.437167][ T8421] ? __sys_sendmsg_sock+0x30/0x30 [ 1743.442246][ T8421] ? __import_iovec+0x306/0x510 [ 1743.447185][ T8421] ? import_iovec+0x6f/0xa0 [ 1743.451768][ T8421] ___sys_sendmsg+0x2a2/0x360 [ 1743.456542][ T8421] ? __sys_sendmsg+0x2a0/0x2a0 [ 1743.461552][ T8421] __se_sys_sendmsg+0x1c3/0x2b0 [ 1743.466476][ T8421] ? __x64_sys_sendmsg+0x80/0x80 [ 1743.471549][ T8421] ? trace_sys_enter+0x22/0x80 [ 1743.476390][ T8421] do_syscall_64+0x4c/0xa0 [ 1743.480866][ T8421] ? clear_bhb_loop+0x60/0xb0 [ 1743.485618][ T8421] ? clear_bhb_loop+0x60/0xb0 [ 1743.490363][ T8421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1743.496321][ T8421] RIP: 0033:0x7fc1d419ce59 [ 1743.500830][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.520494][ T8421] RSP: 002b:00007fc1d5066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1743.528978][ T8421] RAX: ffffffffffffffda RBX: 00007fc1d4415fa0 RCX: 00007fc1d419ce59 [ 1743.537004][ T8421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1743.545031][ T8421] RBP: 00007fc1d4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1743.553064][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.561126][ T8421] R13: 00007fc1d4416038 R14: 00007fc1d4415fa0 R15: 00007ffe568fdc28 [ 1743.569209][ T8421] [ 1743.915545][ T8427] __nla_validate_parse: 5 callbacks suppressed [ 1743.915587][ T8427] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11512'. [ 1744.069249][ T8435] netlink: 'syz.1.11514': attribute type 41 has an invalid length. [ 1744.130950][ T8440] netlink: 'syz.1.11514': attribute type 41 has an invalid length. [ 1744.410250][ T8443] delete_channel: no stack [ 1744.477124][ T8447] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11518'. [ 1744.826966][ T8456] netlink: 'syz.3.11522': attribute type 27 has an invalid length. [ 1744.857934][ T8456] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.11522'. [ 1745.244160][ T8470] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11526'. [ 1748.366805][ T8483] delete_channel: no stack [ 1749.144287][ T8505] netlink: 'syz.4.11534': attribute type 10 has an invalid length. [ 1749.189379][ T8508] netlink: 'syz.3.11536': attribute type 27 has an invalid length. [ 1749.198019][ T8505] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11534'. [ 1749.208162][ T8508] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.11536'. [ 1749.579959][ T8518] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11539'. [ 1749.931233][ T8529] delete_channel: no stack [ 1750.349007][ T8535] netlink: 'syz.2.11545': attribute type 21 has an invalid length. [ 1750.416038][ T8543] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11547'. [ 1750.450687][ T8535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11545'. [ 1750.529904][ T8536] netlink: 'syz.0.11542': attribute type 10 has an invalid length. [ 1750.799148][ T8551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11550'. [ 1750.861269][ T8551] device hsr_slave_0 left promiscuous mode [ 1751.040121][ T8551] device hsr_slave_1 left promiscuous mode [ 1751.744710][ T8562] device syzkaller0 entered promiscuous mode [ 1752.553416][ T8583] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11559'. [ 1753.021470][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11561'. [ 1753.058287][ T8576] delete_channel: no stack [ 1755.617794][ T8580] netlink: 'syz.0.11558': attribute type 21 has an invalid length. [ 1756.314539][ T8603] netlink: 'syz.2.11564': attribute type 10 has an invalid length. [ 1756.578710][ T8617] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1756.639024][ T8621] netlink: 'syz.1.11572': attribute type 15 has an invalid length. [ 1756.679842][ T8621] netlink: 'syz.1.11572': attribute type 7 has an invalid length. [ 1756.857303][ T8624] delete_channel: no stack [ 1757.051771][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11576'. [ 1757.166110][ T8632] netlink: 'syz.4.11575': attribute type 21 has an invalid length. [ 1757.459278][ T8632] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11575'. [ 1758.184246][ T8654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11583'. [ 1758.274264][ T8654] netlink: 'syz.1.11583': attribute type 12 has an invalid length. [ 1758.328229][ T8654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11583'. [ 1758.428938][ T8665] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11585'. [ 1758.665293][ T8668] delete_channel: no stack [ 1758.797210][ T8677] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.11590'. [ 1759.346475][ T8707] netlink: 'syz.3.11600': attribute type 21 has an invalid length. [ 1759.355829][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11600'. [ 1759.459729][ T8709] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11601'. [ 1759.902027][ T8714] IPv6: Can't replace route, no match found [ 1760.014315][ T8715] delete_channel: no stack [ 1760.331356][ T8729] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.11606'. [ 1760.341253][ T8719] netlink: 'syz.3.11605': attribute type 10 has an invalid length. [ 1760.367517][ T8728] netlink: 'syz.4.11609': attribute type 3 has an invalid length. [ 1760.407129][ T8728] netlink: 'syz.4.11609': attribute type 1 has an invalid length. [ 1760.627766][ T8728] netlink: 'syz.4.11609': attribute type 39 has an invalid length. [ 1761.541247][ T8752] Â: renamed from pim6reg1 [ 1761.828225][ T8759] delete_channel: no stack [ 1762.143398][ T8766] __nla_validate_parse: 2 callbacks suppressed [ 1762.143443][ T8766] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1762.487019][ T8771] netlink: 'syz.2.11622': attribute type 10 has an invalid length. [ 1763.454542][ T8788] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11628'. [ 1764.513021][ T8790] delete_channel: no stack [ 1765.165480][ T8824] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11643'. [ 1765.229101][ T8821] netlink: 'syz.1.11638': attribute type 10 has an invalid length. [ 1765.254288][ T8825] netlink: 'syz.4.11642': attribute type 10 has an invalid length. [ 1765.266231][ T8825] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11642'. [ 1765.493497][ T8833] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11647'. [ 1765.737454][ T8841] netlink: 'syz.3.11648': attribute type 3 has an invalid length. [ 1765.754458][ T8842] netlink: 'syz.3.11648': attribute type 3 has an invalid length. [ 1765.830559][ T8841] netlink: 'syz.3.11648': attribute type 1 has an invalid length. [ 1765.840021][ T8837] delete_channel: no stack [ 1765.874921][ T8841] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.11648'. [ 1765.875569][ T8842] netlink: 'syz.3.11648': attribute type 1 has an invalid length. [ 1766.002962][ T8842] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.11648'. [ 1766.118573][ T8853] netlink: 'syz.1.11653': attribute type 2 has an invalid length. [ 1766.197075][ T8853] device 0 entered promiscuous mode [ 1766.493982][ T8862] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11656'. [ 1766.684600][ T8869] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11658'. [ 1766.935467][ T8881] netlink: 'syz.1.11659': attribute type 10 has an invalid length. [ 1767.086989][ T8883] delete_channel: no stack [ 1767.471505][ T8906] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11670'. [ 1767.701898][ T8915] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11672'. [ 1767.820186][ T8915] device hsr_slave_0 left promiscuous mode [ 1767.831975][ T8915] device hsr_slave_1 left promiscuous mode [ 1768.343584][ T8928] netlink: 'syz.0.11678': attribute type 10 has an invalid length. [ 1768.354838][ T8926] delete_channel: no stack [ 1768.528209][ T8934] netlink: 'syz.1.11681': attribute type 21 has an invalid length. [ 1768.559923][ T8934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11681'. [ 1768.658537][ T8937] netlink: 'syz.4.11683': attribute type 21 has an invalid length. [ 1768.731981][ T8937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11683'. [ 1768.817153][ T8943] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11682'. [ 1769.196416][ T8947] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11686'. [ 1769.324597][T22705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1769.347978][T22705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1769.356618][T22705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1769.368374][T22705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1769.377592][T22705] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1769.385543][T22705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1769.810913][T21403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.110559][T21403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.361942][T21403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.443309][ T8969] delete_channel: no stack [ 1770.461229][ T8951] chnl_net:caif_netlink_parms(): no params data found [ 1770.525402][T21403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.718046][ T8981] netlink: 'syz.4.11693': attribute type 10 has an invalid length. [ 1770.749450][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.756956][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.782117][ T8951] device bridge_slave_0 entered promiscuous mode [ 1770.795116][ T8980] netlink: 'syz.1.11694': attribute type 21 has an invalid length. [ 1770.813456][ T8980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11694'. [ 1770.902362][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.929709][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.938138][ T8951] device bridge_slave_1 entered promiscuous mode [ 1770.999603][ T8987] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11695'. [ 1771.086466][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.126983][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.138720][ T8993] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11698'. [ 1771.251636][ T8951] team0: Port device team_slave_0 added [ 1771.270315][ T8951] team0: Port device team_slave_1 added [ 1771.343358][ T8998] netlink: 'syz.4.11699': attribute type 21 has an invalid length. [ 1771.358373][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11699'. [ 1771.380977][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.394315][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.459751][T22705] Bluetooth: hci0: command 0x0409 tx timeout [ 1771.477484][ T8951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.553184][T21403] device 0 left promiscuous mode [ 1771.610153][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.631128][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.760098][ T8951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.810629][T21403] device .