last executing test programs: 14m57.043630523s ago: executing program 3 (id=1199): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) 14m56.52271291s ago: executing program 3 (id=1202): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x9, 0x7ff, 0x2c92, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], 0x0, 0x1b, 0x0, 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x2, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}], &(0x7f0000000840)='syzkaller\x00', 0x1, 0x0, 0x0, 0x71be12af7866cf22, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1b081, r2, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000a40)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x1000000}, 0x94) 14m55.871578973s ago: executing program 3 (id=1207): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="88b13e", 0x3}], 0x1, &(0x7f0000002380)=ANY=[@ANYBLOB="1000000000000000070000008001000010000007000000000000000001000000"], 0x20}, 0x40000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fffdb2ff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x14, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x8, 0x1, 0x6, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000680)='syzkaller\x00', 0x0, 0xe5, &(0x7f00000006c0)=""/229, 0x41000, 0x1, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000940)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r5, r4], 0x0, 0x10, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r11 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x11b, 0x2, &(0x7f0000000900)=r10, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r5}, 0x6) r12 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000280)="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", &(0x7f0000000380)=""/167}, 0x20) syz_clone(0x4e388580, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 14m49.758512223s ago: executing program 3 (id=1234): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x4, 0xa, 0x6a, 0xfa, 0x0, 0x4804ca8b, 0x40218, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x778, 0x400}, 0x4020, 0x1, 0x4c8, 0x5, 0x9e3, 0x2c8, 0xcc1, 0x0, 0x7, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x7, 0x0, &(0x7f0000000900)="25a688a800a344", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m47.662629915s ago: executing program 3 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/127, 0x7f, 0x0, &(0x7f0000000340)=""/182, 0xb6}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/127, 0x7f, 0x0, &(0x7f0000000340)=""/182, 0xb6}}, 0x10) r1 = socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x6, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r7, 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_subtree(r8, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 14m26.914383149s ago: executing program 3 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/127, 0x7f, 0x0, &(0x7f0000000340)=""/182, 0xb6}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/127, 0x7f, 0x0, &(0x7f0000000340)=""/182, 0xb6}}, 0x10) r1 = socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x6, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r7, 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_subtree(r8, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 14m11.349956514s ago: executing program 32 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/127, 0x7f, 0x0, &(0x7f0000000340)=""/182, 0xb6}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000001c0)=""/127, 0x7f, 0x0, &(0x7f0000000340)=""/182, 0xb6}}, 0x10) r1 = socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x6, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080)) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r7, 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_subtree(r8, &(0x7f0000000280), 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 2.482476075s ago: executing program 2 (id=5353): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffff0000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 2.226480553s ago: executing program 2 (id=5358): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910510000000000040d0000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000001b40)=""/4050, 0xfd2}, {&(0x7f0000000b00)=""/4101, 0x1005}, {&(0x7f0000003240)=""/212, 0xd4}], 0x4}, 0x100) recvmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000840), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/47, 0x2f}], 0x1, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x142) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000054c0)={&(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000005380)=[{&(0x7f00000006c0)="4b3e5e930b4d9fb44a481e12939f315baccee42dcc1be85ec8a5a99cdd798e18ea4c1340f5f76c4bfe682ffbbfdad2a1ed8e093543413dd4b3b9fb69055e94531adeed2f6c46d14c7ae787d72694df20eba1083d598d0fe7ad5de86a6fa8af3df2691cd983f73b2676acef188afb5243af61de3769564d36004fa2ba5787a8209af4fadc8da08d5e237e92c47f43923b881129527e6f264d0e661b63df1b1156f4da30fb2fdaba14", 0xa8}, {&(0x7f0000004380)="9a045c4623d10ed0e52f67f4d23a7a1ee6ea1e49bb53207c4e24e80dec2089e36212e8bfb2c40026d39b9a44ee04e2449763a67d3427e2b246379c2b95159262a99a3e8e0469ec6382cd79efa754193c76776619691b9062b76c2594867d07a8531e03bfd80311433358e23808202138e2f2230305e2a027e73249b8d256bc3e45ebb60b4db3e6c30e5051a7a6bc9bb2e7e1b6ddca4955a1bee80ba6b0ead9135476f5ea00bf311d6f030300bb82f2d3da7fdf130636374b0faa7a7529b2644535ba88763269fd6705237bbd333bdddd8481a7c414c557065703129046e1a9ee7a8ed2018b649855f9aaad98d55270378d3c070c0795d384f93eece227c9f01c1bfd92be69c672e1e184c967d0291b82e9344202342e2a64aa2a00545d4a27db27a89f423021e851149af59f596b601d766656ca52ec77596a1c4a56964277f3127526cd292dfc6eb2800da6659468c0daef12ce56feb0b7a0289d4137f94a89cf96221fd03d38be08e9f4f10dfd1e6639cefa72d4fb13c165f792502c054a14632ad3d177c9abfb5391affee81bd0db7623ad693eb73b3c728bcd343ce2b6dc605c2135cca1198d63601296d15927c66845a79d353e1dc529bca2b74b03a0056779b03bbfd51b64182a93d83ecf5c0123ae48a0607e7c3d5dfd8fc7bb9c6bd89d5f5448b1a3cf8d4a9940e744ffdd13f4d922261c6a52c7c1407cf913bcd9485e211c27f8a99e10de874dd39084b25b8cc4adcfb0d3e34b65d9c0f0de7c19340de58785b1960d62cd01773755acede132ae50bfdc241bc4deb42754c2d8fe249db9f891536316c9d7d9429765fc5ddbd32e877cc2035df89d8c3a228f081803c5373635a064cf96e6071c6f7bb1173073eedfdd73f1b986e3f0f6e01196e08179228eac37d421e75c003b80540e49e1780aa707f9597bf133f0bc45137b7d7a76b4b1b1d32b1abe09ec7a7489551f2c54c7768a515c04d0fa89f59813d8017ae46c0580a14681511d0cf4aad86c3c83f78a7db61e60fc029761e3652ffa0ea2ecdaba955446428a8eaea53583574e52b9533c1e9107448d75553ff1d11d123289e9c322e64e87c2cbc441377b0590b4c73e34225e30f4aeba58fd7786f4c9e815143adf39ae3ae86ee097f42bbb5a9db5b5aa9b4b089d6465e092bd19ff9b677005b0dc247479156f8c4dfca633108b60a5c6002726e80f08c3bb6a61551979d865ecf14334e53f7c67f40b4cab8b023707396b64cac979c0e65c7abaa38c3fd812300fff5c42cd21d990504b72b456e7cfece099ae2e8b03a757d2c3cb015b579ed7d135f5c82e71409621d97c3c5869888208b083e2bae6a62db26dd3dfeec276e746c7891b0cbaee7b0296323f3b48dedfd97bb408e748b05c21af2381a0adcb5cf580c95b50934760cc8100d684c59a43f94c9083b5165be3e1183934afafda8909c0ab94a8ed87ec104af8e37a773187f9610413b17e6d7c8c3b1c0af82d7879f4f779950dd94d313b46e2f6ed965db59b5eb5ec98e5fea753909794f7fc09fe5b3f1a95e7fda5c7d6bcf6128f41922ccd47773c3a56eb8660b9807b6fad7ccdbfa9c536c79756974cee14b1a53d85359dc426804a193c57d28765df99e7be8dea01712c967b381eb227a785bfee29d20c341b212182492d53294a965210df613f44af780565463ebcce20a7d589df1b9ad593ed66baac63262af27f0190a0be236d7f19c9c20316a963850452dda2545a378110fefdb0ce8d9976b4b85dd68b16ae9d9c65e88430b12ff805f9aa55d2554ffcba8e404f8c7448ff7a4c38774c1725674e8da290d06d37376588762565da66c47c8f32e32000e94c73c8e77cb12840e25531bd731855f978a00283aa2e9854f37b2d6fbcb361355584e2c751f209e1a1407a468b332baadfea4d4b3928906284a70b3d3d9799f4cf289c7904b5121bcf3907ff972302664a3442ade29f2bef9e73f11f94cd1d41b7fcc6b978656e4bff0fef2bb030838de102944e915ad8f39fd592770df637b1c20ff5c49f06f781ad3090add045d38639d5f7f7d6e088662cbf81c921b0a012e899803a76d05ecebad36aceaeb7afd1b6f4b709c90b22ed36f9dab01e7ed04df0c5dc650db253b67a4f31d88e011aff4dcd9b884ab725c5dc29a00c3f56f37d31545c988226084b172a2ccfd67166f18457e4d5bb7ffc9a07223534cf423d40162628ff5d6c2d6481d1367eade5b7322887bca7c6552cdd48ca9ee11a94c7787a184ecddfa0ae61af440e74cf8835610bd9497c0b4a3f99655756d62a6c4c65df8e9928d442e83bf72c9593294ee191d849a0cd01fd16162f80b8757c235f1e714262ba27d696a485ac4d3e51cf14ff37a592236e13c3243797f5edd303c11b21d9ff9e4ced9af38986d3373ee3b32dc4525087f06c4d6fbde7877c3431ff5401a88374c4958a4d9cf357d7606d9eb4c38dd706701494854f05eca625803f14b04fdb7696b40d931acd7412ced0a578d2b0b306381ae66fd79bd27a05e12a64969fde7bea8afbd53ee18ee74bfc25142406dd3cb31cfc9b387ee5d932fc9c587185e88494dfed7cb4d1e4394a79a6c3456803ca53b8a4ae7580cfe74d3b7e2de6e1e59332dd04ca7aadb22212cbc4c07d74c3a3a035efab1c3e845e0144d034db5812c0c8226fa7e8f2f9e6a697a383ca6705bf8dafa8adb8875f78b42a372e05a1311d7f2a3df86b613d2c8dd11dd7bf74c50de8bf2a8a1fb21b09f2b2056984196ce41678f56464b2de8021feaea0056f2438c7dc501e9b95c411cfd7d8825660cc543d02881ca8c5e71ea03698498843556513ef8528c18d13eba57dae56b08a464f6bdf6094953e309dd7a90e2117459e6dd16fa7ac69ac44810805826787c775520c2f9b93a06849a3c0d967633a8e97b45b72f02795bfaaaf97eb0f0daea441540c12ebb66ea24c9391e1ce524c288eb190b6cc23768e8103b71bc6978921cd117ca76e1efea6585de8673bccfb826a2f4a58a2e0f31ab9f1790548f514da0c46caa88006d5480d5bcf6735558cc02dce40c5bc77c91e26c929e4d8baaaf366632cba132a7eef050c5e6b5d60b5c148f872ab0786c3094358c0554997f00d42a5ad9720dace2e26eb9227141143cd96772f55115abbbb8809ed6d638d2f9f97f97baf18484a3128ee5fb169b1ccf72ecd525318b79d613a6342ff550a8ceafe7d3baa940ad40ecc65bbba7ce5fb43adb5622e04982c8a2c03a198c430fb16e4ea5a6b6231333de48365bb3346bad74f65bf599e587b27e47dd4c02d680cbd025b4ae5c08d1bec970a1d36a0d39b85aab268a1983bbc5b497214d1f67ea2289f25659d4ae7f1eaa14fd45c9398473c27062b621645b9d0215d3e12ccd16cd9fe54b9452de0c2820104ed9f1a6cfcf216c062c644b885ba2240586bc0a6db7444c1ad2d427148ae577142d0a81d22adbeba1bd06988ab4dd65248dd9943429b547ad576768233752c55238515c60bb3b0e2da9c423d18538c272f635cef69558e5f999ffcfa4cb5a22fa091f12ef5355f25a8235dd1cfa9a9dd1897df6e52fd14adf7904c8419da8dc7345fd7147e52f7e63c6634b4bcf018bf18c02401ff6828c32d5793684a0a0b4e014f39c99f204eabc7ab89fdc6f74fb35b3e3e8aa6862c8c684776471d624685b46d0ab5ac6222164bd00e821a2fd83c88cb8d515de1d51591c8352d79ecf9201b23f30dc4409570940d49b494366ca95556c41a60bc8f3435c6f6b6ad0373e237a5760760038e5ac6aa6dc2a06c3299f0fdadc8113d4722d24e7db35bd24eb32226be0ccf6925d4787a51b800cab20e8c0967313ef0be3a6189ee682f03aabfba83a994c6acca9ed27757699ced66a65b6c7a2aa018fa7b8b5aa3188626ae5c8f64b8e8af9623ce255616c618737ecb13784b9b215c988be0bc4edbc0d5b6084875f895309af58759ff170f8e5c334e1c7ef7c821c0f7a57e5c4003e2e3dbaae72cd267ce96df57193fb24f24d313f8bb65dd68683719c95be0f3d42eefe5af64c4ef0a81d5537ee081fe13a958c68885097796a0aadf5ec0dfdbe391e79493f705b189940b973744956162b8a6ef9ab9df53ee23a82bf0dcf73e7df278b9d265889c7ef1af224f8ed41f71de928148a3640e82c4625ed940873788ae37774fd090d0484ebbefafc46a89390ea544628518a560356f8f8b72c26143a3a119866b20a2af6e66f6e99d78cfa8395161e9d28755156ec40184e4005819ec9df2544575d9761db6d85d41cf1328d2a86607c74f0b935cf458d1fc67c75f7470e4c19cbb956e48df16b45b4a45f9299728ffe5e2b93b308415cbfdcf814a85bab256d33244037cd2a3d141c19a59566f0a0a0d431b3bbd5df579f6163afe04c602b489ac93d29dc75dc1edb8b1c37ed8ccfd474433410895824a0f2c0617ee361ffae85c1df5e898911bc4f59397d3a9a7ac541b06b1f1bccec58fd8feab6cc3f4f1eaf2a9f30e7154f39c65f40574412c1410a31243051d3c8b96041c3cd3241835b5ad1abbe5e779aaa94e0952b88773ff1b5de12d2a23d18178fa97032607c55f86782669a0cae02399bc77f679104a6edd2f3a026cfd9b2cb0942f7dabad34988f488eb518fd1ec82e51c2f8861e37e351f23eeab464d9ababbf836efa215c882d855cdbfd82c9d04b4d1fc829267e71ca04ecd45e071a783e49b274fdd456e3828e767fe8fa23e84354391d38eb610dc34e5de51c764d2f2ce4d9208005cb9a6fc62ccbd2e02c1bcf0ddc52718392152dd548b52e36533e7d3b94719935e014723fd964dbfd1cdc4a263c947421853c79e0253fb6e03d107805f9767aae548ed82682d547d114e8044128227f80bcb057c85a112b273bafd38f3a23f459f091d9ffae9418599c1c0d9518c6949aad9d3e2d44bb66c4463a8985329a3a4c1a6b04cde77638c15b1617d95c50aa16a27f3fd9664912ccbbbc1ad839696e33e2b0f779ae2cb28f4d2901cf050d102df5d7fd9dcb531877d65f4f66da712ffd6e0773223a8ca6a4149e1535f992143f83e1a1d3e6914a8c0e3c93ad90c36943adea916db35a3b55f1b8f00df1ebc65ebd296ad7a4e544e97f07e89b6e25bb2b40a6839cc57a9cf4d38fff3f0dacc8e60c93e97b5989c02ab12882976c51c256442ed1c243909545eaae88c235bd09c134c6f62b7b09e8f0c91aaccb71c14f2678586fbde4a1115ab27fd1125f50e585b962d2f4613f323d4a0afe3e402de98135465deb9af8d989e928688453b9fcc05738d50d40b6299ba4ac4913ad07fcb49495fa5b222d54f7e00b2f1d1c0544e1f96f860b7ed9330786eaee1685c9139e088c71e8cd75bb66bf57220fddaeab9b47f3540abdb44aef1ae32e1e0cd9312862ab851759b03b912180ad58b892f8a3fd8965555065b078258d98ad391f9ada9f0a59c73d865c2ab0a8f80ba30ad3b4b18a1acc702058d782a14c208b9d98faf74c71f98dbde263b1ae59ab94f444f20e9299c28779df769f7e4f82ae07cd256f3a194656570c8afbfd76a25f967741c80f32bd97a298afbd29f73b37329160a5b7546dab63030cd80c6fe5e9aaadb0343ba7cca300175f89de63ab32df55b11f2828fec034205e581a17da91b2b07b97621ba5a0c92f2dc76664fcf6edeedcd5c978ae711cb44677eed386a7212881f10e761f9bd90d92085810299397b4986fd19509e0c6aa47f08b2c1639044ad04f5f55ccfaf99cf61592e75c32d1079c2d21f2029ed60de70b277847e4a073dec5a1d8c9d3bf7581cb", 0x1000}], 0x2, &(0x7f00000053c0)=[@ip_ttl={{0x14}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@rr={0x7, 0x7, 0xcc, [@local]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x27, 0xbe, [@empty, @remote, @loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @remote, @empty]}, @timestamp_addr={0x44, 0x3c, 0x61, 0x1, 0x8, [{@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xb1}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x81}, {@multicast2, 0x32}, {@loopback, 0x9}, {@local, 0x6}]}, @timestamp={0x44, 0x8, 0xa4, 0x0, 0x5, [0x7]}, @timestamp_prespec={0x44, 0x34, 0xb8, 0x3, 0xa, [{@local}, {@loopback, 0xc00000}, {@loopback, 0x3}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @noop, @ssrr={0x89, 0x7, 0xd5, [@dev={0xac, 0x14, 0x14, 0x32}]}]}}}], 0xe0}, 0x400c041) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910180000000000c300000050000000950074"], 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x1, @ANYBLOB="fd"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eaea7110be0000000000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004340)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0xb, [@const={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0xe, 0x4}, {0xd, 0x4}, {0x1}, {0x9, 0x4}, {0x3, 0x4}, {0xf, 0x2}, {0xa, 0x3}]}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x30, 0x0, 0x5f, 0x2e, 0x5f, 0x30, 0x0, 0x5f]}}, &(0x7f0000003340)=""/4096, 0xab, 0x1000, 0x0, 0x8, 0x10000}, 0x28) 2.068483229s ago: executing program 0 (id=5359): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000140054e451630000080000000100000001000001000000000400000007007f0000000000000006002001403d82ae3a45d9b34a5b39cfc2b32a5b7eb7aa91fe5c14e34dabe4c1ab8be242b05bb30bd7dc959e2b28273ab0835c65475d4ddecb408e710fc0e11cee8d6ec5c21582e52cd1f6d884abf8b2c2ae99092245a411956c0c7c59b2d2b1b28f408ce138dd7c139fd9bd53eea24eeebf98cff190fca469b47ff6e9d97e5739756f563c35ac8136001379036a36a48e887ecf7f7db88998558856e1ffb96e315bde5dcfde0c51610ecb82427fd238280dd7d0fbe73a00324c7e393a0cc24116d21618b50a30ff3c802aad152bf888e48dd1e98808c439b572e41f866c8ea92dd6d593f7b297c88b8fbe76d14f8629ffc8f8a7729f2167cceeb456341864d346531cc787022be4aa477e8dce946aee4ff4f028210bad72e8f0be5428e11d088e14cd1f13f65a047835647a65f046a4059ab181e44c9ea15c846ed052a9f20d49b8d540b788438a9931d14d4265c264db3e8b915baa3dd4c6f3423c0916c0f79b307a6c8172e2d4536c60fe1a310f5ca5270e8594c1912c218efc7e1b5aa5faead213f3f64b1e750963336f27591ef523dbc7c343abcc053afe518e4553acf9a2ad9b9efe87a706da"], 0x0, 0x34, 0x0, 0x1, 0xff}, 0x28) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x20, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r1, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x80000000, 0x8, 0x8000001, 0xcb8, 0x1, 0xd, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x6d, 0x44, &(0x7f0000000680)="b6951c3dabdd8dc3672634a4435337adcf10d3d0d21258e362b8f2d8b613a265050b0092f8f0a234e96ea0da4fadbe9bc757c4b7fdacea976898510a3719a81b583a7ab78ddc2ac99f6b709acb2c4ffaa94026a641aa4fb1459ef3846f7dc433fb7c005557508fd13417a865e9", &(0x7f0000000700)=""/68, 0x80000000, 0x0, 0xf4, 0xf, &(0x7f0000000780)="1d9080a04ed5c63725922cbaf787a813e49bce43a150e032e433652c88d6e6847fd2a33763bcf9a26b67186b25cea23a07507dbd277e128e3c77fc34ed8199ef7d98908e0288e1e277218bcd599b69a407f78522af1cf2b769f6930895e0419cc1860b0a7db8bbb57531ff9181d518dfd4402dfa563e800e292840a23ae0effc2eb6aaf2789d55e1bd769adb03a3a330d99e911cab4795a31a0f822ef281935d19a719f1e2f493313de0257ac41fa29c37f9aa61fa9e3b96d75943f7ba557d737500fb848d82858f0993cecebda485c8e305d27c19eefb88b83895e99c387922af1098a850c1118bd662b4a2bfc6aa563f88c597", &(0x7f0000000880)="5171866488c677e8ef293a842cad69", 0x7, 0x0, 0x10001}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=[@rights={{0x18, 0x1, 0x1, [r3, r6]}}], 0x18, 0x4803e}, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r1, @ANYBLOB="ab00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000000000000000000000000000800000000000000000000042"], 0x50) 1.969580712s ago: executing program 4 (id=5360): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=""/152, 0x98, 0x0, &(0x7f0000000280)=""/245, 0xf5}}, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.941724633s ago: executing program 1 (id=5361): r0 = socket$kcm(0xa, 0x3, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b", 0x7}], 0x1}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x107004, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0x18000) setsockopt$sock_attach_bpf(r4, 0x29, 0x15, &(0x7f0000000100), 0x3d) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.863083256s ago: executing program 0 (id=5362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xec, &(0x7f00000006c0)=""/236, 0x0, 0x0, '\x00', 0x0, 0xffffff90}, 0x94) 1.709091011s ago: executing program 0 (id=5363): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) (async) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014000600001208003c0043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) (async) r5 = perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r5) (async) r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x7, 0x20180, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x18047, 0x9, 0x1, 0x1c, 0x22, 0x2, 0x1, 0x0, 0x7, 0x0, 0x6}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9fcb010018000000000000000c0000000c00000009000006000000000000007b00000000002e2e005f615f5f00"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 32) recvmsg(r10, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40002102) (async) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.520031568s ago: executing program 4 (id=5364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) 1.398934802s ago: executing program 1 (id=5365): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.285393196s ago: executing program 2 (id=5366): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07e03406000043fe0000070600000ee60000bf050000000000003d3500000000000065070000020000e3260700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad350100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792138e042ce31c2b7ae994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe3614e887ffffff7f381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b197baf8ebb7c11a8df40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1f9ae5de8923b27a6fdc20441018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be00000082018f5f4b2c00000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc6273786b5bba17e9b8f1c2af8e23c411a4d1124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722d98cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6e312bdb8261d0dc10cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e009000000000000002eb85073720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f3e9004468cf1aba4a6f22ed0eb3681c6963205eefc072ab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd2294320fad0d814f230f954eec844f6b658ee04eb1c6d655a3383928d6e0307a7097b0a5fa5040958d2b7ad0eb7605a7de7ce9cf0e6b472d764976fbf7edd83dac8b9273976bfd6090de0a73cf8a9b2c23500a4054703e2df18d8498356e3c1cd6418e149f8a22e95da26221d8a69b642915471f4917571357aa9df385c0532d6e70263ec616f88dc8f93c886ede7743c53d738b9c7021f0032970eabd2808c53128b3eb600f2614256184c506454980e542ce450029aa6de147a8c81e6f701a4b9b278b08e4b02710907923f0797f96413054f2d1b5f2ba0c49567b53db5d862acf2c42faa37c4a8738f64ed7fef9ffba58a3c1ca52b55aef071e4f11334e3a70918e5b18dab84decde74d616b5b05c96378acc79375a7ebdb54b01d512de48184950f5cac97f0a6dcc6d12c48c6e3b925fee7974ca8f3009188bbecc30e1adbc290ac99555ec069636a8079f8ca80343ff84e896dda2d4148f982feff6b38699fb57aab5596479f84b59daa9a406c5119761d5aabb51c5175461f8b0aa7265c380317f08775d8a8a8bda64ada2c6b3599f548d6272937e4d89ef6ebcecf84fa856024b55dd057056bbae005f0fba858f3abdd9c115064000000000000000000070b0bb28fd1eca97a90864863235d415379d1bdb3d35015f85be2ae802455d3b079f12aa837996ca1ce7280cb394b4c13ca623c30b19887d41eab495f698284a1bc17ff100000000000000000000dac089bdf7984e3300000000"], &(0x7f0000000100)='GPL\x00', 0xffff0001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 1.276976496s ago: executing program 1 (id=5367): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10140) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) 1.230795788s ago: executing program 0 (id=5368): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r5, 0x0, 0x80804) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf}, 0x80, 0x0}, 0xf492) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}]}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) 1.009098175s ago: executing program 2 (id=5369): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}]}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca"], 0x9a) 1.001659976s ago: executing program 4 (id=5370): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, 0x0, 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="180000007e5c000000000000090000009d5bfcff040000006910fcff1000000085100000fbffffff175ac0ff1000000018270000", @ANYRES32, @ANYBLOB="000000000100000018110000", @ANYRES32, @ANYBLOB="00000000834d608f3168ed77020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001200b704000002000000850000d286e3640245361700", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000002440)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xa, 0x3, 0x1}, 0x10, 0x25a7e, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 862.667091ms ago: executing program 0 (id=5371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4c}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=r0, 0x24, 0x1, 0xa35, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@ifindex=r6, r3, 0x21, 0x0, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xb, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x7}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x1}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x3}, @float={0xb, 0x0, 0x0, 0x10, 0xc}, @union={0x10, 0x2, 0x0, 0x5, 0x0, 0x40, [{0x0, 0x1, 0x4}, {0xa, 0x1, 0x8}]}, @ptr={0x3}, @struct={0x3, 0x6, 0x0, 0x4, 0x0, 0x8, [{0x10, 0x3, 0x6}, {0xe, 0x4, 0x7fff}, {0xa, 0x1, 0xffffffff}, {0x5, 0x1, 0x5}, {0xe, 0x0, 0xa3e6}, {0x0, 0x4, 0x31}]}, @ptr={0xf}]}, {0x0, [0x5f, 0x5f, 0x61, 0x0, 0x61, 0x2e, 0x5f, 0x0, 0x0]}}, &(0x7f00000007c0)=""/32, 0xef, 0x20, 0x1, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x2, 0x7, 0x6, 0x10, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x1, 0x0, 0x0, 0xc, 0x2, 0x10, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xca0a}], &(0x7f0000000280)='syzkaller\x00', 0x88fc, 0x72, &(0x7f00000002c0)=""/114, 0x41000, 0x4, '\x00', r4, 0x0, r7, 0x8, &(0x7f0000000840)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r1, r1], &(0x7f0000000900)=[{0x3, 0x1, 0x5, 0x9}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x23}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x4c}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@map=r0, 0x24, 0x1, 0xa35, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@ifindex=r6, r3, 0x21, 0x0, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xb, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x7}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x1}, @var={0x4, 0x0, 0x0, 0xe, 0x3, 0x3}, @float={0xb, 0x0, 0x0, 0x10, 0xc}, @union={0x10, 0x2, 0x0, 0x5, 0x0, 0x40, [{0x0, 0x1, 0x4}, {0xa, 0x1, 0x8}]}, @ptr={0x3}, @struct={0x3, 0x6, 0x0, 0x4, 0x0, 0x8, [{0x10, 0x3, 0x6}, {0xe, 0x4, 0x7fff}, {0xa, 0x1, 0xffffffff}, {0x5, 0x1, 0x5}, {0xe, 0x0, 0xa3e6}, {0x0, 0x4, 0x31}]}, @ptr={0xf}]}, {0x0, [0x5f, 0x5f, 0x61, 0x0, 0x61, 0x2e, 0x5f, 0x0, 0x0]}}, &(0x7f00000007c0)=""/32, 0xef, 0x20, 0x1, 0x2}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x1, 0x2, 0x7, 0x6, 0x10, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x1, 0x0, 0x0, 0xc, 0x2, 0x10, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xca0a}], &(0x7f0000000280)='syzkaller\x00', 0x88fc, 0x72, &(0x7f00000002c0)=""/114, 0x41000, 0x4, '\x00', r4, 0x0, r7, 0x8, &(0x7f0000000840)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xc, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r1, r1], &(0x7f0000000900)=[{0x3, 0x1, 0x5, 0x9}], 0x10, 0x1}, 0x94) (async) 824.667332ms ago: executing program 1 (id=5372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) 823.883012ms ago: executing program 2 (id=5373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x43}, @exit], &(0x7f0000001740)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)=@llc={0x1a, 0x322, 0x7, 0x4, 0x81, 0x34, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="c5c8a05aa91df60e443f1da1b18ebe441c34309268c8f63d9f47dfb84947281eb0d888b50b12507d6643ecb77107ad3ae457fb39ca83ac25c99774a1b2b7db80a1eefda188608cb9ec7e90dbfa4def2c3f0acd6eed41272ec9d6bf00f438e2477f798c81dfb743e4b80d5b4b15ea3ab784488300fdb5f4285c2ffb4f2b3bc0216b2932b66de7b6f9cbcfe341b0", 0x8d}], 0x1, &(0x7f0000000400)=[{0x40, 0x10a, 0x6, "7fe6573d64aed36a10f11399927b1782bbc5ed0d9254e3b18215c2930241fd431996e983388f4071e6"}, {0x58, 0x10a, 0xfd8c, "b85b58d5affb16ce9bf951ba3bf243ca67c84f986e1c4f120cc4e4519633fcacccdbdf0bd1ab66fb8946552d57f07ae8ca318932d0baa23489cbdf20f753aec524"}, {0xa0, 0x111, 0x1, "0061ddb7828296a6973756a462dd08595cadafd69539f677b77fb05f660c9dd8f7385a75af75cfae895583481598c2cad5b247cdf0b76d7be7fdebd85207dde3cce82c42d2d91e53455e58c549c378329bac4243790e4f0c25d44af38743d15ca69362a8209b23599d0d2fab8c56930c48413c4a58317e4ff496cb2cbcadf7002cab0f26118effb9e692d68a35284b63"}, {0xd0, 0x3a, 0x8, "0e07182dfb5b83c5ddaf7bbcd41280611af8819ba54553aec83c077cba3af08a945dd7b62b80698f009862b47d176e18278833acc32a276a031e42da8c8342f2077a233166a1e9e6311ed16a2008546724f5d96515254976966f768b9cee4a7e465c4be034697302321a77a88bc45c42e9bcecb9e7df4ef4740b8ca4aad113044940fac382ba5e4f9ed6288c965ae077c0d39cfc0cb68b057f8a52df86fd62c7a3442a1c72c1589a7be72799d4648a2b3c087a04959c28e91d5dd43ba115"}, {0x98, 0x103, 0x317b, "21a08a8b1737abf84a7f968beb5ee2eb1ed07e66a5a34c3f0d6f8de92f3aebe1920a08e1155c07b7fbe62c6bb5dd94fed026e8b069968a29602eaaba19fac8a4a0834664cc69522e173613080e60b07872c83adc911547add66666bed7faf275637033bb5a779f88629064be0c287714ad80c401e676b1b2921a688b19d78852cca01cd46d"}, {0x90, 0x103, 0x200, "e39b56a92239f3fcfea98106d6e05daad9240ac9a471789f3fd0964174d2d30161745758b758e50aa11b41383e7255f343402f545b4cbea7d450914b4aa3036ba12b8cddbc5de2523a0d7b8067548368b9ce1c69d8cef5fc92b8ab49400c207c2f0eac1290a2179596fd05a1a0e06ae1394de78a081486ec674e00221a04eefc"}], 0x330}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400081fb0a0002000a0ada1b40d80300000000000000", 0x2e}, {&(0x7f00000000c0)="3d6ba19a555a21a10663e6c7e9d747f8c5e9fc849d393eb413a1147cfcde71a2989b4e51043dcf4019041afd500f14859025bcb0406ba42f32f8231fe566", 0x3e}, {&(0x7f0000000100)="90587a95e306a85e7f7d3420181ed7c72b01b9ccf2867032ebd47602e87ef9", 0x1f}, {&(0x7f0000000140)="0bb066043629fb7203783d62cafbc30081ce2d6d91663b7ae88546bc59ab24d818225ce719074e5d5b44e10c801bdf2fffc8e10de0d260eccab54f80462bd294672008ed9029f868d921e4544830e21615d551b9aa75749d1578a0bed7d01d26d9238f6b9f87f6409d622cbcc54403773b4853d14d5f9d8c581653ab8599752372c5bb1642778d1dde2730d6b0c82bfe1024baf359985ed41f5add04949bead5be542c755c534a73698bdff3493e7ffca2d1bdc04c75a2a9acab9d94e13bc7c8e367cc79e73e9a05", 0xc8}], 0x4, 0x0, 0x0, 0x5865}, 0x0) 706.827046ms ago: executing program 2 (id=5374): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/8, 0x1a, 0x8, 0x1, 0x10000, 0x10000, @value=r5}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x28) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000140)=r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 706.592956ms ago: executing program 4 (id=5375): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 705.420486ms ago: executing program 0 (id=5376): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc108, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x10ac75, 0x400c7a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0x12, &(0x7f0000001dc0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0410209f04426ed6cd1473ffe6eff1b001950000ab7f95065411642000000000035100bda4c4334d9c1a0eabc6b7e2b9299b91615fc4a4bf9cd2c1f3a5dbaa1ac6a32d55890792a8d6b86bbce6c7a208338f413f3"], &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0410209f04426ed6cd1473ffe6eff1b001950000ab7f95065411642000000000035100bda4c4334d9c1a0eabc6b7e2b9299b91615fc4a4bf9cd2c1f3a5dbaa1ac6a32d55890792a8d6b86bbce6c7a208338f413f3"], &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10102, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x2, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4, r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4, r3}, 0xc) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000580)={0x0, &(0x7f0000000580)}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="020000dffe0000000800000001000000800000009f6e1269a6bc1c8614b358b31393dc655eaf5be0047a4904e2f15d96f3d785ddc442ff84", @ANYRES32=r3, @ANYBLOB="0a000002b00d000000110000100000000028818300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000400"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="020000dffe0000000800000001000000800000009f6e1269a6bc1c8614b358b31393dc655eaf5be0047a4904e2f15d96f3d785ddc442ff84", @ANYRES32=r3, @ANYBLOB="0a000002b00d000000110000100000000028818300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000400"/28], 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) write$cgroup_subtree(r10, &(0x7f00000008c0)={[{0x2b, 'rdma'}, {0x2d, 'net'}, {0x2d, 'devices'}, {0x2d, 'io'}, {0x2d, 'cpu'}, {0x2b, 'net'}, {0x2b, 'cpuset'}, {0x2d, 'freezer'}, {0x2d, 'rlimit'}, {0x2b, 'io'}]}, 0x3f) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x11, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000a0000000000000015cf000018400000ffffffff0000000000000000950000e4ff000000814e6519437dca6f00000045", @ANYRES32=r9, @ANYBLOB="000000009960e45d850000009a0000005d3ffcff080000007da5fcff0000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x3, 0xda, &(0x7f0000000640)=""/218, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2a, r10, 0x8, &(0x7f0000000740)={0x7, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xe, 0xfffffffa, 0x6}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r4, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x11, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000a0000000000000015cf000018400000ffffffff0000000000000000950000e4ff000000814e6519437dca6f00000045", @ANYRES32=r9, @ANYBLOB="000000009960e45d850000009a0000005d3ffcff080000007da5fcff0000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x3, 0xda, &(0x7f0000000640)=""/218, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2a, r10, 0x8, &(0x7f0000000740)={0x7, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xe, 0xfffffffa, 0x6}, 0x10, r11, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[r4, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="0100000003"], 0x50) 693.340817ms ago: executing program 1 (id=5377): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0xa}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8501a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0xfffc, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8501a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0xfffc, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="040000f4af1b7fdac0335ec6121f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x1, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x7f, 0x8, 0x0, 0x5, 0x20400, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x464, 0x9, 0xdb, 0x7, 0x2, 0x9, 0x23c, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r0, 0x8) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='g\x00') r4 = socket$kcm(0xf, 0x3, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x200400, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x10) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000c400000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000100), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000100), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 620.853109ms ago: executing program 4 (id=5378): socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffffffb3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 26.67274ms ago: executing program 1 (id=5379): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)={[{0x2b, 'pids'}]}, 0x6) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x8, 0x5, 0x1, 0x80, 0x0, 0x7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x27c1, 0x3, 0x3, 0xffffffffffff114b, 0xffffffff, 0x2, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf}, 0x80, 0x0}, 0xf492) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}]}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 0s ago: executing program 4 (id=5380): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002340) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 857.884311][T17920] veth0_macvtap: entered promiscuous mode [ 857.905549][T17920] veth1_macvtap: entered promiscuous mode [ 857.957832][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.986422][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.998837][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.049264][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.061721][T17920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.096385][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.118746][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.143352][T17920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.169177][T17920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.193163][T18217] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3750'. [ 858.200751][T17920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.291922][T17920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.305287][T17920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.325487][T17920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.346435][T17920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.371803][T18219] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3751'. [ 858.618779][T13587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.656946][T13587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.736346][T13631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.760420][T13631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.705905][T18243] netlink: set zone limit has 8 unknown bytes [ 860.058651][T13277] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 860.075794][T18249] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3760'. [ 860.966506][T13621] tipc: Subscription rejected, illegal request [ 861.180191][T18281] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3774'. [ 861.546281][T18293] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3775'. [ 861.669531][T18293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.973116][T18315] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3784'. [ 863.113017][T18318] netlink: 'syz.2.3785': attribute type 15 has an invalid length. [ 863.152910][T18318] netlink: 'syz.2.3785': attribute type 5 has an invalid length. [ 863.198263][T18318] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3785'. [ 864.133373][T18333] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3788'. [ 865.796727][T18361] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3795'. [ 865.967689][T18367] netlink: 'syz.4.3797': attribute type 15 has an invalid length. [ 865.997365][T18367] netlink: 'syz.4.3797': attribute type 5 has an invalid length. [ 866.037114][T18367] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3797'. [ 866.804900][T18373] netlink: 'syz.1.3799': attribute type 13 has an invalid length. [ 866.837989][T18373] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.3799'. [ 867.869165][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 867.875320][T18251] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 868.041788][T18390] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3803'. [ 870.508554][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.516936][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.696020][T18251] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 870.814914][T18411] netlink: 'syz.1.3810': attribute type 15 has an invalid length. [ 870.852450][T18411] netlink: 'syz.1.3810': attribute type 5 has an invalid length. [ 870.879220][T18411] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3810'. [ 871.356132][T18423] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3816'. [ 871.753902][T18432] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.3817'. [ 871.768664][T18429] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3818'. [ 873.589944][T18453] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3826'. [ 873.756659][T18455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3824'. [ 874.285094][T18456] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3827'. [ 874.340103][T18456] bridge_slave_1: default FDB implementation only supports local addresses [ 874.550310][T18468] netlink: 'syz.1.3830': attribute type 21 has an invalid length. [ 874.639546][T18470] netlink: 'syz.1.3830': attribute type 10 has an invalid length. [ 874.647505][T18470] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3830'. [ 875.655040][T18494] netlink: 'syz.4.3838': attribute type 12 has an invalid length. [ 875.699559][T18494] netlink: 'syz.4.3838': attribute type 11 has an invalid length. [ 875.707577][T18494] netlink: 188816 bytes leftover after parsing attributes in process `syz.4.3838'. [ 876.527647][T18516] netlink: 'syz.2.3844': attribute type 3 has an invalid length. [ 876.575321][T18516] netlink: 'syz.2.3844': attribute type 6 has an invalid length. [ 876.597015][T18516] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3844'. [ 876.657570][T18519] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3846'. [ 878.077462][T18546] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3856'. [ 878.395198][T18551] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3857'. [ 878.522890][T18553] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 878.542257][T18553] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3859'. [ 879.445704][T18567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3863'. [ 883.245389][T18629] macvlan1: entered promiscuous mode [ 883.302756][T18629] netlink: 'syz.0.3885': attribute type 21 has an invalid length. [ 883.329281][T18629] netlink: 'syz.0.3885': attribute type 1 has an invalid length. [ 883.347430][T18629] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.3885'. [ 883.710664][T18638] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3886'. [ 884.534733][T18647] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3891'. [ 