last executing test programs: 8.507511998s ago: executing program 4 (id=16687): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000004400000008008dc9a33ce9347ae1974a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xc, 0x6, 0x1, 0x9, 0x0, 0x295, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4000, 0x4, 0x8, 0x3, 0x4, 0xc, 0x2, 0x0, 0x8000, 0x0, 0x7dc}, 0xffffffffffffffff, 0xd, r0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x7}, 0x8004, 0x7, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa089400, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000000000000000000000f8"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.811831189s ago: executing program 4 (id=16699): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x180, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000000)="e9b9c4434eab169348c9d863b434acc9b7aa872818e5fcb9d4641de8e524aedccc62c8162793b9f3db15d6d297d938b6693e43a62df6"}, 0x20) 6.515486306s ago: executing program 4 (id=16705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x480}, 0x94) 5.965900845s ago: executing program 4 (id=16708): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff00"], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 4.495421857s ago: executing program 4 (id=16713): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {0x95, 0x0, 0x0, 0x400000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 4.314735503s ago: executing program 3 (id=16716): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000100)=r4, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) (async) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xfe33) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xabe8420435859593}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 4.230021631s ago: executing program 4 (id=16718): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000e77910c0000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x94, &(0x7f00000000c0)=""/148}, 0x90) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000040)=0x8) write$cgroup_devices(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d84"], 0xffdd) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d81050423141100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8001500030001400200000901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e9703000000", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0x46}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000d291ede500110000000000000000000000010000000000000000000000110000000000002002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a0000005961c351935659", @ANYRES64=r0, @ANYRES64=r2], 0xf}, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.947840676s ago: executing program 3 (id=16721): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000961dae02b5e932ed160a000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xd151, 0xfff}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, r1, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000200), 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$kcm(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r9, &(0x7f0000000440)}, 0x20) 3.845139755s ago: executing program 2 (id=16723): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="01000000010000000400000000000000000000008000000000000000"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) write$cgroup_int(r5, &(0x7f0000000740)=0xe5df, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.778610111s ago: executing program 1 (id=16726): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000004400000008008dc9a33ce9347ae1974a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) socket$kcm(0xa, 0x922000000003, 0x11) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xc, 0x6, 0x1, 0x9, 0x0, 0x295, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4000, 0x4, 0x8, 0x3, 0x4, 0xc, 0x2, 0x0, 0x8000, 0x0, 0x7dc}, 0xffffffffffffffff, 0xd, r0, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x7}, 0x8004, 0x7, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa089400, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000000000000000000000f8"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x8000080, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.778426181s ago: executing program 2 (id=16727): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff0000000025040000000000003d400300000000007504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe2719fa6d5b8f51fc5a535daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe9326a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b26f502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc988161000000000eb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b2974c1e5f743644f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c46d8c9b71dff64075b74a740ebbdaa049f91e2c87dc6520ad0d2cccbcb08c0634ee74658d3e23bf511c8b2df1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b06138138a91d0ef4bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f30146ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b255af219c5bdd7b4309b512b36abadc4a1fac48833de5ab4bb15fecb5c935c7bcae154cdc37934d7ef50d5d63d2f6a6f9878874b45811fdf812beec1ceac104aabc181d64711a8c48e1b57be04783c85da3a4709565778e4c7127a78d07ddb105e456251df0fbd2076f5b9fdd2908d7564fb868820000000439baaffb37a34e41fdcb15b4e653b22f61e5d27b28c194033f577074c807431c7ea67f620dad8ad30b8e72034fb645a3c999a8a20b9b5076329e69e4afd67d01cb18591a76f7f4296bea32dcf5bd9b1e14b7badcae4a5e5a9c8920c45086aa938a3a6191ab"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3c, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfeff}, 0xfffffffffffffd00}, 0x48) 2.769791762s ago: executing program 3 (id=16728): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.702661158s ago: executing program 2 (id=16729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xaf}}]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7000000}, 0x94) 2.511242775s ago: executing program 2 (id=16730): unlink(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x60, 0x0, 0x20) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0xfd, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0xafb}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x1, 0x8, 0x8000, 0x8800, 0xffffffffffffffff, 0x9, '\x00', r7, r3, 0x4, 0x0, 0x1, 0x0, @value=r6}, 0x50) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7fff}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd7c}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) unlink(&(0x7f0000000200)='./cgroup\x00') recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB='>'], 0x9a) 2.475417188s ago: executing program 3 (id=16731): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000004000000000000000200000d00000000050000000000000000000000000000000200000001b4000f03000000010000000200000002000000a77818000005000000000f01000000c900002e"], &(0x7f00000000c0)=""/181, 0x60, 0xb5, 0x1}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x22, 0x2, 0x21) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.285388395s ago: executing program 2 (id=16732): socket$kcm(0x11, 0x3, 0x0) (async) r0 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc08, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380), 0x4) r4 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x15, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0x15, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x400000000000000}, 0x6402}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRES64=r4], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x7, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000080016000a000199c508894003000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701001c0040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d5", 0xd8}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000047f1c18080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x50) close(0x4) (async) close(0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r7) bpf$MAP_CREATE(0x0, 0x0, 0x1a) (async) bpf$MAP_CREATE(0x0, 0x0, 0x1a) r8 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x100080, 0x7fff, 0x0, 0x7, 0x2, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.015909339s ago: executing program 3 (id=16734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000029600009500000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff1146f532d9590edacac7b29ce6365c856765", &(0x7f0000000240), 0x800, r0}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89e0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x20044841) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x24, r0}, 0x38) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x48, &(0x7f0000000100)=r4, 0x120) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r6, 0x37, 0x0, 0xc762, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r8, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value, @void, @void, r9}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback=r0, r4, 0x29, 0x8, r5, @void, @value=r10, @void, @void, r9}, 0x20) 1.903754159s ago: executing program 2 (id=16735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xe) 1.501598735s ago: executing program 1 (id=16737): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x88408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc, 0xffffffffffffd059}, 0x0, 0x2000003, 0x0, 0x5, 0x0, 0x48e7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x12, &(0x7f0000000200), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0xffffffff, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001600)={'bond_slave_1\x00', 0x1000}) r4 = perf_event_open(0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x48) write$cgroup_freezer_state(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc00e}, 0x0) socket$kcm(0x10, 0x400000007, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x10}, 0xc300, 0x2, 0x3, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$tipc(r4, &(0x7f00000015c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)="357ad78e1628fd39dc8be9331632c7c288c683a4a2c17631060c0f8ddb67db49a2489a34fbc5c4507163d0f3932da8c9bdc0bfe5d99c665d76a00b06597da3b6a7c51b51719f2ae176fdc9bc2edc2b2e92c2bc653531fce85feff9d73a08783ac65227ca", 0x64}, {&(0x7f00000001c0)="620207125ce16e89d22f0baaf6333882dfd079c5fe74083536fbe288ff6379d09e26ade9101e3f977595b8e0d4b4cdc2d0b5daedc1ee6150ac73fd378886c8ba097034b397ba59a2fa33dda8b94b2b39cb431d6dcbe22d3c660fb4f2ddc072096aa12e3f93df08f02cfce28278e968e037681eafca65c93a8ce94f0d29c0a09b23c212d01727aae19544e2e708fff065cd89560a18625c093678d52e509036f98f09750914414a7aa3df1730ca31b9970a7f93266f455d215d", 0xb9}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000002c0)="5bbbee58835f2b83e53e174f", 0xc}, {&(0x7f0000000300)="a5d90d315a32e3e364b884d91e5354b8c539b88e2a012d5e04c6413491cea57a0252e05f11ced9723b5ab881ff6a9ec7e5ddcc36cb88a9c41c6242876404c5ccd911f67fc23abc6bb52d349e92629a374714afbdc5784df386ba108f1455a9966794665978c5a30b724e85227844c41f2521cf9acc4e9d76482f4a5898bb56e61a03ec9ea164fd65842126bbed512dad5705f8fd44fbf87367487ac15b219d3d1d07a2d1abcca8898f76862530d25e956c290f10e4a8d32445a412b2ee5e595be2a6f515bb8e4239c8d122453e268ab392cfb93db3f50dbaf6737d23e05d92b2c7", 0xe1}], 0x5, &(0x7f0000001580)="c46624c21da04a49", 0x8, 0x4000}, 0x40010) socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x18, 0x7, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001c40)}, 0x100) close(0x3) 1.469160098s ago: executing program 0 (id=16738): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff}, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="1805000000000000f8ff000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.089460082s ago: executing program 1 (id=16739): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000961dae02b5e932ed160a000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xd151, 0xfff}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, r1, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000200), 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$kcm(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r9, &(0x7f0000000440)}, 0x20) 1.089265172s ago: executing program 3 (id=16740): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r3, 0x4, r3}, 0x10) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)="42cef3a22c4e04586c7fd28401b75e21c5132bf743d6919b30f478f1cbd1c1840ddd4c3f960cfd7ab08ffa20169e7aadaa1f9063e0419e82b2acb27916716d9cb758ce62df51c72e9dd47866c5e978d0f798234e7d09b3e8143290430e7a5517ad94383faf03862ca59121e114f1a77775753ece7979fbf80908f030d7373ed21e607481b1d9aac72eaf072ee6ea16e42d86406b43717c62816ecad91d4c4dfc5d76da35dee1a919919ef17be5af3b1df2ae9eb6ac704f099880b358", 0xbc}, {&(0x7f0000000340)="b024a3cc5ac8b62e1402b6ad99fac5539d786e0661336b", 0x17}], 0x2, 0x0, 0x0, 0x8020}, 0xc004) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xc48, 0x8000}, 0x100018, 0xc8, 0x4, 0x5, 0x6, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa104000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.081458213s ago: executing program 0 (id=16749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x700}, 0x94) 951.432955ms ago: executing program 0 (id=16741): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000840001f4070000007ffffffff5000000b8"], 0xd0}, 0x480c4) 711.467976ms ago: executing program 0 (id=16742): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff}, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x94) 656.134851ms ago: executing program 0 (id=16743): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000180000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910c0000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xb0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1e, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x8ce9a993e7558bb9, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78fa00, 0x0, @perf_config_ext, 0x10c002, 0x3, 0x0, 0x0, 0x6, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c030000000000000000000002010000000000000000feffffff0000000000000000005f00"], 0x0, 0x44}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000007c0)='r\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000400) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r7, 0x110, 0x2, &(0x7f0000000140)=r6, 0x16) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x94, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) 468.449498ms ago: executing program 1 (id=16744): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, 0x4c) 206.420941ms ago: executing program 1 (id=16745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000000000feff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.510025ms ago: executing program 0 (id=16746): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x7}, 0x1b, 0x0, 0x3, 0x0, 0x8, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000001, 0x7}, 0x1b, 0x0, 0x3, 0x0, 0x8, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x2d, 0x4, 0x8, 0x0, 0x200, 0x10000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x283c64f2, 0x4, @perf_config_ext={0x7}, 0x40, 0x8, 0x1, 0xe, 0x9, 0x6, 0x3, 0x0, 0x9, 0x0, 0x6f}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4004) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e002e000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfdef) socketpair(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 1 (id=16747): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900), 0x4) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x140800, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000002c0), 0x6}, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f000007000000000000001515ce9169", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, 0x0, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400c410000002000149215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2006.388863][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2006.440505][T14068] device hsr_slave_0 left promiscuous mode [ 2006.447319][T14068] device hsr_slave_1 left promiscuous mode [ 2006.455582][T14068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2006.463374][T14068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.471519][T14068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2006.478944][T14068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.489978][T14068] device bridge_slave_1 left promiscuous mode [ 2006.503832][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.516888][T14068] device bridge_slave_0 left promiscuous mode [ 2006.523667][T14068] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.561494][T14068] device veth1_macvtap left promiscuous mode [ 2006.567574][T14068] device veth0_macvtap left promiscuous mode [ 2006.581479][T14068] device veth1_vlan left promiscuous mode [ 2006.733091][T14068] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2007.040857][T15349] Bluetooth: hci2: command 0x041b tx timeout [ 2007.106838][T14068] team0 (unregistering): Port device team_slave_1 removed [ 2007.147792][T14068] team0 (unregistering): Port device team_slave_0 removed [ 2007.185500][T14068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2007.226912][T14068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.508915][T14068] bond0 (unregistering): Released all slaves [ 2007.613996][T15322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.642976][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2007.655909][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2007.664729][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2007.671820][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2007.680053][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2007.688832][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2007.697440][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2007.704569][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2007.714614][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2007.782798][T15322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.796410][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2007.805184][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2007.814122][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2007.823461][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2007.835787][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2007.840873][T15349] Bluetooth: hci3: command 0x041b tx timeout [ 2007.868248][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2007.881973][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2007.931922][T15322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.946771][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2007.961409][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2008.017768][T15322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2008.045201][T15062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2008.060334][T15062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2008.068259][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2008.077095][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2008.499845][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2008.508629][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2008.533465][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2008.561718][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2008.578146][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2008.607431][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2008.616015][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2008.625189][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2008.637382][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2008.648327][T15062] device veth0_vlan entered promiscuous mode [ 2008.672260][T15062] device veth1_vlan entered promiscuous mode [ 2008.757413][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2008.770310][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2008.781761][T15062] device