*! left promiscuous mode [ 1771.929364][T21403] tipc: Left network mode [ 1772.183694][ T8951] device hsr_slave_0 entered promiscuous mode [ 1772.242196][ T8951] device hsr_slave_1 entered promiscuous mode [ 1772.264091][ T8951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1772.287338][ T8951] Cannot create hsr debugfs directory [ 1772.598909][ T9020] delete_channel: no stack [ 1773.411578][ T9038] netlink: 'syz.2.11709': attribute type 10 has an invalid length. [ 1773.482350][ T9038] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1773.510305][ T9046] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11711'. [ 1773.527516][ T9034] netlink: 'syz.4.11708': attribute type 10 has an invalid length. [ 1773.540269][T22705] Bluetooth: hci0: command 0x041b tx timeout [ 1773.665899][ T9048] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11710'. [ 1774.066833][ T9054] netlink: 'syz.2.11714': attribute type 21 has an invalid length. [ 1774.080214][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11714'. [ 1774.590872][ T9062] delete_channel: no stack [ 1774.953512][ T8951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1775.042421][ T8951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1775.065588][ T8951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1775.117055][ T8951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1775.168621][ T9077] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11722'. [ 1775.505867][ T9083] netlink: 'syz.4.11723': attribute type 10 has an invalid length. [ 1775.607868][ T9090] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11724'. [ 1775.619734][T22705] Bluetooth: hci0: command 0x040f tx timeout [ 1775.854506][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.904829][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1775.913656][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1775.947571][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.000415][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1776.031576][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1776.106573][T21416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.113819][T21416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.260230][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1776.283878][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1776.320677][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1776.353898][T21416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.361145][T21416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.399365][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1776.436891][ T9105] delete_channel: no stack [ 1776.446868][ T9109] netlink: 'syz.0.11731': attribute type 21 has an invalid length. [ 1776.507228][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11731'. [ 1776.644527][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1776.681078][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1776.767413][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1776.810101][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1776.945141][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1776.964288][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1776.998007][ T9127] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11734'. [ 1777.034075][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1777.070335][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1777.090166][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1777.149774][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1777.181178][ T8951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1777.581964][ T9136] netlink: 140 bytes leftover after parsing attributes in process `syz.4.11737'. [ 1777.700023][T22705] Bluetooth: hci0: command 0x0419 tx timeout [ 1778.047642][ T9153] netlink: 'syz.0.11738': attribute type 10 has an invalid length. [ 1778.125575][T21403] device hsr_slave_0 left promiscuous mode [ 1778.143711][T21403] device hsr_slave_1 left promiscuous mode [ 1778.165872][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1778.204775][T21403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.230522][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1778.238218][T21403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1778.280285][T21403] device veth1_macvtap left promiscuous mode [ 1778.286418][T21403] device veth0_macvtap left promiscuous mode [ 1778.299986][T21403] device veth1_vlan left promiscuous mode [ 1778.911403][ T9155] delete_channel: no stack [ 1779.217405][T21403] team0 (unregistering): Port device team_slave_1 removed [ 1779.263415][T21403] team0 (unregistering): Port device team_slave_0 removed [ 1779.309560][T21403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.357636][T21403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.407713][T21403] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1779.694853][T21403] bond0 (unregistering): Released all slaves [ 1779.771788][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1779.779402][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1779.833551][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.929397][ T9160] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11745'. [ 1779.954095][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1779.984807][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1780.028152][ T9162] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11747'. [ 1780.058808][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1780.112188][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1780.151876][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1780.184796][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1780.225610][ T8951] device veth0_vlan entered promiscuous mode [ 1780.336667][ T9166] netlink: 'syz.4.11748': attribute type 21 has an invalid length. [ 1780.394432][ T9166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11748'. [ 1780.469391][ T8951] device veth1_vlan entered promiscuous mode [ 1780.618394][ T9172] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11758'. [ 1780.630330][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1780.647682][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1780.666564][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1780.696549][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1780.721475][ T8951] device veth0_macvtap entered promiscuous mode [ 1780.767578][ T8951] device veth1_macvtap entered promiscuous mode [ 1780.781673][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1780.791754][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1780.860529][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.884127][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.905453][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.929569][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.949652][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.961099][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.982339][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1781.007179][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.023360][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.180567][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1781.202683][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1781.223835][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.259591][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.280385][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.291586][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.303054][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.315396][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.325795][ T8951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.338053][ T8951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.354766][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.366336][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1781.385578][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1781.414205][ T8951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.428736][ T8951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.469606][ T8951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.478391][ T8951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.779446][ T9183] delete_channel: no stack [ 1782.835099][ T9193] netlink: 'syz.2.11756': attribute type 10 has an invalid length. [ 1783.044357][T20858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.064433][ T9200] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11760'. [ 1783.071226][T20858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.100979][T21403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1783.117533][ T9195] delete_channel: no stack [ 1783.181934][T20858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.209164][T20858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.243888][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1783.398716][ T9209] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11762'. [ 1783.591661][ T9212] netlink: 'syz.3.11680': attribute type 27 has an invalid length. [ 1783.630313][ T9212] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.11680'. [ 1783.662865][ T9214] netlink: 'syz.2.11763': attribute type 21 has an invalid length. [ 1783.673815][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11763'. [ 1783.945356][ T9220] netlink: 'syz.4.11764': attribute type 19 has an invalid length. [ 1783.978046][ T9220] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.11764'. [ 1784.078886][ T9224] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11767'. [ 1784.477707][ T9233] delete_channel: no stack [ 1784.888019][ T9248] netlink: 'syz.3.11780': attribute type 27 has an invalid length. [ 1784.994335][ T9253] __nla_validate_parse: 2 callbacks suppressed [ 1784.994550][ T9253] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11782'. [ 1785.223042][ T9261] netlink: 'syz.2.11784': attribute type 2 has an invalid length. [ 1785.279395][ T9261] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.11784'. [ 1785.352003][ T9269] netlink: 'syz.1.11786': attribute type 21 has an invalid length. [ 1785.390579][ T9269] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11786'. [ 1785.510902][ T9264] delete_channel: no stack [ 1785.840324][ T9278] -: renamed from syzkaller0 [ 1785.884401][ T9281] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11791'. [ 1786.125576][ T9287] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11794'. [ 1786.211532][ T9290] netlink: 'syz.3.11795': attribute type 27 has an invalid length. [ 1786.237825][ T9290] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.11795'. [ 1786.922948][ T9315] netlink: 'syz.0.11803': attribute type 2 has an invalid length. [ 1787.011173][ T9315] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.11803'. [ 1787.528018][ T9321] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11806'. [ 1789.389951][ T9301] delete_channel: no stack [ 1789.686272][ T9325] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11808'. [ 1789.795224][ T9332] netlink: 'syz.0.11809': attribute type 21 has an invalid length. [ 1789.836395][ T9332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11809'. [ 1789.916688][ T9334] netlink: 'syz.1.11811': attribute type 27 has an invalid length. [ 1790.770400][ T4296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1790.781289][ T4296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1790.789425][ T4296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1790.798727][ T4296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1790.806678][ T4296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1790.814444][ T4296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1791.022076][ T9346] netlink: 'syz.4.11815': attribute type 10 has an invalid length. [ 1791.114284][ T9354] delete_channel: no stack [ 1791.225572][T21408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.267891][ T9361] __nla_validate_parse: 1 callbacks suppressed [ 1791.267932][ T9361] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11820'. [ 1791.307155][ T9359] netlink: 'syz.1.11819': attribute type 10 has an invalid length. [ 1791.341006][ T9359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11819'. [ 1791.366858][ T9359] device team0 entered promiscuous mode [ 1791.380990][ T9359] device team_slave_0 entered promiscuous mode [ 1791.397017][ T9365] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11822'. [ 1791.408820][ T9359] device team_slave_1 entered promiscuous mode [ 1791.420913][ T9359] device macvlan0 entered promiscuous mode [ 1791.455327][ T9359] bridge0: port 2(team0) entered blocking state [ 1791.500253][ T9359] bridge0: port 2(team0) entered disabled state [ 1791.655767][T21408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.698053][ T9375] netlink: 'syz.0.11825': attribute type 27 has an invalid length. [ 1791.706477][ T9375] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.11825'. [ 1791.747699][ T9374] netlink: 'syz.3.11824': attribute type 10 has an invalid length. [ 1791.786235][ T9374] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1791.825874][ T9373] netlink: 'syz.4.11826': attribute type 21 has an invalid length. [ 1791.857825][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11826'. [ 1792.019286][T21408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.204763][T21408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.475019][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 1792.836999][ T9393] delete_channel: no stack [ 1792.849769][T21408] device 0 left promiscuous mode [ 1792.899686][ T4296] Bluetooth: hci3: command 0x0409 tx timeout [ 1792.998812][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.035289][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.054957][ T9406] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11833'. [ 1793.079957][ T9407] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11834'. [ 1793.122248][ T9347] device bridge_slave_0 entered promiscuous mode [ 1793.390118][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.401496][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.421580][ T9347] device bridge_slave_1 entered promiscuous mode [ 1793.480477][ T9412] netlink: 'syz.0.11836': attribute type 10 has an invalid length. [ 1793.502159][ T9416] netlink: 'syz.3.11837': attribute type 21 has an invalid length. [ 1793.523469][ T9425] netlink: 'syz.1.11838': attribute type 27 has an invalid length. [ 1793.570137][ T9425] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.11838'. [ 1794.049428][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.178782][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.317233][ T9347] team0: Port device team_slave_0 added [ 1794.375293][ T9347] team0: Port device team_slave_1 added [ 1794.418121][ T4296] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 1794.496645][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.504344][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.580795][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.711061][ T9442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11842'. [ 1794.875604][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1794.895934][ T9445] delete_channel: no stack [ 1794.910961][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.979933][ T4296] Bluetooth: hci3: command 0x041b tx timeout [ 1795.066502][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.303786][ T9461] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11847'. [ 1795.424029][ T9347] device hsr_slave_0 entered promiscuous mode [ 1795.444961][ T9347] device hsr_slave_1 entered promiscuous mode [ 1795.936104][ T9478] validate_nla: 1 callbacks suppressed [ 1795.936141][ T9478] netlink: 'syz.0.11854': attribute type 27 has an invalid length. [ 1796.076326][ T9480] delete_channel: no stack [ 1796.412980][ T9494] __nla_validate_parse: 2 callbacks suppressed [ 1796.413017][ T9494] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11860'. [ 1796.456848][ T9496] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11861'. [ 1796.519581][ T9491] netlink: 'syz.4.11858': attribute type 21 has an invalid length. [ 1796.554926][ T9491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11858'. [ 1797.059665][ T4296] Bluetooth: hci3: command 0x040f tx timeout [ 1797.176336][ T9347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1797.214866][ T9347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1797.292134][ T9347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1797.301771][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.308131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.346565][ T9347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1797.613740][ T9526] delete_channel: no stack [ 1797.702497][ T9532] netlink: 'syz.3.11868': attribute type 27 has an invalid length. [ 1797.761294][ T9532] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.11868'. [ 1797.889779][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.925137][ T9537] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11872'. [ 1798.048783][ T9541] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11873'. [ 1798.141628][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1798.164532][T20858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1798.202883][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.293472][T21408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1798.319810][T21408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1798.338162][T21408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1798.356439][T21408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1798.410571][T21408] batman_adv: batadv0: Interface deactivated: vlan1 [ 1798.479614][T21408] batman_adv: batadv0: Removing interface: vlan1 [ 1798.726901][T21408] device veth1_macvtap left promiscuous mode [ 1798.741963][T21408] device veth0_macvtap left promiscuous mode [ 1798.772738][T21408] device veth1_vlan left promiscuous mode [ 1798.782347][T21408] device veth0_vlan left promiscuous mode [ 1799.139673][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 1799.161414][ T9553] delete_channel: no stack [ 1799.256445][ T9578] netlink: 'syz.4.11882': attribute type 4 has an invalid length. [ 1799.272701][ T9578] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11882'. [ 1799.632648][ T9572] delete_channel: no stack [ 1799.882448][T21408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.932143][T21408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.984724][T21408] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1800.250085][T21408] bond0 (unregistering): Released all slaves [ 1800.306909][ T9568] netlink: 'syz.0.11879': attribute type 21 has an invalid length. [ 1800.315771][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11879'. [ 1800.327458][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1800.370367][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1800.399860][T19312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.407051][T19312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.434268][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1800.447672][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1800.481420][T19312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.488585][T19312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.541414][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1800.574994][ T9581] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11885'. [ 1800.585569][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1800.596945][T19312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1800.641628][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1800.670648][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1800.684640][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1800.730663][ T9587] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11886'. [ 1800.741319][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1800.761920][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1800.780770][ T9590] netlink: 'syz.0.11883': attribute type 27 has an invalid length. [ 1800.789869][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1800.804002][ T9347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1800.829287][ T9347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1800.851565][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1800.861031][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1800.871001][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1801.253043][ T9604] netlink: 'syz.0.11890': attribute type 29 has an invalid length. [ 1801.287640][ T9604] netlink: 'syz.0.11890': attribute type 29 has an invalid length. [ 1801.338164][ T9603] netlink: 