last executing test programs: 20.43691966s ago: executing program 1 (id=3145): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r0 = syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000002000000000000000000038872af0d34163591ec710ff933627fb950dfd8157f00ae28d3d99c1817ce5831872cd24090093f94e3605f6ffffffe7224ee295abb41170e7c0e619a7b7986460531193ef502c7bf2746f1af4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040040010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 20.144902175s ago: executing program 1 (id=3146): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x2b, 0x80000, 0x8, &(0x7f0000000300)) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000a40)={0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r2, r1, 0x4, r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 17.861532283s ago: executing program 1 (id=3159): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1}, &(0x7f0000000940), &(0x7f0000000980)=r0}, 0x20) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) mkdirat$cgroup(r5, &(0x7f00000001c0)='syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r4, 0x7, 0x0, 0x80000001, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x28, 0xd, 0xe, 0x4, 0x0, 0x75, 0x12040, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x546, 0x7fff, 0xad, 0x0, 0x6aad, 0x4, 0x76b7, 0x0, 0xfb16, 0x0, 0x8000000000000001}, r5, 0x4, r5, 0x2) perf_event_open$cgroup(&(0x7f0000004f80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r7) 15.200502541s ago: executing program 1 (id=3155): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0xe3fe, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c000000"], &(0x7f0000000240)=""/243, 0x37, 0xf3, 0x1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180d0000000000000000000006000000850000006100000095e0ffffff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002840)={r4, 0x58, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000600)="5bbb6fe2a05f2b9d0c1815f6d27da537ad68b0c0197ba39f10625bd93b442076ad105384b14f891352053a9b3edbe835819cc82392d33d3e94694b39718c7e57d744477490753a340d2b5f2a0ee142f04efd30a7dcfe1b4ae5e8ed9b5ff50955332480afdf69d15fd200f630bfc16cc96679fec71f010a86ac8f44c3224795acde133d7234badd0c89940be38e48fe6111a8a3251db545d4dd5b02e80bfc86e4b98b3c3f398f389ed4a8f4e3", 0xac}, {&(0x7f0000000840)="ead2749776e7ff10b950c9f13e54aff646c1644348c6fbfdc2b4fd4f096401adc3d07c65c6d3d5228627be28fdf89d0e167c9c22cffb10e63dad12198308494b3b6ae28bed67e1f3fba2c7bec370ecf63fc1ba37768e0a65749c6d4ecffb86f0d8e0021e65459d5cdb30d3aeeca7e195ad6610e7870eadbf02e90836718a405d45396f10bfaf7891e0a75ca63f2f601c1c006ec9f2595a1a2efd8d30e31760de100e3a376ccaf2df8a2bb5cb6d7a82a46725f431ae0494e05bf5020e432923c5f703dbe4a019fc6d", 0xc8}, {0x0}, {&(0x7f00000026c0)="bdec06723b8aceb131cea9bb39940a546c3d884a7d2a5c7ef91693c22a1ed524b10bbc448a14e213520e0a71ab33dbfaba55316b1b0cfecd73a0bdf64bbf87271110ce53873e6a8409ae86170014c9a104b9879b9b0c86ea92344fe8b7a0", 0x5e}], 0x4, &(0x7f0000002880)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x94, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3000}, {@private=0xa010102, 0xa342}, {@local, 0xa205}]}, @ssrr={0x89, 0x17, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @multicast2, @rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0x92, [@broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @loopback}}}], 0x70}, 0x1) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) 14.561204714s ago: executing program 1 (id=3158): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100000, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x6}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) 13.223194573s ago: executing program 1 (id=3164): getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000000000000000000018000000000000008400000005"], 0x28}, 0x24048800) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @local, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0x40844) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x3, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x3, 0x3, 0x1}, {0x6, 0x0, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000300)=""/175, 0x43, 0xaf, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5a1c, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x8000, 0x6, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r8, 0x0, 0x4, &(0x7f0000000180)='GPL\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r10, 0x4) 12.264524013s ago: executing program 2 (id=3085): socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040040010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2004, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) 11.55299136s ago: executing program 2 (id=3168): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0xe3fe, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c000000"], &(0x7f0000000240)=""/243, 0x37, 0xf3, 0x1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180d0000000000000000000006000000850000006100000095e0ffffff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002840)={r4, 0x58, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000500)="8a62abf2a8a8aa49de4ca18dfb46c7c65b9c6025cb764be2fae4596b1d0b6e7f222580e1b70effe674945093ead868ede5f54291532c2ac3530cc4fed720a86882d690a793a84c850ce1a949d6a191f63aaea479a7e28b36eb3673fd800d54afbdd00bd838e21ab11a44d5c896947508738036f7b288fdfdb0b0584fc095981fcd38dfc107912ede62da30a1237cf34293cecac356815246876602ccb48005c14aeb0df40770e8f9ce7d6e07a598df99e3a97c7728e8e34d7fb3f960b70bd60a9254e7e7f4fa2c1d8559edd81a4e7a91b3d38e4c", 0xd4}, {&(0x7f0000000600)="5bbb6fe2a05f2b9d0c1815f6d27da537ad68b0c0197ba39f10625bd93b442076ad105384b14f891352053a9b3edbe835819cc82392d33d3e94694b39718c7e57d744477490753a340d2b5f2a0ee142f04efd30a7dcfe1b4ae5e8ed9b5ff50955332480afdf69d15fd200f630bfc16cc96679fec71f010a86ac8f44c3224795acde133d7234badd0c89940be38e48fe6111a8a3251db545d4dd5b02e80bfc86e4b98b3c3f398f389ed4a8f4", 0xab}, {&(0x7f0000000840)="ead2749776e7ff10b950c9f13e54aff646c1644348c6fbfdc2b4fd4f096401adc3d07c65c6d3d5228627be28fdf89d0e167c9c22cffb10e63dad12198308494b3b6ae28bed67e1f3fba2c7bec370ecf63fc1ba37768e0a65749c6d4ecffb86f0d8e0021e65459d5cdb30d3aeeca7e195ad6610e7870eadbf02e90836718a405d45396f10bfaf7891e0a75ca63f2f601c1c006ec9f2595a1a2efd8d30e31760de100e3a376ccaf2df8a2bb5cb6d7a82a46725f431ae0494e05bf5020e432923c5f703dbe4a019fc6d", 0xc8}, {0x0}, {&(0x7f00000026c0)="bdec06723b8aceb131cea9bb39940a546c3d884a7d2a5c7ef91693c22a1ed524b10bbc448a14e213520e0a71ab33dbfaba55316b1b0cfecd73a0bdf64bbf87271110ce53873e6a8409ae86170014c9a104b9879b9b0c86ea92344fe8b7a0", 0x5e}], 0x5, &(0x7f0000002880)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x94, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3000}, {@private=0xa010102, 0xa342}, {@local, 0xa205}]}, @ssrr={0x89, 0x17, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @multicast2, @rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0x92, [@broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @loopback}}}], 0x70}, 0x1) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000200)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) 11.347150571s ago: executing program 3 (id=3170): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2a}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) close(r1) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x15002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r8, r0, 0x3, 0x4, 0x1}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0), 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 10.97958469s ago: executing program 2 (id=3171): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000ac0)=r0, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a", 0x28}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}], 0x3}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x1, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x80000, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a3, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 10.458789117s ago: executing program 0 (id=3173): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000085) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa6}, 0x0) 10.041707979s ago: executing program 2 (id=3174): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x16, 0x0, 0x0, 0x0, 0x3c}, 0x8880) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00', 0x400}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000047"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f00000007c0)="5051bd89be7727419b0418a1001cc6a4e7fb193f035c960ac91c82446b1c8faa31c9ee7092ec75631258f53349f654b17c7a5c9d889d3c9e38987156bb4bc30b99fa174aaa75c87d44a964ce49c9472288cf56773c62b1f0d6a245741a8ef557b0c5ad755df26704886c9e2547407401bc0f9a890e94ec91f16eee5f9991816d43322f9501230aa92d7e7d3991018ae15d791a7eff8c46614fb56db7955c6016ec0ef94103140de236cea7651f37004451171bf087fc6e7a86e15978935fc7702a4df6f785c9c0eb906957b4070a2e66", &(0x7f00000006c0)=""/197, &(0x7f0000000500)="bedf49dc80eeee22eeb903d3dda91a946fe9ee14bdfc9de6f1dbda631436095b5926db2cf0dad2b7959f15decca9997c5521b6cb1f0046e8d751ef10dc706f6db9b6e276d5c53d7ceebde7dbcc83d28b04c05f38f6c34cc387de4c4199c86f821d3f8dc9f15460caf812e09b69d5dd21fa", &(0x7f0000000340)="6ffda180afe8d3cb71899b098babb4ced2f85247cd8d54143fce6d56e555ae4cb7e23d6a844c98def7143b548ffd336262a5643099b0dd6b227e806650273e381c44eccf9d93203a598ce39c1ebf47ffed4e392280652939eb2a8025239c84bc737d484077b9d75909c14c8d86c28d4ce4021459d4a9c94d9e705c3f61a964177e9909dace8c04a01a753dd4b2018cc1d68fb0f5ac958362dc7041fe1a3cf87c8f0ecb97000000000000adf54850c828746310ff92f62567b1e348aee5a752135bc1e95d241e6dd0fbfab69e9c96eb6b570387764860aad5e3ac6554831ce7f95fb90048", 0x5, r2, 0x4}, 0x38) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x30}, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000003df618ed882975159cc950f656412d32662602000008000038e9593bdbaf13e4f657bc3aad47ae568c350c11b3f6265d4d9afbb59dd16ed0ff807edb47db721001259656226cbd0f90aa1a59c16cfac70b8971b4ab15165aae3a9ca985fc86556bb7653aea919d3f91476ec49476cc7f454fe840a0306d38fbeda2661c03e2ba5674a87d1932b28d0a9a52db61a8713303dbb3e1df3a60a61462ab044a8d4dce11a4894e2c382f", @ANYRES32=0x0, @ANYBLOB="ac1414196401754e00000000180000000000000000000000070000004404c97194040007"], 0x38}, 0x40c4) 9.976434712s ago: executing program 3 (id=3175): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x28, 0x1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0xfffffffd}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x9e2d, 0x0, 0x800, 0x6, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r0, &(0x7f0000000840)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)="41fed4bc0622", 0x6}], 0x1}, 0x4c004) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a40)=[{0x0, 0xf5}, {&(0x7f00000001c0)="d7c6", 0x2}], 0x2}, 0x24000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x8202) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="d8000000180081054e81f782db4cb904021d480406037c09e8fe55a10a0015400400142603600e122f00160004000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211c0d56573209d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 9.621133601s ago: executing program 0 (id=3177): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6ca", 0x1be}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000003ac0)="a1a65d2a", 0x4}], 0x1, 0x0, 0x97}, 0x0) 9.422705521s ago: executing program 2 (id=3178): getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c8500000019000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x24048800) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @local, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0x40844) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x3, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x3, 0x3, 0x1}, {0x6, 0x0, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000300)=""/175, 0x43, 0xaf, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5a1c, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x8000, 0x6, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r8, 0x0, 0x4, &(0x7f0000000180)='GPL\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r10, 0x4) 8.994502993s ago: executing program 0 (id=3179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040040010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2004, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) 8.258387541s ago: executing program 4 (id=3180): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0, 0x0, &(0x7f0000001cc0)}, 0x12) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000855eb768ee1b00000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5, r5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x7400}, 0x40804) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xd}, 0x10c006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.181765985s ago: executing program 0 (id=3181): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x1, 0x49340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x40000006, 0xfffffff5, 0x9, 0x6, 0x0, 0x0, 0x0, 0x89ed, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="bb", 0x1}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000001c0)="fcea", 0x2}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000380)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)='\a', 0x1}], 0x1}, 0x4004010) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000)=r4, 0x8) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f0000000800), 0x4) socket$kcm(0x10, 0x2, 0x10) r7 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500bb230", 0x8, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f5020") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b14}, r7, 0x0, 0xffffffffffffffff, 0x0) r8 = perf_event_open$cgroup(&(0x7f00000011c0)={0x5, 0x80, 0x0, 0x8, 0xaa, 0x1, 0x0, 0xffffffffffffffff, 0x20008, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x23377aedef665b94, 0x5, 0xc8, 0x9, 0x4, 0x0, 0xb6b, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r7, r8, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 2.88657019s ago: executing program 4 (id=3182): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x818}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0xa, 0xb, 0x1, 0x2, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x91, &(0x7f0000000100)=""/145, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x7, 0xfff, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[r0, r0, r0], &(0x7f0000000280)=[{0x1, 0x1, 0xc, 0x9}, {0x2, 0x1, 0xf, 0x9}, {0x5, 0x3, 0x4, 0x6}, {0x4, 0x2, 0xa, 0x9}, {0x2, 0x5, 0xd, 0xb}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.88598277s ago: executing program 0 (id=3183): close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x4000081) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.749970777s ago: executing program 3 (id=3184): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x8, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000980)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000ac0)=r0, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a", 0x28}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x139}], 0x3}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x1, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x80000, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a3, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 2.681525011s ago: executing program 4 (id=3185): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4800) 2.470597961s ago: executing program 4 (id=3186): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) (async) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f0000000c40)=r1, 0x4) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0ffffff, 0x0, 0x0, 0x0, "be467b1f4cfd8c642c13334c199f91732d13b884b4ad52d055d6d5ae3b991ffc48ca221108c4d3aa623010eab68d9504000034ea00000001f000"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="80005b", 0x3}, {&(0x7f00000000c0)="bb801d2b6ee74ca6dd0afd8db62e5de99f891ce37d5b7c9d62780020763e62f9f45dfb9f7bf4191f3eae21e30fd0bd2a98d0d29b7acc934ead1435306043fa7d8dee130a7eb7881168d6b534a57a9b795804ce11c4d65ad423b1f5815ae045903eea000a046284f15279a17ac2f5c9", 0x6f}, {&(0x7f0000000880)="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", 0x543}], 0x3, 0x0, 0x0, 0x900}, 0x0) 2.201516175s ago: executing program 3 (id=3187): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.955073748s ago: executing program 3 (id=3188): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x4c891) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000280)=0x1ffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.486377092s ago: executing program 3 (id=3189): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f00000000c0)=@rc={0x1f, @none, 0x1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="bc3a9206b433234b2e5c9fca1a96d542770e4178621a4a01f333335e361a77f2d767ae0800b341c14e4b7bab4aeb3f3a28d762894ccb1cfbfbf8427fafaf8f0ca446e9b2e3b25ee1ef971ed098ba0265e7fcb4ba99e898bc0015310dac506069540afe0fa09a9c8aeb4b32add16add1ab982711f1855519b7c5a0f05a1cc67bd2e9dba86a8b19367c2b34a99222c32851d5cf600d217e0b97edaf590f2144a684b12b8e008ac8f77dd23089731ab99cf7f440d6ad60d2f254f", 