last executing test programs: 4m20.803547458s ago: executing program 3 (id=2272): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x180, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 4m20.291412182s ago: executing program 3 (id=2274): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x3f000000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 4m20.007454875s ago: executing program 3 (id=2275): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0xffffff1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 4m19.755528297s ago: executing program 3 (id=2276): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'blkio'}, {0x0, 'memory'}]}, 0xf) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xc, 0x1, 0x2, 0xcf, 0x0, 0x7, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x20a, 0x1, 0x40, 0x7, 0x7fff800, 0x7, 0x1, 0x0, 0x6, 0x0, 0x36a8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3, 0x7, 0xffffee37}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xe56}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x29, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x8, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x20a0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f00000003c0), 0x5}, 0x20a0, 0x0, 0x7, 0x7, 0xdc, 0xfffffe6c, 0x1, 0x0, 0xb0e, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x2, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000480)='{\x00') ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x1}]}, {0x0, [0x0, 0x30, 0x30, 0x61, 0x0]}}, &(0x7f0000000500)=""/92, 0x2b, 0x5c, 0x1, 0x7}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xc000, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) r7 = openat$cgroup_ro(r0, &(0x7f0000000680)='pids.current\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000700)={0x4, &(0x7f00000006c0)=[{0x7f7f, 0xea, 0x8, 0xfffffffe}, {0x1000, 0x0, 0x9, 0xf}, {0x9, 0x9, 0x3}, {0x9, 0x4, 0x3, 0x9787}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r8, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x4000, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x25, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x82}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xad}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @alu={0x4, 0x0, 0x3, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}, @ldst={0x9eba9709e2a9dd8e, 0x3, 0x0, 0xa, 0x9, 0xfffffffffffffff8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0xe63f, 0x51, &(0x7f00000009c0)=""/81, 0x41100, 0x2, '\x00', r10, 0x0, r4, 0x8, &(0x7f0000000b00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0xf, 0x0, 0x7c}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000c00)=[r8, r7, r8, r11, r6, r12, r8], &(0x7f0000000c40)=[{0x4, 0x4, 0x4, 0x2}, {0x1, 0x4, 0xd}, {0x2, 0x4, 0x7, 0x6}, {0x3, 0x1, 0x2, 0x8}, {0x1, 0x4, 0xf, 0x6}], 0x10, 0x5}, 0x94) r13 = openat$cgroup_devices(r0, &(0x7f0000000d80)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r13, &(0x7f0000000dc0)={'b', ' *:* ', 'rm\x00'}, 0x9) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000e40)={0x0, r14}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@ifindex=r10, 0x11, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0]}, 0x40) openat$cgroup_subtree(r7, &(0x7f0000000fc0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@const={0x2, 0x0, 0x0, 0xa, 0x3}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x1, [{0xb, 0x1, 0xe0}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x75}}, @ptr={0x7, 0x0, 0x0, 0x2, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0x7}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001080)=""/142, 0x74, 0x8e, 0x0, 0xe}, 0x28) 4m17.496838963s ago: executing program 3 (id=2281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff0000cd90000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f0000000000)="8ccf5d9a2bc2879d5f2cfd4a4ed14798e774e3a3d506a61cccdd67aaa1", &(0x7f0000000180)=""/253, &(0x7f0000000280)="248b4436e5c9ef87b46af7aca2f87d892c3b00569407b920ca4e19bdbf98d78502e44174f6f318de3b034c7e0930c83e710c6915536257115e13a8093be7a0476685b46ab1d12aa191a7b505539b9ab1d24712866405e239e988e66e1c4ea229c67f788c6b81fcbace2dd1ce014d296e8c0d96b6a0826a1314f7ea00b3", &(0x7f0000000300)="3ce0b70b3af982a4287a14c8f594b772e7285dd6", 0x6, r1, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) socket$kcm(0x29, 0x2, 0x0) 4m15.747163176s ago: executing program 3 (id=2284): syz_clone(0x4c808000, &(0x7f00000009c0)="3e0c432d304da66bf339fe4cf2fd6e0b781e258d502e195d5adb20199787ac4a11ab844d051c6c84a9d6de0780bcf0b9b4579ae4667da7000929629eaac5c5f2cd23b41d50a98871bfa00db2971d2addefbfee331515a7", 0x57, 0x0, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4ac1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x20000000000000, 0x100, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040ead95667e006dcdf63951f225ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000580)="f1f2a8e261f1af420d90849e4c2d44d5d133ff828535a5fddb1b28", 0x1b}], 0x2, 0x0, 0x0, 0x7400}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48011}, 0x240640d4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f00000005c0)}, {&(0x7f0000000bc0)=""/226, 0xe2}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6cf0a0c01a5a875d21c29b646f0e6734a2de3db454fc22a2c69c4e4ff8dd3a05e0bf8f4526cee7744122c8477e2a080ec07a3fdddb9efd877ea322d1610a5a252f18e538e71d7f63c252349decfdcfe2cfd55d9e4eed5c1317091bb23571e482f5dba126928c006ca9ad88b1818460ee0f6688d7e3fdb721bf88346034500989809849fcb916e2", @ANYBLOB, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f00000000c0), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="62202a3a2a2077001e208881e7d025e2da3ca5c03bffcdafd53564b9af1682340e0c60e44137a485e0826eab61536c4d640b826574f004efde3a5c30f648d3fc965c3757b2200b0a7cfe01d853f1525e2d5dd9bd636a9eb0444ee9b7d3a5b2eee75410bc0acd1ed47bc4c8e3a05b75fecde793b1def1f40608bc180fb5e94268c0a946219bb647017390f5f11bb7942d97f1f887b20245872cacb27eb29849cb5a5878c51325bf9678ebd243dba77eb8716bd2db"], 0x8) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 4m0.263329654s ago: executing program 32 (id=2284): syz_clone(0x4c808000, &(0x7f00000009c0)="3e0c432d304da66bf339fe4cf2fd6e0b781e258d502e195d5adb20199787ac4a11ab844d051c6c84a9d6de0780bcf0b9b4579ae4667da7000929629eaac5c5f2cd23b41d50a98871bfa00db2971d2addefbfee331515a7", 0x57, 0x0, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4ac1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x20000000000000, 0x100, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b00)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040ead95667e006dcdf63951f225ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000580)="f1f2a8e261f1af420d90849e4c2d44d5d133ff828535a5fddb1b28", 0x1b}], 0x2, 0x0, 0x0, 0x7400}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48011}, 0x240640d4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f00000005c0)}, {&(0x7f0000000bc0)=""/226, 0xe2}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6cf0a0c01a5a875d21c29b646f0e6734a2de3db454fc22a2c69c4e4ff8dd3a05e0bf8f4526cee7744122c8477e2a080ec07a3fdddb9efd877ea322d1610a5a252f18e538e71d7f63c252349decfdcfe2cfd55d9e4eed5c1317091bb23571e482f5dba126928c006ca9ad88b1818460ee0f6688d7e3fdb721bf88346034500989809849fcb916e2", @ANYBLOB, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f00000000c0), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="62202a3a2a2077001e208881e7d025e2da3ca5c03bffcdafd53564b9af1682340e0c60e44137a485e0826eab61536c4d640b826574f004efde3a5c30f648d3fc965c3757b2200b0a7cfe01d853f1525e2d5dd9bd636a9eb0444ee9b7d3a5b2eee75410bc0acd1ed47bc4c8e3a05b75fecde793b1def1f40608bc180fb5e94268c0a946219bb647017390f5f11bb7942d97f1f887b20245872cacb27eb29849cb5a5878c51325bf9678ebd243dba77eb8716bd2db"], 0x8) write$cgroup_pid(r2, &(0x7f0000000000)=0xffffffffffffffff, 0x12) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 45.240378096s ago: executing program 4 (id=2981): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 45.110519172s ago: executing program 4 (id=2982): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 44.971480819s ago: executing program 4 (id=2983): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5, 0x0, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sock_ops}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000010000850000001700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f0000000a40)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/132, 0x84}], 0x4, &(0x7f0000000980)=""/173, 0xad}, 0x10120) 43.850002602s ago: executing program 4 (id=2984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) 43.679396099s ago: executing program 4 (id=2985): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80}, 0x0, 0x10000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000000}, 0x0, 0x10, &(0x7f0000000340)}, 0x42) 43.406094492s ago: executing program 4 (id=2986): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x4000000000000, 0xfffffffffffffffd}, 0x10808d, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0xe, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a8003500200001", 0x2f}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800", 0x26}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100af4a68ba6f084e62ea09b4e018000000000000000c0000000c000000050000000700000000"], &(0x7f0000000500)=""/221, 0x29, 0xdd, 0x1, 0x7fff, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1e000000ff030000190800000d00000000a80200", @ANYRES32, @ANYBLOB="0000000100000000000000000000551500000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0100000002000000030000000e00000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="600000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="9101fed62da8486009cde8de9d68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0600258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52321996bb0c1bb0cd82dcd7298d39093c", 0x52}], 0x2}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0xb, 0x6, 0x1, 0x8, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x40, 0x0, 0x0, 0x2, 0x9408c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xaffffffffffffffd, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = openat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) bpf$ITER_CREATE(0xb, 0x0, 0x0) 28.245842585s ago: executing program 33 (id=2986): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x4000000000000, 0xfffffffffffffffd}, 0x10808d, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0xe, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a8003500200001", 0x2f}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800", 0x26}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100af4a68ba6f084e62ea09b4e018000000000000000c0000000c000000050000000700000000"], &(0x7f0000000500)=""/221, 0x29, 0xdd, 0x1, 0x7fff, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1e000000ff030000190800000d00000000a80200", @ANYRES32, @ANYBLOB="0000000100000000000000000000551500000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0100000002000000030000000e00000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="600000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="9101fed62da8486009cde8de9d68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0600258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52321996bb0c1bb0cd82dcd7298d39093c", 0x52}], 0x2}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0xb, 0x6, 0x1, 0x8, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x40, 0x0, 0x0, 0x2, 0x9408c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xaffffffffffffffd, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = openat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) bpf$ITER_CREATE(0xb, 0x0, 0x0) 18.270808773s ago: executing program 0 (id=3056): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, 0x0, 0x24040004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="b0ff000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f00000000c0)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0xff00) 17.837211894s ago: executing program 0 (id=3058): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) setsockopt$sock_attach_bpf(r1, 0x6, 0x16, &(0x7f0000000200)=r4, 0x4) r5 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 11.701103101s ago: executing program 0 (id=3079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) 9.725669793s ago: executing program 1 (id=3089): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xd3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1}, 0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x1}}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x51, 0x0]}}, &(0x7f0000000180)=""/89, 0x4c, 0x59, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/43, 0x2b, 0x0, &(0x7f0000000280)=""/45, 0x2d}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x40, 0x5, 0xd3, 0x0, 0x0, 0x3, 0x8f5, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x1, 0x100, 0x0, 0x8, 0x6, 0x2a, 0x5, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000440)) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000004c0)={'wlan1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x10c00, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r1) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r7, &(0x7f0000003200)={&(0x7f0000000580)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000600)="a0d998557fbdfbad8a5315da7c16c1f122fbfec960e889b9862372738f41b44d15ec3403b1ff2ec5b9397ca5ffb500a98fcc0008a5ab7b0d8cd36f80e4e09947439cdeb6e5a9db5b47b8417c6fccc7ace25621c6ea199d49fce031ac7bde96970f4e28edc16377120aabd8ab8dfe0de3d159cb46ba16e56a8a7c138cabf32b7bad09aa7a81479d2f6f7ff65ddc93cc0cf99fa9c34fe723e957ccd7d888d3bcf3ab0e7e06a49cd45b5924bdc83c8b8203e3624e04a01e590ce36fc09a06527f84c56d2bbb64c643ceb85ef30fc53f05949b53ff8e81f1e8b4", 0xd8}, {&(0x7f0000000700)="eba57f", 0x3}, {&(0x7f0000000740)="67fd80917f830ec7aaad1e61c53dca1fe17d1cf119e6c18027847abffbd38c81546c0b8cbb3b352a8ff56189a10fb059f60ced48085f9ac0627c98e77ead742083aeb114bb45b9cc834de73eae68df60d66f6d592b9417a6acca3b571f8483ac9c5f8d86a86eccdf3e7f0e993f1bdcaa2bc6a6e09d49f35d32d4dc21c55e37de76254123bec8817ec0e8f7ce9b2e0d4343a06c2fb267ba25a22f18faa8252488f5ceeb4535802521591a46c616", 0xad}, {&(0x7f0000000800)="34302bcdb7e47acde928", 0xa}, {&(0x7f0000000840)="c8aaaa", 0x3}, {&(0x7f0000000880)="ca5384c14922dc49458fd426e8c91634a31fb5ad08077b8f1f466b8a5b4cc77add216164e5aea7575ca0dd3d07445666d33002692c4a932a08d509a52e4ce74dc4da9610f9b8c5655e75d5eeda712feb94a6033b430e4a8833c65e0bcbb920893042901b1ce3fb0b43598361e3d46a0b3c305800316e0fd7e90d796d574fce0de8aa6a36c7a1111833d2981eeb6fbfa4b4cf06a43b88607ce34517117e1525a47497c6c4de086128ae2da313d39eeb2531eaf8b021fa7781581f17bcb542804664db4ad346720c50f2e3b68133dc3f8629ac784ea5f034783983e843fa7747526b5e7821f3a2482ecdfb52b4f088fd7497c1430cf991da", 0xf7}, {&(0x7f0000000980)="5db914e9ea16d4a9122c320e669836c7b0aa01ccc4a710679c80a27acf5728db26e37410b6d7981a32c059e0b3098e2c2a3de426938291c38bebe0f93a524a881b8a46b2bfd7ad706072e923a770bdd4e20345d7103634e7c3eeddd1914d39", 0x5f}, {&(0x7f0000000a00)="fd5878d48868015c6000d78613b6c9426d19bec0a88a4f738bdc7e015dc3de48cf0f8fced280ff115e257dd517eea115c056dd4ffed05f66d8ca8db6982a274686e9ef502338ddcd4ee8a7c242210f36f2fc3216be5b5847eb6283202382b9256840a977e06c20223f175b012367d070b2c230c94fc3750b36c30bf4ce9f57d6", 0x80}, {&(0x7f0000000a80)="54416e6644d1f2d87327a262481a69e5a07d00751ecdbedda04e527efe514f15841d058d234a78a0733e423c08e4db90cab31e9c705e06ea875d94fe8e20260de765d8e91a408b729ef257e96a27157ce689ffd5576388f8aeb2b351b232b311d8b711e8ad45fb400169c0ff25be77dd8c8f92ea2d5b118da774867f8c0002cfdb89b8a90d11b91bd6dc0d4151", 0x8d}, {&(0x7f0000000b40)="1bf33d160a64db8ff6cd7f40248e35949be209ee34223234daa23b00e58c257662ffd4ea2b5bf24f85ab2093d062a7a4a22a95e1591f9d30eb2c6d1901b7b5d484f7277320dc9870da88a12cdaf0128563594e77742ae76ec77aa6e39dfad24ce6a8386c52904fee440e9dd527c080cf1873b9fa3cad48db3ec766be4346c48542234813a2cd326fbcb83eb3e1", 0x8d}], 0xa, &(0x7f0000000cc0)=[{0xb0, 0x117, 0x1db4, "3d75476f15b6af1dc2faf89356fff24b6521f4a6fef2e3e26b57dd6b1416316a60ad3794dd278f0b7503ab21da9be3e16e67e8440121c9f9abb7c6a90468413a3028a899fa1de13f1ffa6761c77a130fa98db236a2bf1d3cc1a9c36e25308058c4a9df4325384c87e01044b103f1b66101ea253625fe6fea18e41d23f7bc244b21b7255e6ef5cf2e5c857f63bec646984bfd24d35f46d44f03620d5a8e"}, {0xd0, 0x88, 0x1, "2bb0eb690794ed165a30895cecf983d421b31f849152e399f4aed32eeda8c20251a8e9cc8a59eeb3ad8aa11e66a749cb770e250533b0b3957e9ed0cee8d320d2073aff7369eead442c3614a97a0115618a74f5b2ddc774a5de9155ccb58f8bb0b6aa500a0e8617ce9346b555b48f38f6c678c31d6063c6b1b47b2e70b81b0929a6ed60257cc3eb1a13f8b5eea5fb22f881e4e82b4d8423b54cc70fe5e9b920ee88d64b05182802ba9150b445ae271d6859df9238a99dcf5fee9f7341d0d2"}, {0x1010, 0x113, 0xe, "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"}, {0x1010, 0x10c, 0x5, "df2bb57a52bd6e4697b4e42fe4f8b43ba38aa9f936c00345d3cabbf4cca89b7b517b6317e341c8606d0928730fc0ab5575609c5f5550ed9e7cdbdde46cd82499b3a3e56d15fef02f95cb71d5278b0191b7e4b7ce4fee74fc5955ed34d0d86db86cb46d4d516acef965d9dbfb5e65aa35000506c3112ef0e3f36464c30e5d014729e81bcf7daef152d85b586bb2b519d4288bca95455767c4f22030ba0ef2dd394767db08a925497ecea93e62eb1ad9942eb8f98fff0e9aaad81e5d8481b42caa4cd5862ad916da7399eccf556bd64c99d5634ac54dbcae483930004e4af6c5816f24eacc3de48392f2024d8d67812c09996ebf91d22c66b06d7ec03c9ff02df0577b3e4ac4604af005568f84b780b90f965cb8f639e4b3c82817d0fb06107ec44ef26e59fac8cc44b7eb0fd3baa4c542298e792f8a9f350981f9a0652c2c9d766664b0822650726092e6e0e54735ddd112ab4f8610c6027bf0261f72a4956cac498a2afe2e4c0edf4c2fa1cdfe8d2144c514199eae7b2bca1c24cd5c7ef9541b05642a33a5e0164bfe7440349483112abb253abe0ba899da46c75c038239b32f4c3c10ec792564083f3f12b24c6a7d94c38f90a59ce77e0f8818758a8f0fef185bbbd6fe5315f4fa871dc4d6b2dc1a292b2c743a9da928c89b37337505fdea3568e31363427b90a415efd95376f027e1ff807120f6482d0b43bfa46b6b4a33924be9032d5096c9d868b990c60a9e349add327ea27e2d8d237d66ca88aeaee6519849ff558ca1316c51fa7f706e01381c7f658f049a84d36d499f39089f7ce9206e159e66e14fd13f8206d3acb001edcd59621df5357d5a8884bc0ac826a3f0bcfcc825a2447e0d9a30d556036b59d11036f38460bf3192e1aa07236d759a0973bf292bfce076db98d34598dd1d2a4ec97ca1c37f83927f9327dc58ac0db91dc4cda0934fbcfbd82fa6b89c848f83ca6a14040b60dbee22bd5d2c74e38bb922e94931dde2106ae0e3e96313d3f03a44ef1d627fe72c44f9e75eece0d233b323431246fcf2e98efb0023f4a3e62b1fd112c0337958baa93f83c445a9e74554296f48db891b453fc7fcb58121908644de614a4479033bea40a1f7c53e117b37498070645d58b959a0260f4dbc365efa47bbb5e20f4c123aea6a9c5249c9673483a8406a32cde81d17c66f972ca08acb86828e2da7709248ff3fbe4242739cddf1454998ace2567f6d60df1340c149dfb28619b4bf5f86f84735b200d05c13e91d2002a44c7e298b7649cdb9dbde123bdc33023858b59c157f5c9274aac409baa0b52e2c24e9d0f6f3117a07c19fe2eb8a30701d27a416bf77c956c52a411afb2f14f53e0239ace9cd6eecfef97271adfee7fd63d08b5d3b35fd08b7bf91cc44554a53489524c8438ff75b9f21755645dede694d05089b836942c880f7251fde4e1e4ed01ff37d1eb17fc3d7f7f552c2e9edffd9812503c34f4f152a0cb19f765c3a1d2043cc1830e4c8bebb9bf1ed956174ade49ffb01e1213c5e42c3c233482fb09fc84551c7a3deff5975a5c0ba8f158329b28a281616285b85140398eabd5ed16c925bf7065b2067f84e094d11d077cf78c83b2a0fe3a2ebc7a99bee6f2f314acf180a4b01b764983031713e5e4c069d8592a8e603fdf8c0e907c27a5afb5b4b48a09e3a056d55026366205ac6f788fa174c2259662b7e77cd84d0e743d2a786f896bf6c23235aa79eacc8959aeb0c6607799fc26b3ecb78760f6c6f0d7a20bd112960b00139d40842a094dcbb1b0ed2ec17c819b747d6b7d4b34b2f2e7309ab7ffd9cc20374b20ffa640586a9ea4962225930fae19fdb0eab37bb83af74ac331edcbb9190e3a738b229fefcebe4657a9c9c087010111842b49f8ecfa411d973bbaad78889fde244300128eee1045befe3182000fa0727a344035deb15e4fe5d5eb2ced068dd12dedca7a48adcc91fa816e59597e246fd182d365f84845b50e833d520f483af09b23883e0fae9b7ebe62ddf641d85eb2201ea7afbd872e2f54607b86091041ac3685715a74d46e07eea79ef10318205ac1344a6d9bc37b73cd192c32e78d8d38b5d8a0e4619c7f558c13bb7f546646a590ca86e09dc7fb80b0e0b54f8c94ee187983151ed7faaeaae22f669dffcc68195667cec659d975bd03cfe1000980faa5951be96532d1ab8a37ac8a7a1b3827b3e08d425a61f82d9ff3fa12593dde4af0ec70da5aa2c30ad5caa96ef6719ccc6e1aff071baca41412eb9c332c1d0b4a00973e1d614e41583f043c0c0b2730bf33faac5272748cd3023a9c0030c9e1eac86ea7a3cf8b0aefed1fe36e0d8d193b72c2808e858440039043cc859b1adc7c60fbcd3c9274d1ae5cffeccd2d122d5a5ec67f4fb46134318678bae73302bc064eb7b77903ab56788651ef992e076a72d75497d5bae920ba4b1ea7dd4e7178da36da5614ef4eb8caf86b49aceee3e5b7bbf520726fcb549f84028d94503f6fec9028a3d19ad6828855591a0b43bfbc646a2709ff4cc487b0635f7c295a3e4691b83f9cc9c462b941f56e788216a66c48e2226d58f7d9600c23f9c108814c4d6dc22ddb59dba410b8e4007b840e7fe1baf2785d77a14b8a7516b6dd3f6a06852a0ce234f844e76e64f131ad18b4c78188b57dd272d0643571e2e70405d83b6e7be023a0fcaaed13316934503f1feed3efabb322236c0a8245a32f0dbf27169b53af0de5106e5442866b4a0d9d1cac2bfdf09c35b6299cc5ff4598ba9a45b5a1fb7e91c691dea28189e084aa4ce732b33e807307ed57b509966e5c4d0c8624854ba0b52f122e58a5c2a4dc8cf126bc95e8abb9adbc1d37846dd97ba8abbc272ed652df7d6e821e56c34df6e073d6289e220caed0439f2204a1ecc5d4900453f158aaff98647411328f9f0aee6d3c626e9162fc89fa6597ee3d1f1e8abb799433a50ecac351ba8458c58837a5405ce792e2fe8ca4bbe793af9179d4b5bb10a35e0a34759d7c5fabea2557461d6b2f266eae8074b10b522e5d2b68b122bd1245c2371dc16747b5b20fcfb98f718e211053125c6d75fb5ea31aa3255346a97cee29c4dc2c8d7cd62f1558105c8df420c3d2f96eae0500cd12685572077d39aa17e63c853eb9a7046ae4f50381a4b5b17674e5f61af449