'syz.4.11892': attribute type 21 has an invalid length. [ 1801.358410][ T9609] netlink: 'syz.1.11889': attribute type 4 has an invalid length. [ 1801.389376][ T9609] netlink: 'syz.1.11889': attribute type 8 has an invalid length. [ 1801.489719][ T9609] __nla_validate_parse: 2 callbacks suppressed [ 1801.489739][ T9609] netlink: 193092 bytes leftover after parsing attributes in process `syz.1.11889'. [ 1801.608268][ T9609] device pim6reg1 entered promiscuous mode [ 1802.161209][ T9614] delete_channel: no stack [ 1802.187018][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1802.204990][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1802.237487][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.371702][T21403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1802.382281][T21403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1802.453295][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1802.481080][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1802.495584][ T9633] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11896'. [ 1802.511889][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1802.544908][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1802.588473][ T9347] device veth0_vlan entered promiscuous mode [ 1802.648296][ T9347] device veth1_vlan entered promiscuous mode [ 1802.804613][ T9642] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11898'. [ 1802.822684][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1802.832896][ T9641] netlink: 'syz.4.11899': attribute type 27 has an invalid length. [ 1802.842086][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1802.865379][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1802.887815][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1802.919841][ T9641] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.11899'. [ 1802.953225][ T9347] device veth0_macvtap entered promiscuous mode [ 1802.973489][ T9347] device veth1_macvtap entered promiscuous mode [ 1802.993383][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.020147][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.065644][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.082619][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.095442][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.115067][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.136953][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.151336][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.173661][ T9660] netlink: 'syz.0.11901': attribute type 7 has an invalid length. [ 1803.186937][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1803.202546][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.213648][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.227428][ T9660] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11901'. [ 1803.245661][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.260156][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.270980][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.282005][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.304420][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1803.336060][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.354050][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1803.379951][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1803.410401][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1803.450049][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1803.480675][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1803.523204][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1803.541121][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1803.593274][ T9347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.610013][ T9347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.629263][ T9347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.667637][ T9347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.701930][ T9665] netlink: 'syz.4.11905': attribute type 21 has an invalid length. [ 1803.724608][ T9666] delete_channel: no stack [ 1803.736968][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11905'. [ 1803.785028][ T9672] netlink: 'syz.0.11907': attribute type 10 has an invalid length. [ 1804.071649][ T9674] delete_channel: no stack [ 1804.085778][T21408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.104892][T21408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.158261][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1804.238698][ T9680] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11910'. [ 1804.249586][T21405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.257471][T21405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.297494][T21405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1804.625340][ T9695] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11913'. [ 1804.722745][ T9697] netlink: 'syz.1.11914': attribute type 27 has an invalid length. [ 1804.750552][ T9697] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.11914'. [ 1805.261192][ T9720] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11920'. [ 1805.603808][ T9729] delete_channel: no stack [ 1806.751134][ T9778] __nla_validate_parse: 5 callbacks suppressed [ 1806.751174][ T9778] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11937'. [ 1806.909066][ T9782] delete_channel: no stack [ 1807.125362][ T9790] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11941'. [ 1807.413673][ T9798] validate_nla: 3 callbacks suppressed [ 1807.413761][ T9798] netlink: 'syz.1.11945': attribute type 27 has an invalid length. [ 1807.453833][ T9798] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.11945'. [ 1807.555899][ T9801] netlink: 'syz.3.11946': attribute type 21 has an invalid length. [ 1807.580087][ T9801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11946'. [ 1807.828908][ T9816] netlink: 'syz.1.11950': attribute type 2 has an invalid length. [ 1807.855940][ T9816] device 1 entered promiscuous mode [ 1807.993001][ T9822] netlink: 8964 bytes leftover after parsing attributes in process `syz.1.11950'. [ 1809.104837][ T9835] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11954'. [ 1809.393060][ T9838] netlink: 'syz.4.11955': attribute type 8 has an invalid length. [ 1809.470559][T22705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1809.481921][T13515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1809.494317][T22705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1809.504113][T22705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1809.512304][T22705] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1809.520308][T22705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1809.620420][ T9838] netlink: 'syz.4.11955': attribute type 4 has an invalid length. [ 1809.628295][ T9838] netlink: 'syz.4.11955': attribute type 7 has an invalid length. [ 1809.754997][ T9838] netlink: 'syz.4.11955': attribute type 8 has an invalid length. [ 1809.792791][ T9838] netlink: 'syz.4.11955': attribute type 7 has an invalid length. [ 1809.833238][ T9838] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.11955'. [ 1810.304419][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 1810.635231][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.670371][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.697339][ T9839] device bridge_slave_0 entered promiscuous mode [ 1810.726718][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.768444][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.798831][ T9839] device bridge_slave_1 entered promiscuous mode [ 1810.931216][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.958318][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.421513][ T9831] delete_channel: no stack [ 1811.654962][ T9852] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11956'. [ 1811.812962][ T9839] team0: Port device team_slave_0 added [ 1811.840578][ T9839] team0: Port device team_slave_1 added [ 1812.005580][ T9854] delete_channel: no stack [ 1812.213284][ T9864] netlink: 'syz.1.11961': attribute type 29 has an invalid length. [ 1812.216791][T21403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.298820][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.326489][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1812.408589][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1812.438775][ T9864] netlink: 'syz.1.11961': attribute type 29 has an invalid length. [ 1812.458888][ T9868] netlink: 'syz.3.11962': attribute type 21 has an invalid length. [ 1812.477170][ T9867] netlink: 'syz.4.11960': attribute type 27 has an invalid length. [ 1812.489382][ T9868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11962'. [ 1812.508768][ T9867] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.11960'. [ 1812.513886][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1812.530010][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1812.566866][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1812.630101][T21403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.849004][T21403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.936850][ T9839] device hsr_slave_0 entered promiscuous mode [ 1812.962736][ T9839] device hsr_slave_1 entered promiscuous mode [ 1812.982253][ T9839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1813.006355][ T9839] Cannot create hsr debugfs directory [ 1813.019008][ T9876] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11964'. [ 1813.162760][T21403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.469738][T22705] Bluetooth: hci4: command 0x0409 tx timeout [ 1813.889271][ T9888] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11968'. [ 1815.539598][T22705] Bluetooth: hci4: command 0x041b tx timeout [ 1816.363528][ T9885] delete_channel: no stack [ 1816.493243][T21403] tipc: Left network mode [ 1817.179299][ T9923] netlink: 'syz.4.11974': attribute type 27 has an invalid length. [ 1817.205231][ T9923] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.11974'. [ 1817.210118][ T9918] netlink: 'syz.3.11971': attribute type 10 has an invalid length. [ 1817.266406][ T9917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11973'. [ 1817.625646][T22705] Bluetooth: hci4: command 0x040f tx timeout [ 1817.791671][ T9929] netlink: 'syz.1.11977': attribute type 21 has an invalid length. [ 1817.820177][ T9929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11977'. [ 1817.904105][ T9933] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11978'. [ 