last executing test programs: 3.24010476s ago: executing program 2 (id=3524): r0 = socket$kcm(0x29, 0x2, 0x0) syz_clone(0x81000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), &(0x7f00000006c0)="475c86a97ab4c5938c440959f866a458cbe9b98dec4c7c7ff455bb83b6edccd925c6df390afc008ed60a0950d53839a2f707fe92d3054efb9b9165237bc8bf") sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000e80)={&(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b40)="a979e41be60c7643e17610e1199ae591c7d5a6911c85dcb365a9d38c2d96e35670", 0x21}, {&(0x7f0000000b80)="0b8012027e5883e39f59854ca363010ed179eeac4e7a782f5e36a71bd84b1b465d2728995d6b3c", 0x27}, {&(0x7f0000000bc0)="5742e009903a790b894d5f78504f6979fba828f9d1f40775a27f35fb22738053afec1a212486799ca4b59c0aa7ae261c0de053dbfb382b79c25d3d38", 0x3c}, {&(0x7f0000000c00)="04366c477dcf5a252f9349e1717e8ebc8f40949e770843c4dd7c7cf9d4910407bdffad3b44352cc5f7ab2a7a599f405da19719f295ed2764ef53fa94078b7908a347525d0c6217d7ded1a4b9868227175c32f0587658d501864464222283f4f33f35c474767edeb81a432f3bb53f5284f5b31a57181836b1af7fc8abbba8063991a2cc55804b81b7b140d430830be314e6010d61109a299a42cb84c29562a48bac2c5e64db51000c2207c6dfdee9db2a4f996cb59d", 0xb5}, {&(0x7f0000000cc0)="14f554f28080e77b71767d301daf5053ffd652546d17f53fc15da3e024b0878f419d7a1e3ed0e48e14eacd7c761004da0c1452eaf473bf8b08765ae35ecee3b4d581c14268b31edd4556dc82628c8a41b6bceff2d29c414d16bad3490b0982b06c06435f6b14313d135a9a8d974b325399a983d877ce44de1dc21529343a63afb022d60bf046b0bcb386959b8a4c29d15aca94c034eed05ad7f94816498b88cd98d30aa5c9eda122fc39488348b627de77d1c035", 0xb4}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="082069fdffc5cb6b5560ece9c72abd40841492246496631e1c2d493874326e6a91a73e040afe52aa1c5370c9d5afa9f4c40e29d2ba9d1aa26a3e", 0x3a}], 0x7}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000008, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r0) 2.944326179s ago: executing program 1 (id=3526): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(0x3) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e97742535e8b287fe3856295b753", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89ee, &(0x7f0000000000)) mkdirat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.620327969s ago: executing program 4 (id=3529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) (async) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNGETVNETLE(r5, 0xc008744c, &(0x7f0000000180)) socket$kcm(0x29, 0x5, 0x0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000080)="d8000000320081024e81f782db44b904121d080005000000e8fe55a1180015000600142603600e4006000000036010fab94dcf5c0461c1d66d6f94007134cf6ee08000a2a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14479f30dfe1d9d322fe7c9f8775730d16bd683f5aeb4edbb57a5025ccca9e00360db7011f215ce3bb9ad809d5e1cace81ed0bffec0dd6e4edef3d93452a92954b43", 0xad}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000001b00)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000185000000000000020000000000000001840"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x0, 0xfffffffc}, 0x10}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000078bb000007000000e25e000006800000", @ANYRES32, @ANYBLOB="0c00000063aef0600000000000000000007800001051a4bd018b", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0100000002000000020000000400000000000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x0, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) 2.619996399s ago: executing program 3 (id=3530): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x5, 0x3, 0x5, 0x40, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x5, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x26, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f00000000c0)=@raw=[@ldst={0x3, 0x0, 0x3, 0xb, 0x6, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0xa, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6bb}], &(0x7f0000000100)='syzkaller\x00', 0x726c, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000180)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r7, r8, 0x1, r9], &(0x7f0000000440)=[{0x4, 0x5, 0x4, 0x2}, {0x5, 0x3, 0x5, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d8000000100081044ed5f782db44b904021d080b04000000e8fe55a1010115000600142603600e120800040000001101a8001600110ce2fdd365b6b0c5c60a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0ed08e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f0eeb4edbb57a5000000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0a72a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x24000040) 2.527062152s ago: executing program 1 (id=3531): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000, 0x0, 0x1, 0x500}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5000000}, 0x4000014) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.443563164s ago: executing program 0 (id=3532): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x818) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x2, @perf_bp={0x0}, 0xc800, 0x3, 0xfffffffc, 0x0, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x2004}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c200"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.306574809s ago: executing program 1 (id=3533): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x100}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000008000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000c8d00000000000000"], 0x48) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xbf9, 0x7fff}, 0x100810, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[{0x10, 0x84, 0x1}], 0x10}, 0x40091) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) close(r2) socket$kcm(0x2, 0x5, 0x84) 2.199162712s ago: executing program 2 (id=3534): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r2, r2}) recvmsg$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x3, 0x2, 0x9, 0x8, 0x4}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) close(r0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xbc}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001000000dc"], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)}], 0x1}, 0x8400) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) 1.96441315s ago: executing program 4 (id=3535): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r2, r2}) recvmsg$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x3, 0x2, 0x9, 0x8, 0x4}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) close(r0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xbc}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001000000dc"], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)}, 0x8400) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) 1.890468392s ago: executing program 2 (id=3536): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000006c0)="bd334b13e6d03dee1b3ccd1e8730493a36c67e89fa0476eeaa229649b2db82b5dcaedfe3794103758615ac1aca6c050a869f23918cfca754b5e284510073283164c68921066e5e72e7dadc6636f53d9ba4c99a6b4e0d1976a0c646cf62676cc4dde8f15edcacb737a5038b7f12d1bd00ede8ac092d135de8a6a6d417e0b1f1a070ae67e3b4da716a7350e6f418084183f47b787a1a8321cdff04c73d2c84a6e461b30719f611c4a7ce00d3212f740d53ea16c72fd38398ef923b62b42c0c6c3b78c6ecf3a5555454e7573d1f09746af06168fbbef2d7a07e4e7f8a41bc040ecc40ce796d80b6e1924f750fe5", 0xec}, {&(0x7f00000007c0)="f4b923320802611c043b400eb919dfc9e1382d75618bc24915d68abb5ed525549e682f202af62b64155fc4100e06588aa0e2eab82abb2a7da9412d6e0249994683a376bfe3c8c3fd0ff15a9c6958edbd5c52cdd820555f5d678c87881510f21f724504d0f7eae9bfee56d9623734f0101b742d01", 0x74}, {&(0x7f0000000840)="04a48f47759300124fc63f006261df38560a572c94e602efc0139e3cd13da90a6dc6dd41eb255b792859b4de1adf320f830289", 0x33}], 0x3}, 0x4000004) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x9d, 0x0, &(0x7f0000000600)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12feb", 0x0, 0x4000, 0x0, 0x30, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb70", 0x0, 0x1, 0x0, 0x13}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x29, 0x1, 0x0) recvmsg(r5, &(0x7f0000000300)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/132, 0x84}], 0x2, &(0x7f00000002c0)=""/5, 0x5}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000440)={0x0, 0x80, 0x0, 0x3, 0x3, 0x3, 0x0, 0x8, 0x8000, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x4}, 0x2000, 0x400, 0x5, 0x4, 0xfffffffffffffffd, 0xc0f, 0x7, 0x0, 0xc, 0x0, 0x8a}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) 1.812345194s ago: executing program 3 (id=3537): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x8000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="40f42ffc4cb5781a906d72b9c1b6f82238bb93b2295541daaa69ca660fe25c6a86982e92210a9b381db38ef65a1f", 0x2e}, {&(0x7f0000000100)="9844ba2f46cbc4c90804b7e09d9227283c0f163f90f3e930a0b55c623af609a581c024965ed2e48bbb1af47f6dd90fa9a6beb96efb841acfc1bd73021cdef881254929165428da3986b022f896a08c89a708e3901d93b494ee893f72d6eada0468626a1425a9337cf43c7a7817e5eb153d118c73df33986bcf760dfa2a1ddb9473af3433ad48ec8a910a", 0x8a}, {&(0x7f0000001ac0)="d2ba03b05a76e23403d21f06845ef4285144f6f553efe667e91a4c2e569137ba9021b9572072423a38d20ef20ead1efe1cacbcc8824754101056a2723a15c9057284abf1b1a12752a6cde543a541db7817b20151808c2e740b4e2562a3d7df728425384bb1ab074d1c6dcc212539853d1c9c05d79cf7a7783b29f78a8403bea385bd3702adc93e8f7dd9cae25eb45e5ff31eec222b7a", 0x96}, {&(0x7f0000000280)="5013b158be79d0b602", 0x9}, {&(0x7f00000002c0)="e9deca2c14a7e7e2c2a264c3a422dc8495190bc0ac9e7dd7d7ca7b11f8c42cd3e250e2d81b21caa8220550dc82eaf8250de0fb991bd96af48b79877840fdde6ca2ed6a8dad8a94596f31784903d15db87f7f7e399737666cdc7814205417", 0x5e}, {&(0x7f0000000340)="cc5d9cdbdd5e6efe1a147c17c29f0ec81a60007bf5cc04da7edfb22e3d90ee03f172dc258b47ea8ead78eea68547a6ea5b05b9af1e165b270a59278acd76efb7b405c729a1c6abed5865df1c8b2d5c45aa25b14a249e31c69be792a46461ffffffff000000003ccd0bf951ed066855a2f4f86e099526218461183f4ab699ffeb876cd660", 0x84}, {&(0x7f0000000400)="48e7964dc10ddda597c6a3854231f77e95d5058e34121c1e7730e19c99be866b197471f3eebe814a883e1fa5d77e724df1a5fecf4a3d506fa5a0b543de5f2c7332f768cc9c9009e602291ba7a223258189bf987704bffa0e649ed4e5cabb8fc657c66f901dc2be020300bf4f1868a589d8dd0a87f2aa8f17277b04980958f5d96ef8560ca27a61c27ed8f438d5628e806794baa105bfca829ee5ad15946a7f0c77b069bab696a0fb02289aa55919c7c162a5936303e497d41ac98e9e257e942456512835bbfe", 0xc6}], 0x7, &(0x7f0000000580)=[{0x40, 0x84, 0x0, "20e2cde5a33f7aadf7d150a9fc26eeed2c8899b851737847dca669b38d74889c1b0a4527da98dd2dca7dfb"}, {0xd8, 0x110, 0x17ef, "78d30cfa904e591bf8b2be7ecdea6c716a85d638590dedb78f8592a84deb3c2fc1fc615e4a8cf9972b3a702d51d55b8d71f8a3abd22ec19ad421da48171edcdf3a68e43031d57c25039f3ed32592a7f5728482d9dfe9b3b66427ea7477e5a725f87c144d3f277c727fb520a8e0cd2dd3f7004a682b3da1afa9cf2f2531323bb1368630cca4e90a4fd1ce4d441260b10f599f0bb086b7713d8cfde4d8639a7fc9eefe5e0a85fe28aab7950342e96db54830ed7337f3dbee9735619c1654980325d68b"}], 0x118}, 0x24000004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001f00), &(0x7f0000001f40), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000001f80)}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000002100), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1625eb43203f8fb6}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x20, &(0x7f0000001b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0xf8, 0x8, 0x6, 0x1ff, 0x3ff}, @alu={0x4, 0x0, 0x5, 0x0, 0x4, 0xfffffffffffffff4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff92}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xb}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}]}, &(0x7f0000001c80)='GPL\x00', 0x1, 0xce, &(0x7f0000001cc0)=""/206, 0x41000, 0x4, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000002140)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002180)=[r5], &(0x7f00000021c0)=[{0x5, 0x1, 0x5, 0x8}, {0x0, 0x2, 0xe, 0x5}, {0x4, 0x1, 0xb, 0x4}, {0x0, 0x2, 0xa, 0x7}], 0x10, 0x6}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000700)=@isdn={0x22, 0x36, 0x1, 0x1, 0x2}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000780)="11369e96dce99457cbdd9aaa08917203f09559c4c1643e7ffa53f52d76a6260f0429f29cb79508b79cd441a0921cf112a4060f45778cbd392f6944dde69d938f1322494465239719280ceb6d0c516e21c5cf84f43cb11f2f2c17c8223d32e145d699c818e926690318afe577e7c9814661a5588141e47ee72dc2b11b6b3101ffa9e700720452694d3b0d2a0cebedfa3fd5c5e7751a1163fa62c40cb5a7dfdbb5506d2e0853337f2194701f2f76fc860c4977387f49857dc5b6d1f58f456c76970742a9bcceb0d6774b14fe62e141c479c49259310c7ecb655969f37614f7ae17e5d96bb8d73b5d31903e9f", 0xeb}, {&(0x7f0000000880)="ad05", 0x2}, {&(0x7f00000008c0)="b40e926caacc33e4c058b20a158ae4dd8bae862fafb6e7cd507a26372705dbc53cbc5b7eb9ad1d05cf65060e1d2656934a167b0f09e67e7e1510448bca4f7ed6ea6e083e05de8bc16d282cd542851d4debece03f4badb70560e82bc56e28f14f14c261c76a5aab8aaf69208a4f75c267466d10be19bf7a71e31bf0f16012c00639826ffda15d259d9d076d5c2a934de188433d45dc32babb4846a5a22e507e438ee3fcf514206acfc5e10dc84257f4a1c6b082f5932c374031b8461daedae314247ad8b659007d23d5949de6fb832e1e5d77c699cb05de4d680efb8d1e78d46f7db3cffb3ea388b6ae0cb170e9abf6cd0b6793af980942744348e245f32a468b7b1276460eb848afddaa04e78568151335a30df17730ca5c8e78edb64cfef79a25bc9cf966a391d66485dcc34e7c9edeea134746ef56188f821dba6d0f95a6586c1ac8a4b9ee637ec2f892203a88eef9fed80c5dc281e42cddd842b491856a72ba52d9348185992d48003b17d7a4c6872bfd56b89348f4559341db237be5cf8628abab8fb96cb5a7e7894100f589055dbdcf8b279a769ec530baf87f0030a2935814017675467697a1e6da35b55099c3a8b17b161d210cd8db164f2f8e12dbe9dd78cfb122abf45a7e64998cf448a3fbfe4be3dbce09e6f50b9f15e348a0dcb06041f6adc78db6f9b9990ffa3606794773cf1d1d374ccd95a29b07f146af926ce71ccb8d115c16f81b2323989660584edeae9197da7fd77725da301030fda1945dba21d2a7482559a2fbef84bd8fa7b469d69214457ba1f4b8a64a5587e0d6d0eb69dead9f584a8fa37accd252e9005f2fa777fa35f78e8185c5a5979bcef4a3089144b629f565a58490e2573f7562f621418289ea6953e9a86f38631db2690344867c0f66b04ec4bb9a4ff849d1781a9da4bab47637ebcbb82b150b4f735ff0cbc50e910525380cee5c8f3b041d7e8d7f39544c232c4cd680cdac485ea69fae850979e670c9acbb41fca19fa5507a2256ee37e9719d1cd8756f55f99eb44edd7e6e488538f4a683fc78fb3f76968264f49d87d3df8149ff405e3b3e4ab549072a70c4323da11c9377af6349483a50591c6a125eb9499d48b06241d2737a757cc8b665eb9858a2ad0cc3c02c945f1cfe0c2453edd786968e679d880efd92fe246838d1d1b7ce314f016a1734017eaee1377f1876b6e2cd8dd786c0bffc98747c71a6ee86b27ea76b2c89ac2b00b0e229471582bce6f352f41d71462e56371087b2be3be82c7c3fb86f843287dfbc9154168ccd6b657e40d1e176075e8ef02ae534654974a3d9b5adc34a4c4f943e6c5ec8d822d012ea5215e4311120c06f9039e0596dd5d2bd5a94d7bbe483ed242ecbacdcc20c2e651f3ffc1c201c8474d6a3cd017df05626450461b7704b82a4120cac0a95e2fbd7bad73df4f7fb701929db79f513fd1a5618ebe61a94f18ee479f1b9a686e253497af8a9c6dff15c24232ed1eb1b340aaea31cac4aee351a167674c7ab9233f47e4dad4c21a609cd70107c4003d11a7a8e804f277798bf1477d972f48555091e8464d3eb085b5de394ea96fd030d2ad3cddae8b0fb1f572054e6522a033ec90589f6cd455d9add28a24440e369e82a040c4df4ef0cf604befeeb795d44d38064ce70f85eb9daba67b58c7dbef5396cc3af0de34bad4859488f4f5a8dac5f7f6c315b3b7269e2e71e88e174ef0d8e4bc6788fd7a6c68951962365b27a63e3573e26a60303101e02355728725228eb28bd7c29dad94c1569eefc8e734788b6f42741f2fd3077c3bfbfe295ddd1ba9b9a0834e4a834cd30fc19efa7a814cd42372a662c98b89263f2982e93fefb328cf7abff05bbf44a668442d646791c09d58dd22686198b02448de969f3f4e21031cb279b02492547611d9f4fd50419c8d7b19cc48dc0ae63b6e3745d7f04e3b8b793ab3a17db834f52a49733ed06001062c67370158a4bf1cd92d195d1af098feed721a837029006892e3d45a151643756c0b19b9ab592781af496bc2353b12f168a4f961e716276eddb381696c4fcd66bf04e903de56a0c6c45f2bc0bc1007b3211fd139c88c41f94e39700b2298a72c9753f186cad48ecf5df88a6aa1771b54c10d37ede16873697fdbec7ac3efe1f9351a7fd4d0a51e0aba35a18e2c2d891fc59ceddefb5477cc657fd2c405db5f48bad845a49c8d945edf16ba928880281a215f484fb04549d155017c6fa3fdbbd3fba5cca3e02d71467eaf91879147b9af92bb4172be8d0fb4ec732fc75a0fe77f22da3e1723f3e1d43d236c82b4efa2dc5f107b5af73da435544c7ed4f38aa699b0add2532c1a26241aec9bb61bff21c456c74178cc2d53926e7a84709995b9cc3e2566f5683243710569f4dc1e1543652d14e31eac22c2a382f6c6f2f17d90638340fb36a0a79bed3d06f22ac94c709003ebd2879ede089638d9ad90f36c43f44389bf4e1e2e55efcbd85dc419692729dce828c0d5cba3ff1b3de741f085c4436b0de44773dd061f0feb34a446a33388b5701b5e199b89a3af332aa726f6e3810688a2918611e2a63e5e0dfa0306b444051251431ef8f62978414d15ca2ebe5d9e13b9b87fe14729f4ba83f394c67c6e6fc3785a5184eed7e55e7878bc19c318e216ca6145b5f94bb0da9c7da465b9a12fa61878aa60c6f195cc1dd713f1c3c64f058344e67063e36ed735bec4b6b3761460ae2e0260c08e783850f357dc8c7aa1793fb3018c419c710509c3ceca98c68eb7e58b97ccb8554afa67451daaa2ce7ee95dcf19926e20dac8deb7412d09099e36e278fed59cc636b045d29ada529d074afd2b3c4dead1b34226b8819c6b31666e0d3f672e96f8d3902262da5cde8334e691c419fd5d534877001c8d13872ce8546fdb5d9b4bd3d29144a0e41409f28dae83e9a4ca525df2daf3e6b73eaa14a0e7c27b2dd80b30efae692092ba235ba7f6992c17adc85421f2abfe9cd5837f5ad601ab10f35ab705d12547e386bfa188efa8590f6f9f990d86dc94a6453988a5cff5b5c5cd726ebb939ea25903be6489655ab4f64ecfa608506e96674c1bf5158745338a2051b8e4db46d9ac709aaf2bd1149e4b83b73f2e09cfe24b017c2f25e2ebee3011413e0f90cc53d3a639bb90bccf098f8990f588b78d2c34b08701defa34450ccdc7b27d59adc241e7c6b9b7608a0e931509b7a2c27651c1bc9ea96458b3b9488fe0595c47c2c05e3b589966cd637571aa9f9c62c87c30882db1fb9818054df6ec90d04a0f7a019a1d771a6de39b0072f98878ead4cc1dfd54b41dee503612b7bd508b27906bf742fb22fd9e5025d09973c7d7193d727289b9e40043c0c76ef7cbacd3920944ac846118ee7d4f1d758817126aa24a857beb270f7521943db1e489033edc382e038b99c6301158618bd7b863b0bcc99da1a90d47b386eab879adfc7837f7556628c51599ba08df3fc524d15a467378deeb9028ef0a72943b66133a5b9c9d96828c0c0e2a6e45f05421a4295d0208ac0e60c99d575961b925797a567b36c1969ea12df886c607623f1ac560a12689b3087289056deb2a559e9c6f539381fff3c5ce3e4e373012940bb5459a2c515e661b819ae701d7414c58fb422a0fea96da1d89eb3aec30e4f5e72ed0551d6ba918c6bb3e93171541405c89e61fbfbf3920a756e84ff1bb58db7b6260a28f13dd5e58fd83ae3c895bab9f9d0f206c9b773ba04ccf684d18f6d594d16c451ee55aa225c1c00b8e0142ed1a7b10c3fae4fbe6eb698fe5298d13a57de27c46d70619c01ee53235be6727d3c38f53e2e9436f15ea205bdc58ffaa2006c02776509a3aa34402fe4884f4801a7a50c87f885027a8b0c2625fca67ea1aed3ad5a2d369236a3b38c13596d02e3bb619ef16880895974e577477f1d0cecc6e2bb83a0c7387203cf5ed39edac4d5c95c93b17299601d08ca4e313a489cc4ee3da101692c19bbfe600dfba7d6d230e823bc686c83be22ac9ff37c4a292841045e874d32f98a213f6424a623cbb2b193ae3eca8079ab546eb08a3055cde75db4eefaeefc76271af82691386e956040c94c3f240fbeb6b901ea728dc479356cf210147aeccdf63e37c386a8163e530fc238bcdfd2558f4c4a3bfdf3715fbe4dded8d64994cd5c9b7f4e8ce340307ed49c8359fdcc20ea675c761e055235cc74da46cf32bba0280d18873da3fdc9cc0618efe9bd449e2a37f4fd86417270233ad8ff267dada2aaaad149bf971d4fc0c27ccd1c3e8e1afa1416db6c29775a8288fc78dc252d734d22338f764cc3b88bb77460c282071f3d8fd49020b86f3f67b8d21ba9a956dad0ee0bc2ccdd22e171df7a507146bb320681e3bf20efa18b35d773026652388c0d7f09b838c8f2e144bb999b03ef019e13f30c5144ad128441d5a2400548dde914dbdb9640e00e087241477be434271b756377dc0b74ac70bfa1fc1da5e2ea25a418721a99e2ab398dfbfba633b478953a9717d676346b248db181b03d0db58ce71bb8fe252f64c674c3157d39d24587606611eed28bfff5bd368bc28e82ef0af5cff634b001cee8ef856dab39d6fb7313e311e57ec2758d3725542eb43aac9a494c9310fd3f21879ef4e18a0c652cfd6118616a481130ee8918a1a49189aeefb7fb0269ffc810e9d7bfc0f2b70bba6364abc4394c3bdbbd5a8c2476d8278caac971cf0474a907b7400f5ddea3a12e59545cfa32e8c984a18320b328ab9e7d4d69a9356fd2795ca36ff13812f4cfd2c2e682648000b8e6fecd0a9d541fa3b7391016c26b24e287d75a0b3136f277e23d061da62ac87b28aacc617ee87d4e6040d774c484d7b34a7ea1a7c5b9861265a84850b76597e30cd47a925983f465ae03b779fc3c7c9a001dd5215fc07abe8661e155cc432e7afc4c2429b20f6c36486da2598da226412160368682cbe79e40a5c4f7ba69c2757a0354e295822525a3f2b14ba6988d9400c89dfa5e100e868f3be6938791046f9edfd47dcdb7d4a0338899e167ed4e8941aec3259bfaa15ea998571372206f51fddc5eb205902473abe3707d3302dd4a05a7c4737c0d341cc6b6e1be6e5546e7192bf1190e835c5144d90426a6b9c905184463ffeecf6639b977628085a2994ad4df2c6c69153721421fe41a11dbccc37071b6416b60d726c3f4c9e5a6e3239322ee8f2c27dbdf4852b32b12df7307ea5d9a8a47b1f02f388167c2ba33e473793e805614aa2b0bbf9f73285109ef2d89c4518f142e5c72f503c1f6c3ca40e98f1f42f37861650957a89a3dbdec0d233d826f8d6ba496439352bed01a359916d2b2e10132a328add1c3e4bd3611534c6dae08fe5088c8369ebadd89c9211dcdf9b88d791faa9c1dc41277569f92acc0693612a3eafa0789192894eeaacf39794d7efee44fe7297c90699f684e4723223d3aed62cc5d3f6720e6bfc68262b1c552d73dcd18a13147e0b60f0275cf6c94676eb820d2a41be9884ea5f26590efcbf9f4a15c04a47f591529707364ea846aa934ab9eec5e2120f285a7cba9545d17a781cafedab8438763d18c6598ea1b8c2b4b63fded0bcb7d0ea2a60f2644c83d8b8be0bb3d6f5c8fac85ea11f72a065ecf1cae718e269efbde8186f58dd10aa81388915c2d684d00292f14d7b82eef237067794e25af53ddeb94afb7e4e7b5884ce74ed00c5322e5a4d32932949e0c4c61515389c7eb2a3b127a0c35759ba9365941299a57d37d2ee4a1725785059eb8ce168daed9df245aa426f3cc23e2c127bdb65a3b55fa673dd286caed7c4cf57b9a", 