0xb9}, {&(0x7f0000000880)="00a88d722fee3a8020b350e8f281ef8b0f997d0b6d6840c30c411669100f992d3ee495b174ec9c6ba478972e6752e1d6113cb142a14967ff4661400e67df4d15f62bfdbe6f9098120e47b954da3ea22f240ab0064e33534e6a7c3879adc9010fe14803d99471114132468c439bab50e97308c7ae80e08c7382b3a3cac04a513e6ae73de95bf4a806eeec2371766065ebcaa48ded7b54542e648e30b87099f98c859874fdd636649f687e94c8dbc4947b6a5decf1dae65eafe32050c6", 0xbc}, {&(0x7f0000000940)="0832f35a09152a468a14f8efbec413d124b582ac2c6153752c5092", 0x1b}, {&(0x7f0000000980)="14aa", 0x2}, {&(0x7f00000005c0)="d20ccb3ab99aa97280d861223a", 0xd}, {&(0x7f0000000a00)="d22b426afe3fa34452416a63e849e6887411709b4dbdfc24d3dfb16492a3505aa32f2901ab1e8eece3122056a068944b8c86960e2d2c3fe8e7ce7d49978be0967308828f593badc39684853cccade18a8cf5dc63f637f9e8b6c594448b9a018636968cd519b0ae8999fb60e65cfbb489332acef6bdea5b295096a7cda30562095f2fed157f8e79acd0c001f714129e924cb2acd6", 0x94}], 0x6, &(0x7f00000022c0)=ANY=[@ANYRESDEC], 0x1230}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x16a7, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000600), 0x8}, 0x111450, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xcc0, 0x46, &(0x7f0000000440)="e1188e19b95d41c728af0b48fb57", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640)}, 0x0, 0x93}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080200000900000000000000", @ANYBLOB="6502d268835c48", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="d2f17fed16bc34daab34d19ee936347c3bf57d74b8f5cc92e85752747da3fa621f38877485c1fcc39a932c8c2fce199f8e904e963af897612acfc8792e13f22f017cfb96ef4a103bee53fca03f727bd3b0a1dca57c6b1e131ab88cd3af6a", @ANYRESHEX=r3], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r7, @ANYRESDEC=r6, @ANYRES32=0x0], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x14, &(0x7f0000000b40)=ANY=[@ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.435101425s ago: executing program 4 (id=3190): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040040010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2004, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) 1.358050139s ago: executing program 2 (id=3191): getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) r4 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000000000000000000018000000000000008400000005"], 0x28}, 0x24048800) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @local, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0x40844) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x3, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x3, 0x3, 0x1}, {0x6, 0x0, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000300)=""/175, 0x43, 0xaf, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5a1c, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x8000, 0x6, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r8, 0x0, 0x4, &(0x7f0000000180)='GPL\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r10, 0x4) 1.154266899s ago: executing program 0 (id=3192): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x90a2, 0xca, 0x1, 0x6, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x8, 0x221, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x80, 0x0, 0x0, 0x4, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1082}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) socket$kcm(0xa, 0x2, 0x3a) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_ext={0x1c, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10f1, 0x0, 0x0, 0x0, 0xa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000001980)='GPL\x00', 0x3, 0x1b, &(0x7f00000019c0)=""/27, 0x40f00, 0x2, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001a00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001a40)={0x3, 0xe, 0x10001000, 0x79}, 0x10, 0x1260b, r6, 0x0, &(0x7f0000001a80)=[r3, r3, r3], 0x0, 0x10, 0x7fffffff}, 0x94) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) (async) r8 = getpid() (async) r9 = getpid() sendmsg$unix(r1, &(0x7f0000001640)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000280)="717e7dd6c9b62aec455b9412611ac6f1ca2b5b0f7bd663337a25a6f1e11709bb9f90a87837fe5596fe122e7d6fb834d22e7360373c02267d54058db801c44c2861731e7e03de793897a9d1a5a6f9637c22033cfff6adf6f30228d1d66befffd0ffedd386178f3e49d0d24b35c7a4bb3ed5c44441469e80391d8988955ad2eaf576331aea85721464198554aaaf94bdab936de660b5b834ec0ab67f94d158822eb75f00cc07715052b2f471e095a3902f8231bd1c5984ef79b5d6b5af4db0ae3bf2b8f3bded61bce209209728f351025db0d0afef92486228bf9d4138a1543fae3e19be81041f6f", 0xe7}, {&(0x7f0000000440)="e8c7a08e432970b848fee4cda4170defba78cfdee9d89b1d90f448e60e7b535bbe8f32e8fe670318dfdfcdc2515b7ac1b27d337761f5cc400091d2569de21d788e7538ee561f11438156fc7fc9d985491114f906ee82fbd467a8ac4efba045874e6c0b739d8569bca75d8b2b6b79387875a538888ce053ea7be0d9512199b898bad042abc486357a86071a6f34efc3ccbed2a5259783c06703989624314a24c8110cebb87fbae157fc424a06a5ec74c628b02b12d446a297faeb1ea9803e4097d627b16ecc2aeff77590d37072ad39343b5d36b5", 0xd4}, {&(0x7f0000000540)="add1f07f0ecaa2980040aa231093f2f58aeaebecf5241042a6349a5bc2665144d4217683866b9ecbed129699c7de4d00ab6625c04fbbdf91143e3e09c06af3b7d07c97c6c09569f2329bd8683dbcd4cac2ddb41175687bb04983bd62", 0x5c}, {&(0x7f00000005c0)="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", 0x1000}], 0x4, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}], 0x40}, 0x8000) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x3, 0x1, 0x40, 0x0, 0xc00000000, 0x30, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x49b0d8e6, 0x2, @perf_config_ext={0x1, 0x1}, 0x1bda8, 0x1, 0x10, 0x8, 0x0, 0x8, 0x9, 0x0, 0x116, 0x0, 0x4c8}, r3, 0xe, 0xffffffffffffffff, 0x4) 0s ago: executing program 4 (id=3193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000dafe55a1290015000600142603600e120900040044000500a80016470a000140020000000006ffc3b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81508ff60d7fed0bffece0b42a9ecbee5de6cc357b17c160d40dd6e4edef3d93", 0xd8}], 0x1}, 0x20000) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0x1c}], 0x1, 0x0, 0xfffffffffffffe59}, 0x20048941) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000100)) kernel console output (not intermixed with test programs): arsing attributes in process `syz.2.2533'. [ 548.925348][T13060] netlink: 'syz.3.2532': attribute type 28 has an invalid length. [ 548.964965][T13062] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2534'. [ 549.954011][T13078] netlink: 'syz.4.2536': attribute type 4 has an invalid length. [ 550.232923][T13084] netlink: 'syz.1.2540': attribute type 21 has an invalid length. [ 550.486173][T13086] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2541'. [ 551.100386][T13107] netlink: 'syz.0.2547': attribute type 33 has an invalid length. [ 551.221603][T13107] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2547'. [ 554.388073][T13137] netlink: 'syz.4.2554': attribute type 10 has an invalid length. [ 554.424275][T13137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.520970][T13137] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 554.719919][T13136] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2555'. [ 554.760250][T13140] netlink: 'syz.0.2556': attribute type 25 has an invalid length. [ 554.788759][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 554.840589][T13137] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2554'. [ 555.120425][T13152] netlink: 'syz.3.2560': attribute type 21 has an invalid length. [ 555.142760][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 555.704146][T13167] FAULT_INJECTION: forcing a failure. [ 555.704146][T13167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.750578][T13167] CPU: 0 PID: 13167 Comm: syz.1.2561 Not tainted syzkaller #0 [ 555.758133][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.768238][T13167] Call Trace: [ 555.771561][T13167] [ 555.774542][T13167] dump_stack_lvl+0x188/0x24e [ 555.779281][T13167] ? show_regs_print_info+0x12/0x12 [ 555.784569][T13167] ? load_image+0x400/0x400 [ 555.789124][T13167] ? __lock_acquire+0x7d10/0x7d10 [ 555.794210][T13167] ? snprintf+0xe5/0x140 [ 555.798533][T13167] should_fail_ex+0x399/0x4d0 [ 555.803266][T13167] _copy_to_user+0x2c/0x130 [ 555.807825][T13167] simple_read_from_buffer+0xe3/0x150 [ 555.813250][T13167] proc_fail_nth_read+0x1a6/0x220 [ 555.818330][T13167] ? proc_fault_inject_write+0x310/0x310 [ 555.824034][T13167] ? fsnotify_perm+0x248/0x550 [ 555.828864][T13167] ? proc_fault_inject_write+0x310/0x310 [ 555.834546][T13167] vfs_read+0x2de/0xa00 [ 555.838764][T13167] ? kernel_read+0x1e0/0x1e0 [ 555.843401][T13167] ? __fget_files+0x28/0x4b0 [ 555.848064][T13167] ? __fget_files+0x28/0x4b0 [ 555.852724][T13167] ? __fget_files+0x43d/0x4b0 [ 555.857459][T13167] ? __fdget_pos+0x2ae/0x360 [ 555.862104][T13167] ? ksys_read+0x71/0x250 [ 555.866489][T13167] ksys_read+0x14c/0x250 [ 555.870795][T13167] ? vfs_write+0xa30/0xa30 [ 555.875301][T13167] ? syscall_enter_from_user_mode+0x2a/0x80 [ 555.881249][T13167] do_syscall_64+0x4c/0xa0 [ 555.885719][T13167] ? clear_bhb_loop+0x60/0xb0 [ 555.890458][T13167] ? clear_bhb_loop+0x60/0xb0 [ 555.895191][T13167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.901131][T13167] RIP: 0033:0x7f8c9155d60e [ 555.905586][T13167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 555.925270][T13167] RSP: 002b:00007f8c92493fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.933753][T13167] RAX: ffffffffffffffda RBX: 00007f8c924946c0 RCX: 00007f8c9155d60e [ 555.941779][T13167] RDX: 000000000000000f RSI: 00007f8c924940a0 RDI: 0000000000000008 [ 555.949808][T13167] RBP: 00007f8c92494090 R08: 0000000000000000 R09: 0000000000000000 [ 555.957828][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.965929][T13167] R13: 00007f8c91816038 R14: 00007f8c91815fa0 R15: 00007ffd37caeda8 [ 555.973980][T13167] [ 556.072532][T13172] netlink: 'syz.4.2563': attribute type 33 has an invalid length. [ 556.098953][T13172] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2563'. [ 556.511379][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2570'. [ 556.542225][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2570'. [ 556.556146][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2570'. [ 556.593077][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2570'. [ 556.630673][T13194] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2570'. [ 558.238109][T13227] netlink: 'syz.2.2579': attribute type 33 has an invalid length. [ 559.843033][T13254] FAULT_INJECTION: forcing a failure. [ 559.843033][T13254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.896666][T13254] CPU: 0 PID: 13254 Comm: syz.1.2588 Not tainted syzkaller #0 [ 559.904226][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.914340][T13254] Call Trace: [ 559.917666][T13254] [ 559.920667][T13254] dump_stack_lvl+0x188/0x24e [ 559.925451][T13254] ? show_regs_print_info+0x12/0x12 [ 559.930730][T13254] ? load_image+0x400/0x400 [ 559.935304][T13254] ? __lock_acquire+0x7d10/0x7d10 [ 559.940400][T13254] ? snprintf+0xe5/0x140 [ 559.944721][T13254] should_fail_ex+0x399/0x4d0 [ 559.949463][T13254] _copy_to_user+0x2c/0x130 [ 559.954035][T13254] simple_read_from_buffer+0xe3/0x150 [ 559.959470][T13254] proc_fail_nth_read+0x1a6/0x220 [ 559.964552][T13254] ? proc_fault_inject_write+0x310/0x310 [ 559.970261][T13254] ? fsnotify_perm+0x248/0x550 [ 559.975102][T13254] ? proc_fault_inject_write+0x310/0x310 [ 559.980799][T13254] vfs_read+0x2de/0xa00 [ 559.985036][T13254] ? kernel_read+0x1e0/0x1e0 [ 559.989724][T13254] ? __fget_files+0x28/0x4b0 [ 559.994388][T13254] ? __fget_files+0x28/0x4b0 [ 559.999039][T13254] ? __fget_files+0x43d/0x4b0 [ 560.003791][T13254] ? __fdget_pos+0x2ae/0x360 [ 560.008442][T13254] ? ksys_read+0x71/0x250 [ 560.012838][T13254] ksys_read+0x14c/0x250 [ 560.017150][T13254] ? vfs_write+0xa30/0xa30 [ 560.021622][T13254] ? lockdep_hardirqs_on+0x94/0x140 [ 560.026867][T13254] do_syscall_64+0x4c/0xa0 [ 560.031329][T13254] ? clear_bhb_loop+0x60/0xb0 [ 560.036067][T13254] ? clear_bhb_loop+0x60/0xb0 [ 560.040811][T13254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.046753][T13254] RIP: 0033:0x7f8c9155d60e [ 560.051212][T13254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 560.070887][T13254] RSP: 002b:00007f8c92493fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.079366][T13254] RAX: ffffffffffffffda RBX: 00007f8c924946c0 RCX: 00007f8c9155d60e [ 560.087386][T13254] RDX: 000000000000000f RSI: 00007f8c924940a0 RDI: 0000000000000009 [ 560.095411][T13254] RBP: 00007f8c92494090 R08: 0000000000000000 R09: 0000000000000000 [ 560.103435][T13254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.111438][T13254] R13: 00007f8c91816038 R14: 00007f8c91815fa0 R15: 00007ffd37caeda8 [ 560.119460][T13254] [ 560.527251][T13268] __nla_validate_parse: 4 callbacks suppressed [ 560.527273][T13268] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2592'. [ 561.109365][T13279] netlink: 'syz.3.2595': attribute type 33 has an invalid length. [ 561.129896][T13279] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2595'. [ 563.075424][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.081838][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.490245][T13297] netlink: 'syz.2.2600': attribute type 10 has an invalid length. [ 564.629411][T13304] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2600'. [ 564.658945][T13297] team0: Device veth1_macvtap failed to register rx_handler [ 564.684942][T13304] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 564.806986][T13300] netlink: 'syz.0.2601': attribute type 10 has an invalid length. [ 564.842399][T13300] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 565.597883][T13328] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2609'. [ 565.952017][T13345] netlink: 'syz.2.2613': attribute type 10 has an invalid length. [ 566.695786][T13352] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2615'. [ 570.378453][T13406] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 570.402009][T13406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2633'. [ 570.514602][T13406] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 570.723977][T13419] netlink: 'syz.4.2638': attribute type 10 has an invalid length. [ 570.853597][T13419] device veth1_macvtap left promiscuous mode [ 571.217784][T13427] : port 1(ip6gretap0) entered blocking state [ 571.242181][T13427] : port 1(ip6gretap0) entered disabled state [ 571.275361][T13427] device ip6gretap0 entered promiscuous mode [ 571.304107][T13429] device ip6gretap0 left promiscuous mode [ 571.344412][T13429] : port 1(ip6gretap0) entered disabled state [ 571.766779][T13451] netlink: 'syz.4.2646': attribute type 33 has an invalid length. [ 571.812582][T13451] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2646'. [ 573.152841][T13487] : port 1(ip6gretap0) entered blocking state [ 573.189884][T13487] : port 1(ip6gretap0) entered disabled state [ 573.244363][T13487] device ip6gretap0 entered promiscuous mode [ 573.287560][T13488] device ip6gretap0 left promiscuous mode [ 573.305603][T13488] : port 1(ip6gretap0) entered disabled state [ 573.609438][T13503] netlink: 'syz.1.2662': attribute type 33 has an invalid length. [ 573.712242][T13503] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2662'. [ 573.885983][T13508] FAULT_INJECTION: forcing a failure. [ 573.885983][T13508] name failslab, interval 1, probability 0, space 0, times 0 [ 573.899002][T13508] CPU: 1 PID: 13508 Comm: syz.0.2664 Not tainted syzkaller #0 [ 573.906510][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 573.916963][T13508] Call Trace: [ 573.920277][T13508] [ 573.923260][T13508] dump_stack_lvl+0x188/0x24e [ 573.927989][T13508] ? show_regs_print_info+0x12/0x12 [ 573.933232][T13508] ? load_image+0x400/0x400 [ 573.937782][T13508] ? __might_sleep+0xd0/0xd0 [ 573.942413][T13508] ? __lock_acquire+0x7d10/0x7d10 [ 573.947490][T13508] should_fail_ex+0x399/0x4d0 [ 573.952221][T13508] should_failslab+0x5/0x20 [ 573.956768][T13508] slab_pre_alloc_hook+0x59/0x310 [ 573.961832][T13508] ? iovec_from_user+0x83/0x360 [ 573.966729][T13508] __kmem_cache_alloc_node+0x4f/0x260 [ 573.972145][T13508] ? iovec_from_user+0x83/0x360 [ 573.977029][T13508] __kmalloc+0xa0/0x240 [ 573.981237][T13508] iovec_from_user+0x83/0x360 [ 573.985959][T13508] __import_iovec+0x6d/0x500 [ 573.990621][T13508] import_iovec+0x6f/0xa0 [ 573.994998][T13508] ___sys_sendmsg+0x252/0x360 [ 573.999725][T13508] ? __sys_sendmsg+0x290/0x290 [ 574.004576][T13508] ? trace_call_bpf+0xbf/0x6b0 [ 574.009427][T13508] __se_sys_sendmsg+0x1bb/0x2a0 [ 574.014336][T13508] ? __x64_sys_sendmsg+0x80/0x80 [ 574.019346][T13508] ? lockdep_hardirqs_on+0x94/0x140 [ 574.024678][T13508] do_syscall_64+0x4c/0xa0 [ 574.029134][T13508] ? clear_bhb_loop+0x60/0xb0 [ 574.033852][T13508] ? clear_bhb_loop+0x60/0xb0 [ 574.038583][T13508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.044511][T13508] RIP: 0033:0x7fb169d9cdd9 [ 574.048961][T13508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.068602][T13508] RSP: 