1818.141777][ T9939] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11980'. [ 1818.194551][ T9940] delete_channel: no stack [ 1818.408942][ T9839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1818.786620][ T9839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1819.089085][ T9964] netlink: 'syz.2.11987': attribute type 27 has an invalid length. [ 1819.159534][ T9964] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.11987'. [ 1819.501056][T21403] device gretap0 left promiscuous mode [ 1819.559590][T21403] Ÿë: port 1(gretap0) entered disabled state [ 1819.606722][ T9839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1819.709702][T22705] Bluetooth: hci4: command 0x0419 tx timeout [ 1819.757809][ T9839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1819.793148][ T9971] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.11988'. [ 1819.964976][ T9978] netlink: 'syz.1.11989': attribute type 10 has an invalid length. [ 1820.215647][ T9985] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1820.300329][ T9984] delete_channel: no stack [ 1820.406214][ T9991] netlink: 'syz.3.11994': attribute type 21 has an invalid length. [ 1820.461964][ T9991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11994'. [ 1820.775441][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1820.875796][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1820.894671][T21408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1820.954441][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.026529][T10007] netlink: 'syz.1.11998': attribute type 29 has an invalid length. [ 1821.500486][T10008] netlink: 'syz.2.11999': attribute type 27 has an invalid length. [ 1821.527573][T10008] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.11999'. [ 1822.848876][T10007] netlink: 'syz.1.11998': attribute type 29 has an invalid length. [ 1822.905120][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1822.924500][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1822.967054][T21416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.974306][T21416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.039083][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1823.047967][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1823.086098][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1823.110147][T21416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.117371][T21416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.169218][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1823.188088][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1823.243207][T10020] delete_channel: no stack [ 1823.349325][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1823.403042][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1823.427431][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1823.446747][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1823.472379][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1823.485681][T10033] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12006'. [ 1823.567660][T10029] netlink: 'syz.3.12005': attribute type 10 has an invalid length. [ 1826.223428][T21405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1826.241144][T21405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1826.264630][T10046] netlink: 'syz.3.12010': attribute type 21 has an invalid length. [ 1826.282294][T10046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12010'. [ 1826.295624][T10050] netlink: 'syz.2.12011': attribute type 1 has an invalid length. [ 1826.335669][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1826.353089][ T4100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1826.394050][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1826.666050][T10057] netlink: 'syz.3.12014': attribute type 27 has an invalid length. [ 1826.675923][T10056] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12013'. [ 1826.696049][T10055] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12012'. [ 1826.712088][T10057] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.12014'. [ 1827.178663][T10070] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12018'. [ 1827.488401][T10079] netlink: 'syz.4.12019': attribute type 10 has an invalid length. [ 1827.780144][T21403] device vlan0 left promiscuous mode [ 1827.785822][T21403] À: port 1(vlan0) entered disabled state [ 1827.832190][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1827.854781][T21403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1827.878998][T21403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1827.908749][T21403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1827.925566][T10090] sctp: [Deprecated]: syz.1.12024 (pid 10090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1827.925566][T10090] Use struct sctp_sack_info instead [ 1827.961649][T21403] device bridge_slave_0 left promiscuous mode [ 1827.968163][T21403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.057486][T21403] device veth1_macvtap left promiscuous mode [ 1828.077558][T21403] device veth0_macvtap left promiscuous mode [ 1828.100350][T21403] device veth1_vlan left promiscuous mode [ 1828.106265][T21403] device veth0_vlan left promiscuous mode [ 1828.330392][T10109] netlink: 'syz.4.12027': attribute type 27 has an invalid length. [ 1828.346862][T10109] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.12027'. [ 1829.397069][T21403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.449310][T21403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1829.498962][T21403] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1829.746094][T21403] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1829.777124][T21403] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1829.786782][T21403] bond0 (unregistering): Released all slaves [ 1829.898024][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1829.906171][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1829.913851][T10088] netlink: 'syz.2.12023': attribute type 21 has an invalid length. [ 1829.934556][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12023'. [ 1829.950341][T10110] netlink: 140 bytes leftover after parsing attributes in process `syz.1.12029'. [ 1829.976334][T10114] netlink: 140 bytes leftover after parsing attributes in process `syz.3.12030'. [ 1830.011402][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.115656][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1830.140455][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1830.212066][T10117] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12031'. [ 1830.278358][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1830.297349][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1830.316003][ T9839] device veth0_vlan entered promiscuous mode [ 1830.325385][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1830.344841][T21418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1830.385590][ T9839] device veth1_vlan entered promiscuous mode [ 1830.600095][T10125] device wg2 entered promiscuous mode [ 1830.660194][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1830.680176][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1830.717435][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1830.737682][T10131] FAULT_INJECTION: forcing a failure. [ 1830.737682][T10131] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.760558][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1830.795095][ T9839] device veth0_macvtap entered promiscuous mode [ 1830.828185][T10134] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12037'. [ 1830.839789][T10131] CPU: 1 PID: 10131 Comm: syz.2.12037 Not tainted syzkaller #0 [ 1830.847420][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1830.857517][T10131] Call Trace: [ 1830.860837][T10131] [ 1830.863804][T10131] dump_stack_lvl+0x188/0x24e [ 1830.868531][T10131] ? show_regs_print_info+0x12/0x12 [ 1830.873766][T10131] ? load_image+0x410/0x410 [ 1830.878307][T10131] ? __might_sleep+0xd0/0xd0 [ 1830.882926][T10131] ? __lock_acquire+0x7bd0/0x7bd0 [ 1830.887995][T10131] should_fail_ex+0x390/0x4c0 [ 1830.892710][T10131] should_failslab+0x5/0x20 [ 1830.897248][T10131] slab_pre_alloc_hook+0x59/0x300 [ 1830.902313][T10131] ? tomoyo_encode+0x28a/0x550 [ 1830.907147][T10131] __kmem_cache_alloc_node+0x4f/0x270 [ 1830.912556][T10131] ? tomoyo_encode+0x28a/0x550 [ 1830.917361][T10131] __kmalloc+0xa3/0x240 [ 1830.921566][T10131] tomoyo_encode+0x28a/0x550 [ 1830.926200][T10131] tomoyo_realpath_from_path+0x578/0x5c0 [ 1830.931895][T10131] ? tomoyo_domain+0xd2/0x120 [ 1830.936623][T10131] ? tomoyo_path_number_perm+0x205/0x650 [ 1830.942298][T10131] tomoyo_path_number_perm+0x22f/0x650 [ 1830.947794][T10131] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1830.953300][T10131] ? ktime_get+0x7b/0x270 [ 1830.957694][T10131] ? __fget_files+0x28/0x460 [ 1830.962328][T10131] security_file_ioctl+0x6c/0xa0 [ 1830.967303][T10131] __se_sys_ioctl+0x48/0x170 [ 1830.971937][T10131] do_syscall_64+0x4c/0xa0 [ 1830.976386][T10131] ? clear_bhb_loop+0x60/0xb0 [ 1830.981109][T10131] ? clear_bhb_loop+0x60/0xb0 [ 1830.985844][T10131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1830.991797][T10131] RIP: 0033:0x7fe911d9ce59 [ 1830.996247][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.015922][T10131] RSP: 002b:00007fe912c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.024375][T10131] RAX: ffffffffffffffda RBX: 00007fe912015fa0 RCX: 00007fe911d9ce59 [ 1831.032400][T10131] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 1831.040424][T10131] RBP: 00007fe912c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.048430][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.056426][T10131] R13: 00007fe912016038 R14: 00007fe912015fa0 R15: 00007ffd78fe7088 [ 1831.064443][T10131] [ 1831.091254][T21424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1831.101084][T10131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1831.133414][ T9839] device veth1_macvtap entered promiscuous mode [ 1831.185340][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.236141][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.256930][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.277838][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.298614][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.341522][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.384540][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1831.415808][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.448944][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.462991][T10143] netlink: 