veth0_macvtap entered promiscuous mode [ 2008.813605][T15322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2008.823872][T15062] device veth1_macvtap entered promiscuous mode [ 2008.835699][T15322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2008.859840][T15322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2008.884445][T15322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2008.946302][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2008.963896][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2008.977041][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2008.989188][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2008.999386][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.010038][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.022805][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2009.040289][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.056727][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.077121][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.087680][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.103485][T15062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.116029][T15062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.120825][T15349] Bluetooth: hci2: command 0x040f tx timeout [ 2009.134117][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2009.142788][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2009.157224][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2009.165776][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2009.181984][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2009.196497][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2009.208280][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2009.228609][T15062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.238814][T15062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.247965][T15062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.257680][T15062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.271195][T15347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2009.300897][T15347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2009.311530][T15347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2009.356526][T15347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2009.431090][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.439009][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.448343][T15322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2009.476883][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2009.525427][T14076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2009.533447][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2009.551480][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2009.559026][T14076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2009.574165][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2009.589683][T15322] 8021q: adding VLAN 0 to HW filter on device team0 [ 2009.606891][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2009.631482][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2009.640056][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.647223][T14076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2009.671658][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2009.682922][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2009.693464][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2009.704383][T14076] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.711533][T14076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2009.738358][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2009.759415][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2009.791801][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2009.807529][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2009.819664][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2009.871971][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2009.902433][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2009.921133][T15349] Bluetooth: hci3: command 0x040f tx timeout [ 2010.018964][T15347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2010.097368][T15496] device bridge_slave_1 left promiscuous mode [ 2010.172396][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.184796][T15496] device bridge_slave_0 left promiscuous mode [ 2010.199480][T15496] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.401423][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2010.413397][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2010.427422][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2010.443302][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2010.470998][T15322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2010.506875][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2010.520377][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2010.549628][T15347] 8021q: adding VLAN 0 to HW filter on device team0 [ 2010.589650][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2010.610014][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2010.631661][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.638864][T14076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2010.707465][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2010.727875][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2010.768227][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2010.798934][T14076] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.806150][T14076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2010.828554][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2010.861452][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2010.882357][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2010.921029][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2010.946896][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2010.975384][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2010.985362][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2011.000078][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2011.038440][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2011.058240][T15347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2011.111112][T15347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2011.122890][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2011.152626][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2011.208180][T15349] Bluetooth: hci2: command 0x0419 tx timeout [ 2011.223347][T15523] netlink: 10 bytes leftover after parsing attributes in