002b:00007fb16aba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.077038][T13508] RAX: ffffffffffffffda RBX: 00007fb16a015fa0 RCX: 00007fb169d9cdd9 [ 574.085032][T13508] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 574.093068][T13508] RBP: 00007fb16aba9090 R08: 0000000000000000 R09: 0000000000000000 [ 574.101146][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.109142][T13508] R13: 00007fb16a016038 R14: 00007fb16a015fa0 R15: 00007ffcff6b8c08 [ 574.117161][T13508] [ 574.943583][T13523] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.2669'. [ 575.467709][T13536] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 576.071685][T13550] netlink: 'syz.0.2675': attribute type 33 has an invalid length. [ 576.108532][T13550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2675'. [ 576.627945][T13563] FAULT_INJECTION: forcing a failure. [ 576.627945][T13563] name failslab, interval 1, probability 0, space 0, times 0 [ 576.717372][T13563] CPU: 1 PID: 13563 Comm: syz.0.2680 Not tainted syzkaller #0 [ 576.724903][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.735005][T13563] Call Trace: [ 576.738321][T13563] [ 576.741293][T13563] dump_stack_lvl+0x188/0x24e [ 576.746027][T13563] ? show_regs_print_info+0x12/0x12 [ 576.751282][T13563] ? load_image+0x400/0x400 [ 576.755831][T13563] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 576.761865][T13563] should_fail_ex+0x399/0x4d0 [ 576.766589][T13563] should_failslab+0x5/0x20 [ 576.771119][T13563] slab_pre_alloc_hook+0x59/0x310 [ 576.776192][T13563] kmem_cache_alloc+0x56/0x2f0 [ 576.780996][T13563] ? __build_skb+0x2a/0x3c0 [ 576.785552][T13563] __build_skb+0x2a/0x3c0 [ 576.789934][T13563] build_skb+0x1e/0x230 [ 576.794148][T13563] bpf_prog_test_run_skb+0x37e/0x12a0 [ 576.799567][T13563] ? __fget_files+0x28/0x4b0 [ 576.804209][T13563] ? __fget_files+0x43d/0x4b0 [ 576.808946][T13563] ? cpu_online+0xa0/0xa0 [ 576.813334][T13563] bpf_prog_test_run+0x31e/0x390 [ 576.818324][T13563] __sys_bpf+0x62b/0x780 [ 576.822610][T13563] ? bpf_link_show_fdinfo+0x380/0x380 [ 576.828052][T13563] ? lock_chain_count+0x20/0x20 [ 576.832948][T13563] __x64_sys_bpf+0x78/0x90 [ 576.837417][T13563] do_syscall_64+0x4c/0xa0 [ 576.841872][T13563] ? clear_bhb_loop+0x60/0xb0 [ 576.846594][T13563] ? clear_bhb_loop+0x60/0xb0 [ 576.851313][T13563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.857262][T13563] RIP: 0033:0x7fb169d9cdd9 [ 576.861724][T13563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.881539][T13563] RSP: 002b:00007fb167ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.890002][T13563] RAX: ffffffffffffffda RBX: 00007fb16a016180 RCX: 00007fb169d9cdd9 [ 576.898018][T13563] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 576.906030][T13563] RBP: 00007fb167ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 576.914044][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.922050][T13563] R13: 00007fb16a016218 R14: 00007fb16a016180 R15: 00007ffcff6b8c08 [ 576.930072][T13563] [ 577.501460][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 577.899413][T13587] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2689'. [ 578.881376][T13604] : port 1(ip6gretap0) entered blocking state [ 578.890106][T13604] : port 1(ip6gretap0) entered disabled state [ 578.903082][T13604] device ip6gretap0 entered promiscuous mode [ 578.952996][T13601] device ip6gretap0 left promiscuous mode [ 579.014453][T13601] : port 1(ip6gretap0) entered disabled state [ 579.411418][T13610] : port 1(ip6gretap0) entered blocking state [ 579.425333][T13610] : port 1(ip6gretap0) entered disabled state [ 579.453016][T13610] device ip6gretap0 entered promiscuous mode [ 579.526047][T13616] device ip6gretap0 left promiscuous mode [ 579.622174][T13616] : port 1(ip6gretap0) entered disabled state [ 580.547855][T13645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2705'. [ 580.577881][T13643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2705'. [ 580.765882][T13647] : port 1(ip6gretap0) entered blocking state [ 580.776470][T13647] : port 1(ip6gretap0) entered disabled state [ 580.838969][T13647] device ip6gretap0 entered promiscuous mode [ 580.917155][T13652] device ip6gretap0 left promiscuous mode [ 580.966546][T13652] : port 1(ip6gretap0) entered disabled state [ 581.005871][T13657] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2710'. [ 581.680457][T13664] : port 1(ip6gretap0) entered blocking state [ 581.703411][T13664] : port 1(ip6gretap0) entered disabled state [ 581.819300][T13664] device ip6gretap0 entered promiscuous mode [ 581.918013][T13669] device ip6gretap0 left promiscuous mode [ 582.006080][T13669] : port 1(ip6gretap0) entered disabled state [ 582.784910][T13693] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 582.816208][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.849450][T13693] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 582.878362][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.900974][T13693] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 582.924103][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.947553][T13693] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 582.975746][T13693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.185333][T13701] : port 1(ip6gretap0) entered blocking state [ 583.212779][T13701] : port 1(ip6gretap0) entered disabled state [ 583.234112][T13701] device ip6gretap0 entered promiscuous mode [ 583.326388][T13704] device ip6gretap0 left promiscuous mode [ 583.350091][T13704] : port 1(ip6gretap0) entered disabled state [ 583.390136][T13703] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2724'. [ 583.855538][T13721] : port 1(ip6gretap0) entered blocking state [ 583.883526][T13721] : port 1(ip6gretap0) entered disabled state [ 583.927424][T13721] device ip6gretap0 entered promiscuous mode [ 583.986187][T13724] device ip6gretap0 left promiscuous mode [ 583.993213][T13724] : port 1(ip6gretap0) entered disabled state [ 584.078413][T13723] : port 1(ip6gretap0) entered blocking state [ 584.134573][T13723] : port 1(ip6gretap0) entered disabled state [ 584.167621][T13723] device ip6gretap0 entered promiscuous mode [ 584.326046][T13729] netlink: 'syz.4.2731': attribute type 4 has an invalid length. [ 584.396087][T13732] device ip6gretap0 left promiscuous mode [ 584.421751][T13732] : port 1(ip6gretap0) entered disabled state [ 584.748670][T13743] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 584.812103][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.845032][T13743] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 584.898415][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.979603][T13743] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 585.041979][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.083357][T13743] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 585.102928][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.146963][T13748] : port 1(ip6gretap0) entered blocking state [ 585.176615][T13748] : port 1(ip6gretap0) entered disabled state [ 585.203216][T13748] device ip6gretap0 entered promiscuous mode [ 585.263110][T13750] device ip6gretap0 left promiscuous mode [ 585.282114][T13750] : port 1(ip6gretap0) entered disabled state [ 585.596332][T13764] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2742'. [ 585.642346][T13768] netlink: 'syz.0.2743': attribute type 10 has an invalid length. [ 586.014577][T13770] : port 1(ip6gretap0) entered blocking state [ 586.064144][T13770] : port 1(ip6gretap0) entered disabled state [ 586.123912][T13770] device ip6gretap0 entered promiscuous mode [ 586.237079][T13776] device ip6gretap0 left promiscuous mode [ 586.259822][T13776] : port 1(ip6gretap0) entered disabled state [ 586.603885][T13791] netlink: 'syz.3.2748': attribute type 33 has an invalid length. [ 586.611799][T13791] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2748'. [ 587.370711][T13813] : port 1(ip6gretap0) entered blocking state [ 587.451215][T13813] : port 1(ip6gretap0) entered disabled state [ 587.514098][T13813] device ip6gretap0 entered promiscuous mode [ 587.567606][T13814] device ip6gretap0 left promiscuous mode [ 587.637424][T13814] : port 1(ip6gretap0) entered disabled state [ 587.791118][T13825] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2759'. [ 588.138072][T13831] : port 1(ip6gretap0) entered blocking state [ 588.158626][T13831] : port 1(ip6gretap0) entered disabled state [ 588.267774][T13831] device ip6gretap0 entered promiscuous mode [ 588.460254][T13836] device ip6gretap0 left promiscuous mode [ 588.488667][T13836] : port 1(ip6gretap0) entered disabled state [ 590.837897][T13848] netlink: 'syz.3.2762': attribute type 2 has an invalid length. [ 590.868766][T13848] netlink: 'syz.3.2762': attribute type 8 has an invalid length. [ 590.886885][T13848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2762'. [ 591.133750][T13853] netlink: 'syz.0.2763': attribute type 33 has an invalid length. [ 591.172701][T13853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2763'. [ 591.918883][T13877] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2773'. [ 592.010583][T13880] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2774'. [ 592.672096][T13886] : port 1(ip6gretap0) entered blocking state [ 592.722262][T13886] : port 1(ip6gretap0) entered disabled state [ 592.761699][T13889] netlink: 'syz.3.2776': attribute type 29 has an invalid length. [ 592.841712][T13886] device ip6gretap0 entered promiscuous mode [ 592.967624][T13889] netlink: 'syz.3.2776': attribute type 29 has an invalid length. [ 592.995166][T13890] device ip6gretap0 left promiscuous mode [ 593.032307][T13890] : port 1(ip6gretap0) entered disabled state [ 593.051525][T13896] netlink: 'syz.0.2779': attribute type 33 has an invalid length. [ 593.061557][T13896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2779'. [ 593.073004][T13888] netlink: 'syz.3.2776': attribute type 29 has an invalid length. [ 593.128583][T13892] netlink: 'syz.3.2776': attribute type 29 has an invalid length. [ 593.193798][T13898] netlink: 'syz.2.2778': attribute type 28 has an invalid length. [ 594.918265][T13930] netlink: 'syz.2.2786': attribute type 29 has an invalid length. [ 595.062449][T13930] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2786'. [ 595.132261][T13932] @: port 1(gretap0) entered blocking state [ 595.139093][T13930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2786'. [ 595.152043][T13932] @: port 1(gretap0) entered disabled state [ 595.159609][T13932] device gretap0 entered promiscuous mode [ 595.340619][T13942] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2790'. [ 595.429447][T13943] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2789'. [ 595.564408][T13946] : port 1(ip6gretap0) entered blocking state [ 595.632449][T13946] : port 1(ip6gretap0) entered disabled state [ 595.741156][T13946] device ip6gretap0 entered promiscuous mode [ 595.892245][T13953] device ip6gretap0 left promiscuous mode [ 595.898428][T13953] : port 1(ip6gretap0) entered disabled state [ 596.897430][T13978] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.2800'. [ 597.383198][T13994] validate_nla: 4 callbacks suppressed [ 597.383221][T13994] netlink: 'syz.1.2804': attribute type 33 has an invalid length. [ 597.475364][T13994] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2804'. [ 598.364825][T14009] : port 1(ip6gretap0) entered blocking state [ 598.394531][T14009] : port 1(ip6gretap0) entered disabled state [ 598.532985][T14009] device ip6gretap0 entered promiscuous mode [ 598.611084][T14013] device ip6gretap0 left promiscuous mode [ 598.631018][T14013] : port 1(ip6gretap0) entered disabled state [ 598.659781][T14018] : port 1(ip6gretap0) entered blocking state [ 598.675598][T14018] : port 1(ip6gretap0) entered disabled state [ 598.717731][T14018] device ip6gretap0 entered promiscuous mode [ 598.769244][T14017] : port 1(ip6gretap0) entered blocking state [ 598.792249][T14017] : port 1(ip6gretap0) entered disabled state [ 598.799597][T14017] device ip6gretap0 entered promiscuous mode [ 598.860267][T14019] device ip6gretap0 left promiscuous mode [ 598.882210][T14019] : port 1(ip6gretap0) entered disabled state [ 598.907953][T14020] device ip6gretap0 left promiscuous mode [ 598.930261][T14020] : port 1(ip6gretap0) entered disabled state [ 599.444412][T14038] netlink: 'syz.2.2816': attribute type 10 has an invalid length. [ 599.514593][T14038] device veth0_macvtap left promiscuous mode [ 599.922906][T14047] netlink: 'syz.4.2819': attribute type 33 has an invalid length. [ 599.932038][T14047] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2819'. [ 600.375371][T14057] : port 1(ip6gretap0) entered blocking state [ 600.395289][T14057] : port 1(ip6gretap0) entered disabled state [ 600.473083][T14057] device ip6gretap0 entered promiscuous mode [ 600.624728][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.634915][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.642274][T14055] device ip6gretap0 left promiscuous mode [ 600.649111][T14055] : port 1(ip6gretap0) entered disabled state [ 600.656470][T14068] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.665765][T14068] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.678033][T14068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 600.688158][T14068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 600.738145][T14064] netlink: 'syz.4.2824': attribute type 13 has an invalid length. [ 600.757918][T14064] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2824'. [ 601.294530][T14067] chnl_net:caif_netlink_parms(): no params data found [ 601.513058][T14093] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2830'. [ 601.610071][ T4319] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.802594][ T4319] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.877926][T14100] netlink: 'syz.4.2832': attribute type 29 has an invalid length. [ 601.978794][T14067] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.986162][T14067] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.994984][T14067] device bridge_slave_0 entered promiscuous mode [ 602.013072][T14100] netlink: 'syz.4.2832': attribute type 29 has an invalid length. [ 602.034440][T14102] netlink: 'syz.4.2832': attribute type 29 has an invalid length. [ 602.075019][ T4319] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.094722][T14067] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.102150][T14067] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.110428][T14067] device bridge_slave_1 entered promiscuous mode [ 602.118310][T14105] netlink: 'syz.2.2833': attribute type 33 has an invalid length. [ 602.126755][T14105] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2833'. [ 602.136703][T14104] netlink: 'syz.4.2832': attribute type 29 has an invalid length. [ 602.216563][ T4319] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.285060][T14067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.343435][T14067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.490228][T14109] : port 1(ip6gretap0) entered blocking state [ 602.502603][T14109] : port 1(ip6gretap0) entered disabled state [ 602.524996][T14109] device ip6gretap0 entered promiscuous mode [ 602.562869][T14067] team0: Port device team_slave_0 added [ 602.595850][T14112] device ip6gretap0 left promiscuous mode [ 602.610010][T14112] : port 1(ip6gretap0) entered disabled state [ 602.621276][T14067] team0: Port device team_slave_1 added [ 602.671422][T14067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.694882][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.747551][T14068] Bluetooth: hci4: command 0x0409 tx timeout [ 602.758559][T14067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.801688][T14067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.824445][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.861972][T14067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.027020][T14067] device hsr_slave_0 entered promiscuous mode [ 603.053137][T14067] device hsr_slave_1 entered promiscuous mode [ 603.060139][T14067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.079738][T14067] Cannot create hsr debugfs directory [ 603.169463][T14128] netlink: 'syz.4.2838': attribute type 10 has an invalid length. [ 603.182741][T14128] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 603.271354][T14128] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2838'. [ 604.047717][T14152] netlink: 'syz.1.2843': attribute type 33 has an invalid length. [ 604.072267][T14152] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2843'. [ 604.511765][T14160] netlink: 'syz.1.2845': attribute type 29 has an invalid length. [ 604.575567][ T4319] team0: Port device wlan1 removed [ 604.610562][T14160] netlink: 'syz.1.2845': attribute type 29 has an invalid length. [ 604.626174][T14163] netlink: 'syz.1.2845': attribute type 29 has an invalid length. [ 604.636522][T14165] netlink: 'syz.1.2845': attribute type 29 has an invalid length. [ 