0x1000}, {&(0x7f00000018c0)="671acfc7bd362d9622b809989c408fcff84e82640a12980a6d1bf045c51a75372b29b0b7d71b9da38a06d3dc33474335ed8a78bb1d10e7865952de780ca7b8c7f7ff45de03ad8184e58559d66786935ea47d8294ccd5f625ffac31a81d4f463d7be8ec604d19b24ad4ee3002a6573d7c0c71671cc1e7a6ccb5e00ecd55d0efe0a90cd59648", 0x85}], 0x4, &(0x7f00000019c0)=[{0xb8, 0x116, 0x1, "5ec03dfe66a006689ece18853ed3c88d3f74c31df8f97e9c5283455ff7a675008e9c2f9fc0c19757efa0e5e7729582fd835b660c96e3667912858be1a76833f3f6e9da86a25d3e65c933faaad13dc8b4467231a6973521c6ef2ed7100905103ee97b023f63b1b93006fea92c44c5e0ec3efa8f9057e4221563c72d7bafe72990c8a08ba2f463a875047746a53fdf58c185211fe89c612c8be8e9fd539494e1c74774ca4f"}], 0xb8}, 0x50) 1.808037415s ago: executing program 0 (id=3538): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x1a, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x58}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x0, 0x1, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, @alu={0x7, 0x1, 0xc, 0x8, 0xa, 0x2, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0xcc1d6f152e5668ff, 0x1, 0x0, r1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80000001}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000001c0)=""/4096, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000011c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x3, 0x3, 0xff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001240)=[r1], &(0x7f0000001280)=[{0x0, 0x4, 0x1, 0x5}], 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r2, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) socketpair(0x25, 0x2, 0x9, &(0x7f0000001680)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001c80)={&(0x7f00000016c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001740)=""/29, 0x1d}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/81, 0x51}, {&(0x7f0000001880)=""/17, 0x11}, {&(0x7f00000018c0)=""/196, 0xc4}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000001a40)=""/245, 0xf5}], 0x7, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x40031001) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001cc0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001d40)=@generic={&(0x7f0000001d00)='./file0\x00', r9}, 0x18) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, '\x00', r4, r12, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002fc0)={0x0, 0x16, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe59}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe}, @alu={0x7, 0x1, 0x8, 0x78c0187290cdc9ff, 0x1, 0x80, 0xffffffffffffffff}, @generic={0xfe, 0x4, 0x5, 0x7ff, 0x80000000}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2853296a, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000001e40)='GPL\x00', 0x7, 0x1000, &(0x7f0000001e80)=""/4096, 0x41000, 0x0, '\x00', r4, 0x0, r7, 0x8, &(0x7f0000002e80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002ec0)={0x2, 0xf, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002f80)=[r14, r14, r14, r15, r12, r14, r13], 0x0, 0x10, 0xba}, 0x94) openat$cgroup_type(r12, &(0x7f0000003080), 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f00000030c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003140)}, {&(0x7f0000003180)=""/165, 0xa5}, {&(0x7f0000003240)=""/149, 0x95}, {&(0x7f0000003300)=""/16, 0x10}, {&(0x7f0000003340)=""/230, 0xe6}, {&(0x7f0000003440)=""/101, 0x65}, {&(0x7f00000034c0)=""/239, 0xef}], 0x7}, 0x40000000) write$cgroup_subtree(r10, &(0x7f0000003680)={[{0x2b, 'blkio'}, {0x2b, 'rlimit'}, {0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2b, 'blkio'}, {0x2d, 'cpu'}]}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000036c0)={'team_slave_1\x00', 0x100}) mkdirat$cgroup(r13, &(0x7f0000003700)='syz0\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003840)={@ifindex=r4, 0x33, 0x1, 0x1, &(0x7f0000003740)=[0x0], 0x1, 0x0, &(0x7f0000003780)=[0x0, 0x0, 0x0], &(0x7f00000037c0)=[0x0], &(0x7f0000003800)=[0x0], 0x0}, 0x40) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000003b80)={0x1a, 0x21, &(0x7f00000038c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe58}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x1, 0x2, 0x7, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003a00)='GPL\x00', 0x7, 0x32, &(0x7f0000003a40)=""/50, 0x0, 0x4, '\x00', 0x0, @tracing=0x19, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003a80)={0x1, 0xf, 0x0, 0x90cc}, 0x10, r5, 0xffffffffffffffff, 0x5, &(0x7f0000003ac0)=[r7, r12, r7, r9, r15], &(0x7f0000003b00)=[{0x0, 0x1, 0x2, 0xa}, {0x3, 0x5, 0x9, 0x5}, {0x5, 0x4, 0xc, 0x7}, {0x4, 0x5, 0x8, 0x3}, {0x1, 0x5, 0x10, 0x7}], 0x10, 0x135c}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003880)={@map=r8, r13, 0x1f, 0x0, r9, @void, @value=r17, @void, @void, r16}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004e40)={r14, 0x58, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004e80)={0x6, 0x24, &(0x7f0000003c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4a8f}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xc4}, @jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0xc, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003d80)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000003dc0)=""/4096, 0x41000, 0x10, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) close(r15) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004fc0)={r13, 0x58, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r20 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x75f, '\x00', r19, r11, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000005080)={0x1}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000050c0)={r10}, 0x4) close(r0) r21 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000005100)={r3}, 0x4) r22 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000005180)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005140)={@map=r20, r21, 0x1c, 0x4, 0x0, @void, @value=r22, @void, @void, r16}, 0x20) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000051c0)) 1.798391014s ago: executing program 1 (id=3539): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) close(0x3) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e97742535e8b287fe3856295b753", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89ee, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.590255481s ago: executing program 4 (id=3540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9, 0x0, 0x2, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x43}]}) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x13) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0x100, 0x2, 0x1, 0xa1, 0xfc80, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_clone(0x402200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.524357673s ago: executing program 0 (id=3541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000020000044000c000300000085000000a20000009502000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x10800a, 0x6f5f, 0x8000, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x6, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000640)=""/4, 0x4}], 0x4, &(0x7f00000015c0)=""/4096, 0x1000}, 0x100) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x4) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000dc050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 1.503592984s ago: executing program 2 (id=3542): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.494859484s ago: executing program 3 (id=3543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2b, 0x0, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) close(0x3) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x40}, 0x20002880) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000a8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="12934acfbca026257e2a576dc69d27f16c4ff82719936e02e74495d5d99b22cc7a32ad8d8205b1a9751583fb293e8a86c96c5ffcdff0dc97a06a01350eaa979a4de9b2f50952c153f1f2c9e34b08fe4503527cf688316c00343532276619763646c46e87954f7116be3d5b93bd0787da6ce7798acbc7345d6fd11a6dee7f43a14cd2dce656c6b1d709b3a2f8d0869442ebcd26268ed98776b3a63a0bcd9731d7c1305c177554362ef3ef083262e00f379cffa10aa3fa4fe1bb90562d0a2c4a933d8a280980f1abd9d4ab9b77fc1bdecefa0ccc1650c92006d67a1477403f186961cc5d93b77ea8a4", 0xe8}, {&(0x7f0000000500)="2377067dac107bb73eccc156bd6d1d9c1a995353d357c7ac777f0932909c471f0676ff7d81faf7347e2539dee81f4eb7760791e096e117b18115996f27e905ec989d7f07c97393a3a6dd607934f2f26b872808b350f849a3da154ef50c226e52cc98b07e6d0716047e0e78e4ea65f3f025a06ed7f92952f2c3617cc28ef16de2200201a4bb5a6612dbdeb9d717b379a61836ca237272440bfc7a1133b9150af11670b37df8bd78b82cabef1af3bd356efa1a0587868041", 0xb7}, {&(0x7f00000005c0)}, {&(0x7f0000002b80)}], 0x4, &(0x7f0000000740)="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", 0x1000}, 0x10) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000003040)=0x1) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0x810) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r10, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000002780)="0a28b2f19f384d125895915c829bfdc2112d61df8efeee1e7a6090b250fa807834c7522b6bdc8b7d65a655afe7b42d0f9b501aba10021f481c98bd8a447fb74921c9daedfba583bf8f491e74bd21161db3fd7cff58a3b3fd9e847219b58885beaadc5b", 0x63}, {0x0}, {&(0x7f0000002980)="68f86b3c0a778276e8b8acd9ce5db1fa2fa60c0d78d592b515029e4bcec79651f7a4f0b9f41dd456b184363c7e128809007e3f2fcc5670f98de759282bea5c46ba4bbf72f3ebec393c52c88edd1967e767fd763c04d1306aa215ba34839fd3f59e3dbee158ca310f83150501c10d", 0x6e}, {&(0x7f0000002a00)="dbc8b7b5432fdf9c0e62356b08e3b2fc8358d3d389e6c5ea60e15251326b3af99badd8bf3baba48b84a26374958e00dba05abf83e38a8d876f9d10459be9d504cbd54f1ec9131f15c3d01da2671e4805fbcf6071676f", 0x56}, {&(0x7f0000002a80)="c6ba7c6c7d8662aaa9df1a8400486112a99ef91a462854e7a0bb95df2fb894b53aa9356cde007ee98b690c58477a4f29af5c5e388c1066fce94a151230b5c74dd19767ac9c62561c267bd85b923d86ebd8f5f5661a3c3eae5d552f42", 0x5c}], 0x6, &(0x7f0000003080)=ANY=[@ANYBLOB="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"], 0x410}, 0x2000004) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000003000), 0x80, 0x0) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x0) sendmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000a00035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.440063546s ago: executing program 1 (id=3544): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001480)="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", 0x46a}, {&(0x7f0000000740)="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", 0x5da}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) (async) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x58, &(0x7f0000000180)}, 0x10) 1.128318835s ago: executing program 2 (id=3545): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x104046, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') unlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80^\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\xf9_\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000001340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f00000002c0)=""/4, 0x4}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfefff963}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="19b24f406b4b34f555028d313a39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079108cfed3f6000007000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000012008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b001c000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/197, 0xc5, 0x0, &(0x7f00000002c0)=""/4, 0x4}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfefff963}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="19b24f406b4b34f555028d313a39", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079108cfed3f6000007000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) (async) 1.012612869s ago: executing program 3 (id=3548): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x818) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x2, @perf_bp={0x0}, 0xc800, 0x3, 0xfffffffc, 0x0, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x2004}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c200"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) 708.210198ms ago: executing program 0 (id=3549): perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x2, 0xfb, 0x6, 0x0, 0x0, 0x34000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x120542, 0x9, 0x3, 0x2, 0x7, 0x4, 0x8, 0x0, 0x100, 0x0, 0x10001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000)=r6, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/94, 0x5e, 0x0, &(0x7f00000004c0)=""/57, 0x39}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb, '\x00', r3}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)=0x7fffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x9, 0x0, 0x9, 0x103, r0, 0xff, '\x00', r3, r7, 0x5, 0x4, 0x3}, 0x50) (async) r8 = socket$kcm(0xa, 0x6, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x4) (async) close(0x3) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2600c055) 692.165849ms ago: executing program 4 (id=3550): socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c98b, 0xac5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xc7b, 0x7fffffffffffffff}, 0x11508d, 0x89, 0x0, 0x5, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240), &(0x7f0000000280)=[0x0], 0x0, 0xd4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 661.00169ms ago: executing program 3 (id=3551): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r2, r2}) recvmsg$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x14, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x3, 0x2, 0x9, 0x8, 0x4}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) close(r0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xbc}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001000000dc"], 0x18}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)}, 0x8400) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) 395.941888ms ago: executing program 0 (id=3552): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x6, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x73) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000c53d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328562b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaeaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509afd15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4df92cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2571f67a7c7819b0889d7614ab5e25b468ab3102cab53f312f2e29075891bd21c2301f338b8a961a01fb282fd4e53d8c0a2ebb71ceaf7e3b34e4502b5fad975855ce0e4d4c163519fabd209c3d4302f46c90a19d8a0a03396e8949a91184e8d680f724d65700b9a18d28e22810be9fb37ce6cac86c45a03165c1af3152a3c21dc927f0697343abf80e3aae6149b14d08f188e61f900bbb0eae54b0566ad8489918ddc866871e06a5f50cf35b551f7b4c7ae0300838056a65d2e0058c9d8bf1c99d40fb3e2ecdbd68b5f79003c04266a43b8794a5d90b2348f4e81ed1d00000000000000000000e321e9aa37fc5cbee1f627e86e2f58a24ccd9c0376772b2bd5e99ab9d86b753de57a5f40714d11282d809bf6bf5f7009ff38db199273d029f5b65b573722b8131f473775031a7889a2e6b6e804b26429c839373dffd00347a65a2e8ca7d387857dddcea793ce7a08e92648dd663d25d5374ddf20e98e824b269a199210b7064fb6cda054ccef091d11"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0) 395.268408ms ago: executing program 4 (id=3553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r4, r1, 0x1, 0x1, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb709000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) 372.282528ms ago: executing program 1 (id=3554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x2}, 0x10c002, 0x1, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e]}}, 0x0, 0x2e}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, &(0x7f0000000dc0)="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", 0x1000, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="9a6eb3f0250c529f22552210a4aa9d") r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r4, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x7, 0x2, 0x6, 0x0, 0x51, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40b, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x1000, 0xffffffff, 0x0, 0x4, 0x1, 0x4, 0x4, 0x0, 0x6, 0x0, 0x9}, r1, 0x6, r4, 0x1) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x71, 0x1, 0x1, 0x88}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xc, @mcast1, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="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", 0xfd}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r10}, 0x38) 301.26509ms ago: executing program 3 (id=3555): r0 = socket$kcm(0x21, 0x2, 0x2) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(r0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000001000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r2, 0x0, 0x0) 0s ago: executing program 2 (id=3556): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) kernel console output (not intermixed with test programs): 8] device ipvlan1 entered promiscuous mode [ 390.575028][T10748] bridge0: port 4(ipvlan1) entered blocking state [ 390.601856][T10748] bridge0: port 4(ipvlan1) entered disabled state [ 390.660470][T10748] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 391.593367][T10765] netlink: 'syz.4.1823': attribute type 