process `syz.4.14696'. [ 2011.268940][T15524] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.14697'. [ 2011.363898][T15530] FAULT_INJECTION: forcing a failure. [ 2011.363898][T15530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.388037][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2011.397995][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2011.429680][T15322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2011.452992][T15530] CPU: 1 PID: 15530 Comm: syz.0.14698 Not tainted syzkaller #0 [ 2011.460586][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2011.470668][T15530] Call Trace: [ 2011.473958][T15530] [ 2011.476901][T15530] dump_stack_lvl+0x188/0x24e [ 2011.481609][T15530] ? show_regs_print_info+0x12/0x12 [ 2011.486837][T15530] ? load_image+0x400/0x400 [ 2011.491368][T15530] ? __lock_acquire+0x7d10/0x7d10 [ 2011.496424][T15530] should_fail_ex+0x399/0x4d0 [ 2011.501138][T15530] _copy_from_user+0x2c/0x170 [ 2011.505850][T15530] __sys_bpf+0x2ea/0x780 [ 2011.510139][T15530] ? bpf_link_show_fdinfo+0x380/0x380 [ 2011.515551][T15530] ? lock_chain_count+0x20/0x20 [ 2011.520438][T15530] __x64_sys_bpf+0x78/0x90 [ 2011.524886][T15530] do_syscall_64+0x4c/0xa0 [ 2011.529325][T15530] ? clear_bhb_loop+0x60/0xb0 [ 2011.534023][T15530] ? clear_bhb_loop+0x60/0xb0 [ 2011.538719][T15530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2011.544624][T15530] RIP: 0033:0x7f4924b9c629 [ 2011.549035][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2011.568642][T15530] RSP: 002b:00007f4922df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2011.577057][T15530] RAX: ffffffffffffffda RBX: 00007f4924e15fa0 RCX: 00007f4924b9c629 [ 2011.585024][T15530] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2011.592987][T15530] RBP: 00007f4922df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2011.600954][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2011.608919][T15530] R13: 00007f4924e16038 R14: 00007f4924e15fa0 R15: 00007ffcdd23c098 [ 2011.616900][T15530] [ 2011.680315][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2011.698124][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2011.749877][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2011.769190][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2011.781137][T15322] device veth0_vlan entered promiscuous mode [ 2011.794293][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2011.806503][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2011.827468][T15322] device veth1_vlan entered promiscuous mode [ 2011.847756][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2011.862591][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2011.870180][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2011.897001][T15347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2011.905920][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2011.916093][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2011.929398][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2011.941948][T15322] device veth0_macvtap entered promiscuous mode [ 2011.971783][T15322] device veth1_macvtap entered promiscuous mode [ 2012.001110][T15349] Bluetooth: hci3: command 0x0419 tx timeout [ 2012.040710][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2012.048891][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2012.094983][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2012.120253][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2012.154581][T15347] device veth0_vlan entered promiscuous mode [ 2012.177310][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2012.208960][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.239411][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2012.280879][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.321275][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2012.352611][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.363179][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2012.402991][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.442239][T15322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2012.449629][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2012.469876][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2012.541990][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2012.571377][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2012.608948][T15347] device veth1_vlan entered promiscuous mode [ 2012.619929][T15559] netlink: 'syz.3.14704': attribute type 10 has an invalid length. [ 2012.665955][T15559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2012.694324][T15559] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2012.723257][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2012.749287][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.782092][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2012.803923][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.820763][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2012.840778][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.854191][T15322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2012.865309][T15322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2012.883674][T15322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2012.908264][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2012.917081][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2012.925342][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2012.945811][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2012.957756][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2012.988074][T15322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.011636][T15322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.050763][T15322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.059516][T15322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.191194][T15575] delete_channel: no stack [ 2013.234348][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2013.251874][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2013.281917][T15347] device veth0_macvtap entered promiscuous mode [ 2013.337105][T15347] device veth1_macvtap entered promiscuous mode [ 