604.689704][T14164] : port 1(ip6gretap0) entered blocking state [ 604.703117][T14164] : port 1(ip6gretap0) entered disabled state [ 604.730151][T14164] device ip6gretap0 entered promiscuous mode [ 604.825141][T14068] Bluetooth: hci4: command 0x041b tx timeout [ 604.903240][T14169] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 604.971508][T14166] device ip6gretap0 left promiscuous mode [ 604.982880][T14166] : port 1(ip6gretap0) entered disabled state [ 605.063291][ T4319] device hsr_slave_0 left promiscuous mode [ 605.089978][ T4319] device hsr_slave_1 left promiscuous mode [ 605.113429][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.179592][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.204051][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.211685][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.307061][ T4319] device bridge_slave_1 left promiscuous mode [ 605.335768][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.361377][ T4319] device bridge_slave_0 left promiscuous mode [ 605.391825][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.423824][ T4319] device veth1_vlan left promiscuous mode [ 605.435611][ T4319] device veth0_vlan left promiscuous mode [ 605.604422][ T4319] team0 (unregistering): Port device geneve1 removed [ 605.989205][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 606.034230][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 606.449097][T14175] netlink: 'syz.1.2848': attribute type 10 has an invalid length. [ 606.619801][T14186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 606.634098][T14186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.650187][T14188] netlink: 'syz.0.2853': attribute type 10 has an invalid length. [ 606.810331][T14067] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.851724][T14067] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.902539][T14068] Bluetooth: hci4: command 0x040f tx timeout [ 606.927740][T14067] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 607.016832][T14067] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 607.046111][T14202] netlink: 'syz.4.2856': attribute type 33 has an invalid length. [ 607.077363][T14202] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2856'. [ 607.204177][T14211] netlink: 'syz.1.2857': attribute type 10 has an invalid length. [ 607.298571][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.305965][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.405312][T14211] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.412587][T14211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.420066][T14211] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.427293][T14211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.565642][T14211] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 607.748412][T14067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.827383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.856530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.880941][T14229] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2860'. [ 607.908930][T14067] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.979944][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.002692][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.046941][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.054191][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.133670][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 608.163455][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 608.210770][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.269471][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.276722][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.342768][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 608.368748][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.404093][T14238] : port 1(ip6gretap0) entered blocking state [ 608.420191][T14238] : port 1(ip6gretap0) entered disabled state [ 608.444553][T14238] device ip6gretap0 entered promiscuous mode [ 608.550590][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 608.608863][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.621676][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 608.637806][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.647126][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 608.660935][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 608.694078][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 608.753345][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.804373][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.851228][T14239] device ip6gretap0 left promiscuous mode [ 608.862701][T14239] : port 1(ip6gretap0) entered disabled state [ 608.982575][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 609.240012][T14262] validate_nla: 1 callbacks suppressed [ 609.240031][T14262] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 609.814215][T14269] netlink: 'syz.0.2872': attribute type 10 has an invalid length. [ 609.899235][T14269] device veth0_macvtap left promiscuous mode [ 610.340685][T14286] netlink: 'syz.1.2874': attribute type 2 has an invalid length. [ 610.357833][T14286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2874'. [ 610.384326][T14279] : port 1(ip6gretap0) entered blocking state [ 610.390703][T14279] : port 1(ip6gretap0) entered disabled state [ 610.401358][T14279] device ip6gretap0 entered promiscuous mode [ 610.432224][T14282] device ip6gretap0 left promiscuous mode [ 610.446880][T14282] : port 1(ip6gretap0) entered disabled state [ 610.464483][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.471727][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 610.489861][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.543189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.552770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.605631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.620672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.646018][T14067] device veth0_vlan entered promiscuous mode [ 610.678525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.699863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.715535][T14067] device veth1_vlan entered promiscuous mode [ 610.743933][T14292] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2877'. [ 610.836187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 610.849262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 610.873464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.899701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.064287][T14067] device veth0_macvtap entered promiscuous mode [ 611.088715][T14296] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 611.127184][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.147071][T14296] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 611.159959][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.177626][T14296] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 611.198393][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.225756][T14067] device veth1_macvtap entered promiscuous mode [ 611.323961][T14067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.378966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 611.403743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.485205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.552605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.628778][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.652800][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.702872][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.726371][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.747850][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.818203][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.885282][T14067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.946777][T14067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.018519][T14067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.059663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 612.108546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.194332][T14313] : port 1(ip6gretap0) entered blocking state [ 612.210556][T14313] : port 1(ip6gretap0) entered disabled state [ 612.319593][T14313] device ip6gretap0 entered promiscuous mode [ 612.454401][T14067] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.494522][T14067] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.520992][T14067] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.561732][T14067] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.632737][T14321] device ip6gretap0 left promiscuous mode [ 612.638711][T14321] : port 1(ip6gretap0) entered disabled state [ 613.042426][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.050405][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.090416][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 613.146938][T14328] : port 1(ip6gretap0) entered blocking state [ 613.161793][T14328] : port 1(ip6gretap0) entered disabled state [ 613.177713][T14328] device ip6gretap0 entered promiscuous mode [ 613.195882][T14330] : port 1(ip6gretap0) entered blocking state [ 613.207542][T14330] : port 1(ip6gretap0) entered disabled state [ 613.219023][T14330] device ip6gretap0 entered promiscuous mode [ 613.238627][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.250774][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.262871][T14328] device ip6gretap0 left promiscuous mode [ 613.273702][T14328] : port 1(ip6gretap0) entered disabled state [ 613.290342][T14333] device ip6gretap0 left promiscuous mode [ 613.300590][T14333] : port 1(ip6gretap0) entered disabled state [ 613.322463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 613.356770][T14334] : port 1(ip6gretap0) entered blocking state [ 613.372189][T14334] : port 1(ip6gretap0) entered disabled state [ 613.389757][T14334] device ip6gretap0 entered promiscuous mode [ 613.408493][T14332] device ip6gretap0 left promiscuous mode [ 613.433318][T14332] : port 1(ip6gretap0) entered disabled state [ 613.530679][T14338] netlink: 'syz.0.2888': attribute type 33 has an invalid length. [ 613.543420][T14338] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2888'. [ 613.841136][T14347] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 613.877023][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.922605][T14347] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 613.983715][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.996105][T14347] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 614.007044][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.142016][T14358] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2894'. [ 614.648476][T14366] : port 1(ip6gretap0) entered blocking state [ 614.665285][T14366] : port 1(ip6gretap0) entered disabled state [ 614.710326][T14366] device ip6gretap0 entered promiscuous mode [ 614.739807][T14369] device ip6gretap0 left promiscuous mode [ 614.763793][T14369] : port 1(ip6gretap0) entered disabled state [ 614.872337][T14376] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.2901'. [ 614.921474][T14374] netlink: 'syz.0.2900': attribute type 10 has an invalid length. [ 614.960629][T14378] netlink: 'syz.3.2902': attribute type 33 has an invalid length. [ 614.999282][T14378] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2902'. [ 615.483400][T14391] netlink: 'syz.2.2907': attribute type 21 has an invalid length. [ 615.505722][T14391] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2907'. [ 616.001536][T14401] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 616.019842][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.042075][T14401] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 616.067740][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.089485][T14401] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 616.119094][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.598111][T14418] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2923'. [ 616.759422][T14422] : port 1(ip6gretap0) entered blocking state [ 616.785678][T14422] : port 1(ip6gretap0) entered disabled state [ 616.793609][T14422] device ip6gretap0 entered promiscuous mode [ 616.808634][T14423] : port 1(ip6gretap0) entered blocking state [ 616.826068][T14423] : port 1(ip6gretap0) entered disabled state [ 616.850740][T14423] device ip6gretap0 entered promiscuous mode [ 616.941047][T14420] device ip6gretap0 left promiscuous mode [ 616.980055][T14420] : port 1(ip6gretap0) entered disabled state [ 617.042662][T14417] device ip6gretap0 left promiscuous mode [ 617.049438][T14417] : port 1(ip6gretap0) entered disabled state [ 617.121173][T14427] netlink: 'syz.4.2915': attribute type 33 has an invalid length. [ 617.145082][T14427] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2915'. [ 617.199535][T14429] : port 1(ip6gretap0) entered blocking state [ 617.216040][T14429] : port 1(ip6gretap0) entered disabled state [ 617.249913][T14429] device ip6gretap0 entered promiscuous mode [ 617.313012][T14432] device ip6gretap0 left promiscuous mode [ 617.323108][T14432] : port 1(ip6gretap0) entered disabled state [ 617.392130][T14435] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2918'. [ 617.904500][T14454] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 617.922037][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.949349][T14454] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 617.999525][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.063120][T14454] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 618.125457][T14454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.224399][T14462] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2928'. [ 618.595383][T14471] : port 1(ip6gretap0) entered blocking state [ 618.638495][T14471] : port 1(ip6gretap0) entered disabled state [ 618.689847][T14471] device ip6gretap0 entered promiscuous mode [ 618.778328][T14473] device ip6gretap0 left promiscuous mode [ 618.792231][T14473] : port 1(ip6gretap0) entered disabled state [ 618.924159][T14477] netlink: 'syz.0.2930': attribute type 33 has an invalid length. [ 619.015808][T14477] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2930'. [ 619.183622][T14479] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2931'. [ 619.559859][T14488] : port 1(ip6gretap0) entered blocking state [ 619.584104][T14488] : port 1(ip6gretap0) entered disabled state [ 619.619180][T14488] device ip6gretap0 entered promiscuous mode [ 619.644497][T14486] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2934'. [ 619.752620][T14495] device ip6gretap0 left promiscuous mode [ 619.775905][T14495] : port 1(ip6gretap0) entered disabled state [ 620.461603][T14507] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2940'. [ 620.482591][T14509] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 620.510346][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.535413][T14509] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 620.549300][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.566272][T14509] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 620.578543][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.251191][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.261132][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.269074][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.278383][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.288893][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 621.296725][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.383123][T14526] : port 1(ip6gretap0) entered blocking state [ 621.389434][T14526] : port 1(ip6gretap0) entered disabled state [ 621.475773][T14526] device ip6gretap0 entered promiscuous mode [ 621.574284][T14529] device ip6gretap0 left promiscuous mode [ 621.586131][T14529] : port 1(ip6gretap0) entered disabled state [ 621.827248][T14536] netlink: 'syz.1.2944': attribute type 33 has an invalid length. [ 621.844294][T14536] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2944'. [ 622.135032][T14542] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2947'. [ 622.178310][T14524] chnl_net:caif_netlink_parms(): no params data found [ 622.272310][T14549] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2946'. [ 622.380372][T14524] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.414669][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.445621][T14524] device bridge_slave_0 entered promiscuous mode [ 622.580355][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.643926][T14524] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.658578][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.703224][T14524] device bridge_slave_1 entered promiscuous mode [ 622.796638][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.877714][T14557] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2958'. [ 