065b7583b48c94eb06d92d7b9d3826d7785294f6b651ca4a999f60080e2133b4a66e5c46166162281c033906d478f64030fee5e16dc648c5bdd9717dacd22f31dfb65fed3bf8de1386923edcd9b417d3fee59a8af3cc6ef2a77ed6c8bd42c5534da4cb8dae46d83cdea54c956bb90169391e52e69868bb699f5f5bef9a3f4d332d1f13ecd805cbf57fbcc4231b926e4f926a2bf4fa83d0097acd07c8214e74da40d75c4d74c37f67a975c826de1d4e857e0b705289e14339638e8ea4598b1a6f1125be33b97a97f2ca6e7e154027c741af7f5c0ea390e755295ea91c4d29a43eb850942c0eed8bf7fab5edefeba3a659f82b7759872f1031f13ba09bba67b19a0b39ecd7ec07878ce12ff25509a7079f36298cdeb814cba4c9dab8c92ecf5b92e1fa984815b400e15124e31f05f331a208e8f4c790140e7ec437f129a30a3f2fed06fe3b8a18509e8b6fd4f01f6363fdd451403071e645c54639c0bf5fe1a16f98f87c08e740d8e5273cba778dec54f3abf377605a3b380ef9748de85f19752ea0cd7c3c6231046790ce35aecf179dcf5183d261d3b879a22e0deec0c1ebe5fd61a70c08cadf23e45d6c15b2c7c9b2f8fb7366fb586330abda08073b135817a41d6c388f71149cbccd97338d7f2cdcd4e379fb467b5ebae4ea5d517ca1f4e3aed54f00c5d3695bf8087768dd91da95f3eaa275fb722c58bb2e69547e649caef8785556e00aa9ec2277c372be6d21af675c1af9a6676d85b89d44424ec27f92663240ccb2320ebe3882f3af84e5bc3c21b1f752a894a3b831a5341e51bd0b03feb4613e66cf1d5db896aa7486685cb1338ac1fbf1bd2ede12050045cb0b03ac7a4949e4f4cd06d14c9e63b56de786b929b22def225aa19b62748734c898b190fb5208498dd1bc535402227b52515559a61d96bee9f2bb06c241023bd270ee497d85a1611e6ab1cbf0345ceab884d9cfd4e30c320fc529c1cb632434d2f59d1cf09dc6f1153220a01f41169d72e424c150b27042d0e83c8e3c0c1986ddbccc6ff9e40756c34c37543aa1ae706d1f00348618f1440b59b362c6b5004f8a1c06b4d6db36effabee193f220f680329ba3221cf3e8a7e0c14de34fa10677cc397780c09d0a4eb310ff5050171b59927689b141d59e4f70532963e7972c0fecae99fae47256236196209bb2e79323f9f55354fc2a3bbab595df4f5ee437462efe19f6bc7d7799e7f934bbcf31f7555f621292e293d628ad0988abab17573cd42d4319ab245a7604e65b82fc8767963abbda6399e446cfd9a1d03b179c035c1e6c907546ad0bc248f24349923215f24b35e4dc1dcec5e1e304a0871239f51c4aaa364958dd6f0519509e0ef9081dabb2bf5a80b8f415275b407a2f9983df0efc8c6943722e3eacb511fca41efa41c845e55a8bb17dc6793a8bc5d98248807f4258f50da62d250a0eda7d97b032dac30743df0fa05a4232485dff8d6dfa2821a38aa3573f793c6828f55e0aa0d6e493e6f9165c643a8850ba11dbe44aad68980b876a389690e65412d9af116c5ef00991b7448dd586f841958dfedbca1c4c018886a44bdd51811bc56f71f1c71256f5a340ad8142c7771e01458eed5903744627df0488d52360885aabc7b13e9eb6dc22905974db9276f31aa89e9d382095b94345cfd9180b12bd9ee6ff88c1b20099b47b2dc40008a8fd7f67c0555e9287e10d4ee26f2567b3caaee9d5ed2585ef6303c1635ffb86cc916fbaec0083703ce634744055d2c13d93091793ce31bc0f316041e61f5108dd18af6028bee521261449343ed81162eee4d3ec47c61def2348f41c28d9e0a25f34cf38ac490ae477adc89450cfad675b576468fe0ede84979b15c85c0419bfcc0d5055839a16ca5db250a35900307b915b9cf1761685e92dd5a71bcbe04197d4f1adc63c75d67cae7a25a86c2b691c76e3007711e0fcb0ac8e9d3bb8c13fb60961dd1342b1a2cd8a232f2ac16e1e5d162a3ef0a5df04646d06ccb190465e6372d0eb741faf486a9ea38abc8b4df721b5e8993b444174cb548fbea6aabc0353c5d8436e364e7cf9082f87de71da4177a280f6b4239f9755f7e7532fe1c502fb8050d4279571047cb2c38056eb0e74460cc177cb4dd887eb1677921ed7ea3a29911734e942bb5a45182dadf0c72ccc6ccb161ae2a9baf0fb23715a2e004ca6d744c1f9746369f002fb6de32a6571a74fb778856d37954128802a6d131519c3b29ea6a7ee988782bd8394277f0bce22585c711f4cf992845892a397ab3f1a8e06e4cbd762daf85f1658603eac19721d7691e3cc2b6dfca8b13fa5cdf4b81c75ab4ebf40f0048feb24d240194092f84a7c2e22573b1df3988751611c457735a8a6adc04c0ad4e08c7cfc689e26fa26e744c785ba8a957c0e3864305adf4a60d4ef635b7688070e6dc0dced1652e2780d846f9b37b56ffd50d3eeab70255fb4a1b895a3c685a17c930b9c2fb657a8c6f87383dafc9be8d41fcb58d553e9cbb690fb49177a165876091da459bd51f7fff54ce7200e3472047d6adecc98cbc4c735656a3a8deb48084d78ec30c04c9d25b45aa1e3bbdf6188efef660f3f468a50f863d11733716dbb158e0ec4aead68f7eb0145a7ce4bbcd"}, {0xd0, 0x10f, 0xe0c, "1380bdec3ba6cdbd7c683507d6cebb8a82f28e8d7725f5c8c57860a147cab611c787468e1106f084a1ec45583c102b3283efed30482cfe8186544aca806798e77eac524cde649a2147545b7a14a024ac1b2116ac9aa52a3746a174bbecc36655be6f07be8acb289e8c6faa38d4bd263d2887903bf0a5f7a28cf14223e16e64cae8a7712badb071dd641937e11b7e2c4a47c64a5e1001268d146ae072a6b446f5f0c4b313ebe6ee381ef27b2d856e3e242be67dd416dad5300581dfb43bb2"}, {0x80, 0x103, 0x4, "b0aa6064ed7f660eeb17adf5e35503f50b211902134ab760b414065f592a2f6561a550ea7053558e27149f5a62c0590e37697a3117c288a8110f7071f6bbf9ce4ad3a5ad992158bee8af2fcd9e72bc709e8132a27b22ee53d1b8928fbd2e04286e1c93d59dbe520ce540"}, {0x90, 0x0, 0x6, "81277baa1c0c681809816e76724336705048798cb618d598d5099d15d538fd3ce9605e9ad9caa7071221a815f9ddc24b250a00290c9e3a92d2852707ea0e3705edc0b1363d7185428815a68babbb75e9e6c394d77cc7e0faa1c4c23535d774c24bf882edf795cf122dd78a08fdb7d854bf1f10ef9e4885979a2fec9b2dc4ffca"}, {0xf8, 0x420a6bbb42ce5336, 0x1, "e4ac3b5e2d02b7fb3466cfffe21d3c2fc210a9bfacf47ced48bcce6802e1deafa551686f9790a03a51fa811f42560315e7806d011d0e609e01caf6f3af753034a75c2f2db768cf0089c26bef3156471fe385858b9746fc033cca36736833075b617fc03970dc774d995eab4ae94790861d21f991132c1913af318923c1f13438035e979844713995dca46065e9b1a237f9bfcf4f5810a66760068d0d7404103fa2c71a7d0a40d30ba5ebe08c68581e2c08e96e8d5a7f0915db1cc7b0532c4b99c209c9f42f66741618f235252aa2cd6f87962de0f686f6517eaa1284cf14bf5e3c"}, {0xb0, 0x10d, 0x3, "0f0d426ab7580ed0aa7173c4172575ce5ea6071062c2cd790bd7fdd4874af84e2d35d7bdffd986392ca150e3265fff4e76700ecbeca09f74c3f78d10fb19920395b360f2dfd53366d34f0a37558146eb46d25641e903209e607d4b94cedc25f5dc70838b0b0ad861b10c6ca4815332a6b31e222ea0c64d3630ebfb347c694bb64e205e175d5e568ae25372f0c204fa13c05149a0bbb583829ee1fe9c6d68"}], 0x2528}, 0x5) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000033c0)={&(0x7f0000003240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x7, [@enum={0xb, 0x9, 0x0, 0x6, 0x4, [{0x2, 0xdfc2}, {0x2, 0x7}, {0x9, 0xde28}, {0x1, 0x8000}, {}, {0xa, 0x4}, {0xb}, {0x2, 0x10000000}, {0x4}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x5}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @float={0x8, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61, 0x30, 0x30, 0x5f, 0x5f]}}, &(0x7f0000003300)=""/169, 0x9b, 0xa9, 0x0, 0x8, 0x10000, @value=r5}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003540)={r5, 0x58, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003580)=r3, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003640)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x9, '\x00', 0x0, r5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003700)={0x6, 0xd, &(0x7f0000003400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x500000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe8}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000003480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x6, '\x00', r9, 0x25, r10, 0x8, &(0x7f00000035c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000003600)={0x5, 0xc, 0xb, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000036c0)=[r5, r5, r0, r8, r11], 0x0, 0x10, 0x5}, 0x94) r12 = gettid() ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2000200) socketpair(0x18, 0x3, 0x3fc, &(0x7f00000037c0)) perf_event_open(&(0x7f0000003840)={0x0, 0x80, 0x7, 0xb5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000003800), 0x4}, 0x0, 0xd6, 0xfffffffe, 0x8, 0xe, 0x8, 0x6b15, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(r12, &(0x7f00000038c0)='ns/uts\x00') ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000003900)) openat$ppp(0xffffffffffffff9c, &(0x7f0000003940), 0x8000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003c40)={r1, 0xe0, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003980)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000039c0)=[0x0, 0x0], &(0x7f0000003a00)=[0x0], 0x0, 0x4a, &(0x7f0000003a40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003a80), &(0x7f0000003ac0), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000003b00)}}, 0x10) 9.57647755s ago: executing program 1 (id=3090): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffe6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = syz_clone(0x40008000, &(0x7f0000000380)="4425a24013fcc3712e6fbd9e54733f08992d35185fd47f8c7e3f51548f7e5c8c493d74bc34c8fb4e2833bd178913b54f382e614c7194970128579bcaad7cd9bfa3ace9bf2a49cae446862b1760a82c5207def777ef9094ab9ec5e75328a2ddc2160f94d449b613b6f2b6e5e223fdd6521a147973af8cddbaac27591e30e7dc54e6adb4ed67f74303f713d9cfd44a8dd4682c48a9da1009308057dccb2b50ffc39fe12a3abf3499813ff59b6d02a383b82a16cffaf6cae3b26ae51c4f2ea164b48e3cd3d934b1a48e4b4d56b06e2d02d23bd4cfdd0221c39a71d767727722dbd44e6f32b9c2a7", 0xe6, 0x0, 0x0, &(0x7f0000000580)="74a28b4b698355c9fc7235cdfe45f3120ea5347e6e90556593c04e3d44047ae1981c9ce8353042d81b03f49afaa72ed088be") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000005d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x6, 0x2, 0x7, 0x0, 0x64, 0x0, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x10c002, 0xac5d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x0, 0x100000000008001}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) (async) syz_clone(0x8000000, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000300)="ecf94da393fb2424b69d2b9a49ea15988949fadd610574a4332a5f648c499398b7ff95aa71078207431ef70cd8cae857e60930db6718564bac513c47e7b46c62fa9ab1f73aff20335bc311654cb5ddbf527b3eb8004d75156d732b1bc4ee0347e2e1c9dea5e690391a1172666ce7f9a93259ebab3e") 7.212191891s ago: executing program 0 (id=3091): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffef5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_config_ext={0x7ff, 0x3}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0000800000000000000000000000000000000000686e7b030652efd5ce8b94fcd48a011a872c91eb67ff3f2fc249fbdbc2704a07020afdfb87439dcc390bebbf6809fb6ac99a4dc24a8b30477ba0", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04000000010000000500"/28], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000100)=""/227) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 5.593217597s ago: executing program 5 (id=3098): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40044) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0xb) socket$kcm(0x10, 0x2, 0x10) 5.386883137s ago: executing program 0 (id=3099): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xfb, 0xc8, 0x7, 0x66, 0x0, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x21, 0x1}, 0x100, 0x8000000000000001, 0xb, 0x3, 0x4, 0x4, 0x6, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r0, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466ce0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547e0500dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r1, 0x29, 0x13, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000001d711861000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.10309141s ago: executing program 5 (id=3100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d070811"], 0x66) 5.10265097s ago: executing program 2 (id=3101): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000040000000000000000000fdff00"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)="43af80d2701382e2d89a4c37d1c87047d45a4d4d1cd1e684d36d563fca7f44c2d2c332fdccd8f153b80d"}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="020000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0xc084) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x62ae00, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x5, 0x0, 0xc64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, 0x0, 0x100000000, 0xffffffffffffffff, 0x9) (async) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) (async) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="14000000", 0x4}], 0x1}, 0x4048810) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000000000000000000000000000000000000000000000000000000000000307b8a0bdd366aca22e0f94b6f5491a92ed5553a91c05a3de8e340236b552d2c4717dbcb32f9a428df892f9c2dfabda0d3637d97c9a0cba1a256b4ae670130cbceafead0e7681c104bb0980392907238ffac8db98e2148234eff100eb2ef40f0ac98f0df07c161d01b162520da886d02e36c05e368c5cffb0d7ea97bfe9a3d8bd07e687fb705f2dec4ecbd57b51253163b5c452ce1280d592a256766020dc2ff4f184f8f367f38eb85ff62cc713fae872e5eb65612adaabe6ef6ddd9309b18185c57b7d78e8635982c26f99d27ac"]) 4.903718059s ago: executing program 0 (id=3102): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xffffffffffffff12}, 0x44005) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000befd5022dffffffff9506a902d38c", 0x15}], 0x1}, 0x0) close(r0) 4.843600742s ago: executing program 1 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b00c84e21000af32c6e0a0675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r1}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.743519807s ago: executing program 2 (id=3104): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fed0ffffff8500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) 4.704955689s ago: executing program 2 (id=3105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x9000000, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 4.576917875s ago: executing program 2 (id=3106): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bc050000000000007911c0000000000085000000390000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09ff9708ea6e1900000000"}]}}}], 0x40}, 0x20002880) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000da080c65c44a547b6fdd80000f00000000000000"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.156392068s ago: executing program 6 (id=3015): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0xfe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80}, 0x0, 0x10000, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2.131435s ago: executing program 2 (id=3107): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x74000000}, 0x20000014) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x40, 0x0, 0xc2b7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a8064742594f907000000", 0x14}], 0x1}, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/time\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa1000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000240)=0x5) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, r5, 0x0, 0x0, 0x0}, 0x30) 1.885599431s ago: executing program 5 (id=3109): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40044) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0xb) socket$kcm(0x10, 0x2, 0x10) 1.638794043s ago: executing program 6 (id=3110): r0 = socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0xc6b7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x73) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273f"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) 1.527987337s ago: executing program 2 (id=3111): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5, 0x0, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sock_ops}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x17, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r0, &(0x7f0000000a40)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/132, 0x84}], 0x4, &(0x7f0000000980)=""/173, 0xad}, 0x10120) 1.419121163s ago: executing program 1 (id=3112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x581402, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) (rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={r2, r3}) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r0}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x78, 0x75, &(0x7f0000000240)="191702eda28a5b24122309db431f78e2f76c469d14d82864aa407385e54a3a05af92ed18458c264bca99349f28c55a10afc08e19324424cccb4b470a0688bdbb54bf744bcb3dfc74021d9638afb8e6b51eedef237a9d66181021520d5de31424b343b95a3f398d27c0ce6bc9e98c1726eae1c4a73388782f", &(0x7f00000002c0)=""/117, 0xffffffff, 0x0, 0x7d, 0xdd, &(0x7f0000000340)="8be50f504e8eadbac07e4dd220db9fd5789675fbeb2b482acee5165ea7fccff637747f0324d2f61bfc03ae7bfdbbce3e2061fdc33368818b23c2589d35faa1e45b051dca2df7f6840e217f1f0160f1a1359cd444916c007d3cee59e034b8e4fe563ac6dcbf641033a8df6c560155300b9b3314682dc72e31b237836637", &(0x7f00000003c0)="0ca2b989411da1e2b2025135b66bd137739c8579f65a8fc973594e002a38a4f7c0fb66516ccc4aaa232d916d2521b6c84d7c0a65e5956d583cd0b7d8d4d3f5d52d567381b43130dfa729beec062ecc4688134d4da6a47497a8a77cb795968ca8cf6bca055c2927d1b56a2f3207a4460ecf4bc72beac4779c10a6953f3ead6a88bb00d90310973dbfae04fbc7784934d4b754fcb7c1171d6dd2b200779a3fe6e6164e24f85b8de1064c6ef0b55bef93752a861a0fbe0dd845fd0e87468319f83d754add34deb6214f283f7d521b4f1ec664b51eab586a578a1cdc1532fa", 0x1, 0x0, 0x25a3}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000880)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000008c0)="c37a10051448a5ffd579c78b7ba16270940e775b2e44d32bb08aa1c072c35e5d3941bc958ba2d803091c", 0x2a}, {&(0x7f0000000900)="386071b07fb8b721897323db33a180f7cf7446d0af0c1cf06fdfc4f4bd8c9af69691c51e64a0626bb645ffccc69ccce0cda54e58a143476bbf4f87ec950011b4c8fed5584fcc25b9681f64896261837c67351aad9a3fea6092a4f81549d2afb8aedbde2ad6c1d21534722747c12bc6ed796dae5392b34c07e03f3487cdaaac73056d39052418096aaf360e99f96a288641ca1074892fde8f663fc3d6b150651b2730e5f8f1bd5b2bf25a6612541c76e4434d105b33a2bae98d7b0a5f2db2933533128c521a78df683abc593a699325147ca88fde816727885aebbce587e716fdbedfdf", 0xe3}, {&(0x7f0000000a00)="ef726b49fa2fe114fb9fe4ce299ec5c1afde957c9d338d96437afb057bff1bf4bee6c0", 0x23}], 0x3}, 0x20000804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r3}, 0x20) (async, rerun: 32) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=r5, 0x4) (rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0xb, &(0x7f0000000b80)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ldst={0x0, 0x3, 0x7, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000c00)='syzkaller\x00', 0x6, 0x4c, &(0x7f0000000c40)=""/76, 0x41000, 0x1, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000d00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0xe, 0x5, 0xe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d80)=[{0x1, 0x5, 0x3, 0xe}], 0x10, 0x8}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0x0, 0x400, 0x9, 0x804, 0x1, 0x0, '\x00', r4, r7, 0x5, 0x2, 0x3, 0x4}, 0x50) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000f00)=r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0xa, 0x6, 0x8, 0x0, 0x8}, @generic={0x5, 0xa, 0x5, 0x8001, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0x5, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r6], 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$sock(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="38050b23530ee4e2dbc841db7fc9cabc7bfc914672771efc5fd8fce7775a73742b8db2b6b5a96ac7b488d79e3f321a00d98c1ed27b3035a4720398c8ef824da29f4eeb6e4080b726fc9867bc87ce992e688531fcbd681a8fb4f7952bd211031ce1107f7a0fc7f96688c5052e8a7ce73d21da841006bcbeb88086ebb491087d18850e030d878fecd1f9f2aebc1f802a599bdfe631db185551e3426b7adc0f012c44d21522522e29eed9022ca84e9eb9f77f636f3903ecb956007ddb1b75949c87c48f92f1f0d498b05fad4284ddb75deeffffb6b4edfce5d9c1f890c80a9b", 0xde}], 0x1, &(0x7f0000001300)=[@timestamping={{0x14, 0x1, 0x25, 0x46e2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}, 0x10000000) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001380)={0x1b, 0x0, 0x0, 0x7999, 0x0, r6, 0xffffffff, '\x00', r4, r7, 0x1, 0x4, 0x1}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x1d, &(0x7f0000001400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x336, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x1, 0x9, 0xb, 0xc, 0x100, 0xc}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001500)='syzkaller\x00', 0x3, 0x9b, &(0x7f0000001540)=""/155, 0x41100, 0x3c, '\x00', r1, 0x0, r7, 0x8, &(0x7f0000001600)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x1, 0x5, 0x80000000, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[{0x2, 0x1, 0x2, 0x5}], 0x10, 0x8}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r9, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x18, 0xc, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0xc, 0x4, 0x8, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}]}, &(0x7f0000001800)='GPL\x00', 0x7f, 0xeb, &(0x7f0000001840)=""/235, 0x0, 0x24, '\x00', r4, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r3, 0x6, &(0x7f00000019c0)=[r6, r9, r6, r12, r8], &(0x7f0000001a00)=[{0x2, 0x3, 0x7, 0xb}, {0x4, 0x3, 0x7, 0x4}, {0x0, 0x3, 0x1, 0x3}, {0x0, 0x2, 0x1, 0x9}, {0x1, 0x2, 0x7, 0x8}, {0x4, 0x2, 0xb, 0x9}], 0x10, 0xb4}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b40)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffff09f4, '\x00', r4, r7, 0x1, 0x2, 0x3}, 0x50) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f80)={&(0x7f0000001d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5}, {0x8, 0x2}, {0x7, 0x1}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x9, 0xfffffff8}, {0x2, 0x9}, {0x8, 0x4}, {0x6, 0x9}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x4, 0x4}, {0x8, 0x3}, {0x5, 0x3}, {}]}, @struct={0xb, 0x9, 0x0, 0x4, 0x1, 0x10001, [{0x5, 0x4, 0x2}, {0x2, 0x0, 0x10000}, {0xc, 0x0, 0xb34}, {0x5, 0x4, 0x9}, {0xb, 0x1, 0x700000}, {0x1, 0x1, 0xf9}, {0x7, 0x5, 0xe630}, {0x1, 0x0, 0x1}, {0x8, 0x2, 0x6}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x0, 0x5f, 0x30, 0x61]}}, &(0x7f0000001ec0)=""/137, 0x129, 0x89, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0x1, 0xfffffffffffffff0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001cc0)='GPL\x00', 0x8, 0x62, &(0x7f0000001d00)=""/98, 0x41100, 0x7, '\x00', r1, 0x1c, r15, 