'syz.1.12040': attribute type 27 has an invalid length. [ 1831.486408][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.507767][T10143] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12040'. [ 1831.517667][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.544981][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.563721][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.584536][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.605813][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.647539][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.672523][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.709248][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.733556][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1831.790568][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1831.815616][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1831.840786][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1831.869284][ T9839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.884091][ T9839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.903453][ T9839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.925283][ T9839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.209676][T21424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.217617][T21424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.260577][T21405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1832.348574][T21424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.351440][T10156] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12043'. [ 1832.382624][T21424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.385093][T10161] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12044'. [ 1832.478994][T21416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1832.845343][T10169] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11951'. [ 1833.455067][T10191] netlink: 'syz.3.12051': attribute type 27 has an invalid length. [ 1833.565884][T10190] FAULT_INJECTION: forcing a failure. [ 1833.565884][T10190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.601232][T10191] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.12051'. [ 1833.636088][T10190] CPU: 0 PID: 10190 Comm: syz.2.12053 Not tainted syzkaller #0 [ 1833.643729][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1833.653838][T10190] Call Trace: [ 1833.657155][T10190] [ 1833.660136][T10190] dump_stack_lvl+0x188/0x24e [ 1833.664871][T10190] ? show_regs_print_info+0x12/0x12 [ 1833.670119][T10190] ? load_image+0x410/0x410 [ 1833.674683][T10190] ? __lock_acquire+0x7bd0/0x7bd0 [ 1833.679776][T10190] ? unix_ioctl+0x255/0x630 [ 1833.684348][T10190] should_fail_ex+0x390/0x4c0 [ 1833.689085][T10190] _copy_from_user+0x2c/0x170 [ 1833.693831][T10190] sock_do_ioctl+0x18c/0x320 [ 1833.698485][T10190] ? sock_show_fdinfo+0xb0/0xb0 [ 1833.703402][T10190] sock_ioctl+0x48a/0x700 [ 1833.707791][T10190] ? sock_poll+0x420/0x420 [ 1833.712272][T10190] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1833.717273][T10190] ? security_file_ioctl+0x7c/0xa0 [ 1833.722461][T10190] ? sock_poll+0x420/0x420 [ 1833.726964][T10190] __se_sys_ioctl+0xfa/0x170 [ 1833.731628][T10190] do_syscall_64+0x4c/0xa0 [ 1833.736090][T10190] ? clear_bhb_loop+0x60/0xb0 [ 1833.740820][T10190] ? clear_bhb_loop+0x60/0xb0 [ 1833.745560][T10190] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1833.751508][T10190] RIP: 0033:0x7fe911d9ce59 [ 1833.755987][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1833.775650][T10190] RSP: 002b:00007fe912c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1833.784119][T10190] RAX: ffffffffffffffda RBX: 00007fe912015fa0 RCX: 00007fe911d9ce59 [ 1833.792138][T10190] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 1833.800158][T10190] RBP: 00007fe912c93090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.808181][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1833.816200][T10190] R13: 00007fe912016038 R14: 00007fe912015fa0 R15: 00007ffd78fe7088 [ 1833.824241][T10190] [ 1835.205571][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12054'. [ 1835.251680][T10192] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12054'. [ 1835.310115][T10192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1835.390734][T10194] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12054'. [ 1835.436924][T10194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1835.462453][T10194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1835.506397][T10196] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12053'. [ 1835.629097][T10209] sctp: [Deprecated]: syz.0.12057 (pid 10209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1835.629097][T10209] Use struct sctp_sack_info instead [ 1836.078696][T10224] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12062'. [ 1836.910685][T10242] netlink: 'syz.2.12066': attribute type 10 has an invalid length. [ 1836.918439][T10249] netlink: 'syz.0.12068': attribute type 27 has an invalid length. [ 1837.013432][T10249] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12068'. [ 1837.120040][T10242] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1837.505169][T10262] netlink: 'syz.3.12075': attribute type 29 has an invalid length. [ 1837.683938][T10264] netlink: 'syz.4.12073': attribute type 10 has an invalid length. [ 1837.733424][T10262] netlink: 'syz.3.12075': attribute type 29 has an invalid length. [ 1837.767470][T10266] netlink: 'syz.3.12075': attribute type 29 has an invalid length. [ 1837.915801][T10278] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.12080'. [ 1837.929658][T10267] netlink: 'syz.3.12075': attribute type 29 has an invalid length. [ 1837.973000][T10268] netlink: 'syz.3.12075': attribute type 29 has an invalid length. [ 1838.338207][T10293] netlink: 'syz.1.12084': attribute type 27 has an invalid length. [ 1838.359928][T10293] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12084'. [ 1839.024923][T10315] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12092'. [ 1839.278761][T10325] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12096'. [ 1839.298767][T10318] netlink: 'syz.3.12089': attribute type 10 has an invalid length. [ 1839.325431][T10317] netlink: 'syz.2.12093': attribute type 10 has an invalid length. [ 1839.659912][T10330] netlink: 'syz.4.12098': attribute type 27 has an invalid length. [ 1840.318531][T10347] __nla_validate_parse: 1 callbacks suppressed [ 1840.318550][T10347] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1840.446735][T10353] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12106'. [ 1840.564347][T10356] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12107'. [ 1840.900957][T10368] netlink: 'syz.3.12110': attribute type 10 has an invalid length. [ 1841.146348][T10377] netlink: 'syz.2.12113': attribute type 27 has an invalid length. [ 1841.160307][T10377] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.12113'. [ 1841.251146][T10381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12115'. [ 1841.494039][T10390] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.12119'. [ 1841.718347][T10395] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12121'. [ 1841.927799][T10402] netlink: 140 bytes leftover after parsing attributes in process `syz.3.12124'. [ 1842.224478][T10412] netlink: 'syz.0.12127': attribute type 27 has an invalid length. [ 1842.240215][T10412] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12127'. [ 1842.603000][T10414] netlink: 'syz.1.12126': attribute type 10 has an invalid length. [ 1842.649804][T10415] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12128'. [ 1844.350809][T10447] netlink: 'syz.0.12140': attribute type 27 has an invalid length. [ 1844.650119][T10463] netlink: 'syz.2.12142': attribute type 10 has an invalid length. [ 1845.404493][T10477] __nla_validate_parse: 4 callbacks suppressed [ 1845.404586][T10477] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12149'. [ 1845.457653][T10479] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12150'. [ 1846.907304][T10495] netlink: 'syz.4.12155': attribute type 27 has an invalid length. [ 1846.929668][T10495] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.12155'. [ 1847.333053][T10511] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12161'. [ 1847.484685][T10515] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.12162'. [ 1847.529405][T10516] netlink: 'syz.2.12160': attribute type 10 has an invalid length. [ 1848.208478][T10540] netlink: 'syz.1.12171': attribute type 27 has an invalid length. [ 1848.235747][T10540] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12171'. [ 1848.991796][T10567] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1849.786786][T10566] device syzkaller0 entered promiscuous mode [ 1849.810852][T10572] netlink: 'syz.3.12178': attribute type 10 has an invalid length. [ 1849.847076][T10579] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1850.421873][T10588] netlink: 'syz.0.12186': attribute type 27 has an invalid length. [ 1850.437214][T10588] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12186'. [ 1854.258030][T10593] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12187'. [ 1854.549818][T10604] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.12190'. [ 1854.957355][T10615] netlink: 'syz.0.12194': attribute type 10 has an invalid length. [ 1855.027778][T10615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1855.088514][T22705] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 1855.119359][T10597] delete_channel: no stack [ 1855.748313][T10633] netlink: 'syz.3.12202': attribute type 27 has an invalid length. [ 1855.770376][T10633] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.12202'. [ 1855.833042][T10639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12203'. [ 1856.281002][T10649] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12207'. [ 1856.909769][T10673] netlink: 'syz.0.12216': attribute type 27 has an invalid length. [ 1856.917778][T10673] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12216'. [ 1858.752249][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.758749][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.016857][T10669] netlink: 'syz.1.12213': attribute type 10 has an invalid length. [ 1859.358380][T10688] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12223'. [ 1859.573856][T10694] netlink: 'syz.3.12225': attribute type 7 has