623.044304][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.235095][T14524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.292441][T14524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.382138][T14068] Bluetooth: hci5: command 0x0409 tx timeout [ 623.435372][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.705427][T14524] team0: Port device team_slave_0 added [ 623.775497][T14524] team0: Port device team_slave_1 added [ 623.893879][T14524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.900889][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.022367][T14524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.067246][T14577] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 624.096744][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.110988][T14577] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 624.122983][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.142123][T14577] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 624.163389][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.176935][T14524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.193585][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.199993][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.239036][T14524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.346869][T14524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.410229][T14587] : port 1(ip6gretap0) entered blocking state [ 624.420888][T14587] : port 1(ip6gretap0) entered disabled state [ 624.439215][T14591] FAULT_INJECTION: forcing a failure. [ 624.439215][T14591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.454352][T14587] device ip6gretap0 entered promiscuous mode [ 624.460895][T14591] CPU: 0 PID: 14591 Comm: syz.0.2955 Not tainted syzkaller #0 [ 624.468492][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.478589][T14591] Call Trace: [ 624.481911][T14591] [ 624.484883][T14591] dump_stack_lvl+0x188/0x24e [ 624.489644][T14591] ? show_regs_print_info+0x12/0x12 [ 624.494892][T14591] ? load_image+0x400/0x400 [ 624.499443][T14591] ? __lock_acquire+0x7d10/0x7d10 [ 624.504525][T14591] should_fail_ex+0x399/0x4d0 [ 624.509247][T14591] _copy_from_user+0x2c/0x170 [ 624.513970][T14591] __copy_msghdr+0x3b7/0x580 [ 624.518620][T14591] ___sys_sendmsg+0x210/0x360 [ 624.523363][T14591] ? __sys_sendmsg+0x290/0x290 [ 624.528192][T14591] ? __lock_acquire+0x7d10/0x7d10 [ 624.533271][T14591] __se_sys_sendmsg+0x1bb/0x2a0 [ 624.538162][T14591] ? __x64_sys_sendmsg+0x80/0x80 [ 624.543175][T14591] ? lockdep_hardirqs_on+0x94/0x140 [ 624.548487][T14591] do_syscall_64+0x4c/0xa0 [ 624.552934][T14591] ? clear_bhb_loop+0x60/0xb0 [ 624.557636][T14591] ? clear_bhb_loop+0x60/0xb0 [ 624.562341][T14591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.568283][T14591] RIP: 0033:0x7fb169d9cdd9 [ 624.572722][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.592372][T14591] RSP: 002b:00007fb16aba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.600817][T14591] RAX: ffffffffffffffda RBX: 00007fb16a015fa0 RCX: 00007fb169d9cdd9 [ 624.608819][T14591] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 624.616839][T14591] RBP: 00007fb16aba9090 R08: 0000000000000000 R09: 0000000000000000 [ 624.624835][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.632825][T14591] R13: 00007fb16a016038 R14: 00007fb16a015fa0 R15: 00007ffcff6b8c08 [ 624.640842][T14591] [ 624.728410][T14588] device ip6gretap0 left promiscuous mode [ 624.747937][T14588] : port 1(ip6gretap0) entered disabled state [ 624.859000][T14524] device hsr_slave_0 entered promiscuous mode [ 624.902389][T14524] device hsr_slave_1 entered promiscuous mode [ 624.910368][T14524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.962182][T14524] Cannot create hsr debugfs directory [ 624.999170][T14594] netlink: 'syz.3.2957': attribute type 33 has an invalid length. [ 625.012267][T14594] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2957'. [ 625.263458][T14603] : port 1(ip6gretap0) entered blocking state [ 625.280136][T14603] : port 1(ip6gretap0) entered disabled state [ 625.293419][T14603] device ip6gretap0 entered promiscuous mode [ 625.341288][T14601] device ip6gretap0 left promiscuous mode [ 625.390455][T14601] : port 1(ip6gretap0) entered disabled state [ 625.463081][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 625.915972][T14621] FAULT_INJECTION: forcing a failure. [ 625.915972][T14621] name failslab, interval 1, probability 0, space 0, times 0 [ 625.943658][T14616] netlink: 'syz.3.2961': attribute type 10 has an invalid length. [ 625.962836][T14621] CPU: 0 PID: 14621 Comm: syz.2.2963 Not tainted syzkaller #0 [ 625.970378][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.980482][T14621] Call Trace: [ 625.983805][T14621] [ 625.986777][T14621] dump_stack_lvl+0x188/0x24e [ 625.991509][T14621] ? sctp_sendmsg+0x15b0/0x2940 [ 625.996421][T14621] ? ___sys_sendmsg+0x2a2/0x360 [ 626.001339][T14621] ? show_regs_print_info+0x12/0x12 [ 626.006601][T14621] ? load_image+0x400/0x400 [ 626.011166][T14621] should_fail_ex+0x399/0x4d0 [ 626.015898][T14621] should_failslab+0x5/0x20 [ 626.020452][T14621] slab_pre_alloc_hook+0x59/0x310 [ 626.025537][T14621] ? sctp_add_bind_addr+0x89/0x350 [ 626.030703][T14621] __kmem_cache_alloc_node+0x4f/0x260 [ 626.036145][T14621] ? sctp_add_bind_addr+0x89/0x350 [ 626.041318][T14621] kmalloc_trace+0x26/0xe0 [ 626.045802][T14621] sctp_add_bind_addr+0x89/0x350 [ 626.050804][T14621] sctp_copy_local_addr_list+0x311/0x4e0 [ 626.056492][T14621] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 626.062359][T14621] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 626.068491][T14621] ? sctp_v4_is_any+0x31/0x50 [ 626.073215][T14621] ? sctp_copy_one_addr+0x93/0x660 [ 626.078385][T14621] sctp_bind_addr_copy+0xaf/0x3c0 [ 626.083485][T14621] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 626.089868][T14621] sctp_connect_new_asoc+0x2f5/0x6a0 [ 626.095203][T14621] ? __sctp_connect+0xd80/0xd80 [ 626.100095][T14621] ? __local_bh_enable_ip+0x136/0x1c0 [ 626.105531][T14621] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 626.111123][T14621] ? security_sctp_bind_connect+0x85/0xb0 [ 626.116899][T14621] sctp_sendmsg+0x15b0/0x2940 [ 626.121662][T14621] ? trace_event_raw_event_lock+0x250/0x250 [ 626.127618][T14621] ? aa_sk_perm+0x771/0x950 [ 626.132191][T14621] ? sctp_getsockopt+0x8a0/0x8a0 [ 626.137175][T14621] ? __might_fault+0xa6/0x120 [ 626.141895][T14621] ? aa_af_perm+0x340/0x340 [ 626.146443][T14621] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 626.152934][T14621] ? inet_sendmsg+0xe5/0x2f0 [ 626.157569][T14621] ? inet_send_prepare+0x260/0x260 [ 626.162737][T14621] ____sys_sendmsg+0x5be/0x970 [ 626.167582][T14621] ? __sys_sendmsg_sock+0x30/0x30 [ 626.172658][T14621] ? __import_iovec+0x315/0x500 [ 626.177560][T14621] ? import_iovec+0x6f/0xa0 [ 626.182131][T14621] ___sys_sendmsg+0x2a2/0x360 [ 626.186884][T14621] ? __sys_sendmsg+0x290/0x290 [ 626.191736][T14621] ? __lock_acquire+0x7d10/0x7d10 [ 626.196846][T14621] __se_sys_sendmsg+0x1bb/0x2a0 [ 626.201758][T14621] ? __x64_sys_sendmsg+0x80/0x80 [ 626.206815][T14621] ? lockdep_hardirqs_on+0x94/0x140 [ 626.212067][T14621] do_syscall_64+0x4c/0xa0 [ 626.216534][T14621] ? clear_bhb_loop+0x60/0xb0 [ 626.221269][T14621] ? clear_bhb_loop+0x60/0xb0 [ 626.225995][T14621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 626.231941][T14621] RIP: 0033:0x7eff4859cdd9 [ 626.236484][T14621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.256136][T14621] RSP: 002b:00007eff4938f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.264599][T14621] RAX: ffffffffffffffda RBX: 00007eff48815fa0 RCX: 00007eff4859cdd9 [ 626.272609][T14621] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 626.280617][T14621] RBP: 00007eff4938f090 R08: 0000000000000000 R09: 0000000000000000 [ 626.288626][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 626.296639][T14621] R13: 00007eff48816038 R14: 00007eff48815fa0 R15: 00007ffeb51d71f8 [ 626.304665][T14621] [ 626.502829][T14616] bond0: (slave bond_slave_0): Releasing backup interface [ 627.362144][T14650] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 627.394218][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.415439][T14650] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 627.431807][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.450809][T14650] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 627.461776][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.541962][T14068] Bluetooth: hci5: command 0x040f tx timeout [ 627.582984][T14654] : port 1(ip6gretap0) entered blocking state [ 627.598136][T14654] : port 1(ip6gretap0) entered disabled state [ 627.627379][T14654] device ip6gretap0 entered promiscuous mode [ 627.711487][T14656] device ip6gretap0 left promiscuous mode [ 627.728257][T14656] : port 1(ip6gretap0) entered disabled state [ 628.274853][T14673] netlink: 'syz.0.2972': attribute type 4 has an invalid length. [ 628.580140][T14524] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 628.649508][ T9] device hsr_slave_0 left promiscuous mode [ 628.667473][ T9] device hsr_slave_1 left promiscuous mode [ 628.707981][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.728968][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.752296][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.772942][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.789407][T14686] netlink: 'syz.2.2975': attribute type 3 has an invalid length. [ 628.812292][T14686] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 628.820187][T14686] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2975'. [ 628.822608][ T9] device bridge_slave_1 left promiscuous mode [ 628.842339][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.870205][ T9] device bridge_slave_0 left promiscuous mode [ 628.887669][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.937097][ T9] device veth0_macvtap left promiscuous mode [ 628.961427][ T9] device veth1_vlan left promiscuous mode [ 628.977597][ T9] device veth0_vlan left promiscuous mode [ 629.630000][T14068] Bluetooth: hci5: command 0x0419 tx timeout [ 630.029299][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.068000][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.270087][ T9] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 630.326735][ T9] bond0 (unregistering): Released all slaves [ 630.429255][T14524] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.442974][T14524] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 630.454579][T14524] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.487502][T14692] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2976'. [ 630.505223][T14688] : port 1(ip6gretap0) entered blocking state [ 630.513245][T14688] : port 1(ip6gretap0) entered disabled state [ 630.543217][T14688] device ip6gretap0 entered promiscuous mode [ 630.581254][T14690] device ip6gretap0 left promiscuous mode [ 630.606086][T14690] : port 1(ip6gretap0) entered disabled state [ 630.765499][T14524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.779443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 630.804841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.837647][T14524] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.869763][T14712] FAULT_INJECTION: forcing a failure. [ 630.869763][T14712] name failslab, interval 1, probability 0, space 0, times 0 [ 630.911344][T14712] CPU: 1 PID: 14712 Comm: syz.0.2979 Not tainted syzkaller #0 [ 630.918879][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.929010][T14712] Call Trace: [ 630.932346][T14712] [ 630.935334][T14712] dump_stack_lvl+0x188/0x24e [ 630.940074][T14712] ? show_regs_print_info+0x12/0x12 [ 630.945339][T14712] ? load_image+0x400/0x400 [ 630.949892][T14712] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 630.955926][T14712] should_fail_ex+0x399/0x4d0 [ 630.960653][T14712] should_failslab+0x5/0x20 [ 630.965196][T14712] slab_pre_alloc_hook+0x59/0x310 [ 630.970299][T14712] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.976522][T14712] kmem_cache_alloc+0x56/0x2f0 [ 630.981333][T14712] ? skb_clone+0x1e7/0x370 [ 630.985823][T14712] skb_clone+0x1e7/0x370 [ 630.990123][T14712] bpf_clone_redirect+0x163/0x4a0 [ 630.995199][T14712] bpf_prog_2ed4f07f6b249946+0x19/0x1d [ 631.000703][T14712] bpf_test_run+0x4c1/0x830 [ 631.005258][T14712] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 631.011468][T14712] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 631.017690][T14712] ? convert___skb_to_skb+0x580/0x580 [ 631.023136][T14712] ? eth_get_headlen+0x200/0x200 [ 631.028111][T14712] ? __build_skb+0x257/0x3c0 [ 631.032785][T14712] ? convert___skb_to_skb+0x3d/0x580 [ 631.038112][T14712] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 631.043534][T14712] ? cpu_online+0xa0/0xa0 [ 631.047933][T14712] bpf_prog_test_run+0x31e/0x390 [ 631.052920][T14712] __sys_bpf+0x62b/0x780 [ 631.057206][T14712] ? bpf_link_show_fdinfo+0x380/0x380 [ 631.062641][T14712] ? lock_chain_count+0x20/0x20 [ 631.067540][T14712] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 631.073579][T14712] __x64_sys_bpf+0x78/0x90 [ 631.078048][T14712] do_syscall_64+0x4c/0xa0 [ 631.082521][T14712] ? clear_bhb_loop+0x60/0xb0 [ 631.087255][T14712] ? clear_bhb_loop+0x60/0xb0 [ 631.091984][T14712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.097922][T14712] RIP: 0033:0x7fb169d9cdd9 [ 631.102378][T14712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.122026][T14712] RSP: 002b:00007fb16aba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 631.130478][T14712] RAX: ffffffffffffffda RBX: 00007fb16a015fa0 RCX: 00007fb169d9cdd9 [ 631.138484][T14712] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 631.146486][T14712] RBP: 00007fb16aba9090 R08: 0000000000000000 R09: 0000000000000000 [ 631.154523][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.162525][T14712] R13: 00007fb16a016038 R14: 00007fb16a015fa0 R15: 00007ffcff6b8c08 [ 631.170553][T14712] [ 633.848078][T14718] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 633.861073][T14718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.881956][T14718] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 633.898287][T14718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.911571][T14718] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 633.929581][T14718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.954323][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.973627][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.009158][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.016361][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.162362][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 634.194493][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 634.204331][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.214355][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.221502][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.250314][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 634.305014][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 634.339113][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 634.376959][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.403631][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.465671][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.503025][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.559042][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.589668][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.677907][T14524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.748802][T14524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.796686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.825131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.410040][T14755] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2989'. [ 636.340558][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.366930][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 636.439662][T14524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.524423][T14770] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 636.557461][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.660727][T14770] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 636.753238][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.763620][T14770] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 636.783142][T14770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.881539][T14782] netlink: 'syz.0.2994': attribute type 21 has an invalid length. [ 636.919670][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 638.007736][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 638.023311][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.064319][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.080735][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.092387][T14524] device veth0_vlan entered promiscuous mode [ 638.119544][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.138105][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 638.160754][T14524] device veth1_vlan