2013.382624][T14068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.390490][T14068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.433003][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.465523][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.495767][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.561132][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.580760][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.596839][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.616911][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.648309][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.672852][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2013.712446][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.745240][T15347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2013.761392][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2013.792184][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2013.813732][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2013.833154][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2013.861424][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2013.886012][T15597] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.14714'. [ 2013.917386][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2013.960226][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2013.993621][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.036449][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.063405][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.102242][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.123279][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.140721][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.158386][T15347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2014.179004][T15347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2014.216692][T15347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2014.247831][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2014.257060][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.275477][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.283729][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2014.313150][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2014.350031][T15347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.378797][T15347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.401285][T15347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.410027][T15347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.589407][T15619] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.14718'. [ 2014.670074][T14076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.702991][T14076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.773209][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2014.829281][T14068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2014.839043][T14068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2014.849504][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2015.900277][T15661] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.14730'. [ 2015.956907][T15667] netlink: 'syz.2.14732': attribute type 29 has an invalid length. [ 2016.037019][T15667] netlink: 'syz.2.14732': attribute type 29 has an invalid length. [ 2016.243211][T15670] netlink: 'syz.2.14732': attribute type 29 has an invalid length. [ 2016.583341][T15678] FAULT_INJECTION: forcing a failure. [ 2016.583341][T15678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2016.614727][T15678] CPU: 0 PID: 15678 Comm: syz.2.14735 Not tainted syzkaller #0 [ 2016.622327][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2016.632395][T15678] Call Trace: [ 2016.635686][T15678] [ 2016.638628][T15678] dump_stack_lvl+0x188/0x24e [ 2016.643327][T15678] ? show_regs_print_info+0x12/0x12 [ 2016.648543][T15678] ? load_image+0x400/0x400 [ 2016.653060][T15678] ? __lock_acquire+0x7d10/0x7d10 [ 2016.658108][T15678] should_fail_ex+0x399/0x4d0 [ 2016.662808][T15678] strncpy_from_user+0x32/0x350 [ 2016.667679][T15678] bpf_prog_load+0x1f3/0x1560 [ 2016.672389][T15678] ? map_freeze+0x390/0x390 [ 2016.676905][T15678] ? __might_fault+0xa6/0x120 [ 2016.681585][T15678] ? __might_fault+0xa6/0x120 [ 2016.686257][T15678] ? __might_fault+0xc2/0x120 [ 2016.690923][T15678] ? __might_fault+0xa6/0x120 [ 2016.695591][T15678] ? bpf_lsm_bpf+0x5/0x10 [ 2016.699913][T15678] ? security_bpf+0x7a/0xa0 [ 2016.704408][T15678] __sys_bpf+0x5b8/0x780 [ 2016.708648][T15678] ? bpf_link_show_fdinfo+0x380/0x380 [ 2016.714024][T15678] ? lock_chain_count+0x20/0x20 [ 2016.718877][T15678] __x64_sys_bpf+0x78/0x90 [ 2016.723291][T15678] do_syscall_64+0x4c/0xa0 [ 2016.727701][T15678] ? clear_bhb_loop+0x60/0xb0 [ 2016.732369][T15678] ? clear_bhb_loop+0x60/0xb0 [ 2016.737041][T15678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2016.742927][T15678] RIP: 0033:0x7ff63239c629 [ 2016.747330][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2016.766929][T15678] RSP: 002b:00007ff6332cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2016.775336][T15678] RAX: ffffffffffffffda RBX: 00007ff632615fa0 RCX: 00007ff63239c629 [ 2016.783304][T15678] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2016.791268][T15678] RBP: 00007ff6332cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2016.799232][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2016.807191][T15678] R13: 00007ff632616038 R14: 00007ff632615fa0 R15: 00007ffcdec06f08 [ 2016.815166][T15678] [ 2016.950789][T15680] netlink: 'syz.2.14736': attribute type 25 has an invalid length. [ 2016.958854][T15680] netlink: 'syz.2.14736': attribute type 29 has an invalid length. [ 2017.020959][T15680] device pim6reg1 entered promiscuous mode [ 2017.614488][T15696] delete_channel: no stack [ 2018.264384][T15715] device pim6reg1 entered promiscuous mode [ 2018.334860][T15719] delete_channel: no stack [ 2019.105672][T15753] FAULT_INJECTION: forcing a failure. [ 2019.105672][T15753] name failslab, interval 1, probability 0, space 0, times 0 [ 2019.144744][T15753] CPU: 1 PID: 15753 Comm: syz.2.14767 Not tainted syzkaller #0 [ 2019.152351][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2019.162427][T15753] Call Trace: [ 2019.165712][T15753] [ 2019.168653][T15753] dump_stack_lvl+0x188/0x24e [ 2019.173363][T15753] ? show_regs_print_info+0x12/0x12 [ 2019.178592][T15753] ? load_image+0x400/0x400 [ 2019.183118][T15753] ? __might_sleep+0xd0/0xd0 [ 2019.187720][T15753] ? __lock_acquire+0x7d10/0x7d10 [ 2019.192762][T15753] ? mark_lock+0x94/0x320 [ 2019.197119][T15753] should_fail_ex+0x399/0x4d0 [ 2019.201825][T15753] should_failslab+0x5/0x20 [ 2019.206351][T15753] slab_pre_alloc_hook+0x59/0x310 [ 2019.211391][T15753] ? __get_vm_area_node+0x122/0x330 [ 2019.216605][T15753] __kmem_cache_alloc_node+0x4f/0x260 [ 2019.221994][T15753] ? __get_vm_area_node+0x122/0x330 [ 2019.227210][T15753] kmalloc_node_trace+0x22/0xe0 [ 2019.232088][T15753] __get_vm_area_node+0x122/0x330 [ 2019.237140][T15753] __vmalloc_node_range+0x357/0x13b0 [ 