0x8, &(0x7f0000001fc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002000)={0x3, 0x4, 0xc, 0x200}, 0x10, 0x1cb16, r13, 0x4, &(0x7f0000002040)=[r10], &(0x7f0000002080)=[{0x0, 0x2, 0xd, 0x1}, {0x5, 0x2, 0xb, 0x1}, {0x5, 0x1, 0xb, 0xc}, {0x0, 0x3, 0x8, 0x9}], 0x10, 0xfffffffb}, 0x94) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0xe, '\x00', r1, r7, 0x3, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002300)={r16, &(0x7f0000002200)="ef2ab6f173283c9707b7268f72b94b9e4a87f0660cbca4504b0c5b0f52d2f279672dbe97ad814c2b977f05d205bdef938c3da9b9579b97c7e4270d83761301d5709f5b834d1d8e1bba4e2d7e86449600736880b190f7f6f3ce70803d640e4c4051ea0a6a099bc3639db46283bb2b", &(0x7f0000002280)=""/128}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002600)={r12, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x20, 0x1c, &(0x7f0000002340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002440)='syzkaller\x00', 0xbc3c, 0xea, &(0x7f0000002480)=""/234, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r7, 0x8, &(0x7f0000002580)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000025c0)={0x2, 0x4, 0x1, 0x101}, 0x10, r5, r11, 0x1, &(0x7f0000002640)=[r16, r17, r9, r16, r9, r6, r6, r14, r12], &(0x7f0000002680)=[{0x3, 0x5, 0x9, 0x3}], 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a40)={0x6, 0x11, &(0x7f0000002780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002840)='syzkaller\x00', 0xfffffffc, 0xa8, &(0x7f0000002880)=""/168, 0x41000, 0x5, '\x00', r4, 0x25, r7, 0x8, &(0x7f0000002940)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x0, 0x4, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000029c0)=[{0x1, 0x2, 0x6, 0x6}, {0x1, 0x80000001, 0xc, 0x5}, {0x4, 0x2, 0x4, 0x5}, {0x0, 0x2, 0x7, 0x8}, {0x5, 0x3, 0x3}, {0x5, 0x2, 0x9, 0xb}, {0x3, 0x2, 0x6, 0x9}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b80)={0x1b, 0x0, 0x0, 0x75b, 0x0, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) 1.418098523s ago: executing program 5 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x10000000, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 1.003866662s ago: executing program 1 (id=3114): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) 994.531813ms ago: executing program 5 (id=3115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x100, &(0x7f0000000100)="97a1230eac284c1583e0f74614cc2a41723006cd3d3c59c090e04e6f42161915a64269c348e1e95932d261e81390ec131ea376e5e2ab80050bb28d27c10dc988feafdfaab166af787a823d12eb6631", 0x4f, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="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") r3 = perf_event_open$cgroup(&(0x7f0000001200)={0x2, 0x80, 0x1, 0xba, 0x1, 0x56, 0x0, 0xfffffffffffffeff, 0x400, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0x2, 0x200}, 0x20, 0x7, 0x800, 0x7, 0x5, 0x23, 0xb03, 0x0, 0x80000000, 0x0, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) r4 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0xd, 0x0, 0x8, 0x0, 0xffffffff, 0x1000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x235, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0xc000, 0x9, 0x0, 0x7, 0x1, 0x7, 0xe, 0x0, 0x7fff, 0x0, 0x9}, r2, 0x1, r3, 0x9) bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) write$cgroup_pid(r5, &(0x7f00000012c0)=r2, 0x12) (async) write$cgroup_pid(r5, &(0x7f00000012c0)=r2, 0x12) getpid() (async) r6 = getpid() ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000001300)={r1}) openat$cgroup_procs(r5, &(0x7f0000001340)='cgroup.threads\x00', 0x2, 0x0) (async) r7 = openat$cgroup_procs(r5, &(0x7f0000001340)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000001380)={0x5, 0x80, 0x6, 0x8, 0x4, 0x5, 0x0, 0xfffffffffffffffa, 0x804, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3, 0x4}, 0xaa01, 0x40, 0x5, 0x1, 0x4, 0x800000, 0x8, 0x0, 0x1, 0x0, 0x400}) r8 = openat$cgroup(r5, &(0x7f0000001480)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001400)={0x0, 0x80, 0x8, 0x3, 0x10, 0x4, 0x0, 0x5, 0x544, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xffffffffffffffbf, 0x1}, 0x0, 0x9, 0x40, 0x2, 0xffffffffffffffff, 0x2, 0xd75, 0x0, 0x2, 0x0, 0x36f}, r8, 0x1, r5, 0x1) (async) r9 = perf_event_open$cgroup(&(0x7f0000001400)={0x0, 0x80, 0x8, 0x3, 0x10, 0x4, 0x0, 0x5, 0x544, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xffffffffffffffbf, 0x1}, 0x0, 0x9, 0x40, 0x2, 0xffffffffffffffff, 0x2, 0xd75, 0x0, 0x2, 0x0, 0x36f}, r8, 0x1, r5, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={@ifindex=0x0, 0x5, 0x0, 0xf6, &(0x7f00000014c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)={@fallback=r5, r5, 0x0, 0x4, 0x0, @void, @value=r5, @void, @void, r11}, 0x20) recvmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000016c0)=""/151, 0x97}, {&(0x7f0000001780)=""/40, 0x28}, {&(0x7f00000017c0)=""/168, 0xa8}, {&(0x7f0000001880)=""/163, 0xa3}, {&(0x7f0000001940)=""/44, 0x2c}, {&(0x7f0000001980)=""/144, 0x90}], 0x6, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x58}, 0x40) perf_event_open(&(0x7f0000001bc0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000001b80), 0x3}, 0x334, 0x4, 0xff, 0x2, 0xd, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xf, r5, 0x4) (async) r19 = perf_event_open(&(0x7f0000001bc0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x3, 0x0, 0x3, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000001b80), 0x3}, 0x334, 0x4, 0xff, 0x2, 0xd, 0x4, 0x6, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xf, r5, 0x4) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000001c40)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001c80)=r15, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{r15, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)='%pI4 \x00'}, 0x20) write$cgroup_pid(r5, &(0x7f0000001d80)=r12, 0x12) r21 = socket$kcm(0x29, 0x7, 0x0) r22 = openat$cgroup_ro(r5, &(0x7f0000001f40)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) syz_clone(0x322000, &(0x7f0000001f80)="31eeb77028dbd95dda82eb2ea8bc0fb7995fd89f5bd6cd1b7439c7f904f522823d2700621f8de29b1607cc6c6a70f7f33dc900bc7eccf991cc9f2f443fe27f1bca48d50a191c905ea10d25ad3c011ae8bf6ee862cc3520260de0d7540dd8e16e3e5a5ed012603242fbe866e465c9b837740bb792714423062a16d50b93", 0x7d, &(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080)="d8e9643494bd710c5ce6224c84db820d25c1bee0d8b681fb5a46ae6588e2555eddaa18cf291603d6133fc76202699ae460372b30413900e8ad35bedb941ea3ea144f9c1c13426f909becd70051a984e699d548be3e0f11faf76ccd9fc75a0fb718d8ab2dee2681547dcd41e94f3555b423ce188bb71314d18fd5827179f420559837b22d0161c61ad97ab547e5d6e09ea53ea91b017b0636a974ebe92759c5a53c36f1b25abd3927f9040633f2a38565a286c5a8f0c479d82c0eabcf118c38169c72c455b9caa1c80bd34683a49ffcbd68") (async) r23 = syz_clone(0x322000, &(0x7f0000001f80)="31eeb77028dbd95dda82eb2ea8bc0fb7995fd89f5bd6cd1b7439c7f904f522823d2700621f8de29b1607cc6c6a70f7f33dc900bc7eccf991cc9f2f443fe27f1bca48d50a191c905ea10d25ad3c011ae8bf6ee862cc3520260de0d7540dd8e16e3e5a5ed012603242fbe866e465c9b837740bb792714423062a16d50b93", 0x7d, &(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080)="d8e9643494bd710c5ce6224c84db820d25c1bee0d8b681fb5a46ae6588e2555eddaa18cf291603d6133fc76202699ae460372b30413900e8ad35bedb941ea3ea144f9c1c13426f909becd70051a984e699d548be3e0f11faf76ccd9fc75a0fb718d8ab2dee2681547dcd41e94f3555b423ce188bb71314d18fd5827179f420559837b22d0161c61ad97ab547e5d6e09ea53ea91b017b0636a974ebe92759c5a53c36f1b25abd3927f9040633f2a38565a286c5a8f0c479d82c0eabcf118c38169c72c455b9caa1c80bd34683a49ffcbd68") r24 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002180)={0x1b, 0x0, 0x0, 0xf998, 0x0, r20, 0x13, '\x00', r10, r5, 0x5, 0x3}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r25 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r26 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002240), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000001dc0)=@file={0x2f4f2366eae0d2b, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001e40)}, {&(0x7f0000001e80)="d0c285736b6b986a02408013cf721a86c0772c4a0add5bcf1610673b2a1ce92d7f5752811ede502be892fa2baa807080038781ef61594a4a7294c7441fcea5a57f878bb80e22fc", 0x47}], 0x2, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {r6, r17, r14}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r18}}}, @rights={{0x18, 0x1, 0x1, [r8, r19]}}, @rights={{0x20, 0x1, 0x1, [r7, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r16, r13, r18}}}, @rights={{0x30, 0x1, 0x1, [r3, r4, r7, r1, r21, r15, r4, r22]}}, @rights={{0x1c, 0x1, 0x1, [r15, r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {r23, r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r24, r15, r7, r20]}}, @rights={{0x24, 0x1, 0x1, [r25, r20, r0, r1, r26]}}], 0x150, 0x54}, 0x20048000) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000001dc0)=@file={0x2f4f2366eae0d2b, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001e40)}, {&(0x7f0000001e80)="d0c285736b6b986a02408013cf721a86c0772c4a0add5bcf1610673b2a1ce92d7f5752811ede502be892fa2baa807080038781ef61594a4a7294c7441fcea5a57f878bb80e22fc", 0x47}], 0x2, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {r6, r17, r14}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, r18}}}, @rights={{0x18, 0x1, 0x1, [r8, r19]}}, @rights={{0x20, 0x1, 0x1, [r7, r4, r7, r4]}}, @cred={{0x1c, 0x1, 0x2, {r16, r13, r18}}}, @rights={{0x30, 0x1, 0x1, [r3, r4, r7, r1, r21, r15, r4, r22]}}, @rights={{0x1c, 0x1, 0x1, [r15, r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {r23, r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r24, r15, r7, r20]}}, @rights={{0x24, 0x1, 0x1, [r25, r20, r0, r1, r26]}}], 0x150, 0x54}, 0x20048000) close(r20) (async) close(r20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002440)={@fallback=r25, 0xffffffffffffffff, 0x0, 0x201c, 0x0, @value, @void, @void, @void, r11}, 0x20) openat$cgroup_procs(r22, &(0x7f0000002480)='cgroup.threads\x00', 0x2, 0x0) 533.717004ms ago: executing program 1 (id=3116): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x21, 0x2, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, 0x0, 0x24040004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000010100000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f00000000c0)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0xff00) 0s ago: executing program 5 (id=3117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}], &(0x7f0000000200)='GPL\x00', 0xf, 0x10, &(0x7f0000000240)=""/16, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=[{0x1, 0x2, 0x0, 0xa}], 0x10, 0xfffffff9}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x1000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200180ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000791218000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) kernel console output (not intermixed with test programs): nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 348.234218][ T8461] CPU: 1 PID: 8461 Comm: syz.1.1193 Not tainted syzkaller #0 [ 348.241632][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.251746][ T8461] Call Trace: [ 348.255155][ T8461] [ 348.258115][ T8461] dump_stack_lvl+0x188/0x24e [ 348.262912][ T8461] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 348.269365][ T8461] ? show_regs_print_info+0x12/0x12 [ 348.274690][ T8461] ? load_image+0x410/0x410 [ 348.279231][ T8461] ? __rcu_read_unlock+0x78/0xd0 [ 348.284394][ T8461] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 348.290931][ T8461] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 348.297657][ T8461] warn_alloc+0x242/0x330 [ 348.302025][ T8461] ? __get_vm_area_node+0x122/0x330 [ 348.307259][ T8461] ? zone_watermark_ok_safe+0x270/0x270 [ 348.312925][ T8461] ? rcu_is_watching+0x11/0xa0 [ 348.317800][ T8461] ? __get_vm_area_node+0x318/0x330 [ 348.323120][ T8461] __vmalloc_node_range+0x37c/0x1380 [ 348.328446][ T8461] ? perf_trace_preemptirq_template+0x268/0x320 [ 348.334749][ T8461] ? free_vm_area+0x50/0x50 [ 348.339504][ T8461] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.346600][ T8461] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 348.352327][ T8461] __vmalloc+0x76/0x80 [ 348.356756][ T8461] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 348.362426][ T8461] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 348.368053][ T8461] ? bpf_prog_alloc+0x13/0x1b0 [ 348.372871][ T8461] bpf_prog_alloc+0x1c/0x1b0 [ 348.377497][ T8461] bpf_prog_load+0x7d4/0x1530 [ 348.382201][ T8461] ? map_freeze+0x390/0x390 [ 348.386829][ T8461] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.393081][ T8461] ? lockdep_hardirqs_on+0x94/0x140 [ 348.398304][ T8461] ? security_bpf+0x40/0xa0 [ 348.402825][ T8461] ? bpf_lsm_bpf+0x5/0x10 [ 348.407163][ T8461] ? security_bpf+0x7a/0xa0 [ 348.411749][ T8461] __sys_bpf+0x5b8/0x780 [ 348.416190][ T8461] ? bpf_link_show_fdinfo+0x380/0x380 [ 348.421587][ T8461] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.427767][ T8461] __x64_sys_bpf+0x78/0x90 [ 348.432488][ T8461] do_syscall_64+0x4c/0xa0 [ 348.437021][ T8461] ? clear_bhb_loop+0x60/0xb0 [ 348.441741][ T8461] ? clear_bhb_loop+0x60/0xb0 [ 348.446894][ T8461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.453065][ T8461] RIP: 0033:0x7f703ad9e159 [ 348.457777][ T8461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.477923][ T8461] RSP: 002b:00007f703bd00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.486520][ T8461] RAX: ffffffffffffffda RBX: 00007f703b025fa0 RCX: 00007f703ad9e159 [ 348.494520][ T8461] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000005 [ 348.502593][ T8461] RBP: 00007f703bd00090 R08: 0000000000000000 R09: 0000000000000000 [ 348.510774][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.519572][ T8461] R13: 00007f703b026038 R14: 00007f703b025fa0 R15: 00007ffc4ee17388 [ 348.528714][ T8461] [ 348.656353][ T8461] Mem-Info: [ 348.660027][ T8461] active_anon:7295 inactive_anon:0 isolated_anon:0 [ 348.660027][ T8461] active_file:15157 inactive_file:40058 isolated_file:0 [ 348.660027][ T8461] unevictable:768 dirty:144 writeback:0 [ 348.660027][ T8461] slab_reclaimable:21071 slab_unreclaimable:95664 [ 348.660027][ T8461] mapped:29415 shmem:1361 pagetables:648 [ 348.660027][ T8461] sec_pagetables:0 bounce:0 [ 348.660027][ T8461] kernel_misc_reclaimable:0 [ 348.660027][ T8461] free:1323130 free_pcp:6124 free_cma:0 [ 348.737274][ T8461] Node 0 active_anon:28780kB inactive_anon:0kB active_file:60628kB inactive_file:160024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117660kB dirty:576kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10760kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no [ 348.783251][ T8461] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 348.930211][ T8461] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.978520][ T8474] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1195'. [ 348.983977][ T8475] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 349.077348][ T8476] netlink: 'syz.2.1196': attribute type 3 has an invalid length. [ 349.114850][ T8476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1196'. [ 349.194330][ T8475] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1195'. [ 349.222173][ T8461] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 349.228144][ T8461] Node 0 DMA32 free:1378988kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:29212kB inactive_anon:0kB active_file:60628kB inactive_file:160024kB unevictable:1536kB writepending:608kB present:3129332kB managed:2592896kB mlocked:0kB bounce:0kB free_pcp:6212kB local_pcp:2804kB free_cma:0kB [ 349.406220][ T8473] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 349.422920][ T8473] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1196'. [ 349.472269][ T8461] lowmem_reserve[]: 0 0 1 1 1 [ 349.486878][ T8461] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.642104][ T8461] lowmem_reserve[]: 0 0 0 0 0 [ 349.649130][ T8461] Node 1 Normal free:3897744kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17504kB local_pcp:11424kB free_cma:0kB [ 349.752205][ T8461] lowmem_reserve[]: 0 0 0 0 0 [ 349.782218][ T8461] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 349.840471][ T8461] Node 0 DMA32: 1584*4kB (UME) 2325*8kB (UME) 1597*16kB (UME) 1552*32kB (UME) 298*64kB (UM) 90*128kB (UME) 72*256kB (UM) 59*512kB (UME) 25*1024kB (UM) 9*2048kB (UM) 282*4096kB (UM) = 1378488kB [ 349.924420][ T8487] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1199'. [ 349.992403][ T8461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.066278][ T8461] Node 1 Normal: 200*4kB (UM) 60*8kB (UME) 35*16kB (UE) 37*32kB (UME) 27*64kB (UME) 8*128kB (UME) 5*256kB (UME) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3897744kB [ 350.097237][ T8487] tap0: tun_chr_ioctl cmd 1074025677 [ 350.119415][ T8487] tap0: linktype set to 774 [ 350.205607][ T8487] netlink: 'syz.3.1199': attribute type 4 has an invalid length. [ 350.244681][ T8461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.268812][ T8487] netlink: 'syz.3.1199': attribute type 8 has an invalid length. [ 350.306093][ T8461] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.342693][ T8487] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.1199'. [ 350.422594][ T8461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.501984][ T8461] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.552525][ T8461] 56576 total pagecache pages [ 350.557436][ T8461] 0 pages in swap cache [ 350.592992][ T8461] Free swap = 124996kB [ 350.614811][ T8461] Total swap = 124996kB [ 350.644116][ T8461] 2097051 pages RAM [ 350.686178][ T8461] 0 pages HighMem/MovableOnly [ 350.690946][ T8461] 415226 pages reserved [ 350.715229][ T8461] 0 pages cma reserved [ 352.411062][ T8535] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1216'. [ 353.003662][ T8552] netlink: 'syz.0.1223': attribute type 19 has an invalid length. [ 353.173082][ T8561] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1226'. [ 353.829626][ T8578] netlink: 'syz.1.1232': attribute type 29 has an invalid length. [ 353.877467][ T8578] netlink: 'syz.1.1232': attribute type 29 has an invalid length. [ 353.893943][ T8580] netlink: 'syz.1.1232': attribute type 29 has an invalid length. [ 353.927475][ T8584] netlink: 'syz.1.1232': attribute type 29 has an invalid length. [ 353.967205][ T8577] netlink: 'syz.1.1232': attribute type 29 has an invalid length. [ 354.558990][ T8609] netlink: 'syz.1.1239': attribute type 2 has an invalid length. [ 354.602192][ T8609] netlink: 'syz.1.1239': attribute type 1 has an invalid length. [ 354.658871][ T8609] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1239'. [ 354.863964][ T5610] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 355.109953][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1246'. [ 355.129834][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1246'. [ 355.151678][ T8622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1246'. [ 355.313315][ T8631] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 355.344513][ T8631] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 359.588795][ T8690] netlink: 'syz.4.1267': attribute type 21 has an invalid length. [ 359.613904][ T8690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1267'. [ 360.224823][ T8703] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1271'. [ 372.737367][ T8808] netlink: 'syz.1.1297': attribute type 2 has an invalid length. [ 372.745820][ T8808] netlink: 'syz.1.1297': attribute type 4 has an invalid length. [ 372.754863][ T8808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1297'. [ 372.802423][ T8843] netlink: 'syz.2.1311': attribute type 10 has an invalid length. [ 373.126694][ T8845] device bridge_slave_0 left promiscuous mode [ 373.133645][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.721806][ T8875] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 374.317607][ T8884] netlink: 'syz.1.1324': attribute type 39 has an invalid length. [ 374.553374][ T8884] device hsr_slave_1 left promiscuous mode [ 375.349489][ T8891] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1327'. [ 375.607507][ T8891] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 375.627637][ T8891] CPU: 0 PID: 8891 Comm: syz.4.1327 Not tainted syzkaller #0 [ 375.635185][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.645505][ T8891] Call Trace: [ 375.648920][ T8891] [ 375.651903][ T8891] dump_stack_lvl+0x188/0x24e [ 375.656868][ T8891] ? show_regs_print_info+0x12/0x12 [ 375.662298][ T8891] ? load_image+0x410/0x410 [ 375.667019][ T8891] sysfs_warn_dup+0x8a/0xa0 [ 375.671816][ T8891] sysfs_do_create_link_sd+0xc0/0x110 [ 375.677501][ T8891] device_add+0x83b/0x1050 [ 375.682139][ T8891] wiphy_register+0x1d8b/0x2aa0 [ 375.687285][ T8891] ? cfg80211_event_work+0x40/0x40 [ 375.692448][ T8891] ? minstrel_ht_alloc+0x894/0xa20 [ 375.697765][ T8891] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 375.704050][ T8891] ieee80211_register_hw+0x2d48/0x39f0 [ 375.709621][ T8891] ? ieee80211_register_hw+0xf41/0x39f0 [ 375.715307][ T8891] ? ieee80211_register_hw+0xf41/0x39f0 [ 375.720914][ T8891] ? ieee80211_tasklet_handler+0x20/0x20 [ 375.726602][ T8891] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 375.732985][ T8891] ? __debug_object_init+0xed/0x440 [ 375.738292][ T8891] ? memset+0x1e/0x40 [ 375.742482][ T8891] ? __hrtimer_init+0x189/0x270 [ 