entered promiscuous mode [ 638.227702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 638.239595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 638.254413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 638.269926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.292273][T14524] device veth0_macvtap entered promiscuous mode [ 638.311804][T14524] device veth1_macvtap entered promiscuous mode [ 638.350195][T14524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.360453][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.378901][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 638.390246][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 638.407808][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.423098][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.441383][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.459274][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.470290][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.487499][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.498662][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.518052][T14524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.530972][T14524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.550272][T14524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.559885][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.577391][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.593075][T14524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.608660][T14524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.619535][T14524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.637703][T14524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.602601][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.623719][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.641979][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.771080][T14804] netlink: 'syz.2.2999': attribute type 33 has an invalid length. [ 639.787124][T14804] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2999'. [ 641.575470][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.596536][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.663097][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.144576][T14822] : port 1(ip6gretap0) entered blocking state [ 642.165209][T14822] : port 1(ip6gretap0) entered disabled state [ 642.229217][T14822] device ip6gretap0 entered promiscuous mode [ 642.363789][T14830] device ip6gretap0 left promiscuous mode [ 642.440276][T14830] : port 1(ip6gretap0) entered disabled state [ 642.812148][T14842] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 642.862417][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.920890][T14842] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 643.002924][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.067847][T14842] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 643.127753][T14842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.358573][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 643.368824][T14857] netlink: 'syz.2.3012': attribute type 33 has an invalid length. [ 643.378405][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.387991][ T4277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.398757][ T4277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.406247][T14857] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3012'. [ 643.417540][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 643.426090][ T4277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.966379][T14856] chnl_net:caif_netlink_parms(): no params data found [ 644.296875][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.320707][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.348477][T14856] device bridge_slave_0 entered promiscuous mode [ 644.369558][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.384595][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.393185][T14856] device bridge_slave_1 entered promiscuous mode [ 644.427476][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.440986][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.488460][T14856] team0: Port device team_slave_0 added [ 644.497756][T14856] team0: Port device team_slave_1 added [ 644.564781][T14856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.571811][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.622100][T14856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.636244][T14856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.643379][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.726676][T14856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.853464][T14856] device hsr_slave_0 entered promiscuous mode [ 644.869793][T14856] device hsr_slave_1 entered promiscuous mode [ 644.895042][T14856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.952009][T14856] Cannot create hsr debugfs directory [ 644.980802][T14901] : port 1(ip6gretap0) entered blocking state [ 644.988045][T14901] : port 1(ip6gretap0) entered disabled state [ 645.019901][T14901] device ip6gretap0 entered promiscuous mode [ 645.101554][T14896] device ip6gretap0 left promiscuous mode [ 645.118732][T14896] : port 1(ip6gretap0) entered disabled state [ 645.370320][T14911] netlink: 'syz.1.3024': attribute type 33 has an invalid length. [ 645.381985][T14911] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3024'. [ 645.453719][T14914] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 645.465296][T14068] Bluetooth: hci0: command 0x0409 tx timeout [ 645.487257][T14914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.566604][T14914] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 645.578016][T14914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.589492][T14914] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 645.612675][T14914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.757113][T14920] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 645.861096][T14920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.868682][T14920] IPv6: NLM_F_CREATE should be set when creating new route [ 645.876481][T14920] IPv6: NLM_F_CREATE should be set when creating new route [ 645.884118][T14920] IPv6: NLM_F_CREATE should be set when creating new route [ 646.099129][T14923] device syzkaller0 entered promiscuous mode [ 646.248600][T14856] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.416562][T14856] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.796521][T14856] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.993570][T14856] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.065685][T14950] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 647.097007][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.109747][T14950] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 647.122015][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.139645][T14950] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 647.174337][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.189717][T14951] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 647.291132][T14955] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.3038'. [ 647.333756][T14958] netlink: 'syz.3.3038': attribute type 10 has an invalid length. [ 647.339744][T14955] openvswitch: netlink: Key type 386 is out of range max 32 [ 647.414236][T14958] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.440033][T14960] FAULT_INJECTION: forcing a failure. [ 647.440033][T14960] name failslab, interval 1, probability 0, space 0, times 0 [ 647.455104][T14960] CPU: 1 PID: 14960 Comm: syz.2.3041 Not tainted syzkaller #0 [ 647.462668][T14960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.472763][T14960] Call Trace: [ 647.476109][T14960] [ 647.479178][T14960] dump_stack_lvl+0x188/0x24e [ 647.483922][T14960] ? show_regs_print_info+0x12/0x12 [ 647.489179][T14960] ? load_image+0x400/0x400 [ 647.493754][T14960] ? __might_sleep+0xd0/0xd0 [ 647.498429][T14960] ? __lock_acquire+0x7d10/0x7d10 [ 647.503506][T14960] should_fail_ex+0x399/0x4d0 [ 647.508226][T14960] should_failslab+0x5/0x20 [ 647.512762][T14960] slab_pre_alloc_hook+0x59/0x310 [ 647.517829][T14960] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 647.523163][T14960] __kmem_cache_alloc_node+0x4f/0x260 [ 647.528557][T14960] ? memset+0x1e/0x40 [ 647.532579][T14960] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 647.537995][T14960] kmalloc_trace+0x26/0xe0 [ 647.542448][T14960] __xdp_reg_mem_model+0x1e0/0x5c0 [ 647.547597][T14960] ? kvmalloc_node+0x6c/0x180 [ 647.552315][T14960] ? kvmalloc_node+0x6c/0x180 [ 647.557029][T14960] ? xdp_reg_mem_model+0x30/0x30 [ 647.562012][T14960] xdp_reg_mem_model+0x1e/0x30 [ 647.566815][T14960] bpf_test_run_xdp_live+0x299/0x1a90 [ 647.572315][T14960] ? 0xffffffffa00041c0 [ 647.576493][T14960] ? text_poke_copy+0x79/0x90 [ 647.581197][T14960] ? 0xffffffffa00041c0 [ 647.585375][T14960] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 647.591302][T14960] ? 0xffffffffa00041c0 [ 647.595482][T14960] ? xdp_convert_md_to_buff+0x330/0x330 [ 647.601099][T14960] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 647.607373][T14960] ? bpf_test_init+0x119/0x140 [ 647.612160][T14960] ? xdp_convert_md_to_buff+0x5b/0x330 [ 647.617643][T14960] bpf_prog_test_run_xdp+0x736/0xf10 [ 647.622961][T14960] ? dev_put+0x80/0x80 [ 647.627063][T14960] ? dev_put+0x80/0x80 [ 647.631172][T14960] bpf_prog_test_run+0x31e/0x390 [ 647.636137][T14960] __sys_bpf+0x62b/0x780 [ 647.640411][T14960] ? bpf_link_show_fdinfo+0x380/0x380 [ 647.645829][T14960] ? lock_chain_count+0x20/0x20 [ 647.650717][T14960] __x64_sys_bpf+0x78/0x90 [ 647.655194][T14960] do_syscall_64+0x4c/0xa0 [ 647.659638][T14960] ? clear_bhb_loop+0x60/0xb0 [ 647.664366][T14960] ? clear_bhb_loop+0x60/0xb0 [ 647.669077][T14960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.674999][T14960] RIP: 0033:0x7eff4859cdd9 [ 647.679436][T14960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.699078][T14960] RSP: 002b:00007eff4938f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.707538][T14960] RAX: ffffffffffffffda RBX: 00007eff48815fa0 RCX: 00007eff4859cdd9 [ 647.715532][T14960] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 647.723537][T14960] RBP: 00007eff4938f090 R08: 0000000000000000 R09: 0000000000000000 [ 647.731525][T14960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.739511][T14960] R13: 00007eff48816038 R14: 00007eff48815fa0 R15: 00007ffeb51d71f8 [ 647.747519][T14960] [ 647.758329][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 647.775941][T14958] bond0: (slave team0): Enslaving as an active interface with an up link [ 647.802217][T14957] netlink: 'syz.4.3040': attribute type 33 has an invalid length. [ 647.818126][T14957] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3040'. [ 647.913194][T14856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 647.957187][T14856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 648.017297][T14856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 648.044309][T14962] syz.1.3043[14962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.044456][T14962] syz.1.3043[14962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.067793][T14965] FAULT_INJECTION: forcing a failure. [ 648.067793][T14965] name failslab, interval 1, probability 0, space 0, times 0 [ 648.096203][T14856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 648.159306][T14965] CPU: 0 PID: 14965 Comm: syz.2.3042 Not tainted syzkaller #0 [ 648.166972][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.177052][T14965] Call Trace: [ 648.180358][T14965] [ 648.183319][T14965] dump_stack_lvl+0x188/0x24e [ 648.188032][T14965] ? show_regs_print_info+0x12/0x12 [ 648.193273][T14965] ? load_image+0x400/0x400 [ 648.197824][T14965] ? kasan_quarantine_put+0x84/0x220 [ 648.203163][T14965] should_fail_ex+0x399/0x4d0 [ 648.207870][T14965] should_failslab+0x5/0x20 [ 648.212395][T14965] slab_pre_alloc_hook+0x59/0x310 [ 648.217449][T14965] ? kmem_cache_free+0xf7/0x290 [ 648.222337][T14965] kmem_cache_alloc+0x56/0x2f0 [ 648.227120][T14965] ? skb_clone+0x1e7/0x370 [ 648.231586][T14965] skb_clone+0x1e7/0x370 [ 648.235876][T14965] bpf_clone_redirect+0x163/0x4a0 [ 648.240939][T14965] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 648.246428][T14965] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.252443][T14965] ? lock_chain_count+0x20/0x20 [ 648.257380][T14965] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 648.263664][T14965] ? lockdep_hardirqs_on+0x94/0x140 [ 648.268893][T14965] ? ktime_get+0x7b/0x270 [ 648.273244][T14965] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 648.279510][T14965] ? ktime_get_real_ts64+0x440/0x440 [ 648.284849][T14965] ? read_lock_is_recursive+0x10/0x10 [ 648.290257][T14965] ? __cant_sleep+0x220/0x220 [ 648.294956][T14965] ? bpf_test_timer_continue+0x142/0x380 [ 648.300619][T14965] bpf_test_run+0x2b6/0x830 [ 648.305162][T14965] ? convert___skb_to_skb+0x580/0x580 [ 648.310577][T14965] ? eth_get_headlen+0x200/0x200 [ 648.315546][T14965] ? __build_skb+0x257/0x3c0 [ 648.320195][T14965] ? convert___skb_to_skb+0x3d/0x580 [ 648.325520][T14965] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 648.330944][T14965] ? cpu_online+0xa0/0xa0 [ 648.335311][T14965] bpf_prog_test_run+0x31e/0x390 [ 648.340293][T14965] __sys_bpf+0x62b/0x780 [ 648.344571][T14965] ? bpf_link_show_fdinfo+0x380/0x380 [ 648.349998][T14965] ? lock_chain_count+0x20/0x20 [ 648.354898][T14965] __x64_sys_bpf+0x78/0x90 [ 648.359346][T14965] do_syscall_64+0x4c/0xa0 [ 648.363799][T14965] ? clear_bhb_loop+0x60/0xb0 [ 648.368526][T14965] ? clear_bhb_loop+0x60/0xb0 [ 648.373254][T14965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.379197][T14965] RIP: 0033:0x7eff4859cdd9 [ 648.383657][T14965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.403308][T14965] RSP: 002b:00007eff4938f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.411756][T14965] RAX: ffffffffffffffda RBX: 00007eff48815fa0 RCX: 00007eff4859cdd9 [ 648.419754][T14965] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 648.427751][T14965] RBP: 00007eff4938f090 R08: 0000000000000000 R09: 0000000000000000 [ 648.436179][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.444195][T14965] R13: 00007eff48816038 R14: 00007eff48815fa0 R15: 00007ffeb51d71f8 [ 648.452205][T14965] [ 649.043037][T14856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.068556][T14975] netlink: 'syz.2.3046': attribute type 11 has an invalid length. [ 649.082232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 649.098300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 649.110343][T14975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3046'. [ 649.131490][T14856] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.139269][T14975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.172361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.217890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.251356][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.258604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.271033][T14978] netlink: 'syz.1.3047': attribute type 8 has an invalid length. [ 649.287959][T14978] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3047'. [ 649.310811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.380350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.397029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.418461][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.425702][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.495277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.513258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.528044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.594647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.624386][T14987] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 649.654126][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.733185][T14987] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 649.794242][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 649.811952][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.851947][T14987] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 649.896482][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.955478][T14987] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 650.000414][T14987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.058687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 650.095048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 650.163985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 650.220760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 650.298164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 650.359795][T14856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.407182][T14856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 650.438739][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 650.459606][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 650.508259][T15002] netlink: 'syz.4.3053': attribute