886.729534][T18685] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3902'. [ 886.887100][T18688] syzkaller0: entered promiscuous mode [ 886.900316][T18688] syzkaller0: entered allmulticast mode [ 893.109435][T18708] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3910'. [ 893.303009][T18724] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.3914'. [ 893.705502][T18733] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3918'. [ 893.853067][T18739] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3921'. [ 895.616815][T18763] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3929'. [ 896.098005][T18774] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.3934'. [ 896.129305][T18774] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.3934'. [ 896.603470][T18780] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.3936'. [ 896.644767][T18780] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.3936'. [ 896.891736][T18783] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3936'. [ 899.323287][T18822] __nla_validate_parse: 3 callbacks suppressed [ 899.323308][T18822] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3953'. [ 899.830976][T18824] syzkaller0: entered promiscuous mode [ 899.836675][T18824] syzkaller0: entered allmulticast mode [ 899.899302][T18835] netlink: 'syz.4.3950': attribute type 4 has an invalid length. [ 899.996647][T18835] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3950'. [ 900.151158][T18835] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 902.795004][T18852] syz.0.3958[18852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 902.795325][T18852] syz.0.3958[18852] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 905.778343][T18856] netlink: 'syz.1.3959': attribute type 13 has an invalid length. [ 905.816422][T18856] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3959'. [ 905.912055][T18861] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3961'. [ 906.744551][T18880] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3967'. [ 907.472900][T18901] netlink: 'syz.2.3973': attribute type 13 has an invalid length. [ 907.481289][T18901] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3973'. [ 907.837111][T18909] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3976'. [ 908.221940][T18929] netlink: 'syz.0.3982': attribute type 13 has an invalid length. [ 908.230193][T18929] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3982'. [ 908.245689][T18918] pim6reg1: entered promiscuous mode [ 908.256392][T18918] pim6reg1: entered allmulticast mode [ 909.223350][T18951] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3988'. [ 909.478114][T18957] netlink: 'syz.4.3992': attribute type 13 has an invalid length. [ 909.505498][T18957] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3992'. [ 909.830492][T18972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3997'. [ 910.616923][T18977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3998'. [ 912.746786][T18988] __nla_validate_parse: 1 callbacks suppressed [ 912.746837][T18988] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.4000'. [ 912.788868][T18993] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 912.806998][T18992] netlink: 'syz.0.4002': attribute type 13 has an invalid length. [ 912.824324][T18992] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4002'. [ 913.443674][T19005] netlink: 'syz.0.4007': attribute type 3 has an invalid length. [ 913.459293][T19005] netlink: 'syz.0.4007': attribute type 1 has an invalid length. [ 913.467321][T19005] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.4007'. [ 913.865182][T19024] netlink: 'syz.1.4013': attribute type 13 has an invalid length. [ 913.889105][T19024] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4013'. [ 914.028606][T19026] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4014'. [ 914.394270][T19049] netlink: 'syz.0.4022': attribute type 13 has an invalid length. [ 914.415908][T19049] netlink: 'syz.0.4022': attribute type 58 has an invalid length. [ 914.444768][T19049] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4022'. [ 914.540706][T19054] netlink: 'syz.4.4023': attribute type 13 has an invalid length. [ 914.549233][T19054] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4023'. [ 914.765632][T19064] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4028'. [ 915.256115][T19072] netlink: 'syz.1.4030': attribute type 10 has an invalid length. [ 915.279144][T19072] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4030'. [ 915.299289][T13587] wlan1: Trigger new scan to find an IBSS to join [ 915.496784][T19083] netlink: 'syz.2.4033': attribute type 10 has an invalid length. [ 915.597497][T19083] team0 (unregistering): Port device C removed [ 915.668560][T19083] team0 (unregistering): Port device team_slave_1 removed [ 915.799922][T19085] netlink: 'syz.1.4034': attribute type 13 has an invalid length. [ 915.807803][T19085] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4034'. [ 917.739296][T19148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.771050][T19148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.802567][T19148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.864087][T19148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.895492][T19148] batadv_slave_1: entered promiscuous mode [ 917.954683][T19146] __nla_validate_parse: 6 callbacks suppressed [ 917.954736][T19146] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4057'. [ 918.247659][T19162] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4064'. [ 918.283044][T19162] validate_nla: 2 callbacks suppressed [ 918.283062][T19162] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 918.298313][T19164] netlink: 'syz.4.4065': attribute type 13 has an invalid length. [ 918.332839][T19164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4065'. [ 918.349152][T19164] : renamed from syz_tun (while UP) [ 919.219934][T13621] wlan1: Trigger new scan to find an IBSS to join [ 919.763501][T19191] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4073'. [ 919.799520][T19191] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 919.818345][T19191] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 919.844869][T19196] syzkaller0: entered promiscuous mode [ 919.867522][T19196] syzkaller0: entered allmulticast mode [ 919.883875][T19191] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 919.894991][T19191] netlink: 'syz.4.4073': attribute type 33 has an invalid length. [ 919.903794][T19191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4073'. [ 919.932818][T19191] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.4073'. [ 919.984434][T19200] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4076'. [ 920.115246][T19202] netlink: 'syz.0.4078': attribute type 13 has an invalid length. [ 920.126989][T19202] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4078'. [ 920.226414][T13587] wlan1: Creating new IBSS network, BSSID 3a:9d:e5:e4:d7:49 [ 920.464512][T19210] netlink: 'syz.1.4082': attribute type 21 has an invalid length. [ 920.781252][T19228] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4084'. [ 920.815245][T19228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4084'. [ 921.168721][T19240] netlink: 'syz.2.4090': attribute type 13 has an invalid length. [ 921.207009][T19238] netlink: 'syz.4.4088': attribute type 10 has an invalid length. [ 921.412505][T19238] team0: Device wg1 is of different type [ 922.367229][T19258] netlink: 'syz.0.4096': attribute type 1 has an invalid length. [ 924.915741][T19301] __nla_validate_parse: 4 callbacks suppressed [ 924.915769][T19301] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.4107'. [ 924.984225][T19301] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 925.519651][T19304] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4111'. [ 929.929622][T19324] netlink: 'syz.1.4125': attribute type 10 has an invalid length. [ 930.043393][T19324] bridge0: port 3(hsr0) entered disabled state [ 930.358903][T19324] hsr0: left allmulticast mode [ 930.439233][T19324] hsr_slave_0: left allmulticast mode [ 930.444735][T19324] hsr_slave_1: left allmulticast mode [ 930.499389][T19324] hsr0: left promiscuous mode [ 930.504529][T19324] bridge0: port 3(hsr0) entered disabled state [ 930.615713][T19324] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 931.035403][T19343] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4122'. [ 931.089238][T19343] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4122'. [ 931.181098][T19348] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4124'. [ 931.270268][T19343] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4122'. [ 931.476620][T19347] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4122'. [ 931.622542][T19349] netlink: 'syz.0.4123': attribute type 1 has an invalid length. [ 931.712177][T19349] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.4123'. [ 931.944258][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.950843][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.703882][T19370] netpci0: tun_chr_ioctl cmd 1074025677 [ 932.729317][T19370] netpci0: linktype set to 769 [ 932.780780][T19373] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4132'. [ 933.318698][T19390] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4136'. [ 934.068033][T18251] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 935.634857][T19426] netlink: 'syz.1.4148': attribute type 10 has an invalid length. [ 935.679713][T19429] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4149'. [ 936.094683][T19447] netlink: 'syz.1.4154': attribute type 13 has an invalid length. [ 936.103453][T19447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4154'. [ 936.119886][T19448] netlink: 'syz.0.4153': attribute type 13 has an invalid length. [ 936.136589][T19448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4153'. [ 936.576381][T19458] netlink: 'syz.4.4155': attribute type 10 has an invalid length. [ 936.706460][T19458] veth0_vlan: left promiscuous mode [ 936.739922][T19458] veth0_vlan: entered promiscuous mode [ 936.763014][T19458] team0: Device veth0_vlan failed to register rx_handler [ 937.189199][T19472] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4158'. [ 937.308860][T19474] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4160'. [ 937.327765][T19469] syz.0.4158[19469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.328100][T19469] syz.0.4158[19469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.244030][T19533] netlink: 'syz.0.4168': attribute type 10 has an invalid length. [ 940.279181][T19533] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4168'. [ 940.304319][T19533] bond0: entered promiscuous mode [ 940.319240][T19533] bond_slave_0: entered promiscuous mode [ 940.339781][T19533] bond_slave_1: entered promiscuous mode [ 940.345736][T19533] bridge_slave_1: entered promiscuous mode [ 940.365413][T19533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.372916][T19533] bridge0: port 2(bond0) entered blocking state [ 940.384630][T19533] bridge0: port 2(bond0) entered disabled state [ 940.397681][T19533] bond0: entered allmulticast mode [ 940.409946][T19533] bond_slave_0: entered allmulticast mode [ 940.416046][T19533] bond_slave_1: entered allmulticast mode [ 940.426704][T19533] bridge_slave_1: entered allmulticast mode [ 940.448949][T19533] bridge0: port 2(bond0) entered blocking state [ 940.455658][T19533] bridge0: port 2(bond0) entered forwarding state [ 940.476405][T19541] macvlan1: entered promiscuous mode [ 940.622275][T19547] netlink: 'syz.4.4171': attribute type 10 has an invalid length. [ 940.674932][T19547] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 941.798592][T19567] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4178'. [ 942.431691][T19576] netlink: 'syz.0.4180': attribute type 13 has an invalid length. [ 942.460653][T19576] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4180'. [ 945.962884][T19593] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4184'. [ 946.254039][T19594] netlink: 'syz.2.4184': attribute type 10 has an invalid length. [ 947.145499][T19611] netlink: 'syz.2.4191': attribute type 1 has an invalid length. [ 947.156146][T19611] netlink: 'syz.2.4191': attribute type 4 has an invalid length. [ 947.193757][T19611] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4191'. [ 948.250863][T19635] FAULT_INJECTION: forcing a failure. [ 948.250863][T19635] name failslab, interval 1, probability 0, space 0, times 0 [ 948.296957][T19635] CPU: 1 PID: 19635 Comm: syz.4.4198 Not tainted syzkaller #0 [ 948.304581][T19635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 948.314756][T19635] Call Trace: [ 948.318075][T19635] [ 948.321043][T19635] dump_stack_lvl+0x18c/0x250 [ 948.325776][T19635] ? show_regs_print_info+0x20/0x20 [ 948.331038][T19635] ? load_image+0x420/0x420 [ 948.335609][T19635] ? __might_sleep+0xe0/0xe0 [ 948.340260][T19635] ? __lock_acquire+0x7d40/0x7d40 [ 948.345344][T19635] should_fail_ex+0x39d/0x4d0 [ 948.350090][T19635] should_failslab+0x9/0x20 [ 948.354650][T19635] slab_pre_alloc_hook+0x59/0x310 [ 948.359728][T19635] ? kernfs_fop_write_iter+0x159/0x520 [ 948.365414][T19635] ? kernfs_fop_write_iter+0x159/0x520 [ 948.370936][T19635] __kmem_cache_alloc_node+0x53/0x250 [ 948.376459][T19635] ? kernfs_fop_write_iter+0x159/0x520 [ 948.381974][T19635] __kmalloc+0xa4/0x230 [ 948.386186][T19635] kernfs_fop_write_iter+0x159/0x520 [ 948.391531][T19635] vfs_write+0x46c/0x990 [ 948.395841][T19635] ? file_end_write+0x250/0x250 [ 948.400763][T19635] ? __fget_files+0x43d/0x4b0 [ 948.405582][T19635] ? __fdget_pos+0x2a3/0x330 [ 948.410212][T19635] ? ksys_write+0x75/0x260 [ 948.414714][T19635] ksys_write+0x150/0x260 [ 948.419106][T19635] ? __ia32_sys_read+0x90/0x90 [ 948.423951][T19635] ? lockdep_hardirqs_on+0x98/0x150 [ 948.429205][T19635] do_syscall_64+0x55/0xa0 [ 948.433660][T19635] ? clear_bhb_loop+0x40/0x90 [ 948.438515][T19635] ? clear_bhb_loop+0x40/0x90 [ 948.443249][T19635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.449367][T19635] RIP: 0033:0x7fc56659c819 [ 948.453821][T19635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.473567][T19635] RSP: 002b:00007fc5673d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.482063][T19635] RAX: ffffffffffffffda RBX: 00007fc566815fa0 RCX: 00007fc56659c819 [ 948.490088][T19635] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000e [ 948.498111][T19635] RBP: 00007fc5673d8090 R08: 0000000000000000 R09: 0000000000000000 [ 948.506127][T19635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.514320][T19635] R13: 00007fc566816038 R14: 00007fc566815fa0 R15: 00007ffcf4770268 [ 948.522369][T19635] [ 948.638049][T19646] netlink: 'syz.2.4200': attribute type 13 has an invalid length. [ 948.646274][T19646] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4200'. [ 949.738331][T19659] delete_channel: no stack [ 950.014416][T19663] veth1_macvtap: left promiscuous mode [ 950.023338][T19664] netlink: 'syz.4.4209': attribute type 3 has an invalid length. [ 950.067041][T19664] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4209'. [ 950.452778][T19673] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.4211'. [ 950.867759][T19681] FAULT_INJECTION: forcing a failure. [ 950.867759][T19681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.955271][T19681] CPU: 0 PID: 19681 Comm: syz.1.4215 Not tainted syzkaller #0 [ 950.963083][T19681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 950.973375][T19681] Call Trace: [ 950.976793][T19681] [ 950.979764][T19681] dump_stack_lvl+0x18c/0x250 [ 950.984667][T19681] ? show_regs_print_info+0x20/0x20 [ 950.990151][T19681] ? load_image+0x420/0x420 [ 950.994680][T19681] ? __might_fault+0xaa/0x120 [ 950.999458][T19681] ? __lock_acquire+0x7d40/0x7d40 [ 951.004504][T19681] should_fail_ex+0x39d/0x4d0 [ 951.009225][T19681] _copy_from_iter+0x1d9/0x12e0 [ 951.014098][T19681] ? __virt_addr_valid+0x18c/0x540 [ 951.019323][T19681] ? __lock_acquire+0x7d40/0x7d40 [ 951.024367][T19681] ? copyout_mc+0x70/0x70 [ 951.028796][T19681] ? __virt_addr_valid+0x18c/0x540 [ 951.033920][T19681] ? __virt_addr_valid+0x18c/0x540 [ 951.039140][T19681] ? __virt_addr_valid+0x469/0x540 [ 951.044268][T19681] ? __check_object_size+0x506/0xa20 [ 951.049657][T19681] kernfs_fop_write_iter+0x1a4/0x520 [ 951.055077][T19681] vfs_write+0x46c/0x990 [ 951.059440][T19681] ? file_end_write+0x250/0x250 [ 951.064317][T19681] ? __fget_files+0x43d/0x4b0 [ 951.069124][T19681] ? __fdget_pos+0x2a3/0x330 [ 951.073811][T19681] ? ksys_write+0x75/0x260 [ 951.078242][T19681] ksys_write+0x150/0x260 [ 951.082590][T19681] ? __ia32_sys_read+0x90/0x90 [ 951.087457][T19681] ? lockdep_hardirqs_on+0x98/0x150 [ 951.092685][T19681] do_syscall_64+0x55/0xa0 [ 951.097200][T19681] ? clear_bhb_loop+0x40/0x90 [ 951.101887][T19681] ? clear_bhb_loop+0x40/0x90 [ 951.106576][T19681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.112494][T19681] RIP: 0033:0x7f9761f9c819 [ 951.117031][T19681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.136733][T19681] RSP: 002b:00007f9762eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.145191][T19681] RAX: ffffffffffffffda RBX: 00007f9762215fa0 RCX: 00007f9761f9c819 [ 951.153194][T19681] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000e [ 951.161210][T19681] RBP: 00007f9762eea090 R08: 0000000000000000 R09: 0000000000000000 [ 951.169362][T19681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.177352][T19681] R13: 00007f9762216038 R14: 00007f9762215fa0 R15: 00007fffe8a416a8 [ 951.185440][T19681] [ 952.677302][T19702] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.4219'. [ 952.912789][T19707] netlink: 'syz.4.4219': attribute type 13 has an invalid length. [ 952.980169][T19707] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4219'. [ 954.381130][T19722] netlink: 'syz.1.4224': attribute type 10 has an invalid length. [ 955.259900][T19729] FAULT_INJECTION: forcing a failure. [ 955.259900][T19729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.328962][T19741] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4229'. [ 955.388375][T19741] ksmbd: Unknown IPC event: 0, ignore. [ 955.399058][T19729] CPU: 0 PID: 19729 Comm: syz.2.4226 Not tainted syzkaller #0 [ 955.406773][T19729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 955.416865][T19729] Call Trace: [ 955.420198][T19729] [ 955.423168][T19729] dump_stack_lvl+0x18c/0x250 [ 955.428001][T19729] ? show_regs_print_info+0x20/0x20 [ 955.433250][T19729] ? load_image+0x420/0x420 [ 955.437813][T19729] ? __lock_acquire+0x7d40/0x7d40 [ 955.442885][T19729] ? snprintf+0xe9/0x140 [ 955.447199][T19729] should_fail_ex+0x39d/0x4d0 [ 955.451936][T19729] _copy_to_user+0x2f/0xa0 [ 955.456401][T19729] simple_read_from_buffer+0xe7/0x150 [ 955.461832][T19729] proc_fail_nth_read+0x1e8/0x260 [ 955.466909][T19729] ? proc_fault_inject_write+0x360/0x360 [ 955.472586][T19729] ? fsnotify_perm+0x271/0x5e0 [ 955.477482][T19729] ? proc_fault_inject_write+0x360/0x360 [ 955.483158][T19729] vfs_read+0x28b/0x970 [ 955.487375][T19729] ? kernel_read+0x1e0/0x1e0 [ 955.492013][T19729] ? __fget_files+0x28/0x4b0 [ 955.496644][T19729] ? __fget_files+0x28/0x4b0 [ 955.501275][T19729] ? __fget_files+0x43d/0x4b0 [ 955.506007][T19729] ? __fdget_pos+0x2a3/0x330 [ 955.510636][T19729] ? ksys_read+0x75/0x260 [ 955.515014][T19729] ksys_read+0x150/0x260 [ 955.519296][T19729] ? vfs_write+0x990/0x990 [ 955.523765][T19729] ? lockdep_hardirqs_on+0x98/0x150 [ 955.529092][T19729] do_syscall_64+0x55/0xa0 [ 955.533564][T19729] ? clear_bhb_loop+0x40/0x90 [ 955.538289][T19729] ? clear_bhb_loop+0x40/0x90 [ 955.543029][T19729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.549141][T19729] RIP: 0033:0x7fe5eff5d04e [ 955.553599][T19729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 955.573344][T19729] RSP: 