375.747595][ T8891] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 375.753495][ T8891] ? memcpy+0x3c/0x60 [ 375.757527][ T8891] hwsim_new_radio_nl+0xab7/0xc90 [ 375.762629][ T8891] genl_family_rcv_msg_doit+0x22f/0x350 [ 375.768279][ T8891] ? end_current_label_crit_section+0x170/0x170 [ 375.774775][ T8891] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 375.781058][ T8891] ? bpf_lsm_capable+0x5/0x10 [ 375.785910][ T8891] ? security_capable+0x85/0xb0 [ 375.790834][ T8891] genl_rcv_msg+0x601/0x790 [ 375.795411][ T8891] ? genl_bind+0x360/0x360 [ 375.799862][ T8891] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 375.806280][ T8891] netlink_rcv_skb+0x1ef/0x440 [ 375.811070][ T8891] ? genl_bind+0x360/0x360 [ 375.815653][ T8891] ? netlink_ack+0x1160/0x1160 [ 375.820602][ T8891] ? down_read+0x1a8/0x2d0 [ 375.825145][ T8891] genl_rcv+0x24/0x40 [ 375.829172][ T8891] netlink_unicast+0x7ad/0x920 [ 375.834151][ T8891] netlink_sendmsg+0x8ad/0xbd0 [ 375.838944][ T8891] ? lockdep_hardirqs_on+0x94/0x140 [ 375.844209][ T8891] ? netlink_getsockopt+0x550/0x550 [ 375.849569][ T8891] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 375.855253][ T8891] ? security_socket_sendmsg+0x7c/0xa0 [ 375.860814][ T8891] ? netlink_getsockopt+0x550/0x550 [ 375.866250][ T8891] ____sys_sendmsg+0x5ed/0x9a0 [ 375.871170][ T8891] ? __sys_sendmsg_sock+0x30/0x30 [ 375.876411][ T8891] ? __import_iovec+0x306/0x510 [ 375.881358][ T8891] ? import_iovec+0x6f/0xa0 [ 375.885995][ T8891] ___sys_sendmsg+0x2a2/0x360 [ 375.890888][ T8891] ? __sys_sendmsg+0x2a0/0x2a0 [ 375.895884][ T8891] ? ktime_get+0x7b/0x270 [ 375.900533][ T8891] __se_sys_sendmsg+0x1c3/0x2b0 [ 375.905411][ T8891] ? ct_nmi_exit+0x145/0x1c0 [ 375.910579][ T8891] ? __x64_sys_sendmsg+0x80/0x80 [ 375.915665][ T8891] ? lockdep_hardirqs_on+0x94/0x140 [ 375.920902][ T8891] do_syscall_64+0x4c/0xa0 [ 375.925520][ T8891] ? clear_bhb_loop+0x60/0xb0 [ 375.930405][ T8891] ? clear_bhb_loop+0x60/0xb0 [ 375.935256][ T8891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.941278][ T8891] RIP: 0033:0x7f8916b9e159 [ 375.946155][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.966050][ T8891] RSP: 002b:00007f8914df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.974769][ T8891] RAX: ffffffffffffffda RBX: 00007f8916e25fa0 RCX: 00007f8916b9e159 [ 375.983074][ T8891] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 375.991079][ T8891] RBP: 00007f8916c3506b R08: 0000000000000000 R09: 0000000000000000 [ 375.999159][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.007420][ T8891] R13: 00007f8916e26038 R14: 00007f8916e25fa0 R15: 00007fff75c8fd98 [ 376.015522][ T8891] [ 376.276205][ T8920] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.1336'. [ 376.993378][ T8935] delete_channel: no stack [ 377.150298][ T8939] netlink: 'syz.3.1342': attribute type 10 has an invalid length. [ 377.277572][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.336910][ T8939] device bridge_slave_1 left promiscuous mode [ 377.380176][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.599971][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.608107][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.865079][ T9010] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 379.892234][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1365'. [ 379.938076][ T9010] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 379.966577][ T9016] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1366'. [ 379.991232][ T9017] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 380.064349][ T9024] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 380.159434][ T9035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'. [ 384.311885][ T9080] tipc: Started in network mode [ 384.317553][ T9080] tipc: Node identity 9215a268, cluster identity 4711 [ 384.324589][ T9080] tipc: Node number set to 2450891368 [ 386.004614][ T5610] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 387.916826][ T9158] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1412'. [ 388.009681][ T9158] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 388.025132][ T9158] CPU: 1 PID: 9158 Comm: syz.2.1412 Not tainted syzkaller #0 [ 388.033368][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.043825][ T9158] Call Trace: [ 388.047250][ T9158] [ 388.050551][ T9158] dump_stack_lvl+0x188/0x24e [ 388.055636][ T9158] ? show_regs_print_info+0x12/0x12 [ 388.061505][ T9158] ? load_image+0x410/0x410 [ 388.066480][ T9158] sysfs_warn_dup+0x8a/0xa0 [ 388.072050][ T9158] sysfs_do_create_link_sd+0xc0/0x110 [ 388.077957][ T9158] device_add+0x83b/0x1050 [ 388.082843][ T9158] wiphy_register+0x1d8b/0x2aa0 [ 388.087909][ T9158] ? cfg80211_event_work+0x40/0x40 [ 388.093451][ T9158] ? minstrel_ht_alloc+0x894/0xa20 [ 388.098795][ T9158] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 388.105102][ T9158] ieee80211_register_hw+0x2d48/0x39f0 [ 388.110735][ T9158] ? ieee80211_register_hw+0xf41/0x39f0 [ 388.116521][ T9158] ? ieee80211_register_hw+0xf41/0x39f0 [ 388.122175][ T9158] ? ieee80211_tasklet_handler+0x20/0x20 [ 388.127917][ T9158] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.134334][ T9158] ? __debug_object_init+0xed/0x440 [ 388.139942][ T9158] ? memset+0x1e/0x40 [ 388.144147][ T9158] ? __hrtimer_init+0x189/0x270 [ 388.149153][ T9158] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 388.154918][ T9158] ? memcpy+0x3c/0x60 [ 388.158961][ T9158] hwsim_new_radio_nl+0xab7/0xc90 [ 388.164324][ T9158] genl_family_rcv_msg_doit+0x22f/0x350 [ 388.169977][ T9158] ? end_current_label_crit_section+0x170/0x170 [ 388.176413][ T9158] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 388.182499][ T9158] ? bpf_lsm_capable+0x5/0x10 [ 388.187370][ T9158] ? security_capable+0x85/0xb0 [ 388.192275][ T9158] genl_rcv_msg+0x601/0x790 [ 388.197191][ T9158] ? lock_chain_count+0x20/0x20 [ 388.202469][ T9158] ? genl_bind+0x360/0x360 [ 388.206941][ T9158] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 388.213485][ T9158] netlink_rcv_skb+0x1ef/0x440 [ 388.218354][ T9158] ? genl_bind+0x360/0x360 [ 388.222783][ T9158] ? netlink_ack+0x1160/0x1160 [ 388.227658][ T9158] ? down_read+0x1a8/0x2d0 [ 388.232099][ T9158] genl_rcv+0x24/0x40 [ 388.236120][ T9158] netlink_unicast+0x7ad/0x920 [ 388.240997][ T9158] netlink_sendmsg+0x8ad/0xbd0 [ 388.245882][ T9158] ? netlink_getsockopt+0x550/0x550 [ 388.251279][ T9158] ? apparmor_socket_sendmsg+0x8a/0x330 [ 388.257112][ T9158] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 388.262541][ T9158] ? security_socket_sendmsg+0x7c/0xa0 [ 388.268282][ T9158] ? netlink_getsockopt+0x550/0x550 [ 388.274317][ T9158] ____sys_sendmsg+0x5ed/0x9a0 [ 388.279241][ T9158] ? __sys_sendmsg_sock+0x30/0x30 [ 388.284721][ T9158] ? __import_iovec+0x306/0x510 [ 388.289620][ T9158] ? import_iovec+0x6f/0xa0 [ 388.294270][ T9158] ___sys_sendmsg+0x2a2/0x360 [ 388.299061][ T9158] ? __sys_sendmsg+0x2a0/0x2a0 [ 388.304251][ T9158] __se_sys_sendmsg+0x1c3/0x2b0 [ 388.309288][ T9158] ? __x64_sys_sendmsg+0x80/0x80 [ 388.314820][ T9158] ? lockdep_hardirqs_on+0x94/0x140 [ 388.320368][ T9158] do_syscall_64+0x4c/0xa0 [ 388.324829][ T9158] ? clear_bhb_loop+0x60/0xb0 [ 388.329603][ T9158] ? clear_bhb_loop+0x60/0xb0 [ 388.334481][ T9158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.340485][ T9158] RIP: 0033:0x7fa294f9e159 [ 388.345193][ T9158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.365072][ T9158] RSP: 002b:00007fa295e88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.373587][ T9158] RAX: ffffffffffffffda RBX: 00007fa295226090 RCX: 00007fa294f9e159 [ 388.381916][ T9158] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 388.390426][ T9158] RBP: 00007fa29503506b R08: 0000000000000000 R09: 0000000000000000 [ 388.399219][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.407305][ T9158] R13: 00007fa295226128 R14: 00007fa295226090 R15: 00007ffe40116c48 [ 388.416009][ T9158] [ 396.357045][ T9252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1438'. [ 396.852122][ T9260] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1439'. [ 396.921199][ T9273] netlink: 'syz.0.1439': attribute type 27 has an invalid length. [ 402.451944][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.461377][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.534149][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.566775][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.600705][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.651527][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.702771][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.718818][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.744226][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 402.785506][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1461'. [ 407.719004][ T9395] __nla_validate_parse: 25 callbacks suppressed [ 407.719117][ T9395] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1472'. [ 408.167091][ T9411] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 408.899390][ T9411] device macvlan0 entered promiscuous mode [ 408.939407][ T9411] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 408.978212][ T9417] netlink: 'syz.4.1473': attribute type 10 has an invalid length. [ 409.436150][ T9415] netlink: 'syz.4.1473': attribute type 10 has an invalid length. [ 409.499163][ T9433] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1479'. [ 409.558352][ T9432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1479'. [ 414.249851][ T9511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1501'. [ 414.575962][ T9518] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.1504'. [ 417.319810][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1509'. [ 417.531269][ T4619] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.937680][ T9563] netlink: 'syz.0.1521': attribute type 2 has an invalid length. [ 418.473814][ T9572] nr0: port 1(hsr0) entered blocking state [ 418.501136][ T9572] nr0: port 1(hsr0) entered disabled state [ 418.551763][ T9572] device hsr0 entered promiscuous mode [ 418.938274][ T9581] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1526'. [ 422.674134][ T9589] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 422.729158][ T9589] device wg1 entered promiscuous mode [ 422.749971][ T9589] team0: Device wg1 is of different type [ 422.790827][ T9592] netlink: 'syz.1.1529': attribute type 10 has an invalid length. [ 422.845269][ T9592] team0: Device wg1 is of different type [ 422.880389][ T9604] tun0: tun_chr_ioctl cmd 1074025677 [ 422.892525][ T9604] tun0: linktype set to 805 [ 422.924494][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1537'. [ 429.206310][ T9702] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 429.281292][ T9703] netlink: 'syz.0.1568': attribute type 11 has an invalid length. [ 429.317795][ T9703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1568'. [ 433.478700][ T9720] netlink: 'syz.0.1573': attribute type 10 has an invalid length. [ 433.489108][ T9720] device veth0_macvtap left promiscuous mode [ 433.929037][ T9752] netlink: 'syz.1.1582': attribute type 27 has an invalid length. [ 434.004408][ T9752] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1582'. [ 436.000888][ T9821] netlink: 'syz.0.1599': attribute type 25 has an invalid length. [ 436.056570][ T9821] netlink: 'syz.0.1599': attribute type 29 has an invalid length. [ 436.744910][ T9833] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1604'. [ 436.760741][ T9843] netlink: 'syz.4.1604': attribute type 7 has an invalid length. [ 436.781574][ T9843] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1604'. [ 436.893992][ T9847] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 436.904906][ T9847] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1608'. [ 436.920349][ T9848] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 436.929968][ T9848] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1608'. [ 438.216364][ T9873] netlink: 'syz.3.1614': attribute type 17 has an invalid length. [ 439.724611][ T9898] device syzkaller0 entered promiscuous mode [ 439.788594][ T9915] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1619'. [ 440.105276][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.112257][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.982381][ T9938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1628'. [ 443.991765][ T9940] netlink: 'syz.1.1628': attribute type 10 has an invalid length. [ 444.002478][ T9940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1628'. [ 444.014002][ T9941] netlink: 'syz.1.1628': attribute type 12 has an invalid length. [ 444.023968][ T9941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1628'. [ 444.034191][ T9943] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1630'. [ 444.043816][ T9949] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1631'. [ 445.294758][ T9986] netlink: 'syz.0.1637': attribute type 4 has an invalid length. [ 445.366310][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 445.459108][ T9976] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.1637'. [ 445.485207][ T9976] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.1637'. [ 446.527817][T10006] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 446.561743][T10006] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1648'. [ 446.997247][T10011] netlink: 'syz.3.1649': attribute type 21 has an invalid length. [ 447.025019][T10011] netlink: 'syz.3.1649': attribute type 7 has an invalid length. [ 447.304676][T10019] bridge0: port 2(batadv0) entered blocking state [ 447.368261][T10019] bridge0: port 2(batadv0) entered disabled state [ 447.386770][T10019] device batadv0 entered promiscuous mode [ 447.400593][T10019] bridge0: port 2(batadv0) entered blocking state [ 447.407368][T10019] bridge0: port 2(batadv0) entered forwarding state [ 447.772221][ T4616] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 447.782140][ T4616] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 448.891435][T10043] netlink: 'syz.4.1661': attribute type 29 has an invalid length. [ 448.928336][T10043] netlink: 'syz.4.1661': attribute type 29 has an invalid length. [ 449.587160][ T5610] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.233150][T10064] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1668'. [ 450.283583][T10064] ksmbd: Unknown IPC event: 10, ignore. [ 451.136415][T10075] device veth1_macvtap left promiscuous mode [ 451.563295][T10087] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 451.571112][T10087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1672'. [ 451.784744][T10092] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.1675'. [ 452.815965][T10119] netlink: 'syz.1.1682': attribute type 33 has an invalid length. [ 452.958256][T10119] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1682'. [ 453.138713][T10119] netlink: 'syz.1.1682': attribute type 33 has an invalid length. [ 453.250938][T10119] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1682'. [ 453.416683][T10119] netlink: 'syz.1.1682': attribute type 33 has an invalid length. [ 453.552186][T10119] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1682'. [ 454.425852][T10128] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1686'. [ 454.827376][T10146] netlink: 'syz.2.1690': attribute type 10 has an invalid length. [ 454.859002][T10146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1690'. [ 454.904004][T10146] batman_adv: batadv0: Adding interface: vlan1 [ 454.928711][T10146] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.011557][T10146] batman_adv: batadv0: Interface activated: vlan1 [ 456.063137][T10156] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1693'. [ 459.038030][T10206] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1711'. [ 459.067365][T10206] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 459.387013][T10216] device wlan1 entered promiscuous mode [ 459.532988][T10217] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.666490][T10215] netlink: 'syz.3.1713': attribute type 3 has an invalid length. [ 459.747195][T10215] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1713'. [ 461.461689][T10241] device pim6reg1 entered promiscuous mode [ 462.095721][T10256] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1728'. [ 463.230489][T10282] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1735'. [ 463.260108][T10282] netlink: 'syz.1.1735': attribute type 3 has an invalid length. [ 463.267629][ T4292] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 463.276513][ T4292] Bluetooth: hci3: Injecting HCI hardware error event [ 463.285465][ T4289] Bluetooth: hci3: hardware error 0x00 [ 463.286529][T10282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1735'. [ 464.491010][T10307] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1744'. [ 464.565976][T10307] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 465.472247][ T4289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 468.446515][T10345] netlink: 'syz.3.1757': attribute type 10 has an invalid length. [ 468.481374][T10345] device wlan1 left promiscuous mode [ 468.608638][T10350] netlink: 'syz.1.1760': attribute type 3 has an invalid length. [ 468.638450][T10350] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1760'. [ 468.885413][T10360] device  entered promiscuous mode [ 469.548680][T10377] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 469.624628][T10377] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1768'. [ 470.273822][T10397] device syzkaller0 entered promiscuous mode [ 470.380968][T10399] veth0_to_team: mtu less than device minimum [ 471.869954][T10449] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1781'. [ 472.031572][T10449] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 472.237364][T10457] netlink: 3529 bytes leftover after parsing attributes in process `syz.1.1785'. [ 472.277581][T10457] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.1785'. [ 472.318207][T10457] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.1785'. [ 473.444668][T10481] netlink: 'syz.3.1793': attribute type 11 has an invalid length. [ 473.492239][T10481] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1793'. [ 473.570698][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.333189][T10501] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1798'. [ 474.383311][T10502] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 474.517025][T10498] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1798'. [ 475.597497][T10517] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1802'. [ 475.740457][T10517] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 479.060148][T10539] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 479.421982][T10539] team0: Port device wlan1 added [ 479.811535][T10558] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1816'. [ 480.690942][T10572] netlink: 'syz.3.1819': attribute type 13 has an invalid length. [ 480.725886][T10572] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1819'. [ 480.780321][T10572] syz_tun: refused to change device tx_queue_len [ 480.803478][T10572] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 481.121679][ T4558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 485.425249][T10599] device sit0 entered promiscuous mode [ 485.799393][T10616] netlink: 'syz.4.1829': attribute type 2 has an invalid length. [ 485.857744][T10608] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 485.942046][T10616] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1829'. [ 488.850092][T10648] netlink: 'syz.1.1840': attribute type 21 has an invalid length. [ 489.666156][T10669] netlink: 'syz.0.1846': attribute type 2 has an invalid length. [ 489.797960][T10669] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1846'. [ 491.211224][T10715] netlink: 'syz.2.1862': attribute type 10 has an invalid length. [ 491.396258][T10723] netlink: 'syz.0.1865': attribute type 21 has an invalid length. [ 491.424129][T10723] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1865'. [ 492.470108][T10739] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1870'. [ 492.599586][T10739] device hsr_slave_0 left promiscuous mode [ 492.685482][T10739] device hsr_slave_1 left promiscuous mode [ 492.920938][T10752] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1873'. [ 492.982983][T10741] Q±6ã×\b‹¡Y­4: renamed from lo [ 493.061703][T10752] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1873'. [ 493.212268][T10754] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1873'. [ 493.259106][T10760] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1876'. [ 493.417881][T10760] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 496.156373][T10766] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1876'. [ 501.532686][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539156][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.111577][T10878] netlink: 'syz.3.1903': attribute type 10 has an invalid length. [ 502.195243][T10878] team0: Port device geneve1 added [ 502.235046][T10881] netlink: 'syz.0.1904': attribute type 29 has an invalid length. [ 502.251167][T10881] netlink: 'syz.0.1904': attribute type 29 has an invalid length. [ 502.532445][T10883] netlink: 'syz.0.1904': attribute type 39 has an invalid length. [ 504.412432][T10913] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1912'. [ 504.655870][T10919] netlink: 'syz.3.1913': attribute type 1 has an invalid length. [ 504.724656][T10919] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1913'. [ 505.067342][T10927] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 509.166362][T10941] netlink: 'syz.2.1919': attribute type 21 has an invalid length. [ 509.176107][T10941] netlink: 'syz.2.1919': attribute type 5 has an invalid length. [ 509.442480][T10972] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1928'. [ 509.479130][T10978] sctp: [Deprecated]: syz.0.1928 (pid 10978) Use of int in maxseg socket option. [ 509.479130][T10978] Use struct sctp_assoc_value instead [ 509.490947][T10976] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1930'. [ 509.564231][T10972] netlink: zone id is out of range [ 509.848436][T10972] netlink: del zone limit has 4 unknown bytes [ 512.323329][T11021] IPv6: pim6reg1: Disabled Multicast RS [ 513.480103][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 513.560872][T11054] netlink: 'syz.2.1950': attribute type 15 has an invalid length. [ 513.616004][T11054] netlink: 'syz.2.1950': attribute type 16 has an invalid length. [ 513.666986][T11054] netlink: 'syz.2.1950': attribute type 4 has an invalid length. [ 513.705534][T11054] netlink: 'syz.2.1950': attribute type 6 has an invalid length. [ 513.736660][T11054] netlink: 'syz.2.1950': attribute type 15 has an invalid length. [ 513.746905][T11054] netlink: 'syz.2.1950': attribute type 16 has an invalid length. [ 513.770650][T11054] netlink: 'syz.2.1950': attribute type 20 has an invalid length. [ 513.780894][T11054] netlink: 'syz.2.1950': attribute type 21 has an invalid length. [ 513.794457][T11054] netlink: 13226 bytes leftover after parsing attributes in process `syz.2.1950'. [ 514.396001][T11076] validate_nla: 5 callbacks suppressed [ 514.396018][T11076] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 514.511618][T11076] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.533352][T11077] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 519.104896][T11135] netlink: 'syz.4.1975': attribute type 16 has an invalid length. [ 519.157801][T11135] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1975'. [ 519.208765][T11123] netlink: 'syz.3.1973': attribute type 275 has an invalid length. [ 519.780998][T11155] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1981'. [ 520.318012][T11170] netlink: 'syz.1.1987': attribute type 2 has an invalid length. [ 520.399895][T11170] device .