2019.242444][T15753] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.248032][T15753] ? free_vm_area+0x50/0x50 [ 2019.252549][T15753] ? end_current_label_crit_section+0x170/0x170 [ 2019.258805][T15753] ? __lock_acquire+0x7d10/0x7d10 [ 2019.263858][T15753] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.269426][T15753] __vmalloc+0x76/0x80 [ 2019.273516][T15753] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.279109][T15753] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.284510][T15753] ? bpf_lsm_capable+0x5/0x10 [ 2019.289216][T15753] bpf_prog_alloc+0x1c/0x1b0 [ 2019.293834][T15753] bpf_prog_load+0x7c9/0x1560 [ 2019.298546][T15753] ? map_freeze+0x390/0x390 [ 2019.303073][T15753] ? __might_fault+0xa6/0x120 [ 2019.307775][T15753] ? __might_fault+0xa6/0x120 [ 2019.312467][T15753] ? __might_fault+0xc2/0x120 [ 2019.317161][T15753] ? __might_fault+0xa6/0x120 [ 2019.321860][T15753] ? bpf_lsm_bpf+0x5/0x10 [ 2019.326215][T15753] ? security_bpf+0x7a/0xa0 [ 2019.330739][T15753] __sys_bpf+0x5b8/0x780 [ 2019.335007][T15753] ? bpf_link_show_fdinfo+0x380/0x380 [ 2019.340413][T15753] ? lock_chain_count+0x20/0x20 [ 2019.345292][T15753] __x64_sys_bpf+0x78/0x90 [ 2019.349730][T15753] do_syscall_64+0x4c/0xa0 [ 2019.354164][T15753] ? clear_bhb_loop+0x60/0xb0 [ 2019.358857][T15753] ? clear_bhb_loop+0x60/0xb0 [ 2019.363560][T15753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2019.369466][T15753] RIP: 0033:0x7ff63239c629 [ 2019.373894][T15753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.393520][T15753] RSP: 002b:00007ff6332cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2019.401957][T15753] RAX: ffffffffffffffda RBX: 00007ff632615fa0 RCX: 00007ff63239c629 [ 2019.409944][T15753] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2019.417931][T15753] RBP: 00007ff6332cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2019.425921][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2019.433910][T15753] R13: 00007ff632616038 R14: 00007ff632615fa0 R15: 00007ffcdec06f08 [ 2019.441915][T15753] [ 2019.610689][T15753] syz.2.14767: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2019.633723][T15753] CPU: 0 PID: 15753 Comm: syz.2.14767 Not tainted syzkaller #0 [ 2019.641321][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2019.651388][T15753] Call Trace: [ 2019.654678][T15753] [ 2019.657614][T15753] dump_stack_lvl+0x188/0x24e [ 2019.662313][T15753] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2019.668748][T15753] ? show_regs_print_info+0x12/0x12 [ 2019.673969][T15753] ? load_image+0x400/0x400 [ 2019.678491][T15753] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 2019.684921][T15753] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 2019.691443][T15753] warn_alloc+0x242/0x330 [ 2019.695797][T15753] ? __get_vm_area_node+0x122/0x330 [ 2019.701019][T15753] ? zone_watermark_ok_safe+0x270/0x270 [ 2019.706590][T15753] ? rcu_is_watching+0x11/0xa0 [ 2019.711380][T15753] ? __get_vm_area_node+0x318/0x330 [ 2019.716602][T15753] __vmalloc_node_range+0x37c/0x13b0 [ 2019.721925][T15753] ? free_vm_area+0x50/0x50 [ 2019.726439][T15753] ? end_current_label_crit_section+0x170/0x170 [ 2019.732697][T15753] ? __lock_acquire+0x7d10/0x7d10 [ 2019.737746][T15753] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.743315][T15753] __vmalloc+0x76/0x80 [ 2019.747403][T15753] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.752968][T15753] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 2019.758363][T15753] ? bpf_lsm_capable+0x5/0x10 [ 2019.763062][T15753] bpf_prog_alloc+0x1c/0x1b0 [ 2019.767679][T15753] bpf_prog_load+0x7c9/0x1560 [ 2019.772384][T15753] ? map_freeze+0x390/0x390 [ 2019.776903][T15753] ? __might_fault+0xa6/0x120 [ 2019.781602][T15753] ? __might_fault+0xa6/0x120 [ 2019.786290][T15753] ? __might_fault+0xc2/0x120 [ 2019.790977][T15753] ? __might_fault+0xa6/0x120 [ 2019.795666][T15753] ? bpf_lsm_bpf+0x5/0x10 [ 2019.800005][T15753] ? security_bpf+0x7a/0xa0 [ 2019.804528][T15753] __sys_bpf+0x5b8/0x780 [ 2019.808790][T15753] ? bpf_link_show_fdinfo+0x380/0x380 [ 2019.814192][T15753] ? lock_chain_count+0x20/0x20 [ 2019.819078][T15753] __x64_sys_bpf+0x78/0x90 [ 2019.823512][T15753] do_syscall_64+0x4c/0xa0 [ 2019.827948][T15753] ? clear_bhb_loop+0x60/0xb0 [ 2019.832638][T15753] ? clear_bhb_loop+0x60/0xb0 [ 2019.837329][T15753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2019.843235][T15753] RIP: 0033:0x7ff63239c629 [ 2019.847662][T15753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.867283][T15753] RSP: 002b:00007ff6332cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2019.875719][T15753] RAX: ffffffffffffffda RBX: 00007ff632615fa0 RCX: 00007ff63239c629 [ 2019.883710][T15753] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 2019.891697][T15753] RBP: 00007ff6332cc090 R08: 0000000000000000 R09: 0000000000000000 [ 2019.899686][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2019.907676][T15753] R13: 00007ff632616038 R14: 00007ff632615fa0 R15: 00007ffcdec06f08 [ 2019.915677][T15753] [ 2019.940352][T15753] Mem-Info: [ 2019.943786][T15753] active_anon:18244 inactive_anon:0 isolated_anon:0 [ 2019.943786][T15753] active_file:21946 inactive_file:40739 isolated_file:0 [ 2019.943786][T15753] unevictable:768 dirty:157 writeback:0 [ 2019.943786][T15753] slab_reclaimable:21878 slab_unreclaimable:98208 [ 2019.943786][T15753] mapped:37798 shmem:9330 pagetables:661 [ 2019.943786][T15753] sec_pagetables:0 bounce:0 [ 2019.943786][T15753] kernel_misc_reclaimable:0 [ 2019.943786][T15753] free:1297991 free_pcp:10059 free_cma:0 [ 2019.990141][T15753] Node 0 active_anon:72976kB inactive_anon:0kB active_file:87784kB inactive_file:162756kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151192kB dirty:628kB writeback:0kB shmem:35784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11456kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 2020.052609][T15753] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2020.084181][T15753] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2020.111739][T15753] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 2020.117528][T15753] Node 0 DMA32 free:1275176kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:74976kB inactive_anon:0kB active_file:87784kB inactive_file:162756kB unevictable:1536kB writepending:628kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:21580kB local_pcp:5124kB free_cma:0kB [ 2020.155234][T15753] lowmem_reserve[]: 0 0 1 1 1 [ 2020.162692][T15753] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 2020.190302][T15753] lowmem_reserve[]: 0 0 0 0 0 [ 2020.195382][T15753] Node 1 Normal free:3899392kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20004kB