002b:00007fe5f0ea0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 955.581808][T19729] RAX: ffffffffffffffda RBX: 00007fe5f0ea16c0 RCX: 00007fe5eff5d04e [ 955.589824][T19729] RDX: 000000000000000f RSI: 00007fe5f0ea10a0 RDI: 000000000000000f [ 955.598011][T19729] RBP: 00007fe5f0ea1090 R08: 0000000000000000 R09: 0000000000000000 [ 955.606019][T19729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.614120][T19729] R13: 00007fe5f0216038 R14: 00007fe5f0215fa0 R15: 00007fff9f8769e8 [ 955.622154][T19729] [ 964.750369][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 965.599320][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4231'. [ 965.883156][T19780] netlink: 'syz.4.4240': attribute type 1 has an invalid length. [ 965.883941][T19779] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4242'. [ 965.909473][T19780] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4240'. [ 966.358235][T19789] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 967.012535][T19789] syzkaller0: entered promiscuous mode [ 967.018097][T19789] syzkaller0: entered allmulticast mode [ 970.425359][T19838] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4259'. [ 971.787348][T19822] tap0: tun_chr_ioctl cmd 1074025677 [ 971.794110][T19822] tap0: linktype set to 6 [ 971.803473][T19838] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4259'. [ 972.157484][T19846] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4262'. [ 972.471276][T19855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.509479][T19855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.566018][T19855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.579134][T19855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.614127][T19855] batman_adv: batadv0: Removing interface: netdevsim0 [ 973.168277][T19868] netlink: 'syz.4.4268': attribute type 29 has an invalid length. [ 973.275914][T19868] netlink: 'syz.4.4268': attribute type 29 has an invalid length. [ 973.305238][T19869] netlink: 'syz.4.4268': attribute type 29 has an invalid length. [ 973.313740][T19872] netlink: 'syz.4.4268': attribute type 29 has an invalid length. [ 973.502975][T19876] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 973.570500][T19876] syzkaller0: entered promiscuous mode [ 973.576304][T19876] syzkaller0: entered allmulticast mode [ 973.784562][T19885] netlink: 'syz.0.4274': attribute type 9 has an invalid length. [ 973.799274][T19885] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4274'. [ 973.826134][T19887] netlink: 'syz.4.4275': attribute type 4 has an invalid length. [ 973.834423][T19887] netlink: 'syz.4.4275': attribute type 16 has an invalid length. [ 973.842715][T19887] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4275'. [ 976.926414][T19935] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4290'. [ 977.172994][T19941] netlink: 'syz.2.4291': attribute type 13 has an invalid length. [ 977.187317][T19941] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4291'. [ 977.209903][T19939] netlink: 'syz.1.4289': attribute type 9 has an invalid length. [ 977.237206][T19939] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4289'. [ 977.553163][T19942] netlink: 'syz.1.4289': attribute type 9 has an invalid length. [ 977.569461][T19942] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4289'. [ 978.674073][T19964] netlink: 'syz.2.4298': attribute type 46 has an invalid length. [ 978.705091][T19964] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4298'. [ 978.780281][T19962] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 979.427787][T19962] syzkaller0: entered promiscuous mode [ 979.477144][T19962] syzkaller0: entered allmulticast mode [ 979.508877][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4298'. [ 979.552544][T19964] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4298'. [ 979.574363][T19965] netlink: 'syz.2.4298': attribute type 21 has an invalid length. [ 979.622342][T19965] netlink: 'syz.2.4298': attribute type 20 has an invalid length. [ 979.843503][T19973] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4301'. [ 985.109369][T19999] netlink: 'syz.0.4308': attribute type 4 has an invalid length. [ 985.121035][T19999] netlink: 'syz.0.4308': attribute type 16 has an invalid length. [ 985.128922][T19999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4308'. [ 986.550804][T20033] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4320'. [ 986.686380][T20031] netlink: 'syz.1.4321': attribute type 10 has an invalid length. [ 986.881570][T20031] team0: Device hsr_slave_0 failed to register rx_handler [ 987.242031][T20031] syz.1.4321 (20031) used greatest stack depth: 17192 bytes left [ 987.776594][T20046] netlink: 'syz.0.4326': attribute type 27 has an invalid length. [ 987.799590][T20046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4326'. [ 987.808777][T20046] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 988.626293][T20072] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4334'. [ 989.300812][T20077] netlink: 'syz.1.4336': attribute type 10 has an invalid length. [ 989.380667][T20077] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.393272][T20077] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.786248][T20077] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.796157][T20077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.807493][T20077] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.816721][T20077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.673469][T20077] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 991.163890][T20111] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4346'. [ 991.320576][T20113] syz.1.4348[20113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 991.320779][T20113] syz.1.4348[20113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 992.025542][T20127] netlink: 'syz.2.4353': attribute type 29 has an invalid length. [ 992.090995][T20127] netlink: 'syz.2.4353': attribute type 29 has an invalid length. [ 992.161783][T20124] netlink: 'syz.2.4353': attribute type 29 has an invalid length. [ 992.199618][T20132] netlink: 'syz.4.4354': attribute type 21 has an invalid length. [ 992.229212][T20132] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4354'. [ 992.286234][T20125] netlink: 'syz.2.4353': attribute type 29 has an invalid length. [ 992.869548][T20145] netlink: 'syz.4.4359': attribute type 33 has an invalid length. [ 992.879181][T20145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4359'. [ 993.259487][T20152] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4362'. [ 993.399809][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.406337][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.724570][T20158] netlink: 'syz.1.4363': attribute type 4 has an invalid length. [ 993.791025][T20158] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4363'. [ 995.615297][T20180] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4373'. [ 996.022865][T20178] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4371'. [ 996.079435][T20180] netlink: 21096 bytes leftover after parsing attributes in process `syz.4.4373'. [ 996.139566][T20180] tipc: Started in network mode [ 996.175719][T20180] tipc: Node identity 1a, cluster identity 4711 [ 996.234961][T20180] tipc: Node number set to 26 [ 996.362315][T20182] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4374'. [ 996.509188][T20184] netlink: 'syz.1.4375': attribute type 13 has an invalid length. [ 996.554574][T20184] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4375'. [ 999.408927][T20227] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4387'. [ 999.585489][T20234] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4390'. [ 999.676137][T20234] openvswitch: netlink: Flow key attribute not present in set flow. [ 999.707677][T20233] netlink: 'syz.2.4389': attribute type 10 has an invalid length. [ 999.796992][T20233] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.808123][T20233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.580962][T20233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.597678][T20233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.619555][T20233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.637280][T20233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.897931][T20233] .`: (slave bridge0): Enslaving as an active interface with an up link [ 1003.882593][T20259] netlink: 153564 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1004.064596][T20259] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1004.084634][T20259] netlink: 'syz.2.4399': attribute type 1 has an invalid length. [ 1007.731504][T20276] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 1007.830794][T20276] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 1008.150997][T20277] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 1008.393396][T20278] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 1008.474865][T20279] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 1008.526810][T20285] netlink: 'syz.4.4404': attribute type 13 has an invalid length. [ 1008.608339][T20285] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4404'. [ 1008.698241][T20279] netlink: 'syz.2.4403': attribute type 29 has an invalid length. [ 1010.381749][T20294] netlink: 'syz.1.4408': attribute type 29 has an invalid length. [ 1010.433769][T20294] netlink: 'syz.1.4408': attribute type 29 has an invalid length. [ 1011.849499][T20316] netlink: 'syz.4.4415': attribute type 10 has an invalid length. [ 1011.870460][T20316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1011.968499][T20316] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1011.986178][T20316] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.045884][T20316] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1012.606774][T20332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4419'. [ 1012.628315][T20330] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1012.742142][T20335] validate_nla: 2 callbacks suppressed [ 1012.742163][T20335] netlink: 'syz.0.4418': attribute type 29 has an invalid length. [ 1012.820432][T20335] netlink: 'syz.0.4418': attribute type 29 has an invalid length. [ 1013.072162][T20340] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4421'. [ 1013.810089][T20346] netlink: 'syz.1.4424': attribute type 10 has an invalid length. [ 1013.873916][T20346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1013.885175][T20350] netlink: 'syz.0.4426': attribute type 29 has an invalid length. [ 1013.906680][T20346] team0: entered promiscuous mode [ 1013.929536][T20346] C: entered promiscuous mode [ 1013.934901][T20346] team_slave_1: entered promiscuous mode [ 1013.951801][T20346] team0: entered allmulticast mode [ 1013.970116][T20346] C: entered allmulticast mode [ 1013.975403][T20346] team_slave_1: entered allmulticast mode [ 1013.986945][T20346] bridge0: port 3(team0) entered blocking state [ 1014.016562][T20346] bridge0: port 3(team0) entered disabled state [ 1014.037939][T20346] bridge0: port 3(team0) entered blocking state [ 1014.044462][T20346] bridge0: port 3(team0) entered forwarding state [ 1014.072621][T20350] netlink: 'syz.0.4426': attribute type 29 has an invalid length. [ 1014.143587][T20353] netlink: 'syz.0.4426': attribute type 29 has an invalid length. [ 1014.166748][T20355] netlink: 'syz.0.4426': attribute type 29 has an invalid length. [ 1014.286097][T20364] netlink: 'syz.1.4430': attribute type 29 has an invalid length. [ 1014.483869][T20358] netlink: 'syz.0.4426': attribute type 29 has an invalid length. [ 1014.518119][T20363] netlink: 'syz.0.4426': attribute type 29 has an invalid length. [ 1014.662228][T20366] syzkaller0: entered promiscuous mode [ 1014.691327][T20366] syzkaller0: entered allmulticast mode [ 1020.414894][T20385] validate_nla: 4 callbacks suppressed [ 1020.414912][T20385] netlink: 'syz.1.4432': attribute type 17 has an invalid length. [ 1020.457509][T20385] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4432'. [ 1020.499196][T20398] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1020.505332][T20398] dvmrp1: linktype set to 823 [ 1020.540832][T20399] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1021.222701][T20413] netlink: 206164 bytes leftover after parsing attributes in process `syz.0.4439'. [ 1021.396452][T20412] netlink: 'syz.4.4440': attribute type 29 has an invalid length. [ 1021.442980][T20412] netlink: 'syz.4.4440': attribute type 29 has an invalid length. [ 1021.482333][T20419] netlink: 'syz.4.4440': attribute type 29 has an invalid length. [ 1021.520350][T20412] netlink: 'syz.4.4440': attribute type 29 has an invalid length. [ 1021.554781][T20412] netlink: 'syz.4.4440': attribute type 29 has an invalid length. [ 1021.886207][T20426] netlink: 'syz.4.4440': attribute type 29 has an invalid length. [ 1021.895679][T20427] netlink: 'syz.1.4444': attribute type 21 has an invalid length. [ 1021.905496][T20427] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4444'. [ 1021.953210][T20429] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4446'. [ 1021.996964][T20427] netlink: 'syz.1.4444': attribute type 29 has an invalid length. [ 1021.998669][T20431] netlink: 'syz.2.4447': attribute type 10 has an invalid length. [ 1022.082782][T20431] .`: (slave bond_slave_0): Releasing backup interface [ 1022.195147][T20438] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1022.206846][T20438] dvmrp1: linktype set to 823 [ 1022.474580][T20442] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1025.139816][T20476] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1025.627836][T20486] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1025.799635][T20489] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1025.813702][T20489] dvmrp1: linktype set to 823 [ 1026.279109][T20500] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1027.157816][T20531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1027.180838][T20531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1027.195667][T20524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1027.216576][T20525] validate_nla: 5 callbacks suppressed [ 1027.216712][T20525] netlink: 'syz.4.4476': attribute type 21 has an invalid length. [ 1027.262681][T20528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1027.279995][T20522] syzkaller0: entered promiscuous mode [ 1027.313821][T20522] syzkaller0: entered allmulticast mode [ 1027.655835][T20535] sit0: left promiscuous mode [ 1028.012072][T20548] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1028.017918][T20548] dvmrp1: linktype set to 823 [ 1028.030734][T20548] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1029.543359][T20589] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1030.176482][T20610] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 1030.181108][T20611] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 1030.216181][T20610] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 1030.268424][T20612] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 1030.335266][T20610] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 1030.433837][T20611] netlink: 'syz.0.4502': attribute type 29 has an invalid length. [ 1033.107088][T20650] netlink: 'syz.1.4516': attribute type 3 has an invalid length. [ 1033.132049][T20650] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1034.198441][T20693] netlink: 'syz.1.4528': attribute type 10 has an invalid length. [ 1034.448070][T20695] FAULT_INJECTION: forcing a failure. [ 1034.448070][T20695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.461531][T20695] CPU: 1 PID: 20695 Comm: syz.4.4530 Not tainted syzkaller #0 [ 1034.469040][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1034.479137][T20695] Call Trace: [ 1034.482466][T20695] [ 1034.485602][T20695] dump_stack_lvl+0x18c/0x250 [ 1034.490337][T20695] ? show_regs_print_info+0x20/0x20 [ 1034.495595][T20695] ? load_image+0x420/0x420 [ 1034.500164][T20695] ? __lock_acquire+0x7d40/0x7d40 [ 1034.505226][T20695] ? snprintf+0xe9/0x140 [ 1034.509513][T20695] should_fail_ex+0x39d/0x4d0 [ 1034.514248][T20695] _copy_to_user+0x2f/0xa0 [ 1034.518788][T20695] simple_read_from_buffer+0xe7/0x150 [ 1034.524187][T20695] proc_fail_nth_read+0x1e8/0x260 [ 1034.529233][T20695] ? proc_fault_inject_write+0x360/0x360 [ 1034.534907][T20695] ? fsnotify_perm+0x271/0x5e0 [ 1034.539802][T20695] ? proc_fault_inject_write+0x360/0x360 [ 1034.545464][T20695] vfs_read+0x28b/0x970 [ 1034.549648][T20695] ? kernel_read+0x1e0/0x1e0 [ 1034.554351][T20695] ? __fget_files+0x28/0x4b0 [ 1034.558954][T20695] ? __fget_files+0x28/0x4b0 [ 1034.563658][T20695] ? __fget_files+0x43d/0x4b0 [ 1034.568602][T20695] ? __fdget_pos+0x2a3/0x330 [ 1034.573382][T20695] ? ksys_read+0x75/0x260 [ 1034.577733][T20695] ksys_read+0x150/0x260 [ 1034.582002][T20695] ? vfs_write+0x990/0x990 [ 1034.586436][T20695] ? lockdep_hardirqs_on+0x98/0x150 [ 1034.591740][T20695] do_syscall_64+0x55/0xa0 [ 1034.596171][T20695] ? clear_bhb_loop+0x40/0x90 [ 1034.600866][T20695] ? clear_bhb_loop+0x40/0x90 [ 1034.605643][T20695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1034.611723][T20695] RIP: 0033:0x7fc56655d04e [ 1034.616154][T20695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1034.635858][T20695] RSP: 002b:00007fc5673b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1034.644333][T20695] RAX: ffffffffffffffda RBX: 00007fc5673b76c0 RCX: 00007fc56655d04e [ 1034.652404][T20695] RDX: 000000000000000f RSI: 00007fc5673b70a0 RDI: 0000000000000005 [ 1034.660584][T20695] RBP: 00007fc5673b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.668778][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.676783][T20695] R13: 00007fc566816128 R14: 00007fc566816090 R15: 00007ffcf4770268 [ 1034.684887][T20695] [ 1034.861480][T20693] geneve1: entered promiscuous mode [ 1034.874100][T20693] geneve1: entered allmulticast mode [ 1034.926569][T20693] team0: Port device geneve1 added [ 1035.226966][T20702] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1035.272638][T20703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.618513][T20709] netlink: 'syz.1.4536': attribute type 10 has an invalid length. [ 1036.588581][T20738] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4546'. [ 1037.088395][T20749] sctp: [Deprecated]: syz.0.4549 (pid 20749) Use of int in maxseg socket option. [ 1037.088395][T20749] Use struct sctp_assoc_value instead [ 1037.743276][T20768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1037.761979][T20771] netlink: 'syz.0.4559': attribute type 1 has an invalid length. [ 1037.880415][T20771] netlink: 'syz.0.4559': attribute type 1 has an invalid length. [ 1038.322024][T20777] syzkaller0: entered allmulticast mode [ 1038.465639][T20783] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1038.510801][T20786] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1038.729820][T20797] 6: renamed from veth0_vlan [ 1039.332614][T20817] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1039.362947][T20814] netlink: 'syz.2.4571': attribute type 10 has an invalid length. [ 1040.210506][T20837] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.4581'. [ 1041.525660][T20878] netlink: 'syz.0.4591': attribute type 10 has an invalid length. [ 1041.584108][T20878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.599592][T20878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.631419][T20878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.651805][T20878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.765404][T20878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.793658][T20878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.839999][T20878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.859255][T20878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.903401][T20885] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4592'. [ 1042.048910][T20884] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4592'. [ 1042.149169][T20878] team0: Port device geneve1 added [ 1045.451803][T20894] netlink: 'syz.2.4596': attribute type 3 has an invalid length. [ 1045.479363][T20894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4596'. [ 1045.534712][T20902] netlink: 'syz.0.4600': attribute type 16 has an invalid length. [ 1045.544812][T20902] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1045.557360][T20902] veth1_macvtap: entered allmulticast mode [ 1046.091508][T20915] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1046.352173][T20920] syzkaller0: entered promiscuous mode [ 1046.358175][T20920] syzkaller0: entered allmulticast mode [ 1046.488044][T20936] netlink: 'syz.4.4608': attribute type 3 has an invalid length. [ 1046.542553][T20936] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1047.709121][T20961] netlink: 'syz.1.4615': attribute type 10 has an invalid length. [ 1047.732096][T20961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4615'. [ 1047.750737][T20961] dummy0: entered promiscuous mode [ 1047.799793][T20961] bridge0: port 4(dummy0) entered blocking state [ 1047.845701][T20961] bridge0: port 4(dummy0) entered disabled state [ 1047.879632][T20961] dummy0: entered allmulticast mode [ 1047.887589][T20961] bridge0: port 4(dummy0) entered blocking state [ 1047.894252][T20961] bridge0: port 4(dummy0) entered forwarding state [ 1048.269781][T20974] mac80211_hwsim hwsim26 ..