*! entered promiscuous mode [ 527.446425][T11268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2022'. [ 527.462339][T11268] device hsr_slave_0 left promiscuous mode [ 527.469330][T11268] device hsr_slave_1 left promiscuous mode [ 527.625484][T11268] device hsr0 left promiscuous mode [ 527.644544][T11268] nr0: port 1(hsr0) entered disabled state [ 527.679151][T11270] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2022'. [ 528.552029][T11302] netlink: 'syz.2.2029': attribute type 27 has an invalid length. [ 528.652034][T11302] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2029'. [ 529.114068][T11307] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2030'. [ 532.606834][T11330] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2038'. [ 533.128106][T11293] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 533.137077][T11293] bridge0: port 3(dummy0) entered disabled state [ 533.143792][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.151205][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.182843][T11293] bridge0: port 3(dummy0) entered blocking state [ 533.189700][T11293] bridge0: port 3(dummy0) entered forwarding state [ 533.198181][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.206008][T11293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.213511][T11293] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.221523][T11293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.266718][T11293] team0: Port device bridge0 added [ 533.281161][T11307] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 533.286310][T11330] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2038'. [ 533.307030][T11307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 533.344365][T11307] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 533.355148][T10863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.394250][T11331] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2038'. [ 533.548637][T11341] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 533.550921][T11340] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 533.572900][T11341] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2040'. [ 533.694144][T11340] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2040'. [ 541.290361][T11407] device wlan1 entered promiscuous mode [ 541.616581][T11420] netlink: 'syz.1.2062': attribute type 27 has an invalid length. [ 541.662144][T11420] netlink: 'syz.1.2062': attribute type 3 has an invalid length. [ 544.473592][T10857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.256897][T11457] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 548.265200][T11457] netlink: 15870 bytes leftover after parsing attributes in process `syz.2.2074'. [ 548.799522][T11474] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2080'. [ 549.061016][T11485] FAULT_INJECTION: forcing a failure. [ 549.061016][T11485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.263201][T11485] CPU: 1 PID: 11485 Comm: syz.3.2083 Not tainted syzkaller #0 [ 549.270856][T11485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.281138][T11485] Call Trace: [ 549.284623][T11485] [ 549.287590][T11485] dump_stack_lvl+0x188/0x24e [ 549.292336][T11485] ? show_regs_print_info+0x12/0x12 [ 549.297586][T11485] ? load_image+0x410/0x410 [ 549.302253][T11485] ? __lock_acquire+0x7c40/0x7c40 [ 549.307590][T11485] ? trace_call_bpf+0x5d6/0x6b0 [ 549.312579][T11485] should_fail_ex+0x390/0x4c0 [ 549.317570][T11485] _copy_from_user+0x2c/0x170 [ 549.322506][T11485] __sys_bpf+0x2ea/0x780 [ 549.327132][T11485] ? bpf_link_show_fdinfo+0x380/0x380 [ 549.332736][T11485] ? lock_chain_count+0x20/0x20 [ 549.337999][T11485] __x64_sys_bpf+0x78/0x90 [ 549.342735][T11485] do_syscall_64+0x4c/0xa0 [ 549.347618][T11485] ? clear_bhb_loop+0x60/0xb0 [ 549.352343][T11485] ? clear_bhb_loop+0x60/0xb0 [ 549.357062][T11485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.363096][T11485] RIP: 0033:0x7f963579e159 [ 549.367999][T11485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.388775][T11485] RSP: 002b:00007f963667e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.397244][T11485] RAX: ffffffffffffffda RBX: 00007f9635a26090 RCX: 00007f963579e159 [ 549.405343][T11485] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 0000000000000000 [ 549.413428][T11485] RBP: 00007f963667e090 R08: 0000000000000000 R09: 0000000000000000 [ 549.421436][T11485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.429431][T11485] R13: 00007f9635a26128 R14: 00007f9635a26090 R15: 00007ffcd48e01d8 [ 549.437451][T11485] [ 553.929103][T11525] netlink: 'syz.0.2096': attribute type 21 has an invalid length. [ 553.954895][T11525] netlink: 'syz.0.2096': attribute type 3 has an invalid length. [ 553.971557][T11525] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2096'. [ 557.420750][T11547] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2103'. [ 558.271521][T11547] ieee80211 phy26: Failed to add default virtual iface [ 558.909199][T11569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 558.942373][T11569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.570141][T11582] netlink: 'syz.3.2113': attribute type 9 has an invalid length. [ 559.589020][T11582] netlink: 'syz.3.2113': attribute type 8 has an invalid length. [ 559.599774][T11582] netlink: 355 bytes leftover after parsing attributes in process `syz.3.2113'. [ 560.849327][T11602] netlink: 'syz.1.2116': attribute type 3 has an invalid length. [ 560.875055][T11602] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2116'. [ 562.143118][T11585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2113'. [ 562.153833][T11586] netlink: 'syz.2.2112': attribute type 21 has an invalid length. [ 562.161757][T11586] netlink: 'syz.2.2112': attribute type 3 has an invalid length. [ 562.171010][T11586] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2112'. [ 562.417571][T11607] netlink: 'syz.0.2118': attribute type 27 has an invalid length. [ 562.452089][T11607] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2118'. [ 562.473958][T11607] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 562.564743][T11610] netlink: 'syz.3.2119': attribute type 33 has an invalid length. [ 562.619627][T11610] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2119'. [ 562.914496][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.920928][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.054159][T11653] netlink: 'syz.2.2131': attribute type 9 has an invalid length. [ 565.132207][T11653] netlink: 'syz.2.2131': attribute type 8 has an invalid length. [ 565.140363][T11653] netlink: 355 bytes leftover after parsing attributes in process `syz.2.2131'. [ 566.461056][T11663] netlink: 'syz.3.2132': attribute type 3 has an invalid length. [ 566.552459][T11663] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2132'. [ 569.324212][T11654] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2131'. [ 569.849466][T11683] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2138'. [ 569.920218][T11683] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2138'. [ 574.403647][T11734] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2154'. [ 575.751605][T10848] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 578.885837][T11772] netlink: 'syz.0.2163': attribute type 27 has an invalid length. [ 578.894144][T11772] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2163'. [ 578.904071][T11772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 578.947937][T11734] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 578.957141][T11734] CPU: 1 PID: 11734 Comm: syz.4.2154 Not tainted syzkaller #0 [ 578.965033][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.975213][T11734] Call Trace: [ 578.978786][T11734] [ 578.981738][T11734] dump_stack_lvl+0x188/0x24e [ 578.986526][T11734] ? show_regs_print_info+0x12/0x12 [ 578.991774][T11734] ? load_image+0x410/0x410 [ 578.996355][T11734] sysfs_warn_dup+0x8a/0xa0 [ 579.000912][T11734] sysfs_do_create_link_sd+0xc0/0x110 [ 579.006423][T11734] device_add+0x83b/0x1050 [ 579.010895][T11734] wiphy_register+0x1d8b/0x2aa0 [ 579.015807][T11734] ? cfg80211_event_work+0x40/0x40 [ 579.020784][T11774] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2164'. [ 579.020976][T11734] ? minstrel_ht_alloc+0x894/0xa20 [ 579.021055][T11734] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 579.041548][T11734] ieee80211_register_hw+0x2d48/0x39f0 [ 579.047215][T11734] ? ieee80211_register_hw+0xf41/0x39f0 [ 579.052775][T11734] ? ieee80211_register_hw+0xf41/0x39f0 [ 579.058373][T11734] ? ieee80211_tasklet_handler+0x20/0x20 [ 579.064171][T11734] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 579.070202][T11734] ? __debug_object_init+0xed/0x440 [ 579.075444][T11734] ? memset+0x1e/0x40 [ 579.079455][T11734] ? __hrtimer_init+0x189/0x270 [ 579.084523][T11734] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 579.090301][T11734] ? memcpy+0x3c/0x60 [ 579.094344][T11734] hwsim_new_radio_nl+0xab7/0xc90 [ 579.099431][T11734] genl_family_rcv_msg_doit+0x22f/0x350 [ 579.105020][T11734] ? end_current_label_crit_section+0x170/0x170 [ 579.111386][T11734] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 579.117411][T11734] ? bpf_lsm_capable+0x5/0x10 [ 579.122121][T11734] ? security_capable+0x85/0xb0 [ 579.127008][T11734] genl_rcv_msg+0x601/0x790 [ 579.131904][T11734] ? genl_bind+0x360/0x360 [ 579.136529][T11734] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 579.142920][T11734] netlink_rcv_skb+0x1ef/0x440 [ 579.147901][T11734] ? genl_bind+0x360/0x360 [ 579.152356][T11734] ? netlink_ack+0x1160/0x1160 [ 579.157343][T11734] ? down_read+0x1a8/0x2d0 [ 579.161880][T11734] genl_rcv+0x24/0x40 [ 579.165896][T11734] netlink_unicast+0x7ad/0x920 [ 579.170705][T11734] netlink_sendmsg+0x8ad/0xbd0 [ 579.175508][T11734] ? netlink_getsockopt+0x550/0x550 [ 579.180837][T11734] ? apparmor_socket_sendmsg+0x8a/0x330 [ 579.186421][T11734] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 579.191843][T11734] ? security_socket_sendmsg+0x7c/0xa0 [ 579.197428][T11734] ? netlink_getsockopt+0x550/0x550 [ 579.202662][T11734] ____sys_sendmsg+0x5ed/0x9a0 [ 579.208162][T11734] ? __sys_sendmsg_sock+0x30/0x30 [ 579.213243][T11734] ? __import_iovec+0x306/0x510 [ 579.218327][T11734] ? import_iovec+0x6f/0xa0 [ 579.222962][T11734] ___sys_sendmsg+0x2a2/0x360 [ 579.227679][T11734] ? __sys_sendmsg+0x2a0/0x2a0 [ 579.232680][T11734] __se_sys_sendmsg+0x1c3/0x2b0 [ 579.237660][T11734] ? ct_nmi_exit+0x145/0x1c0 [ 579.242387][T11734] ? __x64_sys_sendmsg+0x80/0x80 [ 579.247639][T11734] ? lockdep_hardirqs_on+0x94/0x140 [ 579.252890][T11734] do_syscall_64+0x4c/0xa0 [ 579.257797][T11734] ? clear_bhb_loop+0x60/0xb0 [ 579.262596][T11734] ? clear_bhb_loop+0x60/0xb0 [ 579.267484][T11734] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.273596][T11734] RIP: 0033:0x7f8916b9e159 [ 579.278056][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.297894][T11734] RSP: 002b:00007f8914db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.306360][T11734] RAX: ffffffffffffffda RBX: 00007f8916e26180 RCX: 00007f8916b9e159 [ 579.314545][T11734] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 579.322568][T11734] RBP: 00007f8916c3506b R08: 0000000000000000 R09: 0000000000000000 [ 579.330584][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.338594][T11734] R13: 00007f8916e26218 R14: 00007f8916e26180 R15: 00007fff75c8fd98 [ 579.346631][T11734] [ 586.406378][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2197'. [ 586.452499][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2197'. [ 586.487747][T11879] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2197'. [ 594.175690][T11963] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2221'. [ 596.907687][T12012] netlink: 'syz.0.2233': attribute type 3 has an invalid length. [ 596.926654][T12012] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2233'. [ 598.468524][T12015] netlink: 'syz.2.2234': attribute type 2 has an invalid length. [ 598.505364][T12015] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 598.565203][T12015] netlink: 'syz.2.2234': attribute type 4 has an invalid length. [ 598.594967][T12015] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.2234'. [ 598.629007][T12024] netlink: 'syz.1.2238': attribute type 12 has an invalid length. [ 598.653159][T12024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2238'. [ 599.343072][T12040] device netdevsim0 entered promiscuous mode [ 599.639937][T12045] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2243'. [ 599.712156][T12045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.361009][T12068] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 600.404229][T12068] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2249'. [ 602.940694][T12063] netlink: 'syz.3.2249': attribute type 21 has an invalid length. [ 602.952105][T12063] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.960315][T12063] IPv6: Can't replace route, no match found [ 602.967128][T12070] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2249'. [ 603.076097][T12075] netlink: 'syz.2.2251': attribute type 10 has an invalid length. [ 603.094377][T12075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2251'. [ 603.132573][T12075] device dummy0 entered promiscuous mode [ 603.141245][T12075] bond0: (slave dummy0): Releasing backup interface [ 603.169998][T12075] bridge0: port 1(dummy0) entered blocking state [ 603.190996][T12075] bridge0: port 1(dummy0) entered disabled state [ 603.199529][T12080] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.2253'. [ 603.217010][T12080] netlink: zone id is out of range [ 603.225364][T12080] netlink: zone id is out of range [ 603.230810][T12080] netlink: zone id is out of range [ 603.242995][T12077] FAULT_INJECTION: forcing a failure. [ 603.242995][T12077] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 603.256743][T12077] CPU: 1 PID: 12077 Comm: syz.4.2252 Not tainted syzkaller #0 [ 603.257854][T12080] netlink: zone id is out of range [ 603.264223][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.264267][T12077] Call Trace: [ 603.264276][T12077] [ 603.264284][T12077] dump_stack_lvl+0x188/0x24e [ 603.264312][T12077] ? verify_lock_unused+0x140/0x140 [ 603.264339][T12077] ? show_regs_print_info+0x12/0x12 [ 603.264359][T12077] ? load_image+0x410/0x410 [ 603.264386][T12077] ? mark_lock+0x94/0x320 [ 603.264417][T12077] should_fail_ex+0x390/0x4c0 [ 603.264449][T12077] prepare_alloc_pages+0x1e1/0x5b0 [ 603.281997][T12080] netlink: zone id is out of range [ 603.283097][T12077] __alloc_pages+0x130/0x4f0 [ 603.283136][T12077] ? zone_statistics+0x170/0x170 [ 603.292316][T12080] netlink: zone id is out of range [ 603.295972][T12077] ? rcu_is_watching+0x11/0xa0 [ 603.310080][T12080] netlink: zone id is out of range [ 603.310099][T12077] ? trace_contention_end+0x5f/0x170 [ 603.355404][T12077] ? __mutex_lock+0x1ab/0xae0 [ 603.360099][T12077] alloc_pages_node+0x10a/0x170 [ 603.365008][T12077] ? skb_attempt_defer_free+0x3f0/0x3f0 [ 603.370588][T12077] ? __local_bh_disable_ip+0x104/0x1a0 [ 603.376158][T12077] __napi_alloc_skb+0x33d/0x510 [ 603.381021][T12077] ? napi_get_frags+0x1c/0x140 [ 603.385831][T12077] napi_get_frags+0x68/0x140 [ 603.390432][T12077] ? tun_get_user+0x9df/0x3be0 [ 603.395247][T12077] tun_get_user+0x9f8/0x3be0 [ 603.399867][T12077] ? rcu_read_unlock+0xa0/0xa0 [ 603.404681][T12077] ? tun_get+0x1c/0x2e0 [ 603.408857][T12077] ? __lock_acquire+0x7c40/0x7c40 [ 603.413918][T12077] ? tun_get+0x1c/0x2e0 [ 603.418092][T12077] tun_chr_write_iter+0x112/0x1f0 [ 603.423139][T12077] vfs_write+0x482/0x9a0 [ 603.427456][T12077] ? file_end_write+0x250/0x250 [ 603.432324][T12077] ? __fget_files+0x3fc/0x460 [ 603.437128][T12077] ? __fdget_pos+0x1d4/0x360 [ 603.441735][T12077] ? ksys_write+0x70/0x260 [ 603.446339][T12077] ksys_write+0x14d/0x260 [ 603.450687][T12077] ? __ia32_sys_read+0x80/0x80 [ 603.455503][T12077] ? lockdep_hardirqs_on+0x94/0x140 [ 603.460740][T12077] do_syscall_64+0x4c/0xa0 [ 603.465442][T12077] ? clear_bhb_loop+0x60/0xb0 [ 603.470602][T12077] ? clear_bhb_loop+0x60/0xb0 [ 603.475416][T12077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 603.481550][T12077] RIP: 0033:0x7f8916b9e159 [ 603.486345][T12077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.506318][T12077] RSP: 002b:00007f8914df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.514745][T12077] RAX: ffffffffffffffda RBX: 00007f8916e25fa0 RCX: 00007f8916b9e159 [ 603.522761][T12077] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000003 [ 603.530737][T12077] RBP: 00007f8914df6090 R08: 0000000000000000 R09: 0000000000000000 [ 603.540057][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.548049][T12077] R13: 00007f8916e26038 R14: 00007f8916e25fa0 R15: 00007fff75c8fd98 [ 603.556225][T12077] [ 603.593961][T12080] netlink: zone id is out of range [ 603.599150][T12080] netlink: zone id is out of range [ 606.663894][ T4345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 608.195107][T12145] netlink: 'syz.4.2269': attribute type 3 has an invalid length. [ 608.214482][T12145] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2269'. [ 608.886812][T12159] netlink: 'syz.0.2273': attribute type 3 has an invalid length. [ 608.910985][T12159] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2273'. [ 610.701159][T12134] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 610.717606][T12134] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.728081][T12134] device bridge_slave_1 left promiscuous mode [ 610.734991][T12134] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.382385][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.388989][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.049729][T12297] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2311'. [ 628.776732][T12297] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 628.826929][T12297] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 628.868237][T12297] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 629.077733][T12319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2321'. [ 630.013362][T12334] device syzkaller0 entered promiscuous mode [ 630.069294][T12336] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2328'. [ 630.106225][T12336] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.130513][T12336] net_ratelimit: 3661 callbacks suppressed [ 630.130531][T12336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.249399][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 630.260869][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 