14 has an invalid length. [ 391.660188][T10772] sctp: [Deprecated]: syz.2.1825 (pid 10772) Use of int in max_burst socket option deprecated. [ 391.660188][T10772] Use struct sctp_assoc_value instead [ 394.298532][T10838] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 394.307270][T10838] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1847'. [ 398.446412][T10933] netlink: 'syz.4.1871': attribute type 2 has an invalid length. [ 398.603659][T10936] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1872'. [ 402.342855][T10989] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 402.375565][T10989] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 402.392225][T10989] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 402.403099][T10988] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1887'. [ 402.734400][T11001] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1893'. [ 402.766757][T11001] device hsr_slave_0 left promiscuous mode [ 402.802747][T11001] device hsr_slave_1 left promiscuous mode [ 403.830301][T11033] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1903'. [ 405.125354][T11078] ref_ctr_offset mismatch. inode: 0x7d3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 405.165704][T11072] ref_ctr_offset mismatch. inode: 0x7d3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 405.398146][T11084] netlink: 36363 bytes leftover after parsing attributes in process `syz.1.1917'. [ 406.097966][T11107] sctp: [Deprecated]: syz.4.1924 (pid 11107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 406.097966][T11107] Use struct sctp_sack_info instead [ 406.546808][T11121] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 406.576168][T11121] syzkaller1: linktype set to 825 [ 406.823413][T11132] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1932'. [ 407.868391][T11154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1940'. [ 408.111949][T11158] raw_sendmsg: syz.3.1942 forgot to set AF_INET. Fix it! [ 408.454644][T11174] netlink: 'syz.0.1945': attribute type 21 has an invalid length. [ 408.774571][T11185] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1947'. [ 408.811821][T11185] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1947'. [ 408.911356][T11185] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1947'. [ 408.944428][T11185] tc_dump_action: action bad kind [ 409.590424][T11220] netlink: 'syz.0.1961': attribute type 29 has an invalid length. [ 409.617993][T11220] netlink: 'syz.0.1961': attribute type 29 has an invalid length. [ 410.454841][T11245] netlink: 'syz.0.1967': attribute type 7 has an invalid length. [ 410.464964][T11245] netlink: 'syz.0.1967': attribute type 6 has an invalid length. [ 411.669761][T11267] netlink: 'syz.0.1974': attribute type 2 has an invalid length. [ 411.683528][T11267] netlink: 'syz.0.1974': attribute type 8 has an invalid length. [ 411.693892][T11267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1974'. [ 412.345008][T11281] bond0: (slave bridge0): Error: Slave device does not support XDP [ 412.856048][T11304] sctp: [Deprecated]: syz.2.1987 (pid 11304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.856048][T11304] Use struct sctp_sack_info instead [ 413.210952][T11329] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 413.221812][T11329] netlink: 'syz.4.1992': attribute type 29 has an invalid length. [ 413.474105][T11340] netlink: 'syz.4.1993': attribute type 10 has an invalid length. [ 416.457530][T11340] bond0: (slave team0): Releasing backup interface [ 416.468337][T11340] device team0 left promiscuous mode [ 416.476352][T11340] device team_slave_0 left promiscuous mode [ 416.500438][T11340] device team_slave_1 left promiscuous mode [ 417.351497][T11340] team0 (unregistering): Port device team_slave_0 removed [ 417.382281][T11340] team0 (unregistering): Port device team_slave_1 removed [ 417.823396][T11369] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2001'. [ 417.843369][T11362] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 417.881471][T11362] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 418.228840][T11373] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 418.325576][T11383] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 418.679667][T11392] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 418.700850][T11392] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2008'. [ 418.900239][T11397] netlink: 'syz.3.2009': attribute type 3 has an invalid length. [ 418.910111][T11397] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2009'. [ 418.981373][T11397] netlink: 'syz.3.2009': attribute type 3 has an invalid length. [ 419.010185][T11397] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2009'. [ 419.246419][T11412] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2014'. [ 419.903599][T11438] netlink: 'syz.3.2022': attribute type 3 has an invalid length. [ 419.911749][T11438] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2022'. [ 420.017495][ T6611] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.145491][T11451] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 424.633632][T11500] netlink: 'syz.3.2040': attribute type 7 has an invalid length. [ 424.687844][T11504] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2043'. [ 424.718886][T11504] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.2043'. [ 425.198310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 425.633659][T11529] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 426.670874][T11531] netlink: 'syz.4.2050': attribute type 10 has an invalid length. [ 426.681679][T11531] device wlan1 left promiscuous mode [ 426.701577][T11553] netlink: 'syz.0.2056': attribute type 10 has an invalid length. [ 426.727397][T11553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2056'. [ 426.787703][T11553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.890669][T11593] netlink: 'syz.0.2069': attribute type 10 has an invalid length. [ 428.966871][T11624] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 428.989518][T11624] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2075'. [ 429.363933][T11635] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2078'. [ 429.549206][T11648] netlink: 'syz.1.2079': attribute type 3 has an invalid length. [ 429.605811][T11648] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2079'. [ 430.652912][ T6595] tipc: Subscription rejected, illegal request [ 430.824930][T11674] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2089'. [ 431.224576][T11680] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.2092'. [ 431.398972][T11699] netlink: 'syz.1.2093': attribute type 10 has an invalid length. [ 431.440881][T11699] bridge0: port 3(team0) entered disabled state [ 431.453655][T11699] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.462478][T11699] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.675233][T11699] bond0: (slave bridge0): Releasing backup interface [ 431.711602][T11699] device bridge0 left promiscuous mode [ 431.765233][T11699] team0: Device bridge0 is already an upper device of the team interface [ 433.464916][T11731] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2103'. [ 433.485861][T11731] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2103'. [ 433.541249][T11731] bond0: (slave bond_slave_0): Releasing backup interface [ 433.600834][T11731] device bond_slave_0 left promiscuous mode [ 433.663569][T11731] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 434.664208][T11760] netlink: 'syz.3.2111': attribute type 4 has an invalid length. [ 434.964688][T11788] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2119'. [ 435.157628][T11792] netlink: 'syz.3.2120': attribute type 10 has an invalid length. [ 436.450099][T11783] can: request_module (can-proto-0) failed. [ 436.458125][T11789] can: request_module (can-proto-0) failed. [ 437.994751][T11854] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 438.055730][T11854] netlink: 'syz.4.2134': attribute type 4 has an invalid length. [ 438.087469][T11854] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2134'. [ 438.899623][T11882] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 439.303425][T11891] netlink: 'syz.2.2144': attribute type 10 has an invalid length. [ 440.058278][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.064766][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.636736][T11925] device syzkaller0 entered promiscuous mode [ 441.474248][T11937] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2155'. [ 445.026373][T11961] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 445.035429][T11961] bridge0: port 3(dummy0) entered disabled state [ 445.042038][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.049462][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.075474][T11961] bridge0: port 3(dummy0) entered blocking state [ 445.082349][T11961] bridge0: port 3(dummy0) entered forwarding state [ 445.091200][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.098464][T11961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.107061][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.114469][T11961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.149220][T11961] team0: Port device bridge0 added [ 445.549366][T11979] netlink: 'syz.3.2164': attribute type 13 has an invalid length. [ 445.574798][T11979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2164'. [ 445.618766][T11979] syz_tun: refused to change device tx_queue_len [ 445.625309][T11979] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 445.803949][T11985] delete_channel: no stack [ 445.873796][T11992] netlink: 'syz.2.2169': attribute type 3 has an invalid length. [ 445.912259][T11992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2169'. [ 445.993787][T11998] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2170'. [ 446.410479][T12006] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2173'. [ 447.959485][T12033] device pim6reg1 left promiscuous mode [ 449.123098][T12057] delete_channel: no stack [ 450.028005][T12086] delete_channel: no stack [ 450.057918][T12086] delete_channel: no stack [ 450.388892][T12092] netlink: 'syz.1.2197': attribute type 29 has an invalid length. [ 450.424717][T12092] netlink: 'syz.1.2197': attribute type 3 has an invalid length. [ 450.475910][T12092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2197'. [ 450.986618][T12103] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2202'. [ 451.060104][T12103] netlink: 'syz.4.2202': attribute type 11 has an invalid length. [ 451.541158][T12132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.628072][T12132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.792035][T12132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.798999][T12122] netlink: 'syz.2.2206': attribute type 2 has an invalid length. [ 451.837377][T12122] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2206'. [ 451.841879][T12132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.232833][T12139] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 452.279604][T12139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2209'. [ 452.336746][T12139] bridge0: port 4(ipvlan1) entered blocking state [ 453.107783][T12139] bridge0: port 4(ipvlan1) entered disabled state [ 453.209666][T12139] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 455.615483][T12195] netlink: 'syz.4.2225': attribute type 11 has an invalid length. [ 455.639325][T12195] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2225'. [ 455.740034][T12198] netlink: 'syz.4.2225': attribute type 21 has an invalid length. [ 455.805636][T12198] netlink: 'syz.4.2225': attribute type 3 has an invalid length. [ 455.835308][T12198] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2225'. [ 456.355343][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.566710][ T4285] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 460.311056][T12257] netlink: 'syz.1.2244': attribute type 3 has an invalid length. [ 460.328663][T12257] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2244'. [ 460.521256][T12266] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2247'. [ 460.537595][T12266] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.2247'. [ 460.591049][T12266] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2247'. [ 460.976683][T12288] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 461.017314][T12288] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 461.066479][T12288] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2254'. [ 461.429513][T12291] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2256'. [ 461.985247][T12321] netlink: 'syz.0.2264': attribute type 3 has an invalid length. [ 462.015794][T12321] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2264'. [ 462.919301][T12341] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2271'. [ 463.008193][T12346] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2272'. [ 463.590162][T12366] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2277'. [ 463.650718][T12367] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 464.075207][T12381] delete_channel: no stack [ 465.801429][T12411] netlink: 'syz.0.2288': attribute type 2 has an invalid length. [ 465.847609][T12411] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 465.887904][T12411] __nla_validate_parse: 1 callbacks suppressed [ 465.887922][T12411] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2288'. [ 468.405100][T12416] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2290'. [ 468.728838][T12431] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 468.768974][T12431] netlink: 'syz.1.2294': attribute type 3 has an invalid length. [ 468.812784][T12431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2294'. [ 468.841007][T12433] netlink: 'syz.4.2295': attribute type 4 has an invalid length. [ 468.973284][T12433] netlink: 'syz.4.2295': attribute type 8 has an invalid length. [ 469.064867][T12433] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.2295'. [ 469.221632][T12433] netlink: 'syz.4.2295': attribute type 10 has an invalid length. [ 469.845412][T12447] netlink: 'syz.0.2300': attribute type 10 has an invalid length. [ 469.911143][T12447] device macvlan0 entered promiscuous mode [ 470.829859][T12482] netlink: 'syz.3.2310': attribute type 10 has an invalid length. [ 470.975168][T12492] netlink: 'syz.4.2311': attribute type 3 has an invalid length. [ 470.996783][T12482] team0 (unregistering): Port device C removed [ 471.000496][T12492] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2311'. [ 471.053032][T12492] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 471.061566][T12482] team0 (unregistering): Port device team_slave_1 removed [ 471.078755][T12492] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2311'. [ 471.109482][T12482] team0 (unregistering): Port device wlan1 removed [ 471.121847][T12482] bridge0: port 3(dummy0) entered disabled state [ 471.128700][T12482] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.136121][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.176410][T12482] team0 (unregistering): Port device bridge0 removed [ 471.222259][T12485] delete_channel: no stack [ 471.453477][T12504] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.560887][T12513] netlink: 'syz.1.2318': attribute type 2 has an invalid length. [ 471.590678][T12511] device syzkaller0 entered promiscuous mode [ 474.266129][T12541] netlink: 'syz.4.2321': attribute type 39 has an invalid length. [ 474.378688][T12554] netlink: 'syz.1.2326': attribute type 1 has an invalid length. [ 474.387008][T12555] netlink: 'syz.1.2326': attribute type 13 has an invalid length. [ 474.397877][T12555] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2326'. [ 474.428803][T12555] erspan0: refused to change device tx_queue_len [ 474.435849][T12555] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 475.133794][T12589] netlink: 'syz.4.2337': attribute type 2 has an invalid length. [ 475.370154][T12603] netlink: 'syz.1.2341': attribute type 28 has an invalid length. [ 475.387372][T12603] netlink: 'syz.1.2341': attribute type 4 has an invalid length. [ 475.425847][T12603] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2341'. [ 475.737911][T12621] netlink: 'syz.2.2347': attribute type 2 has an invalid length. [ 475.758769][T12624] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 475.777236][T12624] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2348'. [ 476.629119][T12641] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 476.656667][T12641] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2352'. [ 476.773365][T12648] netlink: 'syz.3.2354': attribute type 21 has an invalid length. [ 477.492922][T12666] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.2360'. [ 477.668152][ T6604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.889917][ T6604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.011711][ T6604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.489068][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.500299][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.514432][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.523457][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.534130][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 478.543884][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.917361][ T6604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.442028][ T6604] device 0 left promiscuous mode [ 479.574789][T12693] chnl_net:caif_netlink_parms(): no params data found [ 479.912685][T12742] validate_nla: 4 callbacks suppressed [ 479.912704][T12742] netlink: 'syz.1.2377': attribute type 9 has an invalid length. [ 479.998865][T12742] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2377'. [ 480.605416][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 481.153210][T12748] netlink: 'syz.1.2377': attribute type 10 has an invalid length. [ 481.258561][T12748] device team0 left promiscuous mode [ 481.263971][T12748] device team_slave_0 left promiscuous mode [ 481.275711][T12748] device team_slave_1 left promiscuous mode [ 481.283402][T12748] device macvlan0 left promiscuous mode [ 481.296988][T12748] device wlan1 left promiscuous mode [ 481.305245][T12748] device geneve1 left promiscuous mode [ 481.315300][T12748] bridge0: port 3(team0) entered disabled state [ 481.331146][T12748] team0: Device macvlan0 failed to change mtu [ 481.331920][T12748] bond0: (slave team0): Error -22 calling dev_set_mtu [ 481.378276][T12693] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.417958][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.447089][T12693] device bridge_slave_0 entered promiscuous mode [ 481.590327][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.609413][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.621569][T12693] device bridge_slave_1 entered promiscuous mode [ 481.810482][T12693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.970845][T12693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.182036][T12693] team0: Port device team_slave_0 added [ 482.473937][T12797] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2386'. [ 482.542377][T12797] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 482.600851][T12693] team0: Port device team_slave_1 added [ 482.667295][ T4285] Bluetooth: hci4: command 0x041b tx timeout [ 482.680200][T12788] device syzkaller0 entered promiscuous mode [ 482.949665][T12806] netlink: 'syz.1.2387': attribute type 3 has an invalid length. [ 483.007349][T12806] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2387'. [ 483.303997][T12814] netlink: 'syz.3.2389': attribute type 29 has an invalid length. [ 484.747315][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 486.827419][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 489.354155][T12693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.361434][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.388148][T12693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.399957][T12814] netlink: 'syz.3.2389': attribute type 29 has an invalid length. [ 489.490073][T12693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.517766][T12693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.617360][T12693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.002566][T12693] device hsr_slave_0 entered promiscuous mode [ 490.065301][T12693] device hsr_slave_1 entered promiscuous mode [ 490.878024][ T6604] bridge0: port 3(bond0) entered disabled state [ 490.909456][ T6604] device bridge_slave_1 left promiscuous mode [ 490.915916][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.948699][ T6604] device bridge_slave_0 left promiscuous mode [ 490.971745][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.124262][ T6604] device veth1_macvtap left promiscuous mode [ 491.132924][ T6604] device veth0_macvtap left promiscuous mode [ 491.166060][ T6604] device veth1_vlan left promiscuous mode [ 491.199434][ T6604] device veth0_vlan left promiscuous mode [ 495.312148][ T6604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.328354][ T6604] device bond_slave_1 left promiscuous mode [ 495.776419][ T6604] bond0 (unregistering): Released all slaves [ 495.906878][T12880] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 495.944950][T12880] bond0: (slave geneve0): Releasing backup interface [ 498.550653][T13035] netlink: 'syz.0.2427': attribute type 21 has an invalid length. [ 498.880373][T12693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.916196][T12693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.961130][T12693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.998387][T12693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.312439][T13054] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2430'. [ 499.404201][T13054] netlink: 'syz.2.2430': attribute type 10 has an invalid length. [ 499.548305][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.623744][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.680703][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.755679][T12693] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.826422][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.851051][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.896099][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.903646][ T6606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.003622][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.079650][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.126392][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.183958][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.191428][ T6606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.254893][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.269923][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.298990][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.370059][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.390850][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.445210][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.472466][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.492603][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.516863][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.754516][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.793526][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.943701][T12693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.547511][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.553993][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.836098][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.860617][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.876632][T12693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.687705][T13117] netlink: 'syz.0.2439': attribute type 153 has an invalid length. [ 502.735941][T13117] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.2439'. [ 502.867417][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.902737][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.965594][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.976873][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.028454][T12693] device veth0_vlan entered promiscuous mode [ 503.039300][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.084345][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.111330][T12693] device veth1_vlan entered promiscuous mode [ 503.254266][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.282149][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.330016][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.380441][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.423757][T12693] device veth0_macvtap entered promiscuous mode [ 503.462545][T12693] device veth1_macvtap entered promiscuous mode [ 503.521211][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.541642][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.554140][T12693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.564790][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.578223][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.598141][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.610427][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.636336][T12693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.650090][T12693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.663526][T12693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.675160][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.691441][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.705018][T12693] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.718338][T12693] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.731671][T12693] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.742321][T12693] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.227359][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.235273][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.280627][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.353972][ T6606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.383260][ T6606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.412368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 504.851843][T13159] netlink: 'syz.3.2449': attribute type 6 has an invalid length. [ 506.006629][T13201] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2461'. [ 506.082156][T13201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 506.130969][T13201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.202697][T13203] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2460'. [ 506.594377][T13222] netlink: 'syz.3.2465': attribute type 21 has an invalid length. [ 507.091962][T13251] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 507.394721][T13251] team0 (unregistering): Port device team_slave_0 removed [ 507.493036][T13251] team0 (unregistering): Port device team_slave_1 removed [ 507.582177][T13251] team0 (unregistering): Port device macvlan0 removed [ 507.666458][T13251] team0 (unregistering): Port device wlan1 removed [ 507.739632][T13251] team0 (unregistering): Port device geneve1 removed [ 507.864503][T13250] netlink: 'syz.1.2472': attribute type 10 has an invalid length. [ 508.356852][T13282] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2478'. [ 509.112391][T13309] netlink: 'syz.2.2485': attribute type 29 has an invalid length. [ 509.796594][T13320] netlink: 'syz.0.2487': attribute type 29 has an invalid length. [ 510.280046][T13309] netlink: 'syz.2.2485': attribute type 29 has an invalid length. [ 513.298851][T13320] netlink: 'syz.0.2487': attribute type 29 has an invalid length. [ 514.120343][T13354] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2492'. [ 517.720959][ T4285] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 517.823665][T13438] netlink: 'syz.2.2508': attribute type 46 has an invalid length. [ 517.847413][T13438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2508'. [ 518.041646][T13446] device pim6reg1 entered promiscuous mode [ 519.228322][T13463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2515'. [ 519.393128][T13476] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 519.427090][T13474] netlink: 'syz.4.2518': attribute type 2 has an invalid length. [ 519.443348][T13477] netlink: 'syz.1.2519': attribute type 3 has an invalid length. [ 519.454092][T13477] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2519'. [ 519.467552][T13474] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.2518'. [ 520.391263][T13502] netlink: 'syz.3.2527': attribute type 10 has an invalid length. [ 520.412998][T13501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2528'. [ 520.786696][T13514] netlink: 'syz.0.2531': attribute type 3 has an invalid length. [ 520.870212][T13514] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 521.078190][T13518] IPv6: pim6reg1: Disabled Multicast RS [ 522.052520][T13537] netlink: 3850 bytes leftover after parsing attributes in process `syz.0.2539'. [ 522.406142][T13554] netlink: 'syz.3.2543': attribute type 28 has an invalid length. [ 522.444782][T13554] netlink: 'syz.3.2543': attribute type 10 has an invalid length. [ 523.655007][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 3847 [ 523.731972][T13586] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2553'. [ 523.942570][T13599] device aaaaaaaaaaaaaaa entered promiscuous mode [ 524.335882][T13606] netlink: 'syz.4.2560': attribute type 28 has an invalid length. [ 524.350368][T13606] netlink: 'syz.4.2560': attribute type 3 has an invalid length. [ 524.362270][T13606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2560'. [ 524.801135][T13616] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 524.909912][T13629] netlink: 'syz.3.2567': attribute type 14 has an invalid length. [ 524.945991][T13629] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2567'. [ 525.175958][T13636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2568'. [ 525.200630][T13639] device bridge_slave_1 left promiscuous mode [ 525.207079][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.218307][T13639] device bridge_slave_0 left promiscuous mode [ 525.225099][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.859486][T13657] netlink: 'syz.1.2577': attribute type 2 has an invalid length. [ 525.898820][T13662] netlink: 'syz.4.2579': attribute type 16 has an invalid length. [ 525.960920][T13662] netlink: 'syz.4.2579': attribute type 7 has an invalid length. [ 526.020824][T13662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2579'. [ 526.129935][T13665] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 526.167274][T13665] netlink: 56823 bytes leftover after parsing attributes in process `syz.2.2580'. [ 526.464436][T13679] netlink: 'syz.2.2584': attribute type 39 has an invalid length. [ 526.960527][T13687] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2587'. [ 529.357597][T13732] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 529.374050][T13732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2600'. [ 529.394815][T13733] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 529.423981][T13733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2600'. [ 529.770637][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 3847 [ 530.466192][T13769] netlink: 'syz.4.2609': attribute type 10 has an invalid length. [ 530.640286][T13769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.689664][T13769] team0: Port device batadv0 added [ 530.944943][T13787] netlink: 'syz.2.2616': attribute type 2 has an invalid length. [ 530.964953][T13787] netlink: 'syz.2.2616': attribute type 11 has an invalid length. [ 530.985341][T13787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2616'. [ 531.595229][T13800] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2622'. [ 532.561358][T13825] netlink: 7862 bytes leftover after parsing attributes in process `syz.2.2629'. [ 532.819968][T13833] netlink: 'syz.1.2631': attribute type 2 has an invalid length. [ 533.522421][T13865] : renamed from virt_wifi0 [ 534.152036][T13900] delete_channel: no stack [ 534.181861][T13898] netlink: 'syz.1.2650': attribute type 13 has an invalid length. [ 534.196034][T13898] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2650'. [ 534.238559][T13898] syz_tun: refused to change device tx_queue_len [ 534.254512][T13898] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 534.806860][T13925] netlink: 'syz.1.2660': attribute type 13 has an invalid length. [ 534.847976][T13925] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2660'. [ 535.201827][T13925] erspan0: refused to change device tx_queue_len [ 535.221485][T13929] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2661'. [ 535.244286][T13932] device lo entered promiscuous mode [ 535.255029][T13932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.428718][T13939] netlink: 'syz.3.2664': attribute type 21 has an invalid length. [ 537.845264][T13948] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2665'. [ 537.960406][T13948] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 538.013982][T13948] CPU: 1 PID: 13948 Comm: syz.1.2665 Not tainted syzkaller #0 [ 538.021560][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.031770][T13948] Call Trace: [ 538.035229][T13948] [ 538.038300][T13948] dump_stack_lvl+0x188/0x24e [ 538.043187][T13948] ? show_regs_print_info+0x12/0x12 [ 538.048485][T13948] ? load_image+0x400/0x400 [ 538.053148][T13948] sysfs_warn_dup+0x8a/0xa0 [ 538.057852][T13948] sysfs_do_create_link_sd+0xc0/0x110 [ 538.063293][T13948] device_add+0x7f6/0x1000 [ 538.067953][T13948] wiphy_register+0x1d9f/0x2ac0 [ 538.073060][T13948] ? cfg80211_event_work+0x40/0x40 [ 538.078273][T13948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 538.084643][T13948] ieee80211_register_hw+0x2d00/0x39f0 [ 538.090249][T13948] ? lockdep_hardirqs_on+0x94/0x140 [ 538.095513][T13948] ? ieee80211_register_hw+0xec1/0x39f0 [ 538.101125][T13948] ? ieee80211_register_hw+0xec1/0x39f0 [ 538.107357][T13948] ? ieee80211_tasklet_handler+0x20/0x20 [ 538.113234][T13948] ? memset+0x1e/0x40 [ 538.117703][T13948] ? __hrtimer_init+0x186/0x270 [ 538.122768][T13948] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 538.128600][T13948] hwsim_new_radio_nl+0xafa/0xce0 [ 538.133951][T13948] genl_family_rcv_msg_doit+0x22a/0x330 [ 538.139628][T13948] ? end_current_label_crit_section+0x170/0x170 [ 538.145977][T13948] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 538.152688][T13948] ? bpf_lsm_capable+0x5/0x10 [ 538.157504][T13948] ? security_capable+0x85/0xb0 [ 538.162475][T13948] genl_rcv_msg+0x604/0x790 [ 538.167030][T13948] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 538.173254][T13948] ? genl_bind+0x360/0x360 [ 538.177712][T13948] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 538.184085][T13948] ? lock_acquire+0x225/0x4a0 [ 538.188916][T13948] netlink_rcv_skb+0x1fb/0x450 [ 538.193721][T13948] ? genl_bind+0x360/0x360 [ 538.198177][T13948] ? netlink_ack+0x1170/0x1170 [ 538.203020][T13948] ? down_read+0x1a8/0x2d0 [ 538.207520][T13948] genl_rcv+0x24/0x40 [ 538.211539][T13948] netlink_unicast+0x74d/0x8d0 [ 538.216526][T13948] netlink_sendmsg+0x8ad/0xbd0 [ 538.221471][T13948] ? netlink_getsockopt+0x550/0x550 [ 538.226739][T13948] ? aa_sock_msg_perm+0x94/0x150 [ 538.231713][T13948] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 538.237031][T13948] ? security_socket_sendmsg+0x7c/0xa0 [ 538.242532][T13948] ? netlink_getsockopt+0x550/0x550 [ 538.247787][T13948] ____sys_sendmsg+0x5be/0x970 [ 538.253273][T13948] ? __sys_sendmsg_sock+0x30/0x30 [ 538.258592][T13948] ? __import_iovec+0x315/0x500 [ 538.263626][T13948] ? import_iovec+0x6f/0xa0 [ 538.268190][T13948] ___sys_sendmsg+0x2a2/0x360 [ 538.272927][T13948] ? try_to_wake_up+0x6ae/0x1080 [ 538.278353][T13948] ? __sys_sendmsg+0x290/0x290 [ 538.283182][T13948] ? ktime_get_real_ts64+0x440/0x440 [ 538.288885][T13948] __se_sys_sendmsg+0x1bb/0x2a0 [ 538.293776][T13948] ? __x64_sys_sendmsg+0x80/0x80 [ 538.298762][T13948] ? lockdep_hardirqs_on+0x94/0x140 [ 538.304009][T13948] do_syscall_64+0x4c/0xa0 [ 538.308601][T13948] ? clear_bhb_loop+0x60/0xb0 [ 538.313473][T13948] ? clear_bhb_loop+0x60/0xb0 [ 538.318214][T13948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.324201][T13948] RIP: 0033:0x7fc13859ce59 [ 538.328664][T13948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.348414][T13948] RSP: 002b:00007fc139469028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.356877][T13948] RAX: ffffffffffffffda RBX: 00007fc138816090 RCX: 00007fc13859ce59 [ 538.364904][T13948] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 538.372927][T13948] RBP: 00007fc138632d6f R08: 0000000000000000 R09: 0000000000000000 [ 538.381042][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.389532][T13948] R13: 00007fc138816128 R14: 00007fc138816090 R15: 00007fff838df388 [ 538.398042][T13948] [ 538.442629][T13962] netlink: 'syz.2.2670': attribute type 3 has an invalid length. [ 538.470225][T13962] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2670'. [ 538.540119][T13955] netlink: 175 bytes leftover after parsing attributes in process `syz.4.2669'. [ 538.564832][T13956] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 538.636987][T13965] netlink: 'syz.3.2671': attribute type 13 has an invalid length. [ 538.645924][T13965] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.2671'. [ 538.662506][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 538.685235][T13971] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2671'. [ 539.060160][T13980] netlink: 'syz.1.2675': attribute type 21 has an invalid length. [ 539.069069][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2675'. [ 539.078649][T13980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2675'. [ 539.409962][T13992] C: renamed from team_slave_0 [ 541.781178][T13992] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 