ãc¤±: renamed from wlan1 (while UP) [ 1048.542639][T20980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.395243][T21003] netlink: 'syz.2.4627': attribute type 10 has an invalid length. [ 1049.410108][T21003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4627'. [ 1049.438712][T21000] netlink: 'syz.1.4626': attribute type 1 has an invalid length. [ 1049.447257][T21000] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4626'. [ 1049.488236][T21000] netlink: 'syz.1.4626': attribute type 3 has an invalid length. [ 1049.497773][T21000] netlink: 'syz.1.4626': attribute type 275 has an invalid length. [ 1050.098469][T21035] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4636'. [ 1050.109016][T21035] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4636'. [ 1050.122515][T21024] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4636'. [ 1050.330577][T21043] netlink: 'syz.1.4642': attribute type 9 has an invalid length. [ 1051.050017][T21065] __nla_validate_parse: 1 callbacks suppressed [ 1051.050038][T21065] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1051.137293][T21068] netlink: 'syz.4.4652': attribute type 11 has an invalid length. [ 1051.188504][T21068] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.4652'. [ 1051.793843][T21085] netlink: 'syz.4.4658': attribute type 49 has an invalid length. [ 1051.821941][T21086] netlink: set zone limit has 8 unknown bytes [ 1051.844489][T21090] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1053.168442][T21108] netlink: 'syz.0.4665': attribute type 3 has an invalid length. [ 1053.200114][T21108] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4665'. [ 1053.258722][T21113] netlink: 'syz.1.4667': attribute type 17 has an invalid length. [ 1053.270030][T21113] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4667'. [ 1053.354789][T21116] netlink: 'syz.4.4668': attribute type 5 has an invalid length. [ 1053.502907][T21119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1053.758805][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1053.776177][T21119] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1053.787448][T21119] openvswitch: netlink: Flow key attribute not present in set flow. [ 1053.977025][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1053.987013][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1053.995804][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1054.004334][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1054.058457][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1054.067344][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1054.213677][T21136] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1054.230635][T21137] netlink: 'syz.0.4674': attribute type 39 has an invalid length. [ 1054.783188][T21141] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1054.845180][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.851730][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.010058][T13629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.038525][T21129] chnl_net:caif_netlink_parms(): no params data found [ 1055.190173][T13629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.507369][T13629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.533573][T21164] netlink: 18187 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1055.656779][T13629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.708857][T21174] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1055.723216][T21129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.741211][T21129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.748811][T21129] bridge_slave_0: entered allmulticast mode [ 1055.762383][T21129] bridge_slave_0: entered promiscuous mode [ 1055.777706][T21129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.787516][T21129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.797888][T21129] bridge_slave_1: entered allmulticast mode [ 1055.815753][T21129] bridge_slave_1: entered promiscuous mode [ 1055.897553][T21129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.910989][T21129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.992962][T21129] team0: Port device team_slave_0 added [ 1056.098730][T21129] team0: Port device team_slave_1 added [ 1056.106146][ T5083] Bluetooth: hci4: command tx timeout [ 1056.238398][T21129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.284157][T21129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.312800][T21129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.339642][T21129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.347821][T21129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.389868][T21129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.493825][T21193] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4688'. [ 1056.978340][T21188] syzkaller0: entered promiscuous mode [ 1056.987373][T21188] syzkaller0: entered allmulticast mode [ 1057.082533][T21186] macsec0: entered promiscuous mode [ 1057.108909][T21186] macsec0: entered allmulticast mode [ 1057.507641][T21129] hsr_slave_0: entered promiscuous mode [ 1057.581061][T21129] hsr_slave_1: entered promiscuous mode [ 1057.590513][T21129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.606327][T21129] Cannot create hsr debugfs directory [ 1057.813967][T21216] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1058.199049][ T5083] Bluetooth: hci4: command tx timeout [ 1058.290059][T21227] FAULT_INJECTION: forcing a failure. [ 1058.290059][T21227] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.339238][T21227] CPU: 0 PID: 21227 Comm: syz.1.4696 Not tainted syzkaller #0 [ 1058.346959][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1058.357145][T21227] Call Trace: [ 1058.360478][T21227] [ 1058.363727][T21227] dump_stack_lvl+0x18c/0x250 [ 1058.368558][T21227] ? show_regs_print_info+0x20/0x20 [ 1058.373819][T21227] ? load_image+0x420/0x420 [ 1058.378398][T21227] ? __might_sleep+0xe0/0xe0 [ 1058.383047][T21227] ? __lock_acquire+0x7d40/0x7d40 [ 1058.388131][T21227] should_fail_ex+0x39d/0x4d0 [ 1058.392883][T21227] should_failslab+0x9/0x20 [ 1058.397457][T21227] slab_pre_alloc_hook+0x59/0x310 [ 1058.402542][T21227] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.408399][T21227] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.414175][T21227] __kmem_cache_alloc_node+0x53/0x250 [ 1058.419607][T21227] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.425373][T21227] __kmalloc+0xa4/0x230 [ 1058.429596][T21227] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.435377][T21227] tomoyo_path_number_perm+0x248/0x620 [ 1058.440890][T21227] ? tomoyo_path_number_perm+0x217/0x620 [ 1058.446682][T21227] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1058.452330][T21227] ? ksys_write+0x1c4/0x260 [ 1058.456891][T21227] ? __fget_files+0x28/0x4b0 [ 1058.461498][T21227] ? __fget_files+0x28/0x4b0 [ 1058.466129][T21227] security_file_ioctl+0x70/0xa0 [ 1058.471192][T21227] __se_sys_ioctl+0x48/0x170 [ 1058.475907][T21227] do_syscall_64+0x55/0xa0 [ 1058.480337][T21227] ? clear_bhb_loop+0x40/0x90 [ 1058.485030][T21227] ? clear_bhb_loop+0x40/0x90 [ 1058.489725][T21227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1058.495648][T21227] RIP: 0033:0x7f9761f9c819 [ 1058.500120][T21227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.519837][T21227] RSP: 002b:00007f9762eea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.528353][T21227] RAX: ffffffffffffffda RBX: 00007f9762215fa0 RCX: 00007f9761f9c819 [ 1058.536347][T21227] RDX: 0000200000000500 RSI: 00000000801054db RDI: 0000000000000003 [ 1058.544593][T21227] RBP: 00007f9762eea090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.552835][T21227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.561293][T21227] R13: 00007f9762216038 R14: 00007f9762215fa0 R15: 00007fffe8a416a8 [ 1058.569328][T21227] [ 1058.608561][T21227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.631653][T21227] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1058.941152][T21241] netlink: 'syz.4.4699': attribute type 39 has an invalid length. [ 1060.025281][T21262] FAULT_INJECTION: forcing a failure. [ 1060.025281][T21262] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.038572][T21262] CPU: 1 PID: 21262 Comm: syz.0.4710 Not tainted syzkaller #0 [ 1060.046174][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.056277][T21262] Call Trace: [ 1060.059593][T21262] [ 1060.062556][T21262] dump_stack_lvl+0x18c/0x250 [ 1060.067387][T21262] ? show_regs_print_info+0x20/0x20 [ 1060.072749][T21262] ? load_image+0x420/0x420 [ 1060.077330][T21262] ? __might_sleep+0xe0/0xe0 [ 1060.081962][T21262] ? __lock_acquire+0x7d40/0x7d40 [ 1060.087041][T21262] ? prepend_path+0x4b/0x960 [ 1060.091700][T21262] should_fail_ex+0x39d/0x4d0 [ 1060.096520][T21262] should_failslab+0x9/0x20 [ 1060.101157][T21262] slab_pre_alloc_hook+0x59/0x310 [ 1060.106228][T21262] ? __asan_memcpy+0x40/0x70 [ 1060.110910][T21262] ? tomoyo_encode+0x28b/0x540 [ 1060.115706][T21262] ? tomoyo_encode+0x28b/0x540 [ 1060.120587][T21262] __kmem_cache_alloc_node+0x53/0x250 [ 1060.125995][T21262] ? prepend_path+0x4b/0x960 [ 1060.130612][T21262] ? tomoyo_encode+0x28b/0x540 [ 1060.135402][T21262] __kmalloc+0xa4/0x230 [ 1060.139591][T21262] tomoyo_encode+0x28b/0x540 [ 1060.144218][T21262] tomoyo_realpath_from_path+0x592/0x5d0 [ 1060.149881][T21262] tomoyo_path_number_perm+0x248/0x620 [ 1060.155539][T21262] ? tomoyo_path_number_perm+0x217/0x620 [ 1060.161190][T21262] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1060.166706][T21262] ? ksys_write+0x1c4/0x260 [ 1060.171256][T21262] ? __fget_files+0x28/0x4b0 [ 1060.175949][T21262] ? __fget_files+0x28/0x4b0 [ 1060.180571][T21262] security_file_ioctl+0x70/0xa0 [ 1060.185646][T21262] __se_sys_ioctl+0x48/0x170 [ 1060.190343][T21262] do_syscall_64+0x55/0xa0 [ 1060.194893][T21262] ? clear_bhb_loop+0x40/0x90 [ 1060.199641][T21262] ? clear_bhb_loop+0x40/0x90 [ 1060.204368][T21262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.210309][T21262] RIP: 0033:0x7f620af9c819 [ 1060.214747][T21262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.234563][T21262] RSP: 002b:00007f620be96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.243277][T21262] RAX: ffffffffffffffda RBX: 00007f620b216090 RCX: 00007f620af9c819 [ 1060.251494][T21262] RDX: 0000200000000500 RSI: 00000000801054db RDI: 0000000000000003 [ 1060.259498][T21262] RBP: 00007f620be96090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.267676][T21262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.275674][T21262] R13: 00007f620b216128 R14: 00007f620b216090 R15: 00007ffe524a5a18 [ 1060.283763][T21262] [ 1060.299342][ T5083] Bluetooth: hci4: command tx timeout [ 1060.307584][T21262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1060.809445][T21262] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1060.829755][T21271] syzkaller0: entered promiscuous mode [ 1060.850189][T21271] syzkaller0: entered allmulticast mode [ 1060.925299][T21129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1061.014980][T21267] macsec0: entered promiscuous mode [ 1061.026167][T21267] macsec0: entered allmulticast mode [ 1061.036220][T21267] veth1_macvtap: entered allmulticast mode [ 1061.045919][T21129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1061.108313][T21129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1061.126627][T21129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1061.180851][T21282] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1061.592576][T21293] netlink: 'syz.1.4711': attribute type 10 has an invalid length. [ 1061.613250][T21293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4711'. [ 1061.759569][T21129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.941537][T21302] netlink: 'syz.1.4712': attribute type 39 has an invalid length. [ 1062.339341][ T5083] Bluetooth: hci4: command tx timeout [ 1063.620927][T21129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.722718][T13618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.730086][T13618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.973664][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.981142][T13613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.403685][T21129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.152723][T21129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.600464][T21392] sctp: [Deprecated]: syz.4.4728 (pid 21392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1065.600464][T21392] Use struct sctp_sack_info instead [ 1065.801295][T21406] netlink: 'syz.1.4729': attribute type 10 has an invalid length. [ 1065.809908][T21406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1065.836958][T21406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1066.038779][T13629] hsr_slave_0: left promiscuous mode [ 1066.081252][T13629] hsr_slave_1: left promiscuous mode [ 1066.112426][T13629] bridge_slave_1: left allmulticast mode [ 1066.139664][T13629] bridge_slave_1: left promiscuous mode [ 1066.145728][T13629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.206241][T13629] bridge_slave_0: left allmulticast mode [ 1066.225001][T13629] bridge_slave_0: left promiscuous mode [ 1066.259973][T13629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.223273][T13629] veth0_macvtap: left promiscuous mode [ 1067.234280][T13629] veth1_vlan: left promiscuous mode [ 1067.427486][T21434] netlink: 'syz.1.4736': attribute type 3 has an invalid length. [ 1067.451946][T21434] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1068.626657][T13629] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.003736][T13629] .` (unregistering): (slave bridge0): Releasing backup interface [ 1069.012610][T13629] .` (unregistering): Released all slaves [ 1069.129747][T21431] hsr0: entered promiscuous mode [ 1069.134839][T21431] hsr0: entered allmulticast mode [ 1069.153244][T21431] hsr_slave_0: entered allmulticast mode [ 1069.179294][T21431] hsr_slave_1: entered allmulticast mode [ 1069.441729][T21442] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1069.460408][T21442] netlink: del zone limit has 8 unknown bytes [ 1069.475081][T21129] veth0_vlan: entered promiscuous mode [ 1069.548790][T21129] veth1_vlan: entered promiscuous mode [ 1069.734454][T21129] veth0_macvtap: entered promiscuous mode [ 1069.792084][T21129] veth1_macvtap: entered promiscuous mode [ 1069.860317][T21451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.133162][T21129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.169018][T21129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.221161][T21129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.260524][T21129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.304460][T21129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.416103][T21129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.453396][T21129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.489081][T21129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.509205][T21129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.537870][T21129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.570795][T21129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.640833][T21463] netlink: 'syz.1.4745': attribute type 8 has an invalid length. [ 1070.650001][T21129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.658765][T21129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.669369][T21129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.727194][T21463] netlink: 'syz.1.4745': attribute type 21 has an invalid length. [ 1070.744673][T21463] netlink: 'syz.1.4745': attribute type 6 has an invalid length. [ 1070.762450][T21463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1070.840377][T13607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.859156][T13607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.949758][T13614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.957735][T13614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.521347][T18251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1073.531542][T18251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1073.544963][T18251] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1073.570182][T18251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1073.578622][T18251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1073.587411][T18251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1073.663012][T13614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.788241][T21507] netlink: 'syz.4.4761': attribute type 49 has an invalid length. [ 1074.550171][T21514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.627678][T21514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.697638][T21514] bond0 (unregistering): Released all slaves [ 1074.763741][T13614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.810368][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1075.699264][T18251] Bluetooth: hci1: command tx timeout [ 1075.748673][T13614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.883410][T21524] netlink: 'syz.4.4764': attribute type 6 has an invalid length. [ 1075.927429][T21524] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4764'. [ 1076.675563][T21533] netlink: 'syz.1.4772': attribute type 10 has an invalid length. [ 1076.698816][T21528] netlink: 'syz.1.4772': attribute type 10 has an invalid length. [ 1076.712650][T21528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1076.827103][T13614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.924967][T21542] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 1076.959241][T21542] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1077.063822][T21542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1077.779506][T18251] Bluetooth: hci1: command tx timeout [ 1077.816403][T21505] chnl_net:caif_netlink_parms(): no params data found [ 1079.019142][T21547] netlink: 'syz.2.4767': attribute type 21 has an invalid length. [ 1079.027141][T21547] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4767'. [ 1079.238607][T21505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.246373][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.264332][T21505] bridge_slave_0: entered allmulticast mode [ 1079.290723][T21505] bridge_slave_0: entered promiscuous mode [ 