630.269282][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.292809][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.301447][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 630.309070][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 630.457311][T10863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.352182][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 634.445664][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 636.515139][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 637.691400][ T4345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 637.858247][T12388] netlink: 'syz.0.2345': attribute type 41 has an invalid length. [ 637.866707][T12388] device netdevsim0 left promiscuous mode [ 637.914491][T10863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.070866][T10863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.276860][T12403] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2348'. [ 638.376295][T12408] netlink: 'syz.4.2351': attribute type 3 has an invalid length. [ 638.388417][T10863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.463732][T12408] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2351'. [ 638.602449][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 639.074837][T12347] chnl_net:caif_netlink_parms(): no params data found [ 639.177535][T12423] can: request_module (can-proto-0) failed. [ 639.481745][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.547769][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.590638][T12347] device bridge_slave_0 entered promiscuous mode [ 639.655093][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.671669][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.724600][T12347] device bridge_slave_1 entered promiscuous mode [ 641.348960][T12457] delete_channel: no stack [ 643.089749][T12347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.191502][T12347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.628593][T12347] team0: Port device team_slave_0 added [ 643.677830][T12347] team0: Port device team_slave_1 added [ 644.083650][T12493] tap0: tun_chr_ioctl cmd 1074025677 [ 644.115861][T12493] tap0: linktype set to 1 [ 644.121368][T12347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.139694][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.287941][T12347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.867882][T12347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.882980][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.940471][T12347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.363991][T12347] device hsr_slave_0 entered promiscuous mode [ 645.392644][T12347] device hsr_slave_1 entered promiscuous mode [ 645.409640][T12347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.428692][T12347] Cannot create hsr debugfs directory [ 647.884222][T12523] device syzkaller0 entered promiscuous mode [ 649.210809][T12561] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 652.715248][T12560] netlink: 'syz.0.2382': attribute type 21 has an invalid length. [ 653.195019][T12581] netlink: 'syz.0.2389': attribute type 39 has an invalid length. [ 654.782891][T10863] team0: Port device wlan1 removed [ 655.358808][T10863] device hsr_slave_0 left promiscuous mode [ 655.385497][T10863] device hsr_slave_1 left promiscuous mode [ 655.395741][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.418452][T10863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.440637][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.448667][T10863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.481837][T10863] device batadv0 left promiscuous mode [ 655.510396][T10863] bridge0: port 2(batadv0) entered disabled state [ 655.581536][T10863] device bridge_slave_0 left promiscuous mode [ 655.614264][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.676794][T10863] device veth0_macvtap left promiscuous mode [ 655.683655][T10863] device veth1_vlan left promiscuous mode [ 655.690322][T10863] device veth0_vlan left promiscuous mode [ 657.255596][T10863] team0 (unregistering): Port device geneve1 removed [ 660.959231][T10863] team0 (unregistering): Port device team_slave_1 removed [ 661.017868][T10863] team0 (unregistering): Port device team_slave_0 removed [ 661.116180][T10863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.183201][T10863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.819512][T10863] bond0 (unregistering): Released all slaves [ 662.049663][T12347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 662.084021][T12347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 662.125059][T12347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.184542][T12347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.384035][T12717] netlink: 'syz.2.2421': attribute type 21 has an invalid length. [ 662.489901][T12717] netlink: 'syz.2.2421': attribute type 7 has an invalid length. [ 662.743425][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.853669][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.913561][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.921790][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 663.002441][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 663.045505][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 663.089480][T10855] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.096769][T10855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.177173][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 663.225978][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 663.248188][T10855] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.255546][T10855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.339464][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 663.366252][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 663.406716][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.460994][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.515164][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.548189][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.585368][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.614232][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.643168][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.685765][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.738211][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.761510][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.784658][T12347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.651005][T12776] netlink: 'syz.4.2436': attribute type 16 has an invalid length. [ 664.739429][T12776] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2436'. [ 665.464694][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.508631][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.609792][T12347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.736992][T12829] sctp: [Deprecated]: syz.1.2452 (pid 12829) Use of int in maxseg socket option. [ 666.736992][T12829] Use struct sctp_assoc_value instead [ 668.722571][T10857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 669.880073][T12867] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2462'. [ 669.920418][T12867] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 669.963027][T12867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.074583][ T4289] Bluetooth: hci4: ISO packet for unknown connection handle 532 [ 670.350648][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 670.382648][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 670.613730][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 670.649302][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 670.690068][T12347] device veth0_vlan entered promiscuous mode [ 670.711533][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 670.757885][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 670.906112][T12347] device veth1_vlan entered promiscuous mode [ 674.481158][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.489448][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 674.512068][T12907] netlink: 'syz.4.2472': attribute type 13 has an invalid length. [ 674.520058][T12907] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2472'. [ 674.561743][T12907] syz_tun: refused to change device tx_queue_len [ 674.585638][T12907] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 674.644694][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.666587][T12911] sctp: [Deprecated]: syz.0.2474 (pid 12911) Use of int in maxseg socket option. [ 674.666587][T12911] Use struct sctp_assoc_value instead [ 674.693845][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.750727][T12347] device veth0_macvtap entered promiscuous mode [ 674.774933][T12347] device veth1_macvtap entered promiscuous mode [ 674.853098][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.888712][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.932018][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.001042][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.109274][T12347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.184914][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.214313][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.239238][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.258725][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.269265][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.280384][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.359354][T12347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.486714][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 675.524791][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 675.586429][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.655428][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.696298][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 675.738259][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 675.770614][T12347] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.783084][T12347] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.801972][T12347] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.810867][T12347] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.618862][T12951] tun0: tun_chr_ioctl cmd 1074812118 [ 679.642979][T10857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.659047][T10857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.700586][T10857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 679.772568][T10857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.809011][T10857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.884574][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 680.505993][T12976] sctp: [Deprecated]: syz.4.2491 (pid 12976) Use of int in maxseg socket option. [ 680.505993][T12976] Use struct sctp_assoc_value instead [ 682.391207][T12997] netlink: 'syz.5.2319': attribute type 2 has an invalid length. [ 682.587755][T12999] netlink: 'syz.1.2496': attribute type 21 has an invalid length. [ 682.617858][T12999] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2496'. [ 682.639778][T12999] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2496'. [ 685.794756][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.801201][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.504130][T13067] netlink: 'syz.5.2509': attribute type 13 has an invalid length. [ 691.516986][T13067] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2509'. [ 691.528287][T13067] syz_tun: refused to change device tx_queue_len [ 691.562278][T13067] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 692.143539][T13097] FAULT_INJECTION: forcing a failure. [ 692.143539][T13097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.157036][T13097] CPU: 0 PID: 13097 Comm: syz.1.2517 Not tainted syzkaller #0 [ 692.164637][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 692.174798][T13097] Call Trace: [ 692.178196][T13097] [ 692.181133][T13097] dump_stack_lvl+0x188/0x24e [ 692.186311][T13097] ? verify_lock_unused+0x140/0x140 [ 692.191537][T13097] ? show_regs_print_info+0x12/0x12 [ 692.196753][T13097] ? load_image+0x410/0x410 [ 692.201279][T13097] ? mark_lock+0x94/0x320 [ 692.205810][T13097] should_fail_ex+0x390/0x4c0 [ 692.210704][T13097] prepare_alloc_pages+0x1e1/0x5b0 [ 692.215933][T13097] __alloc_pages+0x130/0x4f0 [ 692.220544][T13097] ? zone_statistics+0x170/0x170 [ 692.225496][T13097] ? rcu_is_watching+0x11/0xa0 [ 692.230272][T13097] ? trace_contention_end+0x5f/0x170 [ 692.235658][T13097] ? __mutex_lock+0x1ab/0xae0 [ 692.240347][T13097] alloc_pages_node+0x10a/0x170 [ 692.245209][T13097] ? skb_attempt_defer_free+0x3f0/0x3f0 [ 692.250796][T13097] ? __local_bh_disable_ip+0x104/0x1a0 [ 692.256272][T13097] __napi_alloc_skb+0x33d/0x510 [ 692.261135][T13097] ? napi_get_frags+0x1c/0x140 [ 692.266018][T13097] napi_get_frags+0x68/0x140 [ 692.270625][T13097] ? tun_get_user+0x9df/0x3be0 [ 692.275409][T13097] tun_get_user+0x9f8/0x3be0 [ 692.280026][T13097] ? rcu_read_unlock+0xa0/0xa0 [ 692.284991][T13097] ? tun_get+0x1c/0x2e0 [ 692.289159][T13097] ? __lock_acquire+0x7c40/0x7c40 [ 692.294287][T13097] ? tun_get+0x1c/0x2e0 [ 692.298475][T13097] tun_chr_write_iter+0x112/0x1f0 [ 692.303515][T13097] vfs_write+0x482/0x9a0 [ 692.307795][T13097] ? file_end_write+0x250/0x250 [ 692.312662][T13097] ? __fget_files+0x3fc/0x460 [ 692.317729][T13097] ? __fdget_pos+0x1d4/0x360 [ 692.322587][T13097] ? ksys_write+0x70/0x260 [ 692.327029][T13097] ksys_write+0x14d/0x260 [ 692.331373][T13097] ? __ia32_sys_read+0x80/0x80 [ 692.336496][T13097] ? lockdep_hardirqs_on+0x94/0x140 [ 692.341710][T13097] do_syscall_64+0x4c/0xa0 [ 692.346137][T13097] ? clear_bhb_loop+0x60/0xb0 [ 692.350824][T13097] ? clear_bhb_loop+0x60/0xb0 [ 692.355694][T13097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.361793][T13097] RIP: 0033:0x7f703ad9e159 [ 692.366323][T13097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.386115][T13097] RSP: 002b:00007f703bcdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 692.394801][T13097] RAX: ffffffffffffffda RBX: 00007f703b026090 RCX: 00007f703ad9e159 [ 692.402889][T13097] RDX: 0000000000000066 RSI: 0000200000000000 RDI: 0000000000000003 [ 692.410869][T13097] RBP: 00007f703bcdf090 R08: 0000000000000000 R09: 0000000000000000 [ 692.418854][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.426940][T13097] R13: 00007f703b026128 R14: 00007f703b026090 R15: 00007ffc4ee17388 [ 692.434930][T13097] [ 699.612388][T13145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2524'. [ 699.745737][T10848] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 702.458991][T13199] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2539'. [ 702.596553][T13203] FAULT_INJECTION: forcing a failure. [ 702.596553][T13203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.615242][T13203] CPU: 0 PID: 13203 Comm: syz.5.2540 Not tainted syzkaller #0 [ 702.622774][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.632950][T13203] Call Trace: [ 702.636253][T13203] [ 702.639295][T13203] dump_stack_lvl+0x188/0x24e [ 702.644098][T13203] ? show_regs_print_info+0x12/0x12 [ 702.649344][T13203] ? load_image+0x410/0x410 [ 702.653975][T13203] ? __lock_acquire+0x7c40/0x7c40 [ 702.659037][T13203] ? snprintf+0xe5/0x140 [ 702.663335][T13203] should_fail_ex+0x390/0x4c0 [ 702.668049][T13203] _copy_to_user+0x2c/0x130 [ 702.672589][T13203] simple_read_from_buffer+0xe3/0x150 [ 702.678069][T13203] proc_fail_nth_read+0x1a6/0x220 [ 702.683211][T13203] ? proc_fault_inject_write+0x310/0x310 [ 702.688888][T13203] ? fsnotify_perm+0x248/0x550 [ 702.693688][T13203] ? proc_fault_inject_write+0x310/0x310 [ 702.699367][T13203] vfs_read+0x2db/0x960 [ 702.703575][T13203] ? kernel_read+0x1e0/0x1e0 [ 702.708292][T13203] ? __fget_files+0x28/0x460 [ 702.713008][T13203] ? __fget_files+0x3fc/0x460 [ 702.717735][T13203] ? __fdget_pos+0x2ae/0x360 [ 702.722363][T13203] ? ksys_read+0x70/0x260 [ 702.726733][T13203] ksys_read+0x14d/0x260 [ 702.731020][T13203] ? vfs_write+0x9a0/0x9a0 [ 702.735539][T13203] ? lockdep_hardirqs_on+0x94/0x140 [ 702.740973][T13203] do_syscall_64+0x4c/0xa0 [ 702.745436][T13203] ? clear_bhb_loop+0x60/0xb0 [ 702.750251][T13203] ? clear_bhb_loop+0x60/0xb0 [ 702.755140][T13203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.761280][T13203] RIP: 0033:0x7f7e1395e98e [ 702.765833][T13203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.785665][T13203] RSP: 002b:00007f7e14784fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.794128][T13203] RAX: ffffffffffffffda RBX: 00007f7e147856c0 RCX: 00007f7e1395e98e [ 702.802496][T13203] RDX: 000000000000000f RSI: 00007f7e147850a0 RDI: 0000000000000006 [ 702.810506][T13203] RBP: 00007f7e14785090 R08: 0000000000000000 R09: 0000000000000000 [ 702.818609][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.826619][T13203] R13: 00007f7e13c26038 R14: 00007f7e13c25fa0 R15: 00007ffe6221d4c8 [ 702.834840][T13203] [ 703.702738][T13220] Dead loop on virtual device ip6_vti0, fix it urgently! [ 706.903404][T13209] netlink: 'syz.2.2541': attribute type 2 has an invalid length. [ 706.926921][T13210] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2541'. [ 706.961980][T13210] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 714.676542][T13367] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2578'. [ 715.390585][T13370] device syzkaller0 entered promiscuous mode [ 723.930415][T13463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2598'. [ 723.942895][T13466] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2598'. [ 723.952539][T13466] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 725.483701][T13549] netlink: 'syz.4.2617': attribute type 10 has an invalid length. [ 725.492962][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2617'. [ 725.511996][T13549] device dummy0 entered promiscuous mode [ 725.529683][T13549] bridge0: port 3(dummy0) entered blocking state [ 725.550948][T13549] bridge0: port 3(dummy0) entered disabled state [ 725.574207][T13549] bridge0: port 3(dummy0) entered blocking state [ 725.580840][T13549] bridge0: port 3(dummy0) entered forwarding state [ 725.696756][T13556] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2619'. [ 730.285460][T13622] raw_sendmsg: syz.5.2639 forgot to set AF_INET. Fix it! [ 731.156535][T13646] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2647'. [ 732.039978][T10857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 733.821010][T13649] delete_channel: no stack [ 734.164268][T13696] netlink: 'syz.1.2654': attribute type 10 has an invalid length. [ 734.202157][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2654'. [ 734.225497][T13696] device dummy0 entered promiscuous mode [ 734.306996][T13696] bridge0: port 2(dummy0) entered blocking state [ 734.386882][T13696] bridge0: port 2(dummy0) entered disabled state [ 735.081363][T13712] netlink: 'syz.0.2660': attribute type 3 has an invalid length. [ 735.151333][T13712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2660'. [ 735.174000][T13712] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2660'. [ 738.433263][T13747] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 739.712884][T13734] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2665'. [ 739.752166][T13747] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 740.222691][T13760] netlink: 'syz.0.2674': attribute type 10 has an invalid length. [ 740.243291][ T47] tipc: Subscription rejected, illegal request [ 740.252150][T13760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2674'. [ 743.925869][T13808] netlink: 'syz.0.2685': attribute type 2 has an invalid length. [ 745.309556][T13842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2697'. [ 747.453494][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.460137][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.297019][T13888] netlink: 'syz.0.2709': attribute type 11 has an invalid length. [ 754.440884][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 754.608456][T13926] netlink: 'syz.4.2721': attribute type 10 has an invalid length. [ 754.886215][T13926] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 756.922199][ T47] wlan1: Trigger new scan to find an IBSS to join [ 757.747715][T13939] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.2724'. [ 757.765416][T13950] netlink: 'syz.1.2726': attribute type 21 has an invalid length. [ 757.773707][T13950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2726'. [ 757.786192][T13958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2728'. [ 757.802311][T13958] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2728'. [ 758.033704][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.076547][T13969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.094714][T13969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.111653][T13969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.156208][T13969] batman_adv: batadv0: Interface deactivated: vlan1 [ 758.212104][T13969] batman_adv: batadv0: Removing interface: vlan1 [ 759.265092][T13998] netlink: 'syz.0.2738': attribute type 25 has an invalid length. [ 759.292847][T13998] netlink: 'syz.0.2738': attribute type 3 has an invalid length. [ 759.311320][T13998] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2738'. [ 