541.797278][T13992] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2679'. [ 541.816766][T13992] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 542.085354][T14010] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 542.167647][T14015] netlink: 'syz.0.2687': attribute type 3 has an invalid length. [ 542.211852][T14015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2687'. [ 542.266833][T14015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2687'. [ 543.954107][T14061] netlink: 'syz.1.2702': attribute type 10 has an invalid length. [ 544.391497][T14094] device syzkaller0 entered promiscuous mode [ 545.691918][T14139] netlink: 87536 bytes leftover after parsing attributes in process `syz.2.2721'. [ 546.001288][T14145] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 546.023157][T14145] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2724'. [ 546.034196][T14145] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 546.067445][T14145] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 546.083163][T14145] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 546.097613][T14145] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 546.116309][T14145] netlink: 'syz.0.2724': attribute type 29 has an invalid length. [ 546.575102][T14165] netlink: 'syz.4.2731': attribute type 21 has an invalid length. [ 546.605479][T14165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2731'. [ 546.676504][T14169] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2732'. [ 546.795332][T14173] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 546.896924][T14176] netlink: 'syz.0.2732': attribute type 10 has an invalid length. [ 547.316020][T14190] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2740'. [ 547.572008][T14193] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.2739'. [ 550.427803][T14219] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2747'. [ 550.437066][T14219] device bridge_slave_1 entered promiscuous mode [ 550.887652][T14237] delete_channel: no stack [ 550.964300][T14246] netlink: 'syz.3.2755': attribute type 11 has an invalid length. [ 550.974965][T14246] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2755'. [ 550.997534][T14244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.177692][T14252] validate_nla: 1 callbacks suppressed [ 551.177730][T14252] netlink: 'syz.1.2757': attribute type 4 has an invalid length. [ 551.197895][T14252] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2757'. [ 551.238996][T14253] bridge0: port 3(dummy0) entered disabled state [ 551.285937][T14253] device bridge_slave_1 left promiscuous mode [ 551.308939][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.336895][T14253] device bridge_slave_0 left promiscuous mode [ 551.346888][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.596196][T14254] netlink: 'syz.4.2756': attribute type 10 has an invalid length. [ 551.605494][T14254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2756'. [ 551.615182][T14254] device dummy0 entered promiscuous mode [ 551.622353][T14254] bridge0: port 3(dummy0) entered blocking state [ 551.629262][T14254] bridge0: port 3(dummy0) entered disabled state [ 551.638179][T14254] bridge0: port 3(dummy0) entered blocking state [ 551.644721][T14254] bridge0: port 3(dummy0) entered forwarding state [ 552.074221][T14278] netlink: 'syz.0.2766': attribute type 10 has an invalid length. [ 552.233421][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 44 [ 553.632749][ T46] tipc: Subscription rejected, illegal request [ 553.655565][T14320] netlink: 'syz.2.2780': attribute type 2 has an invalid length. [ 553.697917][T14320] netlink: 'syz.2.2780': attribute type 8 has an invalid length. [ 553.727718][T14320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2780'. [ 553.932970][T14328] netlink: 'syz.4.2782': attribute type 10 has an invalid length. [ 554.095453][T14328] team0: Port device wlan1 added [ 554.566294][T14355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2789'. [ 556.394864][ T4291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.406489][ T4291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.406698][T14385] pimreg0: tun_chr_ioctl cmd 35111 [ 556.423745][ T4291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.433602][ T4291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.444707][ T4291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 556.452454][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 556.570950][ T6605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.738105][ T6605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.881342][ T6605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.043202][ T6605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.080299][T14395] can: request_module (can-proto-0) failed. [ 557.456706][T14384] chnl_net:caif_netlink_parms(): no params data found [ 557.677856][T14409] netlink: 'syz.2.2804': attribute type 10 has an invalid length. [ 557.722387][T14409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2804'. [ 557.763719][T14409] device dummy0 entered promiscuous mode [ 557.835536][T14409] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 558.077022][T14423] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2808'. [ 558.283402][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.327268][T14384] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.356593][T14384] device bridge_slave_0 entered promiscuous mode [ 558.501590][T14384] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.507797][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 558.529880][T14384] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.545232][T14384] device bridge_slave_1 entered promiscuous mode [ 558.849594][T14384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.874054][T14384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.054730][T14384] team0: Port device team_slave_0 added [ 559.171149][T14384] team0: Port device team_slave_1 added [ 559.382672][T14462] netlink: 'syz.4.2814': attribute type 3 has an invalid length. [ 559.428773][T14458] netlink: 'syz.4.2814': attribute type 21 has an invalid length. [ 559.450560][T14458] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2814'. [ 559.470911][T14462] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2814'. [ 559.538413][T14384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.545730][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.626448][T14384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.941550][T14455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2813'. [ 559.972656][T14384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.987240][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.077035][T14384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.463263][T14384] device hsr_slave_0 entered promiscuous mode [ 560.577693][T14384] device hsr_slave_1 entered promiscuous mode [ 560.584843][T14384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.591819][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 560.615794][T14384] Cannot create hsr debugfs directory [ 562.667631][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 562.809876][T14515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2827'. [ 562.867955][T14516] device sit0 entered promiscuous mode [ 562.911864][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.918352][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.682982][ T6605] device hsr_slave_0 left promiscuous mode [ 563.717679][ T6605] device hsr_slave_1 left promiscuous mode [ 563.855764][ T6605] device veth1_vlan left promiscuous mode [ 563.877226][ T6605] device veth0_vlan left promiscuous mode [ 564.363686][ T6605] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 564.747319][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 565.122574][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.132953][ T6605] device bond_slave_1 left promiscuous mode [ 565.581855][ T6605] bond0 (unregistering): Released all slaves [ 566.355595][T14384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 566.423155][T14384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 566.475059][T14384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 566.558265][T14384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 566.704037][T14587] device sit0 entered promiscuous mode [ 567.466265][T14384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.601942][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 567.649031][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 567.701687][T14384] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.997315][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.006416][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.046042][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.053340][ T6607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.108477][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.131722][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.189800][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.197313][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.248329][T14616] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2851'. [ 568.590889][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.610951][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 568.729769][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 569.027930][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 569.050479][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 569.100217][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 569.138667][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 569.158734][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 569.352314][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 569.374373][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.439147][T14384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.458905][T14384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 569.517653][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.552090][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 569.669990][T14653] netlink: 'syz.3.2861': attribute type 2 has an invalid length. [ 569.703797][T14653] netlink: 'syz.3.2861': attribute type 8 has an invalid length. [ 569.718430][T14653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2861'. [ 569.894563][T14655] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 570.126319][T14665] netlink: 'syz.3.2862': attribute type 21 has an invalid length. [ 570.159109][T14665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2862'. [ 570.197478][T14665] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 570.251904][T14665] netlink: 'syz.3.2862': attribute type 5 has an invalid length. [ 570.265497][T14665] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2862'. [ 570.823798][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 570.846453][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.894776][T14384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.039626][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.091931][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.198710][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.239108][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.286516][T14384] device veth0_vlan entered promiscuous mode [ 571.318502][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.329664][ T6605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.366857][T14384] device veth1_vlan entered promiscuous mode [ 571.405296][T14690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2870'. [ 571.518072][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 571.542300][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 571.573727][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.613478][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.664841][T14384] device veth0_macvtap entered promiscuous mode [ 571.708440][T14384] device veth1_macvtap entered promiscuous mode [ 571.828514][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 571.878608][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.924577][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.957303][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.976862][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.010872][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.030584][T14384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.062405][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.093794][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.137568][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.185071][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.216151][T14384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.267353][T14384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.289811][T14384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.313375][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 572.336633][ T6620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.360057][T14384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.392766][T14384] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.413863][T14384] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.433502][T14384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.686820][ T6620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.706291][ T6620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.758382][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 572.812533][ T6620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.823701][ T6620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.846740][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.224911][T14750] FAULT_INJECTION: forcing a failure. [ 573.224911][T14750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.288947][T14750] CPU: 0 PID: 14750 Comm: syz.1.2792 Not tainted syzkaller #0 [ 573.296617][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.306712][T14750] Call Trace: [ 573.310028][T14750] [ 573.312991][T14750] dump_stack_lvl+0x188/0x24e [ 573.317726][T14750] ? show_regs_print_info+0x12/0x12 [ 573.322985][T14750] ? load_image+0x400/0x400 [ 573.327566][T14750] ? __lock_acquire+0x7d10/0x7d10 [ 573.332691][T14750] should_fail_ex+0x399/0x4d0 [ 573.337563][T14750] _copy_from_user+0x2c/0x170 [ 573.342351][T14750] ___sys_sendmsg+0x1c3/0x360 [ 573.347084][T14750] ? __sys_sendmsg+0x290/0x290 [ 573.351911][T14750] ? __lock_acquire+0x7d10/0x7d10 [ 573.356990][T14750] __se_sys_sendmsg+0x1bb/0x2a0 [ 573.361917][T14750] ? __x64_sys_sendmsg+0x80/0x80 [ 573.366902][T14750] ? lockdep_hardirqs_on+0x94/0x140 [ 573.372141][T14750] do_syscall_64+0x4c/0xa0 [ 573.376589][T14750] ? clear_bhb_loop+0x60/0xb0 [ 573.381331][T14750] ? clear_bhb_loop+0x60/0xb0 [ 573.386066][T14750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.392018][T14750] RIP: 0033:0x7ffaec59ce59 [ 573.396470][T14750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.416158][T14750] RSP: 002b:00007ffaed4f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.424646][T14750] RAX: ffffffffffffffda RBX: 00007ffaec815fa0 RCX: 00007ffaec59ce59 [ 573.432662][T14750] RDX: 00000000200008c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 573.440671][T14750] RBP: 00007ffaed4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 573.448672][T14750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.456845][T14750] R13: 00007ffaec816038 R14: 00007ffaec815fa0 R15: 00007ffe1d6db5d8 [ 573.464869][T14750] [ 573.980995][T14772] netlink: 'syz.2.2889': attribute type 29 has an invalid length. [ 574.092264][T14772] netlink: 'syz.2.2889': attribute type 29 has an invalid length. [ 574.168005][T14767] netlink: 'syz.2.2889': attribute type 29 has an invalid length. [ 574.224378][T14771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2890'. [ 574.331703][T14774] netlink: 'syz.2.2889': attribute type 29 has an invalid length. [ 575.059462][T14782] validate_nla: 1 callbacks suppressed [ 575.059502][T14782] netlink: 'syz.2.2892': attribute type 19 has an invalid length. [ 575.074535][T14782] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.2892'. [ 575.132364][T14787] netlink: 'syz.1.2894': attribute type 22 has an invalid length. [ 575.140477][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'. [ 575.469158][T14806] FAULT_INJECTION: forcing a failure. [ 575.469158][T14806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.491878][T14806] CPU: 0 PID: 14806 Comm: syz.3.2898 Not tainted syzkaller #0 [ 575.499449][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.509559][T14806] Call Trace: [ 575.512879][T14806] [ 575.515897][T14806] dump_stack_lvl+0x188/0x24e [ 575.520643][T14806] ? show_regs_print_info+0x12/0x12 [ 575.525895][T14806] ? load_image+0x400/0x400 [ 575.530460][T14806] ? __lock_acquire+0x7d10/0x7d10 [ 575.535553][T14806] should_fail_ex+0x399/0x4d0 [ 575.540290][T14806] _copy_from_user+0x2c/0x170 [ 575.545029][T14806] __copy_msghdr+0x3b7/0x580 [ 575.549678][T14806] ___sys_sendmsg+0x210/0x360 [ 575.554417][T14806] ? __sys_sendmsg+0x290/0x290 [ 575.559267][T14806] ? __lock_acquire+0x7d10/0x7d10 [ 575.564464][T14806] __se_sys_sendmsg+0x1bb/0x2a0 [ 575.569374][T14806] ? __x64_sys_sendmsg+0x80/0x80 [ 575.576566][T14806] ? lockdep_hardirqs_on+0x94/0x140 [ 575.582744][T14806] do_syscall_64+0x4c/0xa0 [ 575.587577][T14806] ? clear_bhb_loop+0x60/0xb0 [ 575.592433][T14806] ? clear_bhb_loop+0x60/0xb0 [ 575.597250][T14806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.603370][T14806] RIP: 0033:0x7f969e79ce59 [ 575.608530][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.628643][T14806] RSP: 002b:00007f969f599028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.638170][T14806] RAX: ffffffffffffffda RBX: 00007f969ea15fa0 RCX: 00007f969e79ce59 [ 575.647849][T14806] RDX: 00000000200008c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 575.657346][T14806] RBP: 00007f969f599090 R08: 0000000000000000 R09: 0000000000000000 [ 575.667590][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.676683][T14806] R13: 00007f969ea16038 R14: 00007f969ea15fa0 R15: 00007fffb07551c8 [ 575.685688][T14806] [ 576.222547][T14816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2902'. [ 576.254467][T14816] device caif0 entered promiscuous mode [ 576.280115][T14816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.356652][T14831] device syzkaller0 entered promiscuous mode [ 577.635789][T14844] netlink: 'syz.4.2911': attribute type 7 has an invalid length. [ 577.649171][T14844] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.2911'. [ 577.716132][T14847] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2913'. [ 582.928138][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 583.136164][T14878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2920'. [ 585.046780][T14920] netlink: 'syz.4.2936': attribute type 21 has an invalid length. [ 585.143405][T14917] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 