an invalid length. [ 1859.606816][T10694] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.12225'. [ 1859.639056][T10695] netlink: 'syz.3.12225': attribute type 7 has an invalid length. [ 1859.667245][T10695] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.12225'. [ 1859.858780][T10706] netlink: 'syz.0.12229': attribute type 27 has an invalid length. [ 1859.913116][T10706] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12229'. [ 1860.438196][T10717] netlink: 'syz.3.12231': attribute type 10 has an invalid length. [ 1861.070017][T10738] device batadv0 entered promiscuous mode [ 1861.504390][T10760] netlink: 'syz.1.12242': attribute type 27 has an invalid length. [ 1861.566195][T10760] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12242'. [ 1861.854340][T10766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12246'. [ 1862.353668][T10773] netlink: 'syz.2.12248': attribute type 10 has an invalid length. [ 1862.951008][T10799] netlink: 'syz.1.12257': attribute type 27 has an invalid length. [ 1862.959226][T10799] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12257'. [ 1864.042777][T10830] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.12267'. [ 1864.693875][T10850] netlink: 'syz.4.12274': attribute type 27 has an invalid length. [ 1864.711602][T10850] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.12274'. [ 1865.860901][T10847] delete_channel: no stack [ 1866.113706][T10855] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12276'. [ 1866.596958][T10883] : port 1(ip6gretap0) entered blocking state [ 1866.669667][T10883] : port 1(ip6gretap0) entered disabled state [ 1866.682601][T10883] device ip6gretap0 entered promiscuous mode [ 1866.699796][T10888] netlink: 'syz.1.12284': attribute type 2 has an invalid length. [ 1866.727840][T10878] device ip6gretap0 left promiscuous mode [ 1866.753527][T10888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12284'. [ 1866.770689][T10878] : port 1(ip6gretap0) entered disabled state [ 1866.819324][T10873] netlink: 140 bytes leftover after parsing attributes in process `syz.3.12276'. [ 1867.205958][T10894] delete_channel: no stack [ 1867.318249][T10898] netlink: 'syz.3.12288': attribute type 27 has an invalid length. [ 1867.340804][T10898] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.12288'. [ 1868.032945][T10928] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.12301'. [ 1868.077485][T10922] delete_channel: no stack [ 1868.225266][T10933] netlink: 'syz.3.12303': attribute type 27 has an invalid length. [ 1868.249243][T10933] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.12303'. [ 1868.970882][T10962] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1869.053998][T10962] netlink: 'syz.4.12314': attribute type 17 has an invalid length. [ 1869.104018][T10962] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1869.140363][T10962] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1869.204615][T10962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1869.280612][T10966] delete_channel: no stack [ 1869.565356][T10975] netlink: 'syz.2.12320': attribute type 27 has an invalid length. [ 1869.580874][T10979] netlink: 'syz.0.12322': attribute type 3 has an invalid length. [ 1869.599880][T10975] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.12320'. [ 1869.620930][T10979] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12322'. [ 1870.057091][T11001] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.12330'. [ 1870.265190][T11004] delete_channel: no stack [ 1870.529514][T11011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1870.577826][T11011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1870.853429][T11020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1870.861112][T11020] IPv6: NLM_F_CREATE should be set when creating new route [ 1870.868720][T11020] IPv6: NLM_F_CREATE should be set when creating new route [ 1870.876450][T11020] IPv6: NLM_F_CREATE should be set when creating new route [ 1871.162772][T11022] netlink: 'syz.2.12337': attribute type 10 has an invalid length. [ 1872.318802][T11024] netlink: 'syz.1.12339': attribute type 27 has an invalid length. [ 1872.349762][T11024] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12339'. [ 1872.621368][T11038] netlink: 196 bytes leftover after parsing attributes in process `syz.4.12344'. [ 1872.703797][T11038] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1872.869973][T11041] netlink: 'syz.3.12346': attribute type 1 has an invalid length. [ 1872.878328][T11041] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.12346'. [ 1872.900256][T11049] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12348'. [ 1873.541859][T11036] delete_channel: no stack [ 1873.955839][T11068] netlink: 'syz.0.12350': attribute type 10 has an invalid length. [ 1875.434259][T11086] netlink: 'syz.0.12357': attribute type 27 has an invalid length. [ 1875.513660][T11086] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.12357'. [ 1876.700402][T11092] netlink: 'syz.4.12358': attribute type 4 has an invalid length. [ 1877.680759][T11100] delete_channel: no stack [ 1877.710158][T11098] device batadv0 entered promiscuous mode [ 1877.929340][T11110] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.12364'. [ 1877.975931][T11110] openvswitch: netlink: Key type 386 is out of range max 32 [ 1878.697454][T11130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1879.701781][T11149] bridge0: port 3(ip6gretap0) entered blocking state [ 1879.711873][T11149] bridge0: port 3(ip6gretap0) entered disabled state [ 1879.721365][T11149] device ip6gretap0 entered promiscuous mode [ 1879.731795][T11149] bridge0: port 3(ip6gretap0) entered blocking state [ 1879.738650][T11149] bridge0: port 3(ip6gretap0) entered forwarding state [ 1879.769994][T11150] netlink: 'syz.0.12381': attribute type 11 has an invalid length. [ 1879.787286][T11150] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12381'. [ 1879.863145][T11150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1880.595803][T11134] delete_channel: no stack [ 1880.807208][T11154] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.12383'. [ 1880.982467][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1881.000984][T11164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1881.024106][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1881.050470][T11164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.147560][T11166] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.12387'. [ 1881.573394][T11178] netlink: 'syz.0.12392': attribute type 10 has an invalid length. [ 1882.397648][T11195] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12398'. [ 1883.121658][T11183] delete_channel: no stack [ 1883.666016][T11213] device batadv0 entered promiscuous mode [ 1883.881135][T11217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1883.912929][T11217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.947708][T11217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.966794][T11217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1884.067771][T11217] bond0: (slave batadv0): Releasing backup interface [ 1884.474024][T11226] netlink: 'syz.0.12417': attribute type 10 has an invalid length. [ 1884.510037][T11226] device batadv0 left promiscuous mode [ 1884.572650][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1884.654510][T11226] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1884.749112][T11228] netlink: 'syz.1.12406': attribute type 10 has an invalid length. [ 1886.238167][T11240] delete_channel: no stack [ 1886.579935][T11260] netlink: 'syz.4.12420': attribute type 10 has an invalid length. [ 1886.758588][T11266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1886.776595][T11266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1886.821850][T11266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1886.841114][T11266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1904.000887][T13515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1904.156584][T11303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1904.166357][T11303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1904.174995][T11303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1904.184113][T11303] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1904.194899][T11303] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1904.205834][T11303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1904.214655][T11303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1904.222796][T11303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1904.232066][T11303] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1904.240371][T11303] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1904.248877][T11303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1904.257033][T11303] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1904.264658][T11303] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1904.273506][T11303] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1904.284533][T11303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1904.293360][T11303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1904.301792][T11303] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1904.308991][T11303] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1904.316684][T11303] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1904.324975][T11303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1904.334641][T11303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1904.342340][T11303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1904.350219][T11303] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1904.357411][T11303] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1904.366218][T11303] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1904.374190][T11303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1904.381966][T11303] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1904.389140][T11303] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1904.397099][T11303] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1906.449772][T11305] Bluetooth: hci7: command 0x0409 tx timeout [ 1906.456431][T11305] Bluetooth: hci9: command 0x0409 tx timeout [ 1906.462925][T11304] Bluetooth: hci8: command 0x0409 tx timeout [ 1906.499687][T11305] Bluetooth: hci6: command 0x0409 tx timeout [ 1906.599909][T11305] Bluetooth: hci1: command 0x0409 tx timeout [ 1908.499676][T11305] Bluetooth: hci9: command 0x041b tx timeout [ 1908.505769][T11305] Bluetooth: hci8: command 0x041b tx timeout [ 1908.512016][T11304] Bluetooth: hci7: command 0x041b tx timeout [ 1908.599677][T11305] Bluetooth: hci6: command 0x041b tx timeout [ 1908.700934][T11305] Bluetooth: hci1: command 0x041b tx timeout [ 1910.599612][T11305] Bluetooth: hci8: command 0x040f tx timeout [ 1910.605698][T11305] Bluetooth: hci7: command 0x040f tx timeout [ 1910.611868][T11303] Bluetooth: hci9: command 0x040f tx timeout [ 1910.699605][T11305] Bluetooth: hci6: command 0x040f tx timeout [ 1910.749623][T11305] Bluetooth: hci1: command 0x040f tx timeout [ 1912.699595][T11305] Bluetooth: hci7: command 0x0419 tx timeout [ 1912.705772][T11305] Bluetooth: hci9: command 0x0419 tx timeout [ 1912.711932][T11304] Bluetooth: hci8: command 0x0419 tx timeout [ 1912.749664][T11305] Bluetooth: hci6: command 0x0419 tx timeout [ 1912.849579][T11305] Bluetooth: hci1: command 0x0419 tx timeout [ 1913.801976][T22998] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2692 jiffies s: 186477 root: 0x1/. [ 1913.814681][T22998] rcu: blocking rcu_node structures (internal RCU debug): [ 1913.822363][T22998] Sending NMI from CPU 1 to CPUs 0: [ 1913.827625][ C0] NMI backtrace for cpu 0 [ 1913.827636][ C0] CPU: 0 PID: 11264 Comm: syz.3.12421 Not tainted syzkaller #0 [ 1913.827654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1913.827665][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x60 [ 1913.827694][ C0] Code: 48 8b 04 24 65 48 8b 0d 24 4e 80 7e 65 8b 15 25 4e 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b [ 1913.827709][ C0] RSP: 0018:ffffc900000072b8 EFLAGS: 00000046 [ 1913.827725][ C0] RAX: ffffffff81a5452f RBX: 0000000000000103 RCX: ffff88802b5cbc00 [ 1913.827738][ C0] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 1913.827750][ C0] RBP: ffffc90000007548 R08: ffff8880b8e35558 R09: ffffe8ffffc35ae8 [ 1913.827763][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: dffffc0000000000 [ 1913.827777][ C0] R13: 0000000000000014 R14: ffffe8ffffc35ae8 R15: ffffc90000007480 [ 1913.827790][ C0] FS: 00007fcdaf0ae6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1913.827815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1913.827828][ C0] CR2: 0000000000000000 CR3: 0000000061cb8000 CR4: 00000000003506f0 [ 1913.827844][ C0] DR0: fffffffffffffffc DR1: 0000200000000300 DR2: 0000000000000000 [ 1913.827857][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1913.827868][ C0] Call Trace: [ 1913.827874][ C0] [ 1913.827880][ C0] perf_tp_event+0x15f/0xc10 [ 1913.827912][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1913.827967][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1913.827984][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1913.828079][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1913.828109][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 1913.828135][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1913.828164][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1913.828190][ C0] ? __irq_exit_rcu+0x147/0x230 [ 1913.828207][ C0] ? irq_exit_rcu+0x20/0x20 [ 1913.828226][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1913.828253][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 1913.828279][ C0] trace_hardirqs_on+0x24/0x40 [ 1913.828301][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1913.828327][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1913.828347][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1913.828362][ C0] RSP: 0018:ffffc90000007780 EFLAGS: 00000206 [ 1913.828376][ C0] RAX: cac78c4a0ff87b00 RBX: 1ffff92000000ef8 RCX: cac78c4a0ff87b00 [ 1913.828390][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 1913.828404][ C0] RBP: ffffc90000007880 R08: ffffffff90af22df R09: 1ffffffff215e45b [ 1913.828417][ C0] R10: dffffc0000000000 R11: fffffbfff215e45c R12: 0000000000000246 [ 1913.828430][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1913.828455][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1913.828471][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1913.828497][ C0] ? set_rps_cpu+0x660/0x660 [ 1913.828518][ C0] __rcu_read_unlock+0x78/0xd0 [ 1913.828543][ C0] netif_receive_skb_list_internal+0xa11/0xca0 [ 1913.828570][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1913.828598][ C0] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 1913.828623][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1913.828646][ C0] ? mark_lock+0x94/0x320 [ 1913.828672][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1913.828698][ C0] ? lock_chain_count+0x20/0x20 [ 1913.828723][ C0] napi_complete_done+0x37e/0x850 [ 1913.828750][ C0] ? __napi_schedule_irqoff+0x80/0x80 [ 1913.828777][ C0] ? virtnet_poll+0x954/0x1150 [ 1913.828803][ C0] ? virtqueue_enable_cb_prepare+0x20d/0x4f0 [ 1913.828876][ C0] virtnet_poll+0x9a8/0x1150 [ 1913.828910][ C0] ? refill_work+0x220/0x220 [ 1913.828935][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1913.828961][ C0] ? lock_chain_count+0x20/0x20 [ 1913.828987][ C0] __napi_poll+0xbb/0x460 [ 1913.829006][ C0] net_rx_action+0x622/0xbc0 [ 1913.829030][ C0] ? net_tx_action+0x930/0x930 [ 1913.829049][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1913.829073][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.829108][ C0] handle_softirqs+0x291/0x910 [ 1913.829127][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1913.829146][ C0] ? do_softirq+0x210/0x210 [ 1913.829164][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1913.829183][ C0] __irq_exit_rcu+0x13b/0x230 [ 1913.829199][ C0] ? irq_exit_rcu+0x20/0x20 [ 1913.829215][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 1913.829236][ C0] irq_exit_rcu+0x5/0x20 [ 1913.829252][ C0] common_interrupt+0xb5/0xd0 [ 1913.829272][ C0] [ 1913.829277][ C0] [ 1913.829284][ C0] asm_common_interrupt+0x22/0x40 [ 1913.829310][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1913.829335][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ef cb 23 f7 65 8b 05 f0 7c cd 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1913.829349][ C0] RSP: 0018:ffffc900034c71a0 EFLAGS: 00000206 [ 1913.829364][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: cac78c4a0ff87b00 [ 1913.829376][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 1913.829389][ C0] RBP: ffffc900034c7230 R08: ffffffff90af22df R09: 1ffffffff215e45b [ 1913.829403][ C0] R10: dffffc0000000000 R11: fffffbfff215e45c R12: dffffc0000000000 [ 1913.829417][ C0] R13: ffff8880252f33b8 R14: ffffffff96e15290 R15: 1ffff92000698e34 [ 1913.829442][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1913.829471][ C0] debug_object_activate+0x2f8/0x4f0 [ 1913.829495][ C0] ? put_task_struct_rcu_user+0x90/0x90 [ 1913.829553][ C0] call_rcu+0xa2/0x950 [ 1913.829579][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.829606][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.829634][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1913.829657][ C0] ? rcu_force_quiescent_state+0x220/0x220 [ 1913.829691][ C0] __schedule+0x1087/0x4030 [ 1913.829711][ C0] ? lock_chain_count+0x20/0x20 [ 1913.829738][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1913.829761][ C0] ? __sched_text_start+0x8/0x8 [ 1913.829785][ C0] preempt_schedule_irq+0xbb/0x160 [ 1913.829803][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1913.829823][ C0] ? rcu_is_watching+0x11/0xa0 [ 1913.829850][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1913.829876][ C0] irqentry_exit+0x63/0x70 [ 1913.829898][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.829925][ C0] RIP: 0010:memcg_list_lru_alloc+0x0/0xb00 [ 1913.829949][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 7d ed 76 08 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 00 f8 ff ff 48 89 df e8 45 6f 16 00 e9 f3 f7 ff ff <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 [ 1913.829963][ C0] RSP: 0018:ffffc900034c76f0 EFLAGS: 00000246 [ 1913.829977][ C0] RAX: cac78c4a0ff87b00 RBX: ffff88807c332000 RCX: cac78c4a0ff87b00 [ 1913.829990][ C0] RDX: 0000000000000cc0 RSI: ffff8880749827f0 RDI: ffff88807c332000 [ 1913.830003][ C0] RBP: 0000000000000cc0 R08: ffffffff8e200f6f R09: 1ffffffff1c401ed [ 1913.830015][ C0] R10: dffffc0000000000 R11: fffffbfff1c401ee R12: ffff8880749827f0 [ 1913.830029][ C0] R13: ffff88802799cf00 R14: ffff888140009780 R15: 0000000000000001 [ 1913.830050][ C0] slab_pre_alloc_hook+0x2ad/0x300 [ 1913.830070][ C0] ? slab_pre_alloc_hook+0xb1/0x300 [ 1913.830091][ C0] kmem_cache_alloc_lru+0x49/0x2e0 [ 1913.830110][ C0] ? __d_alloc+0x2e/0x6e0 [ 1913.830128][ C0] __d_alloc+0x2e/0x6e0 [ 1913.830146][ C0] d_alloc_parallel+0xdc/0x1590 [ 1913.830163][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.830190][ C0] ? __d_lookup+0x8b/0x7c0 [ 1913.830209][ C0] ? __lock_acquire+0x7bd0/0x7bd0 [ 1913.830238][ C0] ? __d_lookup+0x8b/0x7c0 [ 1913.830272][ C0] ? d_hash_and_lookup+0x1b0/0x1b0 [ 1913.830291][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.830325][ C0] path_openat+0x949/0x2f10 [ 1913.830358][ C0] ? do_filp_open+0x420/0x420 [ 1913.830380][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1913.830410][ C0] do_filp_open+0x1ee/0x420 [ 1913.830431][ C0] ? vfs_tmpfile+0x470/0x470 [ 1913.830453][ C0] ? noop_direct_IO+0x10/0x10 [ 1913.830475][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1913.830497][ C0] ? alloc_fd+0x590/0x640 [ 1913.830525][ C0] do_sys_openat2+0x14b/0x4f0 [ 1913.830557][ C0] ? do_sys_open+0xe0/0xe0 [ 1913.830580][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1913.830612][ C0] __x64_sys_openat+0x135/0x160 [ 1913.830638][ C0] do_syscall_64+0x4c/0xa0 [ 1913.830656][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1913.830671][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1913.830688][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.830713][ C0] RIP: 0033:0x7fcdae15d68e [ 1913.830727][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1913.830742][ C0] RSP: 002b:00007fcdaf0adec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1913.830759][ C0] RAX: ffffffffffffffda RBX: 00007fcdaf0ae6c0 RCX: 00007fcdae15d68e [ 1913.830772][ C0] RDX: 0000000000000002 RSI: 00007fcdaf0adf90 RDI: ffffffffffffff9c [ 1913.830784][ C0] RBP: 00007fcdae232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1913.830796][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1913.830806][ C0] R13: 00007fcdae416038 R14: 00007fcdae415fa0 R15: 00007ffc426e75c8 [ 1913.830826][ C0] [ 1920.203736][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.210210][ T1280] ieee802154 phy1 wpan1: encryption failed: -22