759.385961][T13998] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2738'. [ 759.397795][T13998] netlink: zone id is out of range [ 759.417858][T13998] netlink: zone id is out of range [ 759.438496][T13998] netlink: zone id is out of range [ 759.452131][T13998] netlink: zone id is out of range [ 759.478694][T13998] netlink: zone id is out of range [ 759.489370][T13998] netlink: zone id is out of range [ 759.502034][T13998] netlink: zone id is out of range [ 759.515023][T13998] netlink: zone id is out of range [ 759.522160][T13998] netlink: zone id is out of range [ 759.528071][T13998] netlink: zone id is out of range [ 759.908173][T10857] wlan1: Trigger new scan to find an IBSS to join [ 762.673123][T14043] netlink: 'syz.2.2753': attribute type 29 has an invalid length. [ 762.687347][T14042] netlink: 'syz.2.2753': attribute type 29 has an invalid length. [ 763.880770][T10861] wlan1: Trigger new scan to find an IBSS to join [ 764.847357][T10861] wlan1: Creating new IBSS network, BSSID 1a:a4:1c:54:51:f2 [ 766.422856][T14043] netlink: 'syz.2.2753': attribute type 29 has an invalid length. [ 766.728845][T14095] netlink: 'syz.0.2767': attribute type 10 has an invalid length. [ 766.772174][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2767'. [ 766.948767][T14095] batman_adv: batadv0: Adding interface: virt_wifi0 [ 766.995640][T14095] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.077233][T14095] batman_adv: batadv0: Interface activated: virt_wifi0 [ 769.279376][T14149] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2783'. [ 772.619312][T14157] netlink: 'syz.1.2786': attribute type 10 has an invalid length. [ 772.627310][T14157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2786'. [ 772.638785][T14157] net_ratelimit: 7 callbacks suppressed [ 772.638812][T14157] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 773.529128][T14189] netlink: 'syz.5.2795': attribute type 9 has an invalid length. [ 773.593714][T14189] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.2795'. [ 773.799439][T14197] netlink: 'syz.2.2797': attribute type 1 has an invalid length. [ 773.848693][T14197] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2797'. [ 774.149926][T14194] device syzkaller0 entered promiscuous mode [ 775.830063][T14239] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2809'. [ 775.846024][T14238] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2809'. [ 777.107760][T14216] netlink: 'syz.4.2802': attribute type 10 has an invalid length. [ 777.119168][T14216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2802'. [ 777.137945][T14216] batman_adv: batadv0: Adding interface: virt_wifi0 [ 777.145763][T14216] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.177951][T14216] batman_adv: batadv0: Interface activated: virt_wifi0 [ 777.187634][T14239] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 777.229383][T14239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 777.285486][T14239] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 777.415527][T14248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 777.422871][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 777.430246][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 777.437942][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 778.361385][T14280] netlink: 'syz.5.2823': attribute type 1 has an invalid length. [ 778.374694][T14280] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2823'. [ 778.702264][T14287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2826'. [ 778.936528][T14290] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2825'. [ 779.444051][T14296] netlink: 'syz.4.2829': attribute type 10 has an invalid length. [ 779.574818][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.635479][T14296] device bridge_slave_1 left promiscuous mode [ 779.665412][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.000892][T14296] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 780.496128][T14320] netlink: 91092 bytes leftover after parsing attributes in process `syz.1.2835'. [ 781.546933][T14351] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2844'. [ 783.275435][T14380] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2853'. [ 784.846960][T14417] netlink: 'syz.1.2863': attribute type 10 has an invalid length. [ 785.038763][T14424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 785.049578][T14424] IPv6: NLM_F_CREATE should be set when creating new route [ 785.060200][T14424] IPv6: NLM_F_CREATE should be set when creating new route [ 785.067691][T14424] IPv6: NLM_F_CREATE should be set when creating new route [ 786.125153][T14445] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2874'. [ 786.147934][T14445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 786.234770][T14445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.509508][T14451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 786.521281][T14451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 786.530428][T14451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 786.538885][T14451] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 786.546941][T14451] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 786.554693][T14451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 787.585866][T14458] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2878'. [ 787.595712][T14476] netlink: 'syz.5.2880': attribute type 1 has an invalid length. [ 787.745991][T10857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.938135][T10857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.649634][T14451] Bluetooth: hci5: command 0x0409 tx timeout [ 789.230103][T10857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.677845][T14451] Bluetooth: hci5: command 0x041b tx timeout [ 792.754042][T14451] Bluetooth: hci5: command 0x040f tx timeout [ 794.832697][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 796.442111][T10857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.725425][T14450] chnl_net:caif_netlink_parms(): no params data found [ 797.074060][T14450] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.081528][T14450] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.099156][T14450] device bridge_slave_0 entered promiscuous mode [ 797.114242][T14450] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.124258][T14450] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.148750][T14450] device bridge_slave_1 entered promiscuous mode [ 797.218315][T14450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.231176][T14450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.387380][T14450] team0: Port device team_slave_0 added [ 797.417309][T14450] team0: Port device team_slave_1 added [ 798.718822][T10857] device .*! left promiscuous mode [ 798.853631][T14450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.860768][T14450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.979426][T14611] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2915'. [ 798.989086][T14450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.137046][T10857] device ip6gretap0 left promiscuous mode [ 802.148924][T10857] Ÿë: port 1(ip6gretap0) entered disabled state [ 802.190020][T14611] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 802.201561][T14611] CPU: 0 PID: 14611 Comm: syz.1.2915 Not tainted syzkaller #0 [ 802.209190][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 802.219387][T14611] Call Trace: [ 802.222710][T14611] [ 802.225675][T14611] dump_stack_lvl+0x188/0x24e [ 802.230413][T14611] ? show_regs_print_info+0x12/0x12 [ 802.235748][T14611] ? load_image+0x410/0x410 [ 802.240316][T14611] sysfs_warn_dup+0x8a/0xa0 [ 802.244874][T14611] sysfs_do_create_link_sd+0xc0/0x110 [ 802.250300][T14611] device_add+0x83b/0x1050 [ 802.254917][T14611] wiphy_register+0x1d8b/0x2aa0 [ 802.259832][T14611] ? cfg80211_event_work+0x40/0x40 [ 802.264994][T14611] ? minstrel_ht_alloc+0x894/0xa20 [ 802.270248][T14611] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 802.276373][T14611] ieee80211_register_hw+0x2d48/0x39f0 [ 802.281889][T14611] ? ieee80211_register_hw+0xf41/0x39f0 [ 802.287473][T14611] ? ieee80211_register_hw+0xf41/0x39f0 [ 802.293077][T14611] ? ieee80211_tasklet_handler+0x20/0x20 [ 802.298847][T14611] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 802.304891][T14611] ? __debug_object_init+0xed/0x440 [ 802.310240][T14611] ? memset+0x1e/0x40 [ 802.314268][T14611] ? __hrtimer_init+0x189/0x270 [ 802.319165][T14611] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 802.324953][T14611] ? memcpy+0x3c/0x60 [ 802.329156][T14611] hwsim_new_radio_nl+0xab7/0xc90 [ 802.334259][T14611] genl_family_rcv_msg_doit+0x22f/0x350 [ 802.339940][T14611] ? end_current_label_crit_section+0x170/0x170 [ 802.346246][T14611] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 802.352553][T14611] ? bpf_lsm_capable+0x5/0x10 [ 802.357274][T14611] ? security_capable+0x85/0xb0 [ 802.362189][T14611] genl_rcv_msg+0x601/0x790 [ 802.366826][T14611] ? lock_chain_count+0x20/0x20 [ 802.371723][T14611] ? genl_bind+0x360/0x360 [ 802.376293][T14611] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 802.382929][T14611] netlink_rcv_skb+0x1ef/0x440 [ 802.387996][T14611] ? genl_bind+0x360/0x360 [ 802.392457][T14611] ? netlink_ack+0x1160/0x1160 [ 802.397602][T14611] ? down_read+0x1a8/0x2d0 [ 802.402246][T14611] genl_rcv+0x24/0x40 [ 802.406272][T14611] netlink_unicast+0x7ad/0x920 [ 802.411089][T14611] netlink_sendmsg+0x8ad/0xbd0 [ 802.415909][T14611] ? netlink_getsockopt+0x550/0x550 [ 802.421159][T14611] ? apparmor_socket_sendmsg+0x8a/0x330 [ 802.426760][T14611] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 802.432091][T14611] ? security_socket_sendmsg+0x7c/0xa0 [ 802.437697][T14611] ? netlink_getsockopt+0x550/0x550 [ 802.443128][T14611] ____sys_sendmsg+0x5ed/0x9a0 [ 802.448377][T14611] ? __sys_sendmsg_sock+0x30/0x30 [ 802.453455][T14611] ? __import_iovec+0x306/0x510 [ 802.458483][T14611] ? import_iovec+0x6f/0xa0 [ 802.463052][T14611] ___sys_sendmsg+0x2a2/0x360 [ 802.467866][T14611] ? __sys_sendmsg+0x2a0/0x2a0 [ 802.472822][T14611] __se_sys_sendmsg+0x1c3/0x2b0 [ 802.477728][T14611] ? __x64_sys_sendmsg+0x80/0x80 [ 802.482730][T14611] ? lockdep_hardirqs_on+0x94/0x140 [ 802.488010][T14611] do_syscall_64+0x4c/0xa0 [ 802.492466][T14611] ? clear_bhb_loop+0x60/0xb0 [ 802.497195][T14611] ? clear_bhb_loop+0x60/0xb0 [ 802.502552][T14611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.508760][T14611] RIP: 0033:0x7f703ad9e159 [ 802.513306][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.533228][T14611] RSP: 002b:00007f703bcdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.541877][T14611] RAX: ffffffffffffffda RBX: 00007f703b026090 RCX: 00007f703ad9e159 [ 802.549977][T14611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 802.558002][T14611] RBP: 00007f703ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 802.566114][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.574218][T14611] R13: 00007f703b026128 R14: 00007f703b026090 R15: 00007ffc4ee17388 [ 802.582260][T14611] [ 802.595888][T14450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.604743][T14450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.631435][T14450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.639890][T14637] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.2922'. [ 806.649361][T14637] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 806.953653][T14668] netlink: 'syz.0.2930': attribute type 39 has an invalid length. [ 808.675566][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.682492][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.715627][T14450] device hsr_slave_0 entered promiscuous mode [ 808.732283][T14450] device hsr_slave_1 entered promiscuous mode [ 808.739931][T14450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.748383][T14450] Cannot create hsr debugfs directory [ 811.276291][T14703] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2934'. [ 811.662636][T14703] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 812.378058][T14726] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2942'. [ 814.505803][T14726] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2942'. [ 818.388644][T14782] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2952'. [ 821.218984][T14450] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 821.251217][T10857] device hsr_slave_0 left promiscuous mode [ 821.271310][T10857] device hsr_slave_1 left promiscuous mode [ 821.278818][T10857] bridge0: port 1(dummy0) entered disabled state [ 821.309456][T10857] device veth1_macvtap left promiscuous mode [ 821.316860][T10857] device veth0_macvtap left promiscuous mode [ 821.323848][T10857] device veth1_vlan left promiscuous mode [ 821.329828][T10857] device veth0_vlan left promiscuous mode [ 823.374840][T10857] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 823.906676][T10857] team0 (unregistering): Port device team_slave_1 removed [ 823.985616][T10857] team0 (unregistering): Port device team_slave_0 removed [ 824.085439][T10857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.205892][T10857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.311430][T10857] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 825.621244][T10857] bond0 (unregistering): Released all slaves [ 825.796331][T14908] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2986'. [ 827.939303][T14450] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.072297][T14450] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 828.322341][T14450] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 829.119969][T14933] netlink: 'syz.0.2991': attribute type 10 has an invalid length. [ 829.368097][T14933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.422006][T14927] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2989'. [ 829.495119][T14933] team0: Port device batadv0 added [ 830.045385][T14927] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 831.819990][T14450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.905682][T14950] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2994'. [ 832.098491][T14950] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 832.124351][T14950] CPU: 0 PID: 14950 Comm: syz.1.2994 Not tainted syzkaller #0 [ 832.131912][T14950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.142001][T14950] Call Trace: [ 832.145305][T14950] [ 832.148357][T14950] dump_stack_lvl+0x188/0x24e [ 832.153088][T14950] ? show_regs_print_info+0x12/0x12 [ 832.158423][T14950] ? load_image+0x410/0x410 [ 832.162989][T14950] sysfs_warn_dup+0x8a/0xa0 [ 832.167564][T14950] sysfs_do_create_link_sd+0xc0/0x110 [ 832.172995][T14950] device_add+0x83b/0x1050 [ 832.177506][T14950] wiphy_register+0x1d8b/0x2aa0 [ 832.182426][T14950] ? cfg80211_event_work+0x40/0x40 [ 832.187582][T14950] ? minstrel_ht_alloc+0x894/0xa20 [ 832.192748][T14950] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 832.198969][T14950] ieee80211_register_hw+0x2d48/0x39f0 [ 832.204501][T14950] ? ieee80211_register_hw+0xf41/0x39f0 [ 832.210100][T14950] ? ieee80211_register_hw+0xf41/0x39f0 [ 832.215693][T14950] ? ieee80211_tasklet_handler+0x20/0x20 [ 832.221357][T14950] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 832.227341][T14950] ? __debug_object_init+0xed/0x440 [ 832.232605][T14950] ? memset+0x1e/0x40 [ 832.236635][T14950] ? __hrtimer_init+0x189/0x270 [ 832.241548][T14950] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 832.247425][T14950] ? memcpy+0x3c/0x60 [ 832.251473][T14950] hwsim_new_radio_nl+0xab7/0xc90 [ 832.256747][T14950] genl_family_rcv_msg_doit+0x22f/0x350 [ 832.262341][T14950] ? end_current_label_crit_section+0x170/0x170 [ 832.268824][T14950] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 832.274780][T14950] ? bpf_lsm_capable+0x5/0x10 [ 832.279508][T14950] ? security_capable+0x85/0xb0 [ 832.284428][T14950] genl_rcv_msg+0x601/0x790 [ 832.288990][T14950] ? genl_bind+0x360/0x360 [ 832.293458][T14950] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 832.299857][T14950] netlink_rcv_skb+0x1ef/0x440 [ 832.304637][T14950] ? genl_bind+0x360/0x360 [ 832.309096][T14950] ? netlink_ack+0x1160/0x1160 [ 832.313909][T14950] ? down_read+0x1a8/0x2d0 [ 832.318460][T14950] genl_rcv+0x24/0x40 [ 832.322484][T14950] netlink_unicast+0x7ad/0x920 [ 832.327314][T14950] netlink_sendmsg+0x8ad/0xbd0 [ 832.332137][T14950] ? netlink_getsockopt+0x550/0x550 [ 832.337401][T14950] ? apparmor_socket_sendmsg+0x8a/0x330 [ 832.343009][T14950] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 832.348339][T14950] ? security_socket_sendmsg+0x7c/0xa0 [ 832.353862][T14950] ? netlink_getsockopt+0x550/0x550 [ 832.359107][T14950] ____sys_sendmsg+0x5ed/0x9a0 [ 832.364013][T14950] ? __sys_sendmsg_sock+0x30/0x30 [ 832.369083][T14950] ? __import_iovec+0x306/0x510 [ 832.374084][T14950] ? import_iovec+0x6f/0xa0 [ 832.378652][T14950] ___sys_sendmsg+0x2a2/0x360 [ 832.383464][T14950] ? __lock_acquire+0x7c40/0x7c40 [ 832.388532][T14950] ? __sys_sendmsg+0x2a0/0x2a0 [ 832.393330][T14950] __se_sys_sendmsg+0x1c3/0x2b0 [ 832.398197][T14950] ? ct_nmi_exit+0x145/0x1c0 [ 832.402804][T14950] ? __x64_sys_sendmsg+0x80/0x80 [ 832.407803][T14950] ? lockdep_hardirqs_on+0x94/0x140 [ 832.413053][T14950] do_syscall_64+0x4c/0xa0 [ 832.417520][T14950] ? clear_bhb_loop+0x60/0xb0 [ 832.422238][T14950] ? clear_bhb_loop+0x60/0xb0 [ 832.426964][T14950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.432908][T14950] RIP: 0033:0x7f703ad9e159 [ 832.437364][T14950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.457473][T14950] RSP: 002b:00007f703bcbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.466145][T14950] RAX: ffffffffffffffda RBX: 00007f703b026180 RCX: 00007f703ad9e159 [ 832.474165][T14950] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 832.482184][T14950] RBP: 00007f703ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 832.490374][T14950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.498479][T14950] R13: 00007f703b026218 R14: 00007f703b026180 R15: 00007ffc4ee17388 [ 832.506638][T14950] [ 832.539006][T14450] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.450500][T14963] netlink: 'syz.5.2998': attribute type 10 has an invalid length. [ 836.458699][T14963] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2998'. [ 836.491939][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 836.517656][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.708523][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 836.734369][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 836.777557][T10861] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.785767][T10861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.794444][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 836.806372][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 836.843008][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.850231][T10861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.877055][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 836.967607][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 837.007930][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 837.075175][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 837.155533][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 837.203664][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 837.258297][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 837.355129][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 837.462671][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 837.596879][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 837.775794][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 837.979493][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 838.003469][T14450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 839.351720][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 839.373654][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 839.412317][T14450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.450540][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 839.470821][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 839.529435][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 839.548812][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 839.585349][T14450] device veth0_vlan entered promiscuous mode [ 839.601252][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 839.637168][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 839.707264][T14450] device veth1_vlan entered promiscuous mode [ 839.919247][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 839.933105][ T49] Bluetooth: hci1: Malformed Event: 0x02 [ 839.941129][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 839.966505][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 840.010468][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 840.060244][T15024] netlink: 'syz.0.3008': attribute type 7 has an invalid length. [ 840.082600][T15024] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3008'. [ 840.147293][T14450] device veth0_macvtap entered promiscuous mode [ 840.190649][T14450] device veth1_macvtap entered promiscuous mode [ 840.433455][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 840.456231][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 