585.153648][T14921] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.2934'. [ 585.475603][T14924] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 588.193404][T15022] netlink: 'syz.4.2951': attribute type 21 has an invalid length. [ 588.956011][T15041] netlink: 'syz.2.2957': attribute type 29 has an invalid length. [ 589.266431][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.286381][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.295286][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.321364][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.329956][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 589.339505][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.784370][T15039] netlink: 'syz.3.2956': attribute type 39 has an invalid length. [ 589.916140][T15041] netlink: 'syz.2.2957': attribute type 29 has an invalid length. [ 589.965923][T15051] netlink: 'syz.1.2958': attribute type 29 has an invalid length. [ 589.991025][T15051] netlink: 'syz.1.2958': attribute type 29 has an invalid length. [ 590.021568][T15052] netlink: 'syz.1.2958': attribute type 29 has an invalid length. [ 590.100992][T15051] netlink: 'syz.1.2958': attribute type 29 has an invalid length. [ 590.499697][T15048] chnl_net:caif_netlink_parms(): no params data found [ 590.655286][ T6611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.885471][ T6611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.922473][T15083] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2966'. [ 591.098777][ T6611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.228068][T15089] netlink: 61955 bytes leftover after parsing attributes in process `syz.1.2967'. [ 591.252459][T15089] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2967'. [ 591.388541][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 591.406794][ T6611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.443403][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.457642][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.466146][T15048] device bridge_slave_0 entered promiscuous mode [ 591.571582][T15098] netlink: 'syz.1.2967': attribute type 6 has an invalid length. [ 591.606157][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.634159][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.680180][T15048] device bridge_slave_1 entered promiscuous mode [ 591.801060][T15048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.840457][T15048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.922868][T15048] team0: Port device team_slave_0 added [ 591.946093][T15048] team0: Port device team_slave_1 added [ 592.021174][T15048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.046822][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.116916][T15048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.158110][T15048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.178013][T15048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.261115][T15048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.714425][T15048] device hsr_slave_0 entered promiscuous mode [ 592.766525][T15048] device hsr_slave_1 entered promiscuous mode [ 592.779527][T15048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.799181][T15048] Cannot create hsr debugfs directory [ 593.049403][ T6611] device .*! left promiscuous mode [ 593.145557][ T6611] device 0 left promiscuous mode [ 593.423233][T15127] netlink: 'syz.3.2974': attribute type 10 has an invalid length. [ 593.467429][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 593.595429][T15143] netlink: 'syz.4.2977': attribute type 27 has an invalid length. [ 593.612936][T15143] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2977'. [ 594.769554][T15048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 594.799927][T15048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 594.945681][T15048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 594.956420][T15048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 595.268212][T15185] netlink: 'syz.3.2985': attribute type 2 has an invalid length. [ 595.553454][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 597.064876][T15186] netlink: 'syz.2.2987': attribute type 39 has an invalid length. [ 597.144394][T15048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.269587][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.301110][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.346463][T15048] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.378703][ T6611] device veth0_to_team left promiscuous mode [ 597.384947][ T6611] : port 1(veth0_to_team) entered disabled state [ 597.428853][ T6611] device vlan0 left promiscuous mode [ 597.434646][ T6611] @: port 1(vlan0) entered disabled state [ 597.559723][ T6611] device hsr_slave_0 left promiscuous mode [ 597.599514][ T6611] device veth0_vlan left promiscuous mode [ 597.627395][ T4286] Bluetooth: hci5: command 0x0419 tx timeout [ 598.367639][ T6611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.376996][ T6611] device bond_slave_1 left promiscuous mode [ 598.768245][ T6611] bond0 (unregistering): Released all slaves [ 598.822379][T15192] mac80211_hwsim hwsim3 UMV": renamed from wlan0 [ 598.847397][T15203] netlink: 'syz.2.2992': attribute type 10 has an invalid length. [ 598.855962][T15203] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2992'. [ 598.897425][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.914365][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.938811][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.946189][ T5000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.984778][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.059258][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.074160][T15216] netlink: 'syz.3.2995': attribute type 3 has an invalid length. [ 599.083154][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.096770][T15216] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2995'. [ 599.143118][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.150550][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.199462][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 599.307709][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.382071][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 599.405651][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.452339][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.523114][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 599.574218][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 599.594588][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 599.609299][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 599.652897][T15048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.705580][T15048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 599.776873][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 599.809249][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.144901][T15253] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3003'. [ 600.172071][T15253] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 600.728876][T15266] netlink: 'syz.1.3004': attribute type 33 has an invalid length. [ 600.737014][T15266] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3004'. [ 600.837858][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 600.932770][T15266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.021687][T15270] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3006'. [ 601.064050][T15270] delete_channel: no stack [ 601.206561][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.224728][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.294444][T15048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.370201][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 601.401154][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 601.473806][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 601.512937][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 601.528291][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 601.548250][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 601.565278][T15048] device veth0_vlan entered promiscuous mode [ 601.573342][T15279] netlink: 'syz.1.3007': attribute type 10 has an invalid length. [ 601.582445][T15279] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3007'. [ 601.604112][T15048] device veth1_vlan entered promiscuous mode [ 601.642239][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 601.659970][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 601.679199][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 601.698801][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 601.714297][T15048] device veth0_macvtap entered promiscuous mode [ 601.738725][T15048] device veth1_macvtap entered promiscuous mode [ 601.808329][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.847662][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.899062][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.947132][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.987185][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.017162][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.038822][T15048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.065086][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 602.133221][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 602.181843][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.204560][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.233725][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.272550][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.298360][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.324939][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.355303][T15048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.383079][T15048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.405899][T15048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.448641][T15286] netlink: 'syz.3.3011': attribute type 28 has an invalid length. [ 602.465254][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.484971][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.528034][T15048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.544074][T15048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.563260][T15048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.582148][T15048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.826349][ T5010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.888150][ T5010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.928724][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.953925][T15308] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3015'. [ 602.974022][ T4999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.007694][ T4999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.015474][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.016530][T15308] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 603.136741][T15315] netlink: 'syz.3.3019': attribute type 10 has an invalid length. [ 603.152405][T15315] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3019'. [ 604.483831][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.505769][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.525042][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.543452][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.554054][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 604.561541][ T4286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.748652][ T5010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.070755][ T5010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.205421][T15358] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3030'. [ 605.244624][T15360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3029'. [ 605.282049][T15358] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 605.417882][ T5010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.483461][T15334] chnl_net:caif_netlink_parms(): no params data found [ 605.605689][ T5010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.686406][T15370] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3033'. [ 606.178077][T15334] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.185868][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.194688][T15334] device bridge_slave_0 entered promiscuous mode [ 606.255465][T15334] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.272289][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.292747][T15334] device bridge_slave_1 entered promiscuous mode [ 606.416791][T15334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.448162][T15334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.587323][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 606.826527][T15334] team0: Port device team_slave_0 added [ 606.883567][T15334] team0: Port device team_slave_1 added [ 607.180562][T15406] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3042'. [ 607.228853][T15406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.295994][T15334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.304899][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.430774][T15334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.753135][T15334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.817357][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.995921][T15334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.090818][T15421] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 608.113655][T15423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3046'. [ 608.157863][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3047'. [ 608.222412][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 608.667282][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 608.712283][T15334] device hsr_slave_0 entered promiscuous mode [ 608.764786][T15334] device hsr_slave_1 entered promiscuous mode [ 608.806844][T15334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.838040][T15334] Cannot create hsr debugfs directory [ 609.044694][ T5010] device gretap0 left promiscuous mode [ 609.053256][ T5010] : port 1(gretap0) entered disabled state [ 610.747455][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 611.013879][ T5010] device veth0_to_team left promiscuous mode [ 611.020491][ T5010] : port 2(veth0_to_team) entered disabled state [ 611.050370][ T5010] device veth1_vlan left promiscuous mode [ 611.056399][ T5010] device veth0_vlan left promiscuous mode [ 611.805759][ T5010] team0 (unregistering): Port device team_slave_1 removed [ 611.877904][ T5010] team0 (unregistering): Port device team_slave_0 removed [ 611.933599][ T5010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.995892][ T5010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.343663][ T5010] bond0 (unregistering): (slave team0): Releasing backup interface [ 612.389812][ T5010] bond0 (unregistering): Released all slaves [ 612.594071][T15334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.646193][T15334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.679090][T15334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.760978][T15334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.828560][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 613.196293][T15334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.267640][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 613.287623][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.309751][T15334] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.346276][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 613.368241][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.377055][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.384345][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.465779][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.516775][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.532084][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.562239][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.569522][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.604039][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.645413][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.672859][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.721602][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.774388][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.807828][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.865297][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.889972][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.939163][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.006242][T15334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.034447][T15334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.065096][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 614.090661][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.594490][T15550] device wlan1 entered promiscuous mode [ 615.098393][T15559] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3077'. [ 615.253110][T15564] FAULT_INJECTION: forcing a failure. [ 615.253110][T15564] name failslab, interval 1, probability 0, space 0, times 0 [ 615.318643][T15564] CPU: 0 PID: 15564 Comm: syz.0.3078 Not tainted syzkaller #0 [ 615.326310][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.336503][T15564] Call Trace: [ 615.339832][T15564] [ 615.342822][T15564] dump_stack_lvl+0x188/0x24e [ 615.347567][T15564] ? show_regs_print_info+0x12/0x12 [ 615.352818][T15564] ? load_image+0x400/0x400 [ 615.357387][T15564] ? __might_sleep+0xd0/0xd0 [ 615.362116][T15564] ? __lock_acquire+0x7d10/0x7d10 [ 615.367215][T15564] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 615.373271][T15564] should_fail_ex+0x399/0x4d0 [ 615.378016][T15564] should_failslab+0x5/0x20 [ 615.382684][T15564] slab_pre_alloc_hook+0x59/0x310 [ 615.387782][T15564] ? __get_vm_area_node+0x122/0x330 [ 615.393122][T15564] __kmem_cache_alloc_node+0x4f/0x260 [ 615.398561][T15564] ? __get_vm_area_node+0x122/0x330 [ 615.403831][T15564] kmalloc_node_trace+0x22/0xe0 [ 615.408834][T15564] __get_vm_area_node+0x122/0x330 [ 615.413914][T15564] ? mark_lock+0x94/0x320 [ 615.418393][T15564] __vmalloc_node_range+0x357/0x13b0 [ 615.423747][T15564] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.429514][T15564] ? irqentry_enter+0x33/0x50 [ 615.434397][T15564] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 615.440444][T15564] ? lock_chain_count+0x20/0x20 [ 615.445374][T15564] ? free_vm_area+0x50/0x50 [ 615.449998][T15564] ? end_current_label_crit_section+0x170/0x170 [ 615.456423][T15564] ? safesetid_security_capable+0x2a/0x1b0 [ 615.462443][T15564] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.464634][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.468042][T15564] __vmalloc+0x76/0x80 [ 