type 33 has an invalid length. [ 650.527830][T15002] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3053'. [ 651.313723][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.328063][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.404851][T14856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.476453][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.492835][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.572529][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.585502][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.621769][T14856] device veth0_vlan entered promiscuous mode [ 651.643128][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.651700][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.676419][T14856] device veth1_vlan entered promiscuous mode [ 651.730144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 651.757318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 651.773136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 651.792229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 651.831048][T14856] device veth0_macvtap entered promiscuous mode [ 651.845297][T15034] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 651.861944][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 651.893975][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.977581][T15034] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 651.996181][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.026856][T15034] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 652.057044][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.085183][T15034] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 652.116386][T15034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.150453][T14856] device veth1_macvtap entered promiscuous mode [ 652.221759][T14856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.246549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.269716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.289252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.339016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.368238][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.422105][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.442163][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.469297][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.479664][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.501578][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.528772][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.554265][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.573093][T14856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.596908][T14856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.621738][T14856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.642113][T15041] netlink: 'syz.1.3065': attribute type 33 has an invalid length. [ 652.649995][T15041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3065'. [ 652.680708][T15043] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 652.740261][T15052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.747849][T15052] IPv6: NLM_F_CREATE should be set when creating new route [ 652.755414][T15052] IPv6: NLM_F_CREATE should be set when creating new route [ 652.762930][T15052] IPv6: NLM_F_CREATE should be set when creating new route [ 652.808520][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 652.827792][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 652.874782][T14856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.886635][T14856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.896101][T14856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.910879][T14856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.922390][T15053] : port 1(ip6gretap0) entered blocking state [ 652.929037][T15053] : port 1(ip6gretap0) entered disabled state [ 652.946542][T15053] device ip6gretap0 entered promiscuous mode [ 652.969710][T15055] device ip6gretap0 left promiscuous mode [ 652.975810][T15055] : port 1(ip6gretap0) entered disabled state [ 652.989394][T15059] FAULT_INJECTION: forcing a failure. [ 652.989394][T15059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.024679][T15058] device syzkaller0 left promiscuous mode [ 653.039132][T15059] CPU: 0 PID: 15059 Comm: syz.3.3069 Not tainted syzkaller #0 [ 653.046655][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.056742][T15059] Call Trace: [ 653.060047][T15059] [ 653.063043][T15059] dump_stack_lvl+0x188/0x24e [ 653.067784][T15059] ? show_regs_print_info+0x12/0x12 [ 653.073031][T15059] ? load_image+0x400/0x400 [ 653.077581][T15059] ? __lock_acquire+0x7d10/0x7d10 [ 653.082654][T15059] ? snprintf+0xe5/0x140 [ 653.086938][T15059] should_fail_ex+0x399/0x4d0 [ 653.091742][T15059] _copy_to_user+0x2c/0x130 [ 653.096310][T15059] simple_read_from_buffer+0xe3/0x150 [ 653.101724][T15059] proc_fail_nth_read+0x1a6/0x220 [ 653.106789][T15059] ? proc_fault_inject_write+0x310/0x310 [ 653.112475][T15059] ? fsnotify_perm+0x248/0x550 [ 653.117280][T15059] ? proc_fault_inject_write+0x310/0x310 [ 653.122940][T15059] vfs_read+0x2de/0xa00 [ 653.127131][T15059] ? kernel_read+0x1e0/0x1e0 [ 653.131752][T15059] ? __fget_files+0x28/0x4b0 [ 653.136368][T15059] ? __fget_files+0x28/0x4b0 [ 653.140994][T15059] ? __fget_files+0x43d/0x4b0 [ 653.145705][T15059] ? __fdget_pos+0x2ae/0x360 [ 653.150328][T15059] ? ksys_read+0x71/0x250 [ 653.154693][T15059] ksys_read+0x14c/0x250 [ 653.158968][T15059] ? vfs_write+0xa30/0xa30 [ 653.163416][T15059] ? lockdep_hardirqs_on+0x94/0x140 [ 653.168649][T15059] do_syscall_64+0x4c/0xa0 [ 653.173096][T15059] ? clear_bhb_loop+0x60/0xb0 [ 653.177801][T15059] ? clear_bhb_loop+0x60/0xb0 [ 653.182508][T15059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.188425][T15059] RIP: 0033:0x7fb07395d60e [ 653.192863][T15059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 653.212485][T15059] RSP: 002b:00007fb0748fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.220917][T15059] RAX: ffffffffffffffda RBX: 00007fb0748fd6c0 RCX: 00007fb07395d60e [ 653.228906][T15059] RDX: 000000000000000f RSI: 00007fb0748fd0a0 RDI: 0000000000000005 [ 653.236892][T15059] RBP: 00007fb0748fd090 R08: 0000000000000000 R09: 0000000000000000 [ 653.244884][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.252877][T15059] R13: 00007fb073c16128 R14: 00007fb073c16090 R15: 00007ffdfd187e28 [ 653.260883][T15059] [ 653.300751][T15062] netlink: 'syz.1.3070': attribute type 29 has an invalid length. [ 653.342504][T15063] netlink: 'syz.1.3070': attribute type 5 has an invalid length. [ 653.350294][T15063] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3070'. [ 653.416495][T15062] netlink: 'syz.1.3070': attribute type 29 has an invalid length. [ 655.811516][T15078] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3074'. [ 655.822689][T15089] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 655.844813][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.860811][T15089] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 655.878502][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.888920][T15089] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 655.925124][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.952057][T15089] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 655.971930][T15089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.079686][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.091141][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.163114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 656.186576][T15100] netlink: 'syz.4.3079': attribute type 33 has an invalid length. [ 656.211909][T15100] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3079'. [ 656.254318][ T4807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.262816][ T4807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.352675][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 656.442313][T15104] : port 1(ip6gretap0) entered blocking state [ 656.480715][T15104] : port 1(ip6gretap0) entered disabled state [ 656.536018][T15104] device ip6gretap0 entered promiscuous mode [ 656.612005][T15106] device ip6gretap0 left promiscuous mode [ 656.644365][T15106] : port 1(ip6gretap0) entered disabled state [ 656.839590][T15117] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 657.511657][T15128] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3087'. [ 658.558044][T14068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 658.572753][T14068] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 658.581435][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 658.590014][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 658.598991][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 658.606648][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.611497][T15139] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 658.720983][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.791398][T15139] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 658.834175][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.916065][T15139] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 658.947490][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.978608][T15139] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 659.005825][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.038408][T15149] netlink: 'syz.4.3092': attribute type 33 has an invalid length. [ 659.072899][T15149] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3092'. [ 659.420756][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.960132][T15163] netlink: 'syz.1.3096': attribute type 2 has an invalid length. [ 659.991629][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.670776][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 660.716163][T15163] device 0 entered promiscuous mode [ 660.764667][T15165] netlink: 'syz.1.3096': attribute type 2 has an invalid length. [ 660.785911][T15165] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3096'. [ 660.870507][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.226958][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.471142][T15140] chnl_net:caif_netlink_parms(): no params data found [ 661.643896][T15195] netlink: 'syz.4.3102': attribute type 25 has an invalid length. [ 661.676096][T15195] netlink: 'syz.4.3102': attribute type 28 has an invalid length. [ 661.750301][T15199] netlink: 'syz.3.3104': attribute type 33 has an invalid length. [ 661.762202][T15199] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3104'. [ 661.800249][T15200] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 661.841709][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.903824][T15200] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 661.923849][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.970513][T15200] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 661.985916][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.012470][T15200] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 662.042365][T15200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.199332][T15140] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.227138][T15140] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.252222][T15140] device bridge_slave_0 entered promiscuous mode [ 662.280257][T15140] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.321321][T15140] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.346611][T15140] device bridge_slave_1 entered promiscuous mode [ 662.412051][T15140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.453239][T15140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.655380][T15140] team0: Port device team_slave_0 added [ 662.730866][T15140] team0: Port device team_slave_1 added [ 662.771421][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 662.996812][T15140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.108252][T15140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.206969][T15140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.230042][T15140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.258660][T15140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.351899][T15140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.837406][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 665.222649][T15241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3111'. [ 665.233076][T15242] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3111'. [ 665.483344][T15140] device hsr_slave_0 entered promiscuous mode [ 665.509845][T15140] device hsr_slave_1 entered promiscuous mode [ 665.532543][T15140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.540151][T15140] Cannot create hsr debugfs directory [ 665.551495][T15251] netlink: 'syz.3.3114': attribute type 33 has an invalid length. [ 665.560664][T15251] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3114'. [ 666.159458][T15263] netlink: 'syz.3.3117': attribute type 10 has an invalid length. [ 666.185751][T15263] team0: Device wlan1 is up. Set it down before adding it as a team port [ 666.427883][T15271] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.3119'. [ 666.489904][T15271] openvswitch: netlink: Flow actions attr not present in new flow. [ 666.738417][T15273] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 666.781992][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.844481][T15273] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 666.921297][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 666.930966][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.023258][T15273] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 667.094350][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.153124][T15273] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 667.208460][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.674517][T15294] netlink: 'syz.1.3125': attribute type 33 has an invalid length. [ 667.692085][T15294] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3125'. [ 667.702461][T15292] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 667.762602][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.808849][T15292] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 667.829850][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.840083][T15292] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 667.911139][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.949266][T15292] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 667.970816][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.061951][T15292] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 668.091891][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.272767][T15140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 670.315194][T15140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 670.361251][T15348] : port 1(ip6gretap0) entered blocking state [ 670.376642][T15348] : port 1(ip6gretap0) entered disabled state [ 670.399343][T15348] device ip6gretap0 entered promiscuous mode [ 670.431449][T15350] netlink: 'syz.0.3139': attribute type 33 has an invalid length. [ 670.476938][T15348] netlink: 'syz.3.3137': attribute type 29 has an invalid length. [ 670.487064][T15350] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3139'. [ 670.542663][T15140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 670.557752][T15140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 670.622867][T15351] device ip6gretap0 left promiscuous mode [ 670.628889][T15351] : port 1(ip6gretap0) entered disabled state [ 670.688391][ T9] device hsr_slave_0 left promiscuous mode [ 670.719278][ T9] device hsr_slave_1 left promiscuous mode [ 670.749882][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.779183][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.817106][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.836288][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.895929][ T9] device veth1_vlan left promiscuous mode [ 671.843556][ T9] device geneve1 left promiscuous mode [ 671.876530][ T9] team0 (unregistering): Port device geneve1 removed [ 672.699925][ T9] device team_slave_1 left promiscuous mode [ 672.709143][ T9] team0 (unregistering): Port device team_slave_1 removed [ 672.766779][ T9] device team_slave_0 left promiscuous mode [ 672.776295][ T9] team0 (unregistering): Port device team_slave_0 removed [ 672.850130][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.411036][ T9] bond0 (unregistering): Released all slaves [ 673.468979][T15348] netlink: 'syz.3.3137': attribute type 29 has an invalid length. [ 673.478233][T15354] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 673.491993][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.515030][T15354] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 673.549290][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.562014][T15354] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 673.581958][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.612034][T15354] batman_adv: The newly added mac address (00:00:47:00:00:00) already exists on: batadv_slave_0 [ 673.631025][T15354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.026873][T15140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.244841][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.254267][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.393149][T15140] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.571136][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.593743][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.682756][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.689949][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.844286][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 674.903048][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.970024][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 675.053097][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.060285][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.163760][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 675.242069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 675.268756][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 675.297477][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 675.324273][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 675.450225][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 675.493146][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 675.590766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 675.613152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 675.648417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 675.684273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.720139][T15140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.222415][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 677.250510][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 677.299816][T15140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.474835][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 677.484268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.567090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.613369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.645118][T15140] device veth0_vlan entered promiscuous mode [ 677.682457][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.703787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.751757][T15437] netlink: 'syz.0.3154': attribute type 28 has an invalid length. [ 677.778914][T15140] device veth1_vlan entered promiscuous mode [ 677.878205][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 677.898757][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 677.935554][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 678.023831][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 678.059194][T15140] device veth0_macvtap entered promiscuous mode [ 678.080251][T15443] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3153'. [ 678.109620][T15140] device veth1_macvtap entered promiscuous mode [ 678.123239][T15443] netlink: zone id is out of range [ 678.220456][T15443] netlink: zone id is out of range [ 678.303514][T15443] netlink: zone id is out of range [ 678.308761][T15443] netlink: zone id is out of range [ 678.369495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.384109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 678.482250][T15443] netlink: zone id is out of range [ 678.488367][T15140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.527187][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 678.543925][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 678.579014][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.618570][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.623745][T15443] netlink: zone id is out of range [ 678.646896][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.696422][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.735956][T15443] netlink: get zone limit has 8 unknown bytes [ 678.739337][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.801625][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.840816][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.869801][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.891396][T15140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.931603][T15140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.944082][T15140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.052955][T15459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 679.175305][T15459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.536145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 679.549641][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.598457][T15140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.630521][T15140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.670732][T15140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.712166][T15140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.731061][T15470] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3161'. [ 679.970877][T15477] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3164'. [ 680.084692][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.092816][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.134694][ T8780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 680.329465][ T8780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.342867][ T8780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.412124][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 680.995113][T15492] netlink: 'syz.3.3165': attribute type 33 has an invalid length. [ 681.070506][T15492] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3165'. [ 682.040189][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 682.068930][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 682.082045][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 682.105836][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 682.117814][T14068] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 682.125406][T14068] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 682.442379][T15504] : port 1(ip6gretap0) entered blocking state [ 682.449178][T15504] : port 1(ip6gretap0) entered disabled state [ 682.468843][T15504] device ip6gretap0 entered promiscuous mode [ 682.525079][T15509] device ip6gretap0 left promiscuous mode [ 682.552110][T15514] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3172'. [ 682.571108][T15509] : port 1(ip6gretap0) entered disabled state [ 682.651996][T15514] netlink: 'syz.4.3172': attribute type 13 has an invalid length. [ 682.659950][T15514] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.3172'. [ 683.373391][T15505] chnl_net:caif_netlink_parms(): no params data found [ 683.563965][T15529] netlink: 'syz.3.3175': attribute type 21 has an invalid length. [ 683.644817][T15529] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3175'. [ 683.765408][T15529] netlink: 'syz.3.3175': attribute type 5 has an invalid length. [ 684.182567][T14068] Bluetooth: hci3: command 0x0409 tx timeout [ 684.189625][T15531] device syzkaller0 entered promiscuous mode [ 684.364327][T15537] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3178'. [ 685.648307][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.654820][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.265592][T14068] Bluetooth: hci3: command 0x041b tx timeout [ 688.342242][T14068] Bluetooth: hci3: command 0x040f tx timeout [ 690.006332][T15505] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.021981][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.030201][T15505] device bridge_slave_0 entered promiscuous mode [ 690.061962][T15505] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.069206][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.119452][T15505] device bridge_slave_1 entered promiscuous mode [ 690.200553][T15505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.230940][T15505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.289707][T15572] : port 1(ip6gretap0) entered blocking state [ 690.302397][T15572] : port 1(ip6gretap0) entered disabled state [ 690.337742][T15572] device ip6gretap0 entered promiscuous mode [ 690.374953][T15505] team0: Port device team_slave_0 added [ 690.422487][T14068] Bluetooth: hci3: command 0x0419 tx timeout [ 690.434962][T15575] device ip6gretap0 left promiscuous mode [ 690.454795][T15575] : port 1(ip6gretap0) entered disabled state [ 690.473264][T15505] team0: Port device team_slave_1 added [ 690.583177][T15505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.590276][T15505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.721338][T15505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.782075][T15505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.815874][T15505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.922304][T15505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.128374][T15505] device hsr_slave_0 entered promiscuous mode [ 691.159432][T15505] device hsr_slave_1 entered promiscuous mode [ 691.628981][T15596] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3191'. [ 691.941235][ T4277] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 691.992892][T15505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.064029][T14068] Bluetooth: hci0: command 0x0409 tx timeout [ 718.943036][ T14] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P13396 1-.... } 2670 jiffies s: 82829 root: 0x2/T [ 718.978262][ T14] rcu: blocking rcu_node structures (internal RCU debug): [ 719.002044][ T14] Sending NMI from CPU 0 to CPUs 1: [ 719.007339][ C1] NMI backtrace for cpu 1 [ 719.007351][ C1] CPU: 1 PID: 15592 Comm: syz.3.3189 Not tainted syzkaller #0 [ 719.007369][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 719.007379][ C1] RIP: 0010:perf_swevent_event+0x4da/0x570 [ 719.007413][ C1] Code: 4d 85 e4 75 16 e8 66 c1 dc ff eb 15 e8 5f c1 dc ff e8 da 41 88 08 4d 85 e4 74 ea e8 50 c1 dc ff fb 48 c7 44 24 20 0e 36 e0 45 <4a> c7 04 33 00 00 00 00 42 c7 44 33 08 00 00 00 00 65 48 8b 04 25 [ 719.007428][ C1] RSP: 0018:ffffc900001e0660 EFLAGS: 00000046 [ 719.007444][ C1] RAX: ffffffff81a5b0f6 RBX: 1ffff9200003c0d0 RCX: ffff88807d6d3b80 [ 719.007458][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 719.007468][ C1] RBP: ffffc900001e0730 R08: ffff88807d6d3b87 R09: 1ffff1100fada770 [ 719.007482][ C1] R10: dffffc0000000000 R11: ffffed100fada771 R12: ffff8880b8f35558 [ 719.007495][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88801ff95400 [ 719.007508][ C1] FS: 00007fb07491e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 719.007524][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.007537][ C1] CR2: 00007f290b8b3ff8 CR3: 000000005d40c000 CR4: 00000000003506e0 [ 719.007552][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.007563][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 719.007574][ C1] Call Trace: [ 719.007581][ C1] [ 719.007589][ C1] ? perf_trace_buf_update+0xa8/0x230 [ 719.007611][ C1] ? perf_tp_event+0xc30/0xc30 [ 719.007636][ C1] ? llist_add_batch+0x12b/0x180 [ 719.007656][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 719.007677][ C1] ? perf_trace_lock+0xf8/0x390 [ 719.007701][ C1] perf_tp_event+0x3e7/0xc30 [ 719.007744][ C1] ? arch_irq_work_raise+0x82/0xd0 [ 719.007764][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 719.007804][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 719.007827][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 719.007850][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 719.007877][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 719.007905][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 719.007933][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 719.007958][ C1] ? irqentry_enter+0x33/0x50 [ 719.007978][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 719.008003][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 719.008028][ C1] ? lock_chain_count+0x20/0x20 [ 719.008051][ C1] ? irqentry_enter+0x33/0x50 [ 719.008069][ C1] trace_hardirqs_off_finish+0x13f/0x180 [ 719.008093][ C1] irqentry_enter+0x33/0x50 [ 719.008110][ C1] sysvec_irq_work+0xa/0xc0 [ 719.008126][ C1] asm_sysvec_irq_work+0x16/0x20 [ 719.008148][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 719.008166][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 719.008180][ C1] RSP: 0018:ffffc900001e0c20 EFLAGS: 00000206 [ 719.008192][ C1] RAX: 826ce800de74c600 RBX: 1ffff9200003c18c RCX: 826ce800de74c600 [ 719.008205][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 719.008218][ C1] RBP: ffffc900001e0d08 R08: ffffffff90af92e7 R09: 1ffffffff215f25c [ 719.008230][ C1] R10: dffffc0000000000 R11: fffffbfff215f25d R12: 0000000000000246 [ 719.008242][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 719.008267][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 719.008284][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 719.008311][ C1] __rcu_read_unlock+0x78/0xd0 [ 719.008329][ C1] rebalance_domains+0x8da/0xa10 [ 719.008355][ C1] ? rebalance_domains+0x132/0xa10 [ 719.008381][ C1] handle_softirqs+0x2a1/0x930 [ 719.008401][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 719.008418][ C1] ? do_softirq+0x210/0x210 [ 719.008436][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 719.008453][ C1] __irq_exit_rcu+0x13b/0x230 [ 719.008468][ C1] ? irq_exit_rcu+0x20/0x20 [ 719.008490][ C1] irq_exit_rcu+0x5/0x20 [ 719.008503][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 719.008521][ C1] [ 719.008526][ C1] [ 719.008531][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 719.008552][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 719.008575][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 5c de 08 e8 4b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 719.008588][ C1] RSP: 0018:ffffc900047feef8 EFLAGS: 00000282 [ 719.008601][ C1] RAX: 826ce800de74c600 RBX: 0000000000000000 RCX: 826ce800de74c600 [ 719.008612][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 719.008625][ C1] RBP: ffffc900047fef50 R08: ffffffff90af92e7 R09: 1ffffffff215f25c [ 719.008637][ C1] R10: dffffc0000000000 R11: fffffbfff215f25d R12: ffff88807d6d3b80 [ 719.008649][ C1] R13: dffffc0000000000 R14: ffff88802b2abb80 R15: ffff8880b8f3b5d0 [ 719.008670][ C1] ? finish_task_switch+0x265/0x8f0 [ 719.008696][ C1] __schedule+0x11d9/0x40e0 [ 719.008731][ C1] ? __sched_text_start+0x8/0x8 [ 719.008766][ C1] preempt_schedule_notrace+0xd9/0x120 [ 719.008791][ C1] ? preempt_schedule_common+0xd0/0xd0 [ 719.008814][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 719.008836][ C1] preempt_schedule_notrace_thunk+0x16/0x18 [ 719.008866][ C1] lock_release+0x8c2/0x920 [ 719.008890][ C1] ? percpu_ref_put+0x19/0x180 [ 719.008913][ C1] ? memcg_account_kmem+0x1a4/0x1c0 [ 719.008938][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 719.008963][ C1] ? percpu_ref_put+0x19/0x180 [ 719.008987][ C1] ? percpu_ref_put+0xef/0x180 [ 719.009012][ C1] __memcg_kmem_charge_page+0x260/0x380 [ 719.009035][ C1] __alloc_pages+0x222/0x4f0 [ 719.009059][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 719.009079][ C1] ? zone_statistics+0x170/0x170 [ 719.009112][ C1] pte_alloc_one+0x7b/0x310 [ 719.009135][ C1] ? pfn_modify_allowed+0x560/0x560 [ 719.009156][ C1] ? __might_sleep+0xd0/0xd0 [ 719.009174][ C1] ? rcu_is_watching+0x11/0xa0 [ 719.009199][ C1] __pte_alloc+0x21/0x150 [ 719.009225][ C1] copy_page_range+0x3118/0x3900 [ 719.009277][ C1] ? pfn_valid+0x450/0x450 [ 719.009309][ C1] ? up_write+0x1bb/0x420 [ 719.009331][ C1] copy_mm+0xec3/0x1690 [ 719.009357][ C1] ? copy_signal+0x680/0x680 [ 719.009374][ C1] ? lockdep_init_map_type+0x98/0x8d0 [ 719.009407][ C1] ? __init_rwsem+0x11e/0x160 [ 719.009427][ C1] ? copy_signal+0x556/0x680 [ 719.009446][ C1] copy_process+0x1979/0x4030 [ 719.009472][ C1] ? copy_process+0x94d/0x4030 [ 719.009496][ C1] ? idle_dummy+0x10/0x10 [ 719.009519][ C1] kernel_clone+0x24b/0x900 [ 719.009539][ C1] ? create_io_thread+0x170/0x170 [ 719.009567][ C1] __x64_sys_clone+0x1a7/0x220 [ 719.009586][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 719.009616][ C1] ? syscall_enter_from_user_mode+0x2a/0x80 [ 719.009637][ C1] do_syscall_64+0x4c/0xa0 [ 719.009660][ C1] ? clear_bhb_loop+0x60/0xb0 [ 719.009680][ C1] ? clear_bhb_loop+0x60/0xb0 [ 719.009703][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.009724][ C1] RIP: 0033:0x7fb07399cdd9 [ 719.009742][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.009755][ C1] RSP: 002b:00007fb07491dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 719.009771][ C1] RAX: ffffffffffffffda RBX: 00007fb073c15fa0 RCX: 00007fb07399cdd9 [ 719.009782][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041064400 [ 719.009793][ C1] RBP: 00007fb073a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 719.009803][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 719.009813][ C1] R13: 00007fb073c16038 R14: 00007fb073c15fa0 R15: 00007ffdfd187e28 [ 719.009834][ C1]