840.519571][T14450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.593750][T14450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.616211][T14450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.687834][T14450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.753791][T14450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.877673][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 840.910072][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 840.947284][T14450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.002115][T14450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.048605][T14450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.086384][T14450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.110984][T14450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.192626][T14450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.210779][T14450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.253090][T14450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.312852][T14450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.383026][T14450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.412633][T14450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.532884][T15067] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3019'. [ 842.455838][T14451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 842.478143][T14451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 842.486948][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 842.495751][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 842.504864][T14451] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 842.514948][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 844.153585][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.183627][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.592455][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 844.792044][T10861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.830960][T10861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.912027][T10863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 845.011499][T10869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.132168][T10869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.154185][T10863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 845.509596][T15114] delete_channel: no stack [ 845.511359][T15076] chnl_net:caif_netlink_parms(): no params data found [ 845.811757][T15076] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.822057][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.971302][T15076] device bridge_slave_0 entered promiscuous mode [ 846.040848][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.132006][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.185890][T15076] device bridge_slave_1 entered promiscuous mode [ 846.618987][T15076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.672172][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 846.784223][T15076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.015096][ T5608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.177966][ T5608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.244350][T15076] team0: Port device team_slave_0 added [ 847.284108][T15076] team0: Port device team_slave_1 added [ 847.418033][ T5608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.481385][T15076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.499136][T15076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.563982][T15174] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3037'. [ 847.637667][T15076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.704890][T15171] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3037'. [ 847.821511][T15182] netlink: 'syz.5.3041': attribute type 29 has an invalid length. [ 847.862383][T15182] netlink: 'syz.5.3041': attribute type 29 has an invalid length. [ 847.902352][T15076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.920976][T15076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.998116][T15076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.266231][ T5608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.340170][T15185] netlink: 'syz.5.3041': attribute type 29 has an invalid length. [ 848.450903][T15186] netlink: 'syz.5.3041': attribute type 29 has an invalid length. [ 848.478055][T15191] netlink: 'syz.5.3041': attribute type 29 has an invalid length. [ 848.544159][T15174] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 848.650593][T15076] device hsr_slave_0 entered promiscuous mode [ 848.679069][T15076] device hsr_slave_1 entered promiscuous mode [ 848.760982][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 849.429346][ T5608] device ip6gretap0 left promiscuous mode [ 849.462775][ T5608] Ÿë: port 1(ip6gretap0) entered disabled state [ 849.637187][T15229] netlink: 'syz.0.3049': attribute type 3 has an invalid length. [ 849.682159][T15229] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3049'. [ 850.038230][T15076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 850.066158][T15241] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3051'. [ 850.085004][T15241] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3051'. [ 850.105444][T15241] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3051'. [ 850.474756][T15255] netlink: 'syz.1.3054': attribute type 2 has an invalid length. [ 850.556185][T15255] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3054'. [ 850.562075][T15076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 850.833156][ T49] Bluetooth: hci0: command 0x0419 tx timeout [ 850.859333][T15076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 850.967641][T15076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 851.289665][T15076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.353125][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 851.361358][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 851.409067][T15076] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.531665][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 851.653336][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 851.664309][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.671566][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.680645][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 851.691012][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 851.699979][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.707173][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.852389][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.959850][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 851.988687][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 852.031077][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 852.110435][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 852.340669][T15277] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3058'. [ 852.357807][ T5608] bond0: (slave wlan1): Releasing backup interface [ 852.410619][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.417975][T15277] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 852.519175][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 852.549216][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 852.621645][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 852.660221][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 852.686233][T15076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 852.775725][T15076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.819951][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 852.850524][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 853.199494][T15300] netlink: 'syz.2.3063': attribute type 10 has an invalid length. [ 853.213886][T15300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.329809][T15300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.393332][T15300] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 853.424742][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.439106][ T5608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.448657][ T5608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.459572][ T5608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.475417][ T5608] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 853.505375][ T5608] batman_adv: batadv0: Removing interface: virt_wifi0 [ 853.542440][ T5608] bridge0: port 3(dummy0) entered disabled state [ 853.550968][ T5608] device bridge_slave_0 left promiscuous mode [ 853.582159][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.644881][ T5608] device veth1_vlan left promiscuous mode [ 853.658919][ T5608] device veth0_vlan left promiscuous mode [ 853.785866][T15312] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3065'. [ 855.058190][ T5608] team0 (unregistering): Port device team_slave_1 removed [ 855.111878][ T5608] team0 (unregistering): Port device team_slave_0 removed [ 855.158157][ T5608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.219003][ T5608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.265777][ T5608] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 855.576504][ T5608] bond0 (unregistering): Released all slaves [ 855.690582][T15312] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 855.708697][T15314] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3065'. [ 855.722741][T15312] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 855.755067][T15312] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 855.907899][T15335] netlink: 'syz.1.3072': attribute type 10 has an invalid length. [ 855.920177][T15335] device veth0_macvtap left promiscuous mode [ 856.023121][T10863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 856.046084][T10863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 856.078406][T15076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.907327][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.959829][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 862.014376][T15076] device veth0_vlan entered promiscuous mode [ 862.114877][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 862.137896][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 862.168495][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 862.188662][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 862.248602][T15076] device veth1_vlan entered promiscuous mode [ 862.311284][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 862.327717][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 862.403150][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 862.424228][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.440683][T15076] device veth0_macvtap entered promiscuous mode [ 862.453863][T15076] device veth1_macvtap entered promiscuous mode [ 862.475949][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.507699][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.543614][T15076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.567329][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 862.591153][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 862.626745][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 862.650305][T10855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.029043][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.054072][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.084969][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.107151][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.140852][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.161350][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.184765][T15076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.217208][T15076] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.236671][T15076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.252210][T15076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.271708][T15076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.423138][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 863.442943][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 863.455528][T15451] ¥: port 1(team0) entered blocking state [ 863.462568][T15451] ¥: port 1(team0) entered disabled state [ 863.469907][T15451] device team0 entered promiscuous mode [ 863.496633][T15451] device team_slave_0 entered promiscuous mode [ 863.512237][T15451] device team_slave_1 entered promiscuous mode [ 863.549288][T15452] device team0 left promiscuous mode [ 863.562184][T15452] device team_slave_0 left promiscuous mode [ 863.568430][T15452] device team_slave_1 left promiscuous mode [ 863.618080][T15452] ¥: port 1(team0) entered disabled state [ 864.010759][T10861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.041971][T10861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.112179][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 864.142598][T10861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.178792][T10861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.297971][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 868.682939][T14451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 868.693912][T14451] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 868.702404][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 868.713489][T14451] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 868.721492][T14451] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 868.729165][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.116156][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.122888][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.713274][T15516] ------------[ cut here ]------------ [ 870.718815][T15516] WARNING: CPU: 0 PID: 15516 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 870.728728][T15516] Modules linked in: [ 870.732698][T15516] CPU: 0 PID: 15516 Comm: syz.6.3110 Not tainted syzkaller #0 [ 870.740284][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.750712][T15516] RIP: 0010:perf_pending_task+0x353/0x480 [ 870.756640][T15516] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 870.776696][T15516] RSP: 0018:ffffc90005aef8e8 EFLAGS: 00010293 [ 870.782973][T15516] RAX: ffffffff81a7c2c3 RBX: ffff888052196458 RCX: ffff8880681cda00 [ 870.791429][T15516] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 870.799513][T15516] RBP: ffff888052196220 R08: ffff8880681ce403 R09: 1ffff1100d039c80 [ 870.807550][T15516] R10: dffffc0000000000 R11: ffffed100d039c81 R12: ffff8880681cda00 [ 870.816230][T15516] R13: ffff8880294ded60 R14: 0000000000000000 R15: 1ffff1100a432c44 [ 870.824329][T15516] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 870.833429][T15516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.840141][T15516] CR2: 00007fe470149b4c CR3: 000000005bf1f000 CR4: 00000000003506f0 [ 870.844695][T14451] Bluetooth: hci2: command 0x0409 tx timeout [ 870.848386][T15516] DR0: 0000200000000300 DR1: 0000000000000b6e DR2: 0000000000000000 [ 870.862921][T15516] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 870.871101][T15516] Call Trace: [ 870.874642][T15516] [ 870.877623][T15516] task_work_run+0x1d0/0x260 [ 870.882476][T15516] ? task_work_cancel+0x220/0x220 [ 870.887542][T15516] ? do_raw_spin_unlock+0x11d/0x230 [ 870.892817][T15516] do_exit+0x9d5/0x2570 [ 870.897023][T15516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 870.903078][T15516] ? put_task_struct+0x80/0x80 [ 870.907984][T15516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 870.914235][T15516] ? lockdep_hardirqs_on+0x94/0x140 [ 870.919567][T15516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 870.925828][T15516] do_group_exit+0x229/0x2e0 [ 870.930462][T15516] ? _raw_spin_unlock_irq+0x25/0x40 [ 870.935731][T15516] get_signal+0x1259/0x1340 [ 870.940359][T15516] arch_do_signal_or_restart+0xc4/0x1310 [ 870.946101][T15516] ? perf_trace_preemptirq_template+0x268/0x320 [ 870.952450][T15516] ? irqentry_enter+0x33/0x50 [ 870.957168][T15516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 870.963215][T15516] ? get_sigframe_size+0x10/0x10 [ 870.968370][T15516] ? lock_chain_count+0x20/0x20 [ 870.973292][T15516] ? rcu_is_watching+0x11/0xa0 [ 870.978135][T15516] exit_to_user_mode_loop+0x70/0x110 [ 870.983505][T15516] exit_to_user_mode_prepare+0xee/0x180 [ 870.989187][T15516] syscall_exit_to_user_mode+0x16/0x40 [ 870.994716][T15516] do_syscall_64+0x58/0xa0 [ 870.999157][T15516] ? clear_bhb_loop+0x60/0xb0 [ 871.003920][T15516] ? clear_bhb_loop+0x60/0xb0 [ 871.008640][T15516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.014610][T15516] RIP: 0033:0x7ff011b9e159 [ 871.019141][T15516] Code: Unable to access opcode bytes at 0x7ff011b9e12f. [ 871.026210][T15516] RSP: 002b:00007ff0129990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 871.034787][T15516] RAX: fffffffffffffe00 RBX: 00007ff011e26098 RCX: 00007ff011b9e159 [ 871.042843][T15516] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff011e26098 [ 871.050936][T15516] RBP: 00007ff011e26090 R08: 0000000000000000 R09: 0000000000000000 [ 871.058993][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.067019][T15516] R13: 00007ff011e26128 R14: 00007ffed1d4f860 R15: 00007ffed1d4f948 [ 871.075075][T15516] [ 871.078217][T15516] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 871.085517][T15516] CPU: 0 PID: 15516 Comm: syz.6.3110 Not tainted syzkaller #0 [ 871.093000][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.103076][T15516] Call Trace: [ 871.106394][T15516] [ 871.109444][T15516] dump_stack_lvl+0x188/0x24e [ 871.114177][T15516] ? memcpy+0x3c/0x60 [ 871.118184][T15516] ? show_regs_print_info+0x12/0x12 [ 871.123408][T15516] ? load_image+0x410/0x410 [ 871.127953][T15516] panic+0x2d3/0x710 [ 871.131884][T15516] ? bpf_jit_dump+0xd0/0xd0 [ 871.136432][T15516] __warn+0x2f8/0x4f0 [ 871.140501][T15516] ? perf_pending_task+0x353/0x480 [ 871.145741][T15516] ? perf_pending_task+0x353/0x480 [ 871.150877][T15516] report_bug+0x2ba/0x4f0 [ 871.155351][T15516] ? perf_pending_task+0x353/0x480 [ 871.160486][T15516] handle_bug+0x3a/0x70 [ 871.164664][T15516] exc_invalid_op+0x16/0x40 [ 871.169178][T15516] asm_exc_invalid_op+0x16/0x20 [ 871.174039][T15516] RIP: 0010:perf_pending_task+0x353/0x480 [ 871.179857][T15516] Code: e8 a2 72 da ff 84 db 75 10 e8 39 70 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 29 70 da ff e8 bc c0 58 ff eb e9 e8 1d 70 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 871.199645][T15516] RSP: 0018:ffffc90005aef8e8 EFLAGS: 00010293 [ 871.205723][T15516] RAX: ffffffff81a7c2c3 RBX: ffff888052196458 RCX: ffff8880681cda00 [ 871.213786][T15516] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 871.221777][T15516] RBP: ffff888052196220 R08: ffff8880681ce403 R09: 1ffff1100d039c80 [ 871.229940][T15516] R10: dffffc0000000000 R11: ffffed100d039c81 R12: ffff8880681cda00 [ 871.238092][T15516] R13: ffff8880294ded60 R14: 0000000000000000 R15: 1ffff1100a432c44 [ 871.246079][T15516] ? perf_pending_task+0x353/0x480 [ 871.251293][T15516] ? perf_pending_task+0x353/0x480 [ 871.256468][T15516] task_work_run+0x1d0/0x260 [ 871.261074][T15516] ? task_work_cancel+0x220/0x220 [ 871.266108][T15516] ? do_raw_spin_unlock+0x11d/0x230 [ 871.271404][T15516] do_exit+0x9d5/0x2570 [ 871.275572][T15516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 871.281565][T15516] ? put_task_struct+0x80/0x80 [ 871.286341][T15516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.292521][T15516] ? lockdep_hardirqs_on+0x94/0x140 [ 871.297735][T15516] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.304006][T15516] do_group_exit+0x229/0x2e0 [ 871.308604][T15516] ? _raw_spin_unlock_irq+0x25/0x40 [ 871.313821][T15516] get_signal+0x1259/0x1340 [ 871.318351][T15516] arch_do_signal_or_restart+0xc4/0x1310 [ 871.324009][T15516] ? perf_trace_preemptirq_template+0x268/0x320 [ 871.330286][T15516] ? irqentry_enter+0x33/0x50 [ 871.334981][T15516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 871.340971][T15516] ? get_sigframe_size+0x10/0x10 [ 871.345932][T15516] ? lock_chain_count+0x20/0x20 [ 871.350788][T15516] ? rcu_is_watching+0x11/0xa0 [ 871.355598][T15516] exit_to_user_mode_loop+0x70/0x110 [ 871.360896][T15516] exit_to_user_mode_prepare+0xee/0x180 [ 871.366554][T15516] syscall_exit_to_user_mode+0x16/0x40 [ 871.372120][T15516] do_syscall_64+0x58/0xa0 [ 871.376640][T15516] ? clear_bhb_loop+0x60/0xb0 [ 871.381351][T15516] ? clear_bhb_loop+0x60/0xb0 [ 871.386125][T15516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.392032][T15516] RIP: 0033:0x7ff011b9e159 [ 871.396451][T15516] Code: Unable to access opcode bytes at 0x7ff011b9e12f. [ 871.403555][T15516] RSP: 002b:00007ff0129990e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 871.411979][T15516] RAX: fffffffffffffe00 RBX: 00007ff011e26098 RCX: 00007ff011b9e159 [ 871.420061][T15516] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff011e26098 [ 871.428128][T15516] RBP: 00007ff011e26090 R08: 0000000000000000 R09: 0000000000000000 [ 871.436305][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.444294][T15516] R13: 00007ff011e26128 R14: 00007ffed1d4f860 R15: 00007ffed1d4f948 [ 871.452284][T15516] [ 871.455842][T15516] Kernel Offset: disabled [ 871.460165][T15516] Rebooting in 86400 seconds..