615.468082][T15564] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.468117][T15564] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.490588][T15564] ? bpf_lsm_capable+0x5/0x10 [ 615.495334][T15564] bpf_prog_alloc+0x1c/0x1b0 [ 615.499991][T15564] bpf_prog_load+0x7c9/0x1560 [ 615.504746][T15564] ? map_freeze+0x390/0x390 [ 615.509316][T15564] ? __might_fault+0xa6/0x120 [ 615.514129][T15564] ? ktime_get+0x7b/0x270 [ 615.518525][T15564] ? __might_fault+0xa6/0x120 [ 615.518663][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.523236][T15564] ? __might_fault+0xc2/0x120 [ 615.523259][T15564] ? __might_fault+0xa6/0x120 [ 615.523282][T15564] ? bpf_lsm_bpf+0x5/0x10 [ 615.544360][T15564] ? security_bpf+0x7a/0xa0 [ 615.549082][T15564] __sys_bpf+0x5b8/0x780 [ 615.553399][T15564] ? bpf_link_show_fdinfo+0x380/0x380 [ 615.558867][T15564] __x64_sys_bpf+0x78/0x90 [ 615.563349][T15564] do_syscall_64+0x4c/0xa0 [ 615.567819][T15564] ? clear_bhb_loop+0x60/0xb0 [ 615.572559][T15564] ? clear_bhb_loop+0x60/0xb0 [ 615.577370][T15564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.583372][T15564] RIP: 0033:0x7fc1d759ce59 [ 615.587899][T15564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.609573][T15564] RSP: 002b:00007fc1d847f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.618188][T15564] RAX: ffffffffffffffda RBX: 00007fc1d7815fa0 RCX: 00007fc1d759ce59 [ 615.626239][T15564] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 615.634269][T15564] RBP: 00007fc1d847f090 R08: 0000000000000000 R09: 0000000000000000 [ 615.642344][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.650371][T15564] R13: 00007fc1d7816038 R14: 00007fc1d7815fa0 R15: 00007ffce510de98 [ 615.655642][T15334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.658435][T15564] [ 615.719790][T15564] syz.0.3078: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 615.764176][T15564] CPU: 0 PID: 15564 Comm: syz.0.3078 Not tainted syzkaller #0 [ 615.771828][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.781946][T15564] Call Trace: [ 615.785278][T15564] [ 615.788265][T15564] dump_stack_lvl+0x188/0x24e [ 615.793004][T15564] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 615.799571][T15564] ? show_regs_print_info+0x12/0x12 [ 615.804830][T15564] ? load_image+0x400/0x400 [ 615.809411][T15564] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 615.815888][T15564] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 615.822448][T15564] warn_alloc+0x242/0x330 [ 615.826872][T15564] ? __get_vm_area_node+0x122/0x330 [ 615.832126][T15564] ? zone_watermark_ok_safe+0x270/0x270 [ 615.837715][T15564] ? rcu_is_watching+0x11/0xa0 [ 615.842666][T15564] ? __get_vm_area_node+0x318/0x330 [ 615.847938][T15564] ? mark_lock+0x94/0x320 [ 615.852405][T15564] __vmalloc_node_range+0x37c/0x13b0 [ 615.857812][T15564] ? irqentry_enter+0x33/0x50 [ 615.862554][T15564] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 615.868607][T15564] ? lock_chain_count+0x20/0x20 [ 615.873537][T15564] ? free_vm_area+0x50/0x50 [ 615.878081][T15564] ? end_current_label_crit_section+0x170/0x170 [ 615.884360][T15564] ? safesetid_security_capable+0x2a/0x1b0 [ 615.890214][T15564] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.895801][T15564] __vmalloc+0x76/0x80 [ 615.899908][T15564] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.905498][T15564] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 615.910917][T15564] ? bpf_lsm_capable+0x5/0x10 [ 615.915635][T15564] bpf_prog_alloc+0x1c/0x1b0 [ 615.920326][T15564] bpf_prog_load+0x7c9/0x1560 [ 615.925054][T15564] ? map_freeze+0x390/0x390 [ 615.929597][T15564] ? __might_fault+0xa6/0x120 [ 615.934325][T15564] ? ktime_get+0x7b/0x270 [ 615.938698][T15564] ? __might_fault+0xa6/0x120 [ 615.943405][T15564] ? __might_fault+0xc2/0x120 [ 615.948114][T15564] ? __might_fault+0xa6/0x120 [ 615.952848][T15564] ? bpf_lsm_bpf+0x5/0x10 [ 615.957209][T15564] ? security_bpf+0x7a/0xa0 [ 615.962147][T15564] __sys_bpf+0x5b8/0x780 [ 615.966455][T15564] ? bpf_link_show_fdinfo+0x380/0x380 [ 615.971930][T15564] __x64_sys_bpf+0x78/0x90 [ 615.976414][T15564] do_syscall_64+0x4c/0xa0 [ 615.980885][T15564] ? clear_bhb_loop+0x60/0xb0 [ 615.985710][T15564] ? clear_bhb_loop+0x60/0xb0 [ 615.990448][T15564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.996384][T15564] RIP: 0033:0x7fc1d759ce59 [ 616.000836][T15564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.020502][T15564] RSP: 002b:00007fc1d847f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.028966][T15564] RAX: ffffffffffffffda RBX: 00007fc1d7815fa0 RCX: 00007fc1d759ce59 [ 616.037120][T15564] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 616.045148][T15564] RBP: 00007fc1d847f090 R08: 0000000000000000 R09: 0000000000000000 [ 616.053254][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.061269][T15564] R13: 00007fc1d7816038 R14: 00007fc1d7815fa0 R15: 00007ffce510de98 [ 616.069296][T15564] [ 616.127365][T15564] Mem-Info: [ 616.130604][T15564] active_anon:14916 inactive_anon:0 isolated_anon:0 [ 616.130604][T15564] active_file:21025 inactive_file:40170 isolated_file:0 [ 616.130604][T15564] unevictable:768 dirty:121 writeback:0 [ 616.130604][T15564] slab_reclaimable:21294 slab_unreclaimable:93252 [ 616.130604][T15564] mapped:29629 shmem:2319 pagetables:607 [ 616.130604][T15564] sec_pagetables:0 bounce:0 [ 616.130604][T15564] kernel_misc_reclaimable:0 [ 616.130604][T15564] free:1310944 free_pcp:9459 free_cma:0 [ 616.159092][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.228237][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.250923][T15564] Node 0 active_anon:57364kB inactive_anon:0kB active_file:84100kB inactive_file:160484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118416kB dirty:484kB writeback:0kB shmem:5840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10848kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no [ 616.327857][T15564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 616.362243][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.372427][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.384378][T15334] device veth0_vlan entered promiscuous mode [ 616.392260][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.401400][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.410947][T15564] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.451839][T15334] device veth1_vlan entered promiscuous mode [ 616.467398][T15564] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 616.473264][T15564] Node 0 DMA32 free:1321584kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:55864kB inactive_anon:0kB active_file:84100kB inactive_file:160484kB unevictable:1536kB writepending:484kB present:3129332kB managed:2592944kB mlocked:0kB bounce:0kB free_pcp:29484kB local_pcp:17988kB free_cma:0kB [ 616.508688][T15579] netlink: 'syz.3.3080': attribute type 2 has an invalid length. [ 616.528686][T15579] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 616.547551][T15579] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3080'. [ 616.587727][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 616.604480][T15564] lowmem_reserve[]: 0 0 1 1 1 [ 616.624429][T15564] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.632042][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 616.661051][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.685379][ T6611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.697806][T15334] device veth0_macvtap entered promiscuous mode [ 616.719729][T15334] device veth1_macvtap entered promiscuous mode [ 616.778237][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.799440][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.824213][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.854000][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.890817][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.913591][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.925074][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.943012][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.955063][T15334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.970182][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.983911][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 616.996405][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 617.010357][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 617.030719][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.057568][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.077131][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.097330][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.114044][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.145139][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.167231][T15564] lowmem_reserve[]: 0 0 0 0 0 [ 617.172108][T15564] Node 1 Normal free:3906336kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:12576kB local_pcp:0kB free_cma:0kB [ 617.217466][T15334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.239152][T15334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.255620][T15564] lowmem_reserve[]: 0 0 0 0 0 [ 617.260946][T15564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 617.274241][T15564] Node 0 DMA32: 622*4kB (UM) 607*8kB (ME) 397*16kB (ME) 803*32kB (UME) 447*64kB (UME) 354*128kB (UME) 237*256kB (UME) 105*512kB (UME) 47*1024kB (UME) 10*2048kB (UM) 250*4096kB (UM) = 1320352kB [ 617.296613][T15334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.309318][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.317429][T15564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 617.317560][T15564] Node 1 Normal: 224*4kB (UME) 56*8kB (UME) 34*16kB (UME) 156*32kB (UE) 45*64kB (UME) 18*128kB (UME) 6*256kB (UME) 3*512kB (UME) 2*1024kB [ 617.341586][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.348126][T15564] (UE) [ 617.371273][T15334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.383164][T15564] 1*2048kB (E) 949*4096kB (M) = 3906336kB [ 617.395528][T15334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.404568][T15334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.404833][T15564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.425797][T15334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.465885][T15564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.487572][T15564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.520016][T15564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.550303][T15564] 62564 total pagecache pages [ 617.555090][T15564] 0 pages in swap cache [ 617.559707][T15564] Free swap = 124996kB [ 617.564029][T15564] Total swap = 124996kB [ 617.571705][T15564] 2097051 pages RAM [ 617.575608][T15564] 0 pages HighMem/MovableOnly [ 617.596115][T15564] 415214 pages reserved [ 617.601697][T15564] 0 pages cma reserved [ 617.626915][ T5000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.642162][ T5000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.664474][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.744518][ T5000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.764254][ T5000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.784599][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 618.324786][T15626] netlink: 'syz.1.3088': attribute type 3 has an invalid length. [ 618.385746][T15626] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3088'. [ 619.761139][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 619.774518][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 619.782907][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 619.792090][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 619.861622][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 619.870786][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.808060][T15636] -: renamed from syzkaller0 [ 621.185176][ T6600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.350777][ T6600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.638679][ T6600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.683222][T15650] chnl_net:caif_netlink_parms(): no params data found [ 621.916106][ T6600] batman_adv: batadv0: Removing interface: netdevsim0 [ 622.027258][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 622.133291][T15688] netlink: 'syz.0.3102': attribute type 3 has an invalid length. [ 622.142498][T15691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3103'. [ 622.155961][T15688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3102'. [ 622.329414][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.345746][T15650] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.405757][T15650] device bridge_slave_0 entered promiscuous mode [ 622.524142][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.547831][T15650] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.586593][T15650] device bridge_slave_1 entered promiscuous mode [ 622.696654][T15704] netlink: 'syz.1.3104': attribute type 12 has an invalid length. [ 622.715263][T15704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3104'. [ 622.820875][T15650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.884885][T15650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.696172][T15721] netlink: 'syz.2.3111': attribute type 2 has an invalid length. [ 623.704821][T15721] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3111'. [ 624.107303][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 624.367761][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.374280][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.741010][T15650] team0: Port device team_slave_0 added [ 624.760308][ T6600] device 0 left promiscuous mode [ 624.809955][T15650] team0: Port device team_slave_1 added [ 624.881926][T15650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.915240][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.026274][T15742] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3115'. [ 625.048227][T15650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.399226][T15650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.416876][T15650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.516017][T15650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.187551][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 626.198561][T15650] device hsr_slave_0 entered promiscuous mode [ 626.209489][T15650] device hsr_slave_1 entered promiscuous mode [ 626.236195][T15650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.246567][T15650] Cannot create hsr debugfs directory [ 626.260708][T15761] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3121'. [ 626.696166][T15783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3127'. [ 626.758165][T15783] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3127'. [ 627.906892][ T6600] device gretap0 left promiscuous mode [ 627.936805][ T6600] : port 1(gretap0) entered disabled state [ 627.975592][T15784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3127'. [ 628.267711][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 628.992725][T15808] netlink: 'syz.4.3133': attribute type 2 has an invalid length. [ 629.038180][T15808] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3133'. [ 631.199999][ T6600] device veth0_to_team left promiscuous mode [ 631.226562][ T6600] : port 2(veth0_to_team) entered disabled state [ 631.472998][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.487446][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.495889][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.509474][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.537974][ T6600] device veth0_vlan left promiscuous mode [ 631.574090][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 631.776416][ T6600] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 632.203927][ T6600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.251390][ T6600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.490145][ T6600] bond0 (unregistering): Released all slaves [ 632.530066][T15855] tipc: Started in network mode [ 632.535069][T15855] tipc: Node identity 9215a268, cluster identity 4711 [ 632.542053][T15855] tipc: Node number set to 2450891368 [ 632.813354][T15868] netlink: 'syz.0.3146': attribute type 3 has an invalid length. [ 632.842420][T15868] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3146'. [ 634.657056][T15650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 634.718532][T15650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 634.786364][T15650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 634.824010][T15650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 635.214718][T15650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.355071][T15882] netlink: 'syz.2.3150': attribute type 17 has an invalid length. [ 635.375338][T15882] netlink: 'syz.2.3150': attribute type 16 has an invalid length. [ 635.389441][T15882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3150'. [ 635.522460][T15650] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.561842][T15877] netlink: 'syz.0.3148': attribute type 2 has an invalid length. [ 635.599018][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.618006][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.647783][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.659237][T15877] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3148'. [ 635.674976][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.697907][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.705181][ T5000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.762402][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.792024][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.818093][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.825349][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.884390][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.922064][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.949257][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.976669][T15891] netlink: 'syz.1.3152': attribute type 10 has an invalid length. [ 636.304824][T15891] team0: Port device geneve1 added [ 636.390483][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 636.414479][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 636.440519][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 636.469910][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 636.510357][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 636.541503][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.552851][T15900] netlink: 'syz.0.3154': attribute type 1 has an invalid length. [ 636.571624][T15900] netlink: 16134 bytes leftover after parsing attributes in process `syz.0.3154'. [ 636.618050][T15915] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3153'. [ 636.643404][T15650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.685130][T15650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 636.708090][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 636.726860][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 