1079.311020][T21505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.318244][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.342444][T21505] bridge_slave_1: entered allmulticast mode [ 1079.379586][T21505] bridge_slave_1: entered promiscuous mode [ 1079.582279][T21505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.765815][T21505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.859421][T18251] Bluetooth: hci1: command tx timeout [ 1080.123934][T21505] team0: Port device team_slave_0 added [ 1080.196166][T21505] team0: Port device team_slave_1 added [ 1080.416917][T21505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.449108][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.539195][T21505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.087605][T21505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.115695][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.179296][T21505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.445854][T21505] hsr_slave_0: entered promiscuous mode [ 1081.470399][T21505] hsr_slave_1: entered promiscuous mode [ 1081.489448][T21505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.497065][T21505] Cannot create hsr debugfs directory [ 1081.946890][T18251] Bluetooth: hci1: command tx timeout [ 1082.611732][T21641] netlink: 'syz.2.4781': attribute type 6 has an invalid length. [ 1082.799120][T21641] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1083.632863][T21664] netlink: 'syz.4.4785': attribute type 10 has an invalid length. [ 1084.275496][T21668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4786'. [ 1084.326075][T21668] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 1084.396584][T21664] team0: Port device dummy0 added [ 1085.377211][T21687] netlink: 'syz.2.4791': attribute type 1 has an invalid length. [ 1085.453893][T21505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1085.540855][T21505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1085.627489][T21505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1085.686444][T21505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1086.155941][T21505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.327897][T21505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.403881][T18251] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1086.494099][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.501411][T13613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.560887][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.568147][T13613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.134843][T21505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.300372][ T5083] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1088.307948][ T5083] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1089.396860][T13614] hsr_slave_0: left promiscuous mode [ 1089.403668][T13614] hsr_slave_1: left promiscuous mode [ 1089.428803][T13614] bond0: left allmulticast mode [ 1089.434408][T13614] bond_slave_0: left allmulticast mode [ 1089.451300][T13614] bond_slave_1: left allmulticast mode [ 1089.458774][T13614] bridge_slave_1: left allmulticast mode [ 1089.470729][T13614] bridge0: port 2(bond0) entered disabled state [ 1089.490465][T13614] bridge_slave_0: left allmulticast mode [ 1089.501543][T13614] bridge_slave_0: left promiscuous mode [ 1089.507746][T13614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.548885][T13614] veth1_macvtap: left promiscuous mode [ 1089.555182][T13614] veth0_macvtap: left promiscuous mode [ 1089.565290][T13614] veth1_vlan: left promiscuous mode [ 1089.795176][T13614] team0 (unregistering): Port device geneve1 removed [ 1090.486121][T13614] team0 (unregistering): Port device team_slave_1 removed [ 1090.551151][T13614] team0 (unregistering): Port device  removed [ 1090.624802][T13614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.637241][T13614] bond_slave_1 (unregistering): left promiscuous mode [ 1090.705219][T13614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.714983][T13614] bond_slave_0 (unregistering): left promiscuous mode [ 1090.781407][T13614] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1090.795667][T13614] bridge_slave_1 (unregistering): left promiscuous mode [ 1091.145597][T13614] bond0 (unregistering): Released all slaves [ 1091.272561][T21780] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1091.345060][T21505] veth0_vlan: entered promiscuous mode [ 1091.412254][T21505] veth1_vlan: entered promiscuous mode [ 1091.603133][T21505] veth0_macvtap: entered promiscuous mode [ 1091.628331][T21505] veth1_macvtap: entered promiscuous mode [ 1091.874078][T21797] netlink: 'syz.1.4811': attribute type 21 has an invalid length. [ 1092.191082][T21791] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1092.212522][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.235366][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.269051][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.299169][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.329076][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.347733][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.421646][T21505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.429921][ T5083] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1092.437422][ T5083] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1092.637839][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.674632][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.705348][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.731606][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.760027][T21505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.799099][T21505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.838170][T21505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.918229][T21505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.939312][T21505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.956379][T21505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.973848][T21505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.227730][T13605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.274667][T13605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.408750][T13607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.662055][T21842] netlink: 'syz.2.4822': attribute type 29 has an invalid length. [ 1093.697389][T13607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.826786][T21842] netlink: 'syz.2.4822': attribute type 29 has an invalid length. [ 1093.871673][T21843] netlink: 'syz.2.4822': attribute type 29 has an invalid length. [ 1093.919852][T21845] netlink: 'syz.2.4822': attribute type 29 has an invalid length. [ 1094.200281][T21856] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1096.515378][T18251] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 1096.517207][T18251] Bluetooth: hci0: hardware error 0x00 [ 1097.620895][T21911] netlink: 'syz.0.4842': attribute type 10 has an invalid length. [ 1097.646279][T21911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4842'. [ 1097.659295][T21911] vcan0: entered promiscuous mode [ 1097.664813][T21911] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1100.739215][T18251] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1101.141397][T21925] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4846'. [ 1101.162557][T21925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.188669][T21925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.203591][T21925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.221280][T21925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.233988][T21925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.246735][T21925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.537495][T21945] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1109.063825][T21965] netlink: 'syz.0.4860': attribute type 9 has an invalid length. [ 1109.132117][T21965] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4860'. [ 1109.184895][T21966] netlink: 'syz.0.4860': attribute type 9 has an invalid length. [ 1109.234536][T21966] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4860'. [ 1109.545621][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1109.555326][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1109.564371][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1109.572995][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1109.581343][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1109.588874][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1109.897215][T21982] netlink: 'syz.0.4863': attribute type 10 has an invalid length. [ 1109.911685][T21982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4863'. [ 1109.932336][T21982] batman_adv: batadv0: Adding interface: veth0_vlan [ 1109.942465][T21982] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.992741][T21982] batman_adv: batadv0: Interface activated: veth0_vlan [ 1110.490715][T21974] chnl_net:caif_netlink_parms(): no params data found [ 1110.638850][T21974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.647373][T21974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.657563][T21974] bridge_slave_0: entered allmulticast mode [ 1110.670515][T21974] bridge_slave_0: entered promiscuous mode [ 1110.686115][T21974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.700422][T21974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.708094][T21974] bridge_slave_1: entered allmulticast mode [ 1110.722405][T21974] bridge_slave_1: entered promiscuous mode [ 1110.790768][T21974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.818429][T21974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.886833][T21974] team0: Port device team_slave_0 added [ 1110.904571][T21974] team0: Port device team_slave_1 added [ 1110.965428][T21974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.975654][T21974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.013476][T21974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.040916][T21974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.050166][T21974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.085239][T21974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.246500][T21974] hsr_slave_0: entered promiscuous mode [ 1111.495540][T21974] hsr_slave_1: entered promiscuous mode [ 1111.584503][T21994] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 1111.619607][T18251] Bluetooth: hci2: command tx timeout [ 1111.900068][T21974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1111.909354][T21974] Cannot create hsr debugfs directory [ 1112.070744][T21994] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 1112.238248][T21995] syzkaller0: entered promiscuous mode [ 1112.246178][T21995] syzkaller0: entered allmulticast mode [ 1112.324351][T22006] netlink: 'syz.0.4866': attribute type 3 has an invalid length. [ 1112.359751][T22006] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4866'. [ 1113.703612][T18251] Bluetooth: hci2: command tx timeout [ 1115.186271][T13607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.360881][T13607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.793153][T18251] Bluetooth: hci2: command tx timeout [ 1115.970366][T22041] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.4876'. [ 1116.195012][T13607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.221319][T22038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1116.275418][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.281299][T13607] batman_adv: batadv0: Removing interface: netdevsim0 [ 1116.282189][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.320221][T13607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.734051][T22061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4883'. [ 1116.825904][T22059] netlink: 'syz.0.4881': attribute type 10 has an invalid length. [ 1116.843516][T22059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4881'. [ 1117.887682][T18251] Bluetooth: hci2: command tx timeout [ 1117.952378][T22084] netlink: 'syz.0.4887': attribute type 9 has an invalid length. [ 1118.011187][T22084] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4887'. [ 1118.858370][T21974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.877255][T21974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.954470][T21974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1118.977375][T21974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1119.791533][T21974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.075595][T22142] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1121.405405][T21974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.460594][T22142] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1121.489250][T22141] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1121.529251][T22147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1121.536547][T22147] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.544036][T22147] IPv6: NLM_F_CREATE should be set when creating new route [ 1121.551354][T22147] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.167123][T22145] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1122.332362][T13629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.339640][T13629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.422884][T13629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.430160][T13629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.688227][T22178] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1123.385158][T22194] macvlan1: entered promiscuous mode [ 1123.401448][T22194] macvlan1: entered allmulticast mode [ 1123.420896][T22194] veth1_vlan: entered allmulticast mode [ 1123.560539][T21974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.000475][T22202] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.4913'. [ 1125.153389][T21974] veth0_vlan: entered promiscuous mode [ 1125.232948][T21974] veth1_vlan: entered promiscuous mode [ 1125.486906][T21974] veth0_macvtap: entered promiscuous mode [ 1125.558218][T22214] netlink: 'syz.4.4917': attribute type 28 has an invalid length. [ 1125.589052][T22214] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4917'. [ 1125.645028][T22214] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1125.699652][T21974] veth1_macvtap: entered promiscuous mode [ 1125.931277][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.115900][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.157918][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.186331][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.201063][T22221] netlink: 'syz.2.4919': attribute type 1 has an invalid length. [ 1126.223467][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.249024][T22221] netlink: 'syz.2.4919': attribute type 3 has an invalid length. [ 1126.259243][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.273140][T22221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4919'. [ 1126.275141][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.301834][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.326410][T21974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.346387][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.370578][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.386357][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.404868][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.417232][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.428317][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.438726][T21974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.450543][T21974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.463200][T21974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.561964][T21974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.586025][T21974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.603921][T21974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.615326][T21974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.801227][T22238] -: renamed from syzkaller0 [ 1127.858038][T13607] hsr_slave_0: left promiscuous mode [ 1127.881594][T13607] hsr_slave_1: left promiscuous mode [ 1127.915074][T13607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.933715][T13607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.995245][T13607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.013957][T13607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.037418][T13607] dummy0: left allmulticast mode [ 1128.058193][T13607] bridge0: port 4(dummy0) entered disabled state [ 1128.079484][T13607] bridge0: port 3(team0) entered disabled state [ 1128.102930][T13607] bridge_slave_1: left allmulticast mode [ 1128.121084][T13607] bridge_slave_1: left promiscuous mode [ 1128.135814][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.179762][T13607] bridge_slave_0: left allmulticast mode [ 1128.194083][T13607] bridge_slave_0: left promiscuous mode [ 1128.210934][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.547643][T13607] geneve1 (unregistering): left promiscuous mode [ 1128.555736][T13607] geneve1 (unregistering): left allmulticast mode [ 1128.576605][T13607] team0 (unregistering): Port device geneve1 removed [ 1129.122132][T13607] team_slave_1 (unregistering): left promiscuous mode [ 1129.129438][T13607] team_slave_1 (unregistering): left allmulticast mode [ 1129.138397][T13607] team0 (unregistering): Port device team_slave_1 removed [ 1129.212651][T13607] C (unregistering): left promiscuous mode [ 1129.218562][T13607] C (unregistering): left allmulticast mode [ 1129.229148][T13607] team0 (unregistering): Port device C removed [ 1129.308807][T13607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.392661][T13607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.084324][T13607] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1130.095579][T13607] bond0 (unregistering): Released all slaves [ 1130.297765][T13613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.329296][T13613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.467319][T13613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.502030][T13613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.853320][T22308] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4857'. [ 1131.008568][T22315] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1132.776964][T22357] netlink: 'syz.0.4967': attribute type 153 has an invalid length. [ 1132.797228][T22357] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4967'. [ 1132.824956][T22360] netlink: 'syz.2.4965': attribute type 19 has an invalid length. [ 1132.833352][T22360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4965'. [ 1133.388247][T22367] @0Ù: renamed from bond_slave_1 [ 1133.699952][T22380] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1134.029979][T22387] netlink: 'syz.2.4976': attribute type 2 has an invalid length. [ 1134.038484][T22387] netlink: 'syz.2.4976': attribute type 8 has an invalid length. [ 1134.063320][T22387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1134.154860][T18251] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1135.013274][T22417] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.4987'. [ 1135.144755][T22423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4988'. [ 1135.416385][T22430] netlink: 'syz.1.4991': attribute type 21 has an invalid length. [ 1136.295981][T22439] IPv6: Can't replace route, no match found [ 1136.822191][T22454] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4996'. [ 1137.261029][T22470] veth1: mtu less than device minimum [ 1137.491450][T22479] netlink: 'syz.4.5005': attribute type 2 has an invalid length. [ 1137.509725][T22479] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5005'. [ 1137.531776][T22477] : port 1(ip6gretap0) entered blocking state [ 1137.538116][T22477] : port 1(ip6gretap0) entered disabled state [ 1137.565811][T22477] ip6gretap0: entered allmulticast mode [ 1137.614948][T22484] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.5005'. [ 1137.668624][T22477] ip6gretap0: entered promiscuous mode [ 1137.719593][T22483] netlink: 'syz.1.5004': attribute type 21 has an invalid length. [ 1137.742892][T22483] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5004'. [ 1137.978796][T22488] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.5007'. [ 1138.190965][T22488] netlink: 'syz.1.5007': attribute type 10 has an invalid length. [ 1138.243723][T22492] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1138.269111][T22488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.369364][T22488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.463542][T22488] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1138.969834][T22509] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1139.022031][T22509] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1139.049285][T22509] tipc: Started in network mode [ 1139.055118][T22509] tipc: Node identity b, cluster identity 73 [ 1139.069162][T22509] tipc: Node number set to 11 [ 1139.101860][T22514] netlink: 'syz.1.5014': attribute type 21 has an invalid length. [ 1139.123687][T22514] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5014'. [ 1139.170011][T22514] netlink: 'syz.1.5014': attribute type 4 has an invalid length. [ 1139.177855][T22514] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5014'. [ 1141.455810][T22536] IPv6: Can't replace route, no match found [ 1141.743498][T22554] : port 1(ip6gretap0) entered blocking state [ 1141.774237][T22554] : port 1(ip6gretap0) entered disabled state [ 1141.833933][T22554] ip6gretap0: entered allmulticast mode [ 1141.854125][T22557] netlink: 'syz.0.5028': attribute type 1 has an invalid length. [ 1141.863958][T22554] ip6gretap0: entered promiscuous mode [ 1141.884880][T22557] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5028'. [ 1141.921803][T22557] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5028'. [ 1142.027065][T22552] netlink: 'syz.2.5026': attribute type 21 has an invalid length. [ 1142.060806][T22552] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5026'. [ 1142.214686][T22563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1142.239748][T22563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1145.079615][T22596] netlink: 'syz.2.5038': attribute type 21 has an invalid length. [ 1146.236650][T22613] netlink: 'syz.1.5044': attribute type 29 has an invalid length. [ 1146.279198][T22613] netlink: 'syz.1.5044': attribute type 29 has an invalid length. [ 1146.320377][T22627] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5046'. [ 1146.360583][T22627] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.5046'. [ 1146.610684][T22633] netlink: 'syz.0.5048': attribute type 29 has an invalid length. [ 1147.286731][T22633] netlink: 'syz.0.5048': attribute type 29 has an invalid length. [ 1150.202359][T22741] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5082'. [ 1150.450419][T22752] netlink: 'syz.2.5079': attribute type 11 has an invalid length. [ 1150.482668][T22743] netlink: 'syz.2.5079': attribute type 3 has an invalid length. [ 1150.540665][T22743] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5079'. [ 1152.622405][T22778] netlink: 151436 bytes leftover after parsing attributes in process `syz.4.5093'. [ 1153.106421][T22789] netlink: 'syz.4.5096': attribute type 33 has an invalid length. [ 1153.152296][T22789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5096'. [ 1155.731446][T22831] netlink: 'syz.0.5108': attribute type 3 has an invalid length. [ 1155.797317][T22831] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.5108'. [ 1156.332291][T22843] netlink: 'syz.1.5111': attribute type 29 has an invalid length. [ 1156.364009][T22843] netlink: 'syz.1.5111': attribute type 29 has an invalid length. [ 1160.113417][T22869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1160.149743][T22869] veth0_macvtap: left promiscuous mode [ 1161.051993][T22884] netlink: 'syz.1.5126': attribute type 10 has an invalid length. [ 1161.199304][T22884] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1161.233836][T22884] hsr0: entered promiscuous mode [ 1161.246405][T22884] bridge0: port 3(hsr0) entered blocking state [ 1161.256474][T22884] bridge0: port 3(hsr0) entered disabled state [ 1161.267340][T22884] hsr0: entered allmulticast mode [ 1161.279595][T22884] hsr_slave_0: entered allmulticast mode [ 1161.286609][T22884] hsr_slave_1: entered allmulticast mode [ 1161.485311][T22884] bridge0: port 3(hsr0) entered blocking state [ 1161.499078][T22884] bridge0: port 3(hsr0) entered forwarding state [ 1161.548886][T22900] netlink: 'syz.4.5123': attribute type 13 has an invalid length. [ 1161.570064][T22900] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5123'. [ 1161.965124][T22910] netlink: 'syz.4.5134': attribute type 29 has an invalid length. [ 1162.016796][T22910] netlink: 'syz.4.5134': attribute type 29 has an invalid length. [ 1162.785594][T22938] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1162.806148][T22938] bridge_slave_1: default FDB implementation only supports local addresses [ 1162.817580][T22938] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1162.836922][T22938] bridge_slave_1: default FDB implementation only supports local addresses [ 1162.861250][T22939] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1162.898997][T22939] bridge_slave_1: default FDB implementation only supports local addresses [ 1163.018495][T22950] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5147'. [ 1163.093550][T22949] netlink: 184888 bytes leftover after parsing attributes in process `syz.4.5145'. [ 1163.853764][T22973] IPv6: Can't replace route, no match found [ 1164.209715][T18251] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 1164.305519][T22985] netlink: 'syz.2.5159': attribute type 21 has an invalid length. [ 1164.445316][T22985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5159'. [ 1164.488093][T22992] netlink: 184888 bytes leftover after parsing attributes in process `syz.2.5159'. [ 1164.950418][T23006] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.5165'. [ 1165.353268][T23021] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1165.387431][T23021] CPU: 0 PID: 23021 Comm: syz.2.5170 Not tainted syzkaller #0 [ 1165.395024][T23021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1165.405162][T23021] Call Trace: [ 1165.408514][T23021] [ 1165.411515][T23021] dump_stack_lvl+0x18c/0x250 [ 1165.416323][T23021] ? show_regs_print_info+0x20/0x20 [ 1165.421717][T23021] ? load_image+0x420/0x420 [ 1165.426380][T23021] sysfs_warn_dup+0x8e/0xa0 [ 1165.430972][T23021] sysfs_do_create_link_sd+0xc0/0x110 [ 1165.436437][T23021] device_add_class_symlinks+0x1cf/0x240 [ 1165.442178][T23021] device_add+0x507/0xc20 [ 1165.446616][T23021] wiphy_register+0x1dad/0x2ae0 [ 1165.451633][T23021] ? cfg80211_event_work+0x40/0x40 [ 1165.456823][T23021] ? minstrel_ht_alloc+0x88a/0x990 [ 1165.462146][T23021] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1165.468402][T23021] ieee80211_register_hw+0x3464/0x4250 [ 1165.474043][T23021] ? ieee80211_tasklet_handler+0x20/0x20 [ 1165.479772][T23021] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1165.485759][T23021] ? __debug_object_init+0xec/0x450 [ 1165.491029][T23021] ? __asan_memset+0x22/0x40 [ 1165.495663][T23021] ? __hrtimer_init+0x186/0x270 [ 1165.500565][T23021] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1165.506392][T23021] ? mac80211_hwsim_free+0x220/0x220 [ 1165.511723][T23021] ? rcu_is_watching+0x15/0xb0 [ 1165.516532][T23021] ? kstrndup+0xbd/0x140 [ 1165.520853][T23021] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1165.526105][T23021] ? __nla_validate+0x50/0x50 [ 1165.530866][T23021] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1165.537274][T23021] ? __nla_parse+0x40/0x50 [ 1165.541740][T23021] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1165.548136][T23021] genl_family_rcv_msg_doit+0x211/0x310 [ 1165.553720][T23021] ? end_current_label_crit_section+0x170/0x170 [ 1165.560097][T23021] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1165.566054][T23021] ? bpf_lsm_capable+0x9/0x10 [ 1165.570774][T23021] ? security_capable+0x89/0xb0 [ 1165.575686][T23021] genl_rcv_msg+0x619/0x7a0 [ 1165.580257][T23021] ? genl_bind+0x360/0x360 [ 1165.584708][T23021] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1165.591271][T23021] ? perf_trace_lock+0xfc/0x3b0 [ 1165.596190][T23021] netlink_rcv_skb+0x241/0x4d0 [ 1165.601009][T23021] ? genl_bind+0x360/0x360 [ 1165.605473][T23021] ? netlink_ack+0x1180/0x1180 [ 1165.610335][T23021] ? __lock_acquire+0x7d40/0x7d40 [ 1165.615441][T23021] ? down_read+0x1ac/0x2e0 [ 1165.619992][T23021] genl_rcv+0x28/0x40 [ 1165.624019][T23021] netlink_unicast+0x751/0x8d0 [ 1165.628861][T23021] netlink_sendmsg+0x8d0/0xbf0 [ 1165.633789][T23021] ? netlink_getsockopt+0x590/0x590 [ 1165.639044][T23021] ? aa_sock_msg_perm+0x94/0x150 [ 1165.644039][T23021] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1165.649371][T23021] ? security_socket_sendmsg+0x80/0xa0 [ 1165.654868][T23021] ? netlink_getsockopt+0x590/0x590 [ 1165.660122][T23021] ____sys_sendmsg+0x5ba/0x960 [ 1165.664944][T23021] ? __asan_memset+0x22/0x40 [ 1165.669666][T23021] ? __sys_sendmsg_sock+0x30/0x30 [ 1165.674721][T23021] ? __import_iovec+0x5f2/0x850 [ 1165.679635][T23021] ? import_iovec+0x73/0xa0 [ 1165.684187][T23021] ___sys_sendmsg+0x2a6/0x360 [ 1165.688931][T23021] ? __sys_sendmsg+0x2a0/0x2a0 [ 1165.693914][T23021] __se_sys_sendmsg+0x1c2/0x2b0 [ 1165.698826][T23021] ? __x64_sys_sendmsg+0x80/0x80 [ 1165.703950][T23021] ? lockdep_hardirqs_on+0x98/0x150 [ 1165.709309][T23021] do_syscall_64+0x55/0xa0 [ 1165.713776][T23021] ? clear_bhb_loop+0x40/0x90 [ 1165.718486][T23021] ? clear_bhb_loop+0x40/0x90 [ 1165.723217][T23021] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1165.729162][T23021] RIP: 0033:0x7fbf3d99c819 [ 1165.733621][T23021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.753268][T23021] RSP: 002b:00007fbf3e7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1165.761761][T23021] RAX: ffffffffffffffda RBX: 00007fbf3dc15fa0 RCX: 00007fbf3d99c819 [ 1165.770114][T23021] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1165.778116][T23021] RBP: 00007fbf3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1165.786122][T23021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1165.794138][T23021] R13: 00007fbf3dc16038 R14: 00007fbf3dc15fa0 R15: 00007ffc9339a408 [ 1165.802193][T23021] [ 1165.943777][T23010] netlink: 'syz.1.5166': attribute type 4 has an invalid length. [ 1166.146238][T23010] .`: renamed from bond0 (while UP) [ 1167.578800][T23050] __nla_validate_parse: 2 callbacks suppressed [ 1167.578818][T23050] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5178'. [ 1167.692120][T23047] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.5178'. [ 1167.834119][T23042] netlink: 'syz.2.5176': attribute type 10 has an invalid length. [ 1167.860510][T23042] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1167.882283][T23042] hsr0: entered promiscuous mode [ 1167.902451][T23042] bridge0: port 3(hsr0) entered blocking state [ 1167.919991][T23042] bridge0: port 3(hsr0) entered disabled state [ 1167.942804][T23042] hsr0: entered allmulticast mode [ 1167.971225][T23042] hsr_slave_0: entered allmulticast mode [ 1167.985028][T23042] hsr_slave_1: entered allmulticast mode [ 1168.102984][T23042] bridge0: port 3(hsr0) entered blocking state [ 1168.115712][T23042] bridge0: port 3(hsr0) entered forwarding state [ 1168.164845][T23069] netlink: 184888 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1168.221509][T23068] netlink: 'syz.1.5179': attribute type 21 has an invalid length. [ 1168.249734][T23068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1168.377277][T23073] netlink: 'syz.4.5183': attribute type 1 has an invalid length. [ 1168.399604][T23073] netlink: 'syz.4.5183': attribute type 4 has an invalid length. [ 1168.420993][T23073] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5183'. [ 1168.507300][T23079] netlink: 'syz.1.5186': attribute type 9 has an invalid length. [ 1168.529043][T23079] netlink: 379 bytes leftover after parsing attributes in process `syz.1.5186'. [ 1168.773829][T23077] C: renamed from team_slave_0 (while UP) [ 1168.879439][T23077] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1169.953057][T23112] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5193'. [ 1170.850487][T23131] netlink: 'syz.2.5199': attribute type 12 has an invalid length. [ 1170.858469][T23131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5199'. [ 1170.912483][T23115] netlink: 'syz.0.5194': attribute type 10 has an invalid length. [ 1170.957218][T23115] hsr0: entered promiscuous mode [ 1170.996841][T23133] netlink: 'syz.4.5198': attribute type 9 has an invalid length. [ 1171.027111][T23115] bridge0: port 3(hsr0) entered blocking state [ 1171.053698][T23115] bridge0: port 3(hsr0) entered disabled state [ 1171.069552][T23115] hsr0: entered allmulticast mode [ 1171.075378][T23115] hsr_slave_0: entered allmulticast mode [ 1171.094481][T23115] hsr_slave_1: entered allmulticast mode [ 1171.239234][T23115] bridge0: port 3(hsr0) entered blocking state [ 1171.249048][T23115] bridge0: port 3(hsr0) entered forwarding state [ 1172.241268][T23159] netlink: 'syz.0.5204': attribute type 15 has an invalid length. [ 1172.279225][T23159] netlink: 'syz.0.5204': attribute type 7 has an invalid length. [ 1175.145176][T23178] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 1175.191407][T23176] __nla_validate_parse: 2 callbacks suppressed [ 1175.191434][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5218'. [ 1176.226682][T23181] netlink: 'syz.4.5210': attribute type 10 has an invalid length. [ 1176.316452][T23181] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1176.328850][T23181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.348944][T23181] hsr0: entered promiscuous mode [ 1176.390074][T23195] netlink: 'syz.2.5215': attribute type 2 has an invalid length. [ 1176.397969][T23195] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.5215'. [ 1176.517730][T23181] bridge0: port 3(hsr0) entered blocking state [ 1176.543094][T23181] bridge0: port 3(hsr0) entered disabled state [ 1176.561511][T23181] hsr0: entered allmulticast mode [ 1176.580466][T23181] hsr_slave_0: entered allmulticast mode [ 1176.597918][T23181] hsr_slave_1: entered allmulticast mode [ 1176.709393][T23181] bridge0: port 3(hsr0) entered blocking state [ 1176.710221][T23196] delete_channel: no stack [ 1176.710378][T23196] delete_channel: no stack [ 1176.720530][T23181] bridge0: port 3(hsr0) entered forwarding state [ 1177.340091][T23217] netlink: set zone limit has 8 unknown bytes [ 1177.706138][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.713348][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.433628][T23235] netlink: 'syz.0.5227': attribute type 29 has an invalid length. [ 1178.471551][T23235] netlink: 'syz.0.5227': attribute type 29 has an invalid length. [ 1178.493487][T23237] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5229'. [ 1178.516094][T23238] netlink: 'syz.0.5227': attribute type 29 has an invalid length. [ 1178.541258][T23235] netlink: 'syz.0.5227': attribute type 29 has an invalid length. [ 1178.549958][T23235] netlink: 'syz.0.5227': attribute type 29 has an invalid length. [ 1179.782094][T23227] Bluetooth: hci4: command 0x0406 tx timeout [ 1182.474348][T23290] netlink: 'syz.0.5244': attribute type 9 has an invalid length. [ 1182.519172][T23290] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.5244'. [ 1184.874030][T23285] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1189.371969][T23297] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1189.381912][T23297] bridge_slave_1: default FDB implementation only supports local addresses [ 1189.493913][T23285] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1189.776125][T23336] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5258'. [ 1191.952152][T18251] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1192.282268][T18251] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1192.351351][T23365] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5268'. [ 1192.361130][T23365] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5268'. [ 1192.375015][T23365] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5268'. [ 1192.410821][T23365] hsr0: left allmulticast mode [ 1192.416566][T23365] hsr_slave_0: left allmulticast mode [ 1192.489984][T23365] hsr_slave_1: left allmulticast mode [ 1192.563736][T23365] bridge0: port 3(hsr0) entered disabled state [ 1193.215290][T23365] bridge_slave_1: left allmulticast mode [ 1193.235324][T23365] bridge_slave_1: left promiscuous mode [ 1193.315158][T23365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.552266][T23365] bridge_slave_0: left allmulticast mode [ 1193.557995][T23365] bridge_slave_0: left promiscuous mode [ 1193.587178][T23365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.836579][T23376] netlink: 'syz.2.5271': attribute type 10 has an invalid length. [ 1193.901566][T23376] team0: Device veth0_macvtap failed to register rx_handler [ 1194.002659][T23379] 6: renamed from veth0_vlan (while UP) [ 1194.148990][T18251] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 1195.650519][T23415] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1195.699396][T23415] bridge_slave_1: default FDB implementation only supports local addresses [ 1196.871768][T23431] netlink: 'syz.4.5286': attribute type 10 has an invalid length. [ 1196.929171][T23396] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1196.956516][T23431] team0: Device veth0_macvtap failed to register rx_handler [ 1197.533315][T23396] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1197.654024][T23396] CPU: 0 PID: 23396 Comm: syz.2.5277 Not tainted syzkaller #0 [ 1197.661671][T23396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1197.671858][T23396] Call Trace: [ 1197.675178][T23396] [ 1197.678147][T23396] dump_stack_lvl+0x18c/0x250 [ 1197.682898][T23396] ? show_regs_print_info+0x20/0x20 [ 1197.688154][T23396] ? load_image+0x420/0x420 [ 1197.692838][T23396] sysfs_warn_dup+0x8e/0xa0 [ 1197.697389][T23396] sysfs_do_create_link_sd+0xc0/0x110 [ 1197.702821][T23396] device_add_class_symlinks+0x1cf/0x240 [ 1197.708516][T23396] device_add+0x507/0xc20 [ 1197.712919][T23396] wiphy_register+0x1dad/0x2ae0 [ 1197.717961][T23396] ? cfg80211_event_work+0x40/0x40 [ 1197.723208][T23396] ? minstrel_ht_alloc+0x88a/0x990 [ 1197.728394][T23396] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1197.734517][T23396] ieee80211_register_hw+0x3464/0x4250 [ 1197.740083][T23396] ? ieee80211_tasklet_handler+0x20/0x20 [ 1197.745838][T23396] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1197.751799][T23396] ? __debug_object_init+0xec/0x450 [ 1197.757152][T23396] ? __asan_memset+0x22/0x40 [ 1197.761795][T23396] ? __hrtimer_init+0x186/0x270 [ 1197.766711][T23396] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1197.772707][T23396] ? mac80211_hwsim_free+0x220/0x220 [ 1197.778034][T23396] ? rcu_is_watching+0x15/0xb0 [ 1197.782847][T23396] ? kstrndup+0xbd/0x140 [ 1197.787166][T23396] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1197.792339][T23396] ? __nla_validate+0x50/0x50 [ 1197.797129][T23396] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1197.803708][T23396] ? __nla_parse+0x40/0x50 [ 1197.808180][T23396] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1197.814576][T23396] genl_family_rcv_msg_doit+0x211/0x310 [ 1197.820173][T23396] ? end_current_label_crit_section+0x170/0x170 [ 1197.826561][T23396] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1197.832518][T23396] ? bpf_lsm_capable+0x9/0x10 [ 