636.763783][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.438024][T15944] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3163'. [ 637.547940][T15944] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 638.794417][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.807384][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.875308][T15650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.033494][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.072952][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.174801][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.205535][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.247325][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.266709][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.320351][T15650] device veth0_vlan entered promiscuous mode [ 639.390096][T15650] device veth1_vlan entered promiscuous mode [ 639.477332][T15965] netlink: 'syz.4.3165': attribute type 41 has an invalid length. [ 639.585491][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.601060][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.642691][T15650] device veth0_macvtap entered promiscuous mode [ 639.687705][T15650] device veth1_macvtap entered promiscuous mode [ 639.790506][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.838318][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.897268][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.930650][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.962972][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.008578][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.046821][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.066349][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.096654][T15650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.223743][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.250391][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.296933][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.375332][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.456241][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.490369][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.548810][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.567185][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.585719][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.617395][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.659501][T15650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.703401][T15650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.736109][T15650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.821616][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.848521][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.884518][T15650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.912637][T15650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.940299][T15650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.965392][T15650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.308614][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.332622][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.417809][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.436085][ T4999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.449173][T15989] delete_channel: no stack [ 641.455063][ T4999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.495257][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.801144][T16011] netlink: 'syz.0.3176': attribute type 21 has an invalid length. [ 641.825080][T16011] netlink: 'syz.0.3176': attribute type 11 has an invalid length. [ 642.017606][T16015] pimreg0: tun_chr_ioctl cmd 35111 [ 644.320967][T16037] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3181'. [ 644.789961][T16067] netlink: 'syz.1.3188': attribute type 14 has an invalid length. [ 644.820419][T16067] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3188'. [ 644.912704][T16069] netlink: 'syz.3.3189': attribute type 9 has an invalid length. [ 644.964070][T16069] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3189'. [ 647.691245][T16131] netlink: 'syz.4.3204': attribute type 21 has an invalid length. [ 647.721479][T16131] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3204'. [ 647.869747][T16144] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3208'. [ 648.094253][T16144] device hsr_slave_0 left promiscuous mode [ 648.116504][T16144] device hsr_slave_1 left promiscuous mode [ 648.424537][T16162] syz.3.3213[16162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.424825][T16162] syz.3.3213[16162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.492883][T16165] netlink: 'syz.0.3214': attribute type 10 has an invalid length. [ 648.783225][T16165] team0: Port device macvlan0 added [ 650.354080][T16221] netlink: 'syz.3.3229': attribute type 2 has an invalid length. [ 650.960926][T16221] device 0 entered promiscuous mode [ 653.246149][T16291] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3249'. [ 653.397208][T16291] openvswitch: netlink: Message has 6 unknown bytes. [ 653.691568][T16290] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.3251'. [ 654.785024][T16323] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.3258'. [ 654.901815][T16325] netlink: 'syz.4.3259': attribute type 21 has an invalid length. [ 654.924946][T16325] netlink: 'syz.4.3259': attribute type 22 has an invalid length. [ 654.947779][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'. [ 655.141468][T16336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3265'. [ 655.481658][T16347] netlink: 'syz.4.3268': attribute type 1 has an invalid length. [ 655.526834][T16347] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3268'. [ 655.810778][T16362] netlink: 'syz.0.3271': attribute type 21 has an invalid length. [ 655.864288][T16362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3271'. [ 655.976955][T16365] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 656.059552][T16361] netlink: 'syz.3.3272': attribute type 21 has an invalid length. [ 660.345831][T16402] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3285'. [ 662.253175][T16456] netlink: 'syz.4.3299': attribute type 5 has an invalid length. [ 662.398082][T16457] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3298'. [ 667.663422][T16512] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.3315'. [ 668.791243][T16538] netlink: 'syz.4.3324': attribute type 3 has an invalid length. [ 668.826020][T16538] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3324'. [ 669.256135][T16552] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3329'. [ 670.468551][T16575] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3336'. [ 671.571674][T16615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.579539][T16615] IPv6: NLM_F_CREATE should be set when creating new route [ 671.587185][T16615] IPv6: NLM_F_CREATE should be set when creating new route [ 671.594728][T16615] IPv6: NLM_F_CREATE should be set when creating new route [ 671.846953][T16630] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3347'. [ 672.553122][T16640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3354'. [ 673.411794][T16654] netlink: 'syz.4.3359': attribute type 27 has an invalid length. [ 673.438735][T16654] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 673.740885][T16666] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3362'. [ 673.874935][T16673] netlink: 'syz.2.3365': attribute type 3 has an invalid length. [ 673.893333][T16673] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3365'. [ 674.572502][T16694] netlink: 'syz.3.3371': attribute type 5 has an invalid length. [ 674.629787][T16697] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3372'. [ 674.668412][T16697] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 674.975572][T16706] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3370'. [ 676.007205][T16719] netlink: 'syz.4.3379': attribute type 7 has an invalid length. [ 676.088362][T16719] netlink: 'syz.4.3379': attribute type 6 has an invalid length. [ 678.458172][T16771] IPv6: NLM_F_CREATE should be specified when creating new route [ 678.474234][T16771] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3392'. [ 678.616454][T16773] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3393'. [ 680.126811][T16800] netlink: 'syz.3.3403': attribute type 10 has an invalid length. [ 680.208582][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.554533][T16800] device bridge_slave_1 left promiscuous mode [ 680.573049][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.643265][T16800] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 681.275034][T16844] netlink: 'syz.0.3414': attribute type 11 has an invalid length. [ 681.292222][T16844] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3414'. [ 681.327334][T16843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.394800][T16880] netlink: 'syz.2.3422': attribute type 29 has an invalid length. [ 682.747436][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 682.820250][T16880] netlink: 'syz.2.3422': attribute type 29 has an invalid length. [ 684.968976][T16942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3444'. [ 685.791023][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.797461][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.223614][T16981] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3456'. [ 687.633516][T17009] netlink: 'syz.2.3463': attribute type 21 has an invalid length. [ 687.643296][T17009] netlink: 'syz.2.3463': attribute type 6 has an invalid length. [ 687.651409][T17009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3463'. [ 688.061967][T17033] netlink: 'syz.3.3470': attribute type 3 has an invalid length. [ 688.087234][T17033] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3470'. [ 690.583945][T17097] netlink: 'syz.3.3486': attribute type 10 has an invalid length. [ 691.170222][T17097] team0: Device veth1_vlan failed to register rx_handler [ 691.578514][T17122] device sit0 entered promiscuous mode [ 693.299956][T17169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3512'. [ 695.601512][T17247] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3531'. [ 696.808642][T17280] netlink: 'syz.3.3543': attribute type 21 has an invalid length. [ 696.827724][T17280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3543'. [ 696.847863][T17280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3543'. [ 697.076952][T17288] netlink: 'syz.0.3547': attribute type 28 has an invalid length. [ 697.093418][T17288] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3547'. [ 697.250082][T17296] Q6`Ҙ: renamed from lo [ 698.007329][ C0] [ 698.007338][ C0] ================================ [ 698.007344][ C0] WARNING: inconsistent lock state [ 698.007366][ C0] syzkaller #0 Not tainted [ 698.007375][ C0] -------------------------------- [ 698.007379][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 698.007387][ C0] syz.4.3553/17317 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 698.007407][ C0] ffffffff8cc845f8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x85/0xd30 [ 698.007465][ C0] {INITIAL USE} state was registered at: [ 698.007472][ C0] lock_acquire+0x1bb/0x4a0 [ 698.007500][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 698.007524][ C0] kernfs_rename_ns+0x550/0x990 [ 698.007544][ C0] sysfs_rename_link_ns+0x171/0x1b0 [ 698.007567][ C0] device_rename+0x11c/0x1a0 [ 698.007585][ C0] dev_change_name+0x376/0x900 [ 698.007634][ C0] do_setlink+0x93d/0x3e60 [ 698.007718][ C0] rtnl_newlink+0x17d9/0x20a0 [ 698.007734][ C0] rtnetlink_rcv_msg+0x87c/0xfc0 [ 698.007751][ C0] netlink_rcv_skb+0x1fb/0x450 [ 698.007769][ C0] netlink_unicast+0x74d/0x8d0 [ 698.007783][ C0] netlink_sendmsg+0x8ad/0xbd0 [ 698.007800][ C0] __sys_sendto+0x497/0x650 [ 698.007831][ C0] __x64_sys_sendto+0xda/0xf0 [ 698.007846][ C0] do_syscall_64+0x4c/0xa0 [ 698.007863][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.007889][ C0] irq event stamp: 446 [ 698.007895][ C0] hardirqs last enabled at (445): [] do_syscall_64+0x58/0xa0 [ 698.007917][ C0] hardirqs last disabled at (446): [] noist_exc_debug+0x49/0x120 [ 698.007941][ C0] softirqs last enabled at (394): [] toggle_bp_slot+0x199c/0x2bc0 [ 698.008018][ C0] softirqs last disabled at (392): [] rht_lock+0x1c/0x150 [ 698.008056][ C0] [ 698.008056][ C0] other info that might help us debug this: [ 698.008062][ C0] Possible unsafe locking scenario: [ 698.008062][ C0] [ 698.008066][ C0] CPU0 [ 698.008068][ C0] ---- [ 698.008071][ C0] lock(kernfs_rename_lock); [ 698.008082][ C0] [ 698.008085][ C0] lock(kernfs_rename_lock); [ 698.008096][ C0] [ 698.008096][ C0] *** DEADLOCK *** [ 698.008096][ C0] [ 698.008099][ C0] 2 locks held by syz.4.3553/17317: [ 698.008109][ C0] #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x2c/0x2b0 [ 698.008192][ C0] #1: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0 [ 698.008245][ C0] [ 698.008245][ C0] stack backtrace: [ 698.008252][ C0] CPU: 0 PID: 17317 Comm: syz.4.3553 Not tainted syzkaller #0 [ 698.008271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 698.008283][ C0] Call Trace: [ 698.008289][ C0] <#DB> [ 698.008296][ C0] dump_stack_lvl+0x188/0x24e [ 698.008318][ C0] ? show_regs_print_info+0x12/0x12 [ 698.008340][ C0] ? print_usage_bug+0x42a/0x690 [ 698.008366][ C0] ? verify_lock_unused+0x18/0x140 [ 698.008394][ C0] lock_acquire+0x2df/0x4a0 [ 698.008420][ C0] ? __get_user_nocheck_8+0x6/0x13 [ 698.008442][ C0] ? kernfs_path_from_node+0x85/0xd30 [ 698.008465][ C0] ? read_lock_is_recursive+0x10/0x10 [ 698.008492][ C0] ? cmp_ex_search+0x1a/0x70 [ 698.008561][ C0] ? bsearch+0x8a/0xb0 [ 698.008579][ C0] ? look_up_lock_class+0x75/0x140 [ 698.008608][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 698.008634][ C0] ? kernfs_path_from_node+0x85/0xd30 [ 698.008655][ C0] ? _raw_spin_lock+0x40/0x40 [ 698.008679][ C0] ? lock_release+0xcf/0x920 [ 698.008707][ C0] ? percpu_ref_tryget+0x15/0x180 [ 698.008785][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 698.008811][ C0] kernfs_path_from_node+0x85/0xd30 [ 698.008836][ C0] ? kernfs_name+0x140/0x140 [ 698.008857][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 698.008881][ C0] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 698.008904][ C0] get_mm_memcg_path+0xb9/0x360 [ 698.008934][ C0] __mmap_lock_do_trace_start_locking+0xe3/0x380 [ 698.008963][ C0] ? look_up_lock_class+0x75/0x140 [ 698.008984][ C0] ? __bad_area_nosemaphore+0xae/0x650 [ 698.009052][ C0] ? __bpf_trace_mmap_lock_acquire_returned+0x40/0x40 [ 698.009098][ C0] stack_map_get_build_id_offset+0x68c/0x970 [ 698.009124][ C0] ? pcpu_freelist_pop+0x126/0x180 [ 698.009182][ C0] ? __pcpu_freelist_pop+0x850/0x850 [ 698.009209][ C0] ? __bpf_get_stackid+0x920/0x920 [ 698.009234][ C0] __bpf_get_stackid+0x55d/0x920 [ 698.009260][ C0] bpf_prog_12712c88fd19bd5b+0x21/0x25 [ 698.009279][ C0] bpf_overflow_handler+0x522/0x7c0 [ 698.009299][ C0] ? perf_get_page_size+0x430/0x430 [ 698.009326][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 698.009348][ C0] ? perf_swevent_overflow+0x230/0x230 [ 698.009373][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 698.009404][ C0] __perf_event_overflow+0x448/0x610 [ 698.009438][ C0] perf_swevent_event+0x315/0x570 [ 698.009470][ C0] ? perf_tp_event+0xc30/0xc30 [ 698.009505][ C0] perf_bp_event+0x312/0x3f0 [ 698.009536][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 698.009565][ C0] ? perf_trace_lock+0xf8/0x390 [ 698.009602][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 698.009626][ C0] ? read_lock_is_recursive+0x10/0x10 [ 698.009655][ C0] hw_breakpoint_exceptions_notify+0x21a/0x470 [ 698.009727][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 698.009750][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 698.009775][ C0] notify_die+0x141/0x1a0 [ 698.009799][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 698.009835][ C0] notify_debug+0x20/0x30 [ 698.009871][ C0] exc_debug+0xd9/0x130 [ 698.009893][ C0] asm_exc_debug+0x1a/0x40 [ 698.009918][ C0] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 698.009940][ C0] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 698.009957][ C0] RSP: 0000:ffffc9000fe87600 EFLAGS: 00040802 [ 698.009973][ C0] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff8880207d0000 [ 698.009987][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 698.010001][ C0] RBP: 0000000000000000 R08: 000000000000007f R09: 0000000000000000 [ 698.010013][ C0] R10: dffffc0000000000 R11: fffff52001fd0f1f R12: 00000000ffffffff [ 698.010039][ C0] R13: 0000200000000300 R14: 000000000000007f R15: 00007fffffffeff0 [ 698.010061][ C0] [ 698.010066][ C0] [ 698.010072][ C0] perf_callchain_user+0x55d/0x13c0 [ 698.010148][ C0] get_perf_callchain+0x39e/0x490 [ 698.010175][ C0] ? put_callchain_entry+0xb0/0xb0 [ 698.010203][ C0] ? __perf_event_header__init_id+0x425/0x530 [ 698.010233][ C0] perf_prepare_sample+0x399/0x2020 [ 698.010263][ C0] ? read_lock_is_recursive+0x10/0x10 [ 698.010289][ C0] ? perf_callchain+0x190/0x190 [ 698.010316][ C0] ? finish_task_switch+0x265/0x8f0 [ 698.010346][ C0] perf_event_output_forward+0x197/0x2f0 [ 698.010374][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 698.010402][ C0] ? perf_get_page_size+0x430/0x430 [ 698.010435][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 698.010467][ C0] __perf_event_overflow+0x448/0x610 [ 698.010497][ C0] perf_swevent_overflow+0x19b/0x230 [ 698.010519][ C0] ? __lock_acquire+0x12f4/0x7d10 [ 698.010548][ C0] perf_swevent_event+0x458/0x570 [ 698.010579][ C0] ? perf_tp_event+0xc30/0xc30 [ 698.010613][ C0] perf_bp_event+0x312/0x3f0 [ 698.010642][ C0] ? verify_lock_unused+0x140/0x140 [ 698.010671][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 698.010717][ C0] ? read_lock_is_recursive+0x10/0x10 [ 698.010744][ C0] ? do_futex+0x2e2/0x320 [ 698.010794][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 698.010825][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 698.010847][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 698.010870][ C0] notify_die+0x141/0x1a0 [ 698.010894][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 698.010922][ C0] ? rcu_is_watching+0x11/0xa0 [ 698.010953][ C0] notify_debug+0x20/0x30 [ 698.010975][ C0] noist_exc_debug+0x73/0x120 [ 698.010995][ C0] ? clear_bhb_loop+0x60/0xb0 [ 698.011033][ C0] asm_exc_debug+0x2f/0x40 [ 698.011058][ C0] RIP: 0033:0x7f36cd37bbfd [ 698.011074][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 698.011090][ C0] RSP: 002b:00007f36ce2308a8 EFLAGS: 00000283 [ 698.011105][ C0] RAX: 0000000000000300 RBX: 00007f36ce230de0 RCX: 2f666c65732f636f [ 698.011118][ C0] RDX: 0000200000000300 RSI: 00007f36cd45d140 RDI: 0000200000000300 [ 698.011131][ C0] RBP: 0000200000000300 R08: 00007f36ce231010 R09: 00000000ffffffff [ 698.011145][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 698.011156][ C0] R13: 0000000000000073 R14: 00007f36cd4320dd R15: 00007f36ce230ea0 [ 698.011177][ C0]