1197.837240][T23396] ? security_capable+0x89/0xb0 [ 1197.842182][T23396] genl_rcv_msg+0x619/0x7a0 [ 1197.846750][T23396] ? genl_bind+0x360/0x360 [ 1197.851208][T23396] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1197.857583][T23396] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1197.864229][T23396] ? ref_tracker_free+0x690/0x840 [ 1197.869341][T23396] netlink_rcv_skb+0x241/0x4d0 [ 1197.874251][T23396] ? genl_bind+0x360/0x360 [ 1197.878754][T23396] ? netlink_ack+0x1180/0x1180 [ 1197.883605][T23396] ? __lock_acquire+0x7d40/0x7d40 [ 1197.888695][T23396] ? down_read+0x1ac/0x2e0 [ 1197.893164][T23396] genl_rcv+0x28/0x40 [ 1197.897191][T23396] netlink_unicast+0x751/0x8d0 [ 1197.902053][T23396] netlink_sendmsg+0x8d0/0xbf0 [ 1197.906894][T23396] ? netlink_getsockopt+0x590/0x590 [ 1197.912149][T23396] ? aa_sock_msg_perm+0x94/0x150 [ 1197.917138][T23396] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1197.922464][T23396] ? security_socket_sendmsg+0x80/0xa0 [ 1197.928224][T23396] ? netlink_getsockopt+0x590/0x590 [ 1197.933478][T23396] ____sys_sendmsg+0x5ba/0x960 [ 1197.938313][T23396] ? __asan_memset+0x22/0x40 [ 1197.942957][T23396] ? __sys_sendmsg_sock+0x30/0x30 [ 1197.948032][T23396] ? __import_iovec+0x5f2/0x850 [ 1197.952952][T23396] ? import_iovec+0x73/0xa0 [ 1197.957512][T23396] ___sys_sendmsg+0x2a6/0x360 [ 1197.962249][T23396] ? __sys_sendmsg+0x2a0/0x2a0 [ 1197.967197][T23396] __se_sys_sendmsg+0x1c2/0x2b0 [ 1197.972105][T23396] ? __x64_sys_sendmsg+0x80/0x80 [ 1197.977155][T23396] ? lockdep_hardirqs_on+0x98/0x150 [ 1197.982410][T23396] do_syscall_64+0x55/0xa0 [ 1197.986866][T23396] ? clear_bhb_loop+0x40/0x90 [ 1197.991592][T23396] ? clear_bhb_loop+0x40/0x90 [ 1197.996324][T23396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1198.002271][T23396] RIP: 0033:0x7fbf3d99c819 [ 1198.006924][T23396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.026845][T23396] RSP: 002b:00007fbf3e7d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.035401][T23396] RAX: ffffffffffffffda RBX: 00007fbf3dc15fa0 RCX: 00007fbf3d99c819 [ 1198.043591][T23396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1198.051697][T23396] RBP: 00007fbf3da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1198.059708][T23396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.067714][T23396] R13: 00007fbf3dc16038 R14: 00007fbf3dc15fa0 R15: 00007ffc9339a408 [ 1198.075946][T23396] [ 1198.209453][T23445] netlink: 'syz.0.5292': attribute type 10 has an invalid length. [ 1199.043468][T23459] netlink: 'syz.0.5297': attribute type 29 has an invalid length. [ 1199.128604][T23459] netlink: 'syz.0.5297': attribute type 29 has an invalid length. [ 1199.142136][T23461] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1199.192786][T23457] netlink: 'syz.0.5297': attribute type 29 has an invalid length. [ 1199.231710][T23461] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1199.259711][T23463] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1199.327373][T23461] hsr0: left allmulticast mode [ 1199.348116][T23461] hsr_slave_0: left allmulticast mode [ 1199.367231][T23461] hsr_slave_1: left allmulticast mode [ 1199.394296][T23461] bridge0: port 3(hsr0) entered disabled state [ 1199.609953][T23461] bridge_slave_1: left allmulticast mode [ 1199.616597][T23227] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 1199.625143][T23461] bridge_slave_1: left promiscuous mode [ 1199.636407][T23461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.765108][T23461] bridge_slave_0: left allmulticast mode [ 1199.786991][T23461] bridge_slave_0: left promiscuous mode [ 1199.844737][T23461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.183811][T23463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5298'. [ 1200.261060][T23227] Bluetooth: hci1: command 0x0406 tx timeout [ 1200.572055][T23489] netlink: 'syz.0.5308': attribute type 10 has an invalid length. [ 1200.702284][T23489] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1200.739908][T23492] netlink: 'syz.0.5308': attribute type 4 has an invalid length. [ 1200.763603][T23489] netlink: set zone limit has 8 unknown bytes [ 1200.878083][T18251] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1201.136068][T23502] netlink: 'syz.2.5313': attribute type 28 has an invalid length. [ 1201.502571][T23515] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1201.539125][T23515] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1201.599112][T23515] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1201.670145][T23520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5318'. [ 1201.709272][T23520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5318'. [ 1201.742310][T23515] hsr0: left allmulticast mode [ 1201.747359][T23515] hsr_slave_0: left allmulticast mode [ 1201.790360][T23515] hsr_slave_1: left allmulticast mode [ 1201.804302][T23515] bridge0: port 3(hsr0) entered disabled state [ 1201.871085][T23515] bridge_slave_1: left allmulticast mode [ 1201.901546][T23515] bridge_slave_1: left promiscuous mode [ 1201.908595][T23515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.054627][T23515] bridge_slave_0: left promiscuous mode [ 1202.100062][T23515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.290655][T18251] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1202.614916][T23520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5318'. [ 1202.624753][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1202.635757][T23527] netlink: 56827 bytes leftover after parsing attributes in process `syz.1.5318'. [ 1202.647344][T23529] netlink: 'syz.1.5318': attribute type 17 has an invalid length. [ 1202.656095][T23529] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5318'. [ 1202.707875][T23535] netlink: 'syz.0.5322': attribute type 10 has an invalid length. [ 1202.754732][T23535] team0: Port device veth0_macvtap added [ 1202.819273][T23539] 6: renamed from veth0_vlan (while UP) [ 1202.903010][T23546] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5326'. [ 1203.664559][T23571] netlink: 'syz.2.5333': attribute type 17 has an invalid length. [ 1205.923985][T23613] netlink: 'syz.4.5346': attribute type 17 has an invalid length. [ 1206.651046][T23638] netlink: 'syz.4.5352': attribute type 3 has an invalid length. [ 1206.672864][T23638] __nla_validate_parse: 14 callbacks suppressed [ 1206.672882][T23638] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5352'. [ 1206.775252][T23641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1206.796877][T23641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1206.830377][T23641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1206.928665][T23641] netlink: 'syz.2.5358': attribute type 3 has an invalid length. [ 1206.944229][T23641] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1207.035352][T23648] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1207.109041][T23648] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1207.223565][T23648] netlink: 62779 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1207.944290][T18251] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 1208.741057][T23704] netlink: 'syz.0.5376': attribute type 39 has an invalid length. [ 1208.986841][T23713] ================================================================== [ 1208.994995][T23713] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1209.002850][T23713] Write of size 48 at addr ffff88802d517f90 by task syz.1.5379/23713 [ 1209.011767][T23713] [ 1209.014112][T23713] CPU: 1 PID: 23713 Comm: syz.1.5379 Not tainted syzkaller #0 [ 1209.021700][T23713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.032376][T23713] Call Trace: [ 1209.035850][T23713] [ 1209.038843][T23713] dump_stack_lvl+0x18c/0x250 [ 1209.043808][T23713] ? __lock_acquire+0x7d40/0x7d40 [ 1209.048848][T23713] ? show_regs_print_info+0x20/0x20 [ 1209.054157][T23713] ? load_image+0x420/0x420 [ 1209.058675][T23713] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1209.064158][T23713] ? __virt_addr_valid+0x18c/0x540 [ 1209.069299][T23713] ? __virt_addr_valid+0x469/0x540 [ 1209.074527][T23713] print_report+0xa8/0x210 [ 1209.078989][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.084118][T23713] kasan_report+0x117/0x150 [ 1209.088724][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.093852][T23713] kasan_check_range+0x241/0x290 [ 1209.098799][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.103924][T23713] __asan_memcpy+0x40/0x70 [ 1209.108365][T23713] __bpf_get_stackid+0x6bf/0x900 [ 1209.113324][T23713] bpf_get_stackid_pe+0x343/0x410 [ 1209.118361][T23713] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 1209.123828][T23713] bpf_overflow_handler+0x43f/0x510 [ 1209.129052][T23713] ? bpf_overflow_handler+0xde/0x510 [ 1209.134438][T23713] ? tp_perf_event_destroy+0x20/0x20 [ 1209.139734][T23713] ? __lock_acquire+0x1273/0x7d40 [ 1209.144769][T23713] ? __perf_event_account_interrupt+0x187/0x280 [ 1209.151018][T23713] __perf_event_overflow+0x447/0x630 [ 1209.156317][T23713] perf_swevent_overflow+0x268/0x340 [ 1209.161612][T23713] ? mark_lock+0x94/0x320 [ 1209.165949][T23713] ? perf_event_switch_output+0x790/0x790 [ 1209.171686][T23713] ? rcu_is_watching+0x15/0xb0 [ 1209.176467][T23713] perf_swevent_event+0x45c/0x570 [ 1209.181499][T23713] ? perf_tp_event+0x1520/0x1520 [ 1209.186447][T23713] ___perf_sw_event+0x4a7/0x730 [ 1209.191315][T23713] ? ___perf_sw_event+0x199/0x730 [ 1209.196352][T23713] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1209.202772][T23713] ? __lock_acquire+0x1347/0x7d40 [ 1209.207813][T23713] ? verify_lock_unused+0x140/0x140 [ 1209.213019][T23713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1209.219067][T23713] ? lock_chain_count+0x20/0x20 [ 1209.223928][T23713] __perf_sw_event+0x139/0x270 [ 1209.228700][T23713] do_user_addr_fault+0x123e/0x12c0 [ 1209.234005][T23713] ? rcu_is_watching+0x15/0xb0 [ 1209.238783][T23713] exc_page_fault+0x64/0x100 [ 1209.243475][T23713] asm_exc_page_fault+0x26/0x30 [ 1209.248354][T23713] RIP: 0010:__put_user_4+0x11/0x20 [ 1209.253479][T23713] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1209.273096][T23713] RSP: 0018:ffffc90005427e80 EFLAGS: 00050246 [ 1209.279202][T23713] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000000000000 [ 1209.287234][T23713] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 1209.295328][T23713] RBP: 0000000000000010 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 1209.303326][T23713] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 0000000000000000 [ 1209.311499][T23713] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000005 [ 1209.319509][T23713] __sys_socketpair+0xb8/0x550 [ 1209.324333][T23713] __x64_sys_socketpair+0x9b/0xb0 [ 1209.329389][T23713] do_syscall_64+0x55/0xa0 [ 1209.333832][T23713] ? clear_bhb_loop+0x40/0x90 [ 1209.338530][T23713] ? clear_bhb_loop+0x40/0x90 [ 1209.343311][T23713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.349219][T23713] RIP: 0033:0x7f9fe699c819 [ 1209.353645][T23713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.373258][T23713] RSP: 002b:00007f9fe78d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1209.381682][T23713] RAX: ffffffffffffffda RBX: 00007f9fe6c15fa0 RCX: 00007f9fe699c819 [ 1209.389663][T23713] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1209.397642][T23713] RBP: 00007f9fe6a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1209.405620][T23713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.413618][T23713] R13: 00007f9fe6c16038 R14: 00007f9fe6c15fa0 R15: 00007ffced423018 [ 1209.421658][T23713] [ 1209.424694][T23713] [ 1209.427029][T23713] Allocated by task 23713: [ 1209.431449][T23713] kasan_set_track+0x4e/0x70 [ 1209.436057][T23713] __kasan_kmalloc+0x8f/0xa0 [ 1209.440664][T23713] __kmalloc_node+0xb4/0x230 [ 1209.445262][T23713] bpf_map_area_alloc+0x5e/0x110 [ 1209.450213][T23713] prealloc_elems_and_freelist+0x86/0x1c0 [ 1209.455941][T23713] stack_map_alloc+0x33a/0x4c0 [ 1209.460719][T23713] map_create+0x877/0x12f0 [ 1209.465140][T23713] __sys_bpf+0x651/0x890 [ 1209.469387][T23713] __x64_sys_bpf+0x7c/0x90 [ 1209.473824][T23713] do_syscall_64+0x55/0xa0 [ 1209.478244][T23713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1209.484144][T23713] [ 1209.486471][T23713] The buggy address belongs to the object at ffff88802d517f80 [ 1209.486471][T23713] which belongs to the cache kmalloc-cg-64 of size 64 [ 1209.500614][T23713] The buggy address is located 16 bytes inside of [ 1209.500614][T23713] allocated 40-byte region [ffff88802d517f80, ffff88802d517fa8) [ 1209.514614][T23713] [ 1209.516952][T23713] The buggy address belongs to the physical page: [ 1209.523458][T23713] page:ffffea0000b545c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d517 [ 1209.533647][T23713] memcg:ffff888077025601 [ 1209.537902][T23713] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1209.545935][T23713] page_type: 0xffffffff() [ 1209.550288][T23713] raw: 00fff00000000800 ffff888017c4da00 ffffea00006bc6c0 dead000000000005 [ 1209.558888][T23713] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888077025601 [ 1209.567490][T23713] page dumped because: kasan: bad access detected [ 1209.573910][T23713] page_owner tracks the page as allocated [ 1209.579629][T23713] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 23427667468, free_ts 23386224933 [ 1209.597288][T23713] post_alloc_hook+0x1c1/0x200 [ 1209.602086][T23713] get_page_from_freelist+0x1951/0x19e0 [ 1209.607640][T23713] __alloc_pages+0x1f0/0x460 [ 1209.612235][T23713] alloc_page_interleave+0x24/0x1e0 [ 1209.617437][T23713] alloc_slab_page+0x5d/0x160 [ 1209.622119][T23713] new_slab+0x87/0x2d0 [ 1209.626197][T23713] ___slab_alloc+0xc5d/0x12f0 [ 1209.630895][T23713] __kmem_cache_alloc_node+0x19e/0x250 [ 1209.636372][T23713] __kmalloc_node+0xa4/0x230 [ 1209.640974][T23713] kvmalloc_node+0x70/0x180 [ 1209.645490][T23713] nf_hook_entries_grow+0x27d/0x6d0 [ 1209.650741][T23713] __nf_register_net_hook+0x2c9/0x910 [ 1209.656208][T23713] nf_register_net_hook+0xb2/0x190 [ 1209.661326][T23713] nf_register_net_hooks+0x44/0x1b0 [ 1209.666531][T23713] nf_defrag_ipv4_enable+0x87/0x110 [ 1209.671809][T23713] nf_ct_netns_do_get+0x18d/0x5c0 [ 1209.676843][T23713] page last free stack trace: [ 1209.681531][T23713] free_unref_page_prepare+0x7b2/0x8c0 [ 1209.687001][T23713] free_unref_page_list+0xbe/0x860 [ 1209.692207][T23713] release_pages+0x1f7a/0x2200 [ 1209.696978][T23713] tlb_flush_mmu+0x379/0x510 [ 1209.701583][T23713] tlb_finish_mmu+0xf9/0x220 [ 1209.706219][T23713] exit_mmap+0x428/0xb90 [ 1209.710506][T23713] __mmput+0x118/0x3c0 [ 1209.714767][T23713] free_bprm+0x171/0x3e0 [ 1209.719117][T23713] kernel_execve+0x3c2/0x9c0 [ 1209.723723][T23713] call_usermodehelper_exec_async+0x20b/0x350 [ 1209.729797][T23713] ret_from_fork+0x48/0x80 [ 1209.734221][T23713] ret_from_fork_asm+0x11/0x20 [ 1209.739015][T23713] [ 1209.741356][T23713] Memory state around the buggy address: [ 1209.747198][T23713] ffff88802d517e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1209.755367][T23713] ffff88802d517f00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1209.763439][T23713] >ffff88802d517f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1209.771511][T23713] ^ [ 1209.776893][T23713] ffff88802d518000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.784965][T23713] ffff88802d518080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1209.793383][T23713] ================================================================== [ 1209.801446][T23713] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1209.808638][T23713] CPU: 1 PID: 23713 Comm: syz.1.5379 Not tainted syzkaller #0 [ 1209.816102][T23713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.826247][T23713] Call Trace: [ 1209.829534][T23713] [ 1209.832470][T23713] dump_stack_lvl+0x18c/0x250 [ 1209.837170][T23713] ? show_regs_print_info+0x20/0x20 [ 1209.842413][T23713] ? load_image+0x420/0x420 [ 1209.846955][T23713] panic+0x2dc/0x730 [ 1209.850949][T23713] ? __lock_acquire+0x7d40/0x7d40 [ 1209.856070][T23713] ? bpf_jit_dump+0xd0/0xd0 [ 1209.860673][T23713] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1209.866574][T23713] ? _raw_spin_unlock+0x40/0x40 [ 1209.871605][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.876816][T23713] check_panic_on_warn+0x84/0xa0 [ 1209.881773][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.886891][T23713] end_report+0x6f/0x130 [ 1209.891247][T23713] kasan_report+0x128/0x150 [ 1209.895919][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.901063][T23713] kasan_check_range+0x241/0x290 [ 1209.906033][T23713] ? __bpf_get_stackid+0x6bf/0x900 [ 1209.911177][T23713] __asan_memcpy+0x40/0x70 [ 1209.915620][T23713] __bpf_get_stackid+0x6bf/0x900 [ 1209.920578][T23713] bpf_get_stackid_pe+0x343/0x410 [ 1209.925614][T23713] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 1209.931180][T23713] bpf_overflow_handler+0x43f/0x510 [ 1209.936412][T23713] ? bpf_overflow_handler+0xde/0x510 [ 1209.941717][T23713] ? tp_perf_event_destroy+0x20/0x20 [ 1209.947102][T23713] ? __lock_acquire+0x1273/0x7d40 [ 1209.952146][T23713] ? __perf_event_account_interrupt+0x187/0x280 [ 1209.958484][T23713] __perf_event_overflow+0x447/0x630 [ 1209.963870][T23713] perf_swevent_overflow+0x268/0x340 [ 1209.969187][T23713] ? mark_lock+0x94/0x320 [ 1209.973546][T23713] ? perf_event_switch_output+0x790/0x790 [ 1209.979297][T23713] ? rcu_is_watching+0x15/0xb0 [ 1209.984268][T23713] perf_swevent_event+0x45c/0x570 [ 1209.989393][T23713] ? perf_tp_event+0x1520/0x1520 [ 1209.994338][T23713] ___perf_sw_event+0x4a7/0x730 [ 1209.999198][T23713] ? ___perf_sw_event+0x199/0x730 [ 1210.004230][T23713] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1210.010654][T23713] ? __lock_acquire+0x1347/0x7d40 [ 1210.015813][T23713] ? verify_lock_unused+0x140/0x140 [ 1210.021028][T23713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1210.027050][T23713] ? lock_chain_count+0x20/0x20 [ 1210.031935][T23713] __perf_sw_event+0x139/0x270 [ 1210.036722][T23713] do_user_addr_fault+0x123e/0x12c0 [ 1210.042120][T23713] ? rcu_is_watching+0x15/0xb0 [ 1210.046906][T23713] exc_page_fault+0x64/0x100 [ 1210.051514][T23713] asm_exc_page_fault+0x26/0x30 [ 1210.056382][T23713] RIP: 0010:__put_user_4+0x11/0x20 [ 1210.061537][T23713] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1210.081153][T23713] RSP: 0018:ffffc90005427e80 EFLAGS: 00050246 [ 1210.087230][T23713] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000000000000 [ 1210.095214][T23713] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 1210.103213][T23713] RBP: 0000000000000010 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 1210.111284][T23713] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 0000000000000000 [ 1210.119433][T23713] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000005 [ 1210.127509][T23713] __sys_socketpair+0xb8/0x550 [ 1210.132299][T23713] __x64_sys_socketpair+0x9b/0xb0 [ 1210.137426][T23713] do_syscall_64+0x55/0xa0 [ 1210.141860][T23713] ? clear_bhb_loop+0x40/0x90 [ 1210.146545][T23713] ? clear_bhb_loop+0x40/0x90 [ 1210.151238][T23713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1210.157156][T23713] RIP: 0033:0x7f9fe699c819 [ 1210.161579][T23713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.181285][T23713] RSP: 002b:00007f9fe78d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1210.189708][T23713] RAX: ffffffffffffffda RBX: 00007f9fe6c15fa0 RCX: 00007f9fe699c819 [ 1210.197684][T23713] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1210.205663][T23713] RBP: 00007f9fe6a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1210.213641][T23713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.221641][T23713] R13: 00007f9fe6c16038 R14: 00007f9fe6c15fa0 R15: 00007ffced423018 [ 1210.229653][T23713] [ 1210.232821][T23713] Kernel Offset: disabled [ 1210.237236][T23713] Rebooting in 86400 seconds..