local_pcp:6596kB free_cma:0kB [ 2020.225867][T15753] lowmem_reserve[]: 0 0 0 0 0 [ 2020.231303][T15753] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2020.244855][T15753] Node 0 DMA32: 2*4kB (UE) 29*8kB (UE) 4*16kB (UME) 1328*32kB (UME) 542*64kB (UME) 393*128kB (UM) 170*256kB (UME) 69*512kB (UME) 45*1024kB (UM) 11*2048kB (UM) 244*4096kB (UM) = 1274672kB [ 2020.274077][T15753] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2020.292129][T15753] Node 1 Normal: 236*4kB (U) 50*8kB (UE) 42*16kB (UME) 31*32kB (UME) 17*64kB (UME) 10*128kB (UM) 3*256kB (UME) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3899392kB [ 2020.310296][T15753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2020.331406][T15753] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2020.340785][T15753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2020.357021][T15753] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2020.366798][T15753] 73015 total pagecache pages [ 2020.372488][T15753] 0 pages in swap cache [ 2020.381213][T15753] Free swap = 124996kB [ 2020.390956][T15753] Total swap = 124996kB [ 2020.395171][T15753] 2097051 pages RAM [ 2020.399040][T15753] 0 pages HighMem/MovableOnly [ 2020.420688][T15753] 415205 pages reserved [ 2020.424886][T15753] 0 pages cma reserved [ 2020.629406][T15777] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.14774'. [ 2021.069524][T15796] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.14781'. [ 2021.090505][T15796] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2022.901101][T15831] delete_channel: no stack [ 2023.933814][T15867] netlink: 'syz.2.14805': attribute type 29 has an invalid length. [ 2023.985134][T15867] netlink: 'syz.2.14805': attribute type 29 has an invalid length. [ 2024.034581][T15869] netlink: 'syz.2.14805': attribute type 29 has an invalid length. [ 2024.088761][T15873] netlink: 'syz.2.14805': attribute type 29 has an invalid length. [ 2024.119524][T15867] netlink: 'syz.2.14805': attribute type 29 has an invalid length. [ 2025.412614][T15901] netlink: 'syz.3.14815': attribute type 8 has an invalid length. [ 2025.420493][T15901] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.14815'. [ 2025.594336][T15897] delete_channel: no stack [ 2026.882839][T15931] delete_channel: no stack [ 2027.695151][T15962] netlink: 'syz.1.14838': attribute type 10 has an invalid length. [ 2027.728104][T15962] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.14838'. [ 2028.488801][T15983] netlink: 'syz.3.14844': attribute type 16 has an invalid length. [ 2028.557424][T15983] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14844'. [ 2031.278303][T16051] delete_channel: no stack [ 2032.895567][T16110] netlink: 'syz.2.14892': attribute type 3 has an invalid length. [ 2032.904819][T16110] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.14892'. [ 2033.025093][T16113] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14894'. [ 2033.095595][T15349] Bluetooth: hci5: ISO packet for unknown connection handle 62 [ 2033.897710][T16159] netlink: 160 bytes leftover after parsing attributes in process `syz.4.14910'. [ 2034.055292][T16159] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2034.243537][T16161] netlink: 'syz.4.14910': attribute type 11 has an invalid length. [ 2034.278669][T16161] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14910'. [ 2034.363755][T16161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.660328][T16185] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.14918'. [ 2035.744082][T16178] delete_channel: no stack [ 2037.370322][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.376813][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.959598][T16257] netlink: 'syz.3.14947': attribute type 3 has an invalid length. [ 2037.987268][T16257] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14947'. [ 2039.878745][T16308] delete_channel: no stack [ 2040.248820][T16327] netlink: 'syz.2.14973': attribute type 21 has an invalid length. [ 2040.277176][T16327] netlink: 'syz.2.14973': attribute type 10 has an invalid length. [ 2040.323913][T16327] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2040.511074][T16341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14978'. [ 2040.845066][T16358] netlink: 'syz.0.14985': attribute type 21 has an invalid length. [ 2040.853192][T16358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14985'. [ 2040.896443][T16358] netlink: 'syz.0.14985': attribute type 4 has an invalid length. [ 2041.703057][T16375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14990'. [ 2043.897837][T16436] netlink: 'syz.2.15016': attribute type 1 has an invalid length. [ 2043.916066][T16436] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15016'. [ 2043.933175][T16436] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.15016'. [ 2044.888089][T16465] netlink: 'syz.1.15025': attribute type 1 has an invalid length. [ 2044.929510][T16465] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15025'. [ 2047.209393][T16505] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.15041'. [ 2047.359611][T16507] device wlan1 entered promiscuous mode [ 2047.490111][ T4345] device hsr_slave_0 left promiscuous mode [ 2047.507866][ T4345] device hsr_slave_1 left promiscuous mode [ 2047.532163][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2047.542995][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2047.596460][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2047.659017][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2047.921485][ T4345] device veth1_macvtap left promiscuous mode [ 2047.927624][ T4345] device veth0_macvtap left promiscuous mode [ 2047.974209][ T4345] device veth1_vlan left promiscuous mode [ 2048.000525][ T4345] device veth0_vlan left promiscuous mode [ 2049.001931][ T4345] team0 (unregistering): Port device geneve0 removed [ 2050.298648][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 2050.342402][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 2050.664689][ T4345] team0 (unregistering): Port device dummy0 removed [ 2050.720038][T16516] netlink: 'syz.2.15045': attribute type 10 has an invalid length. [ 2050.743553][T16516] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2051.823273][T16612] netlink: 'syz.2.15083': attribute type 21 has an invalid length. [ 2052.548435][T16632] netlink: 'syz.1.15090': attribute type 3 has an invalid length. [ 2052.573642][T16632] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15090'. [ 2052.848365][T16638] delete_channel: no stack [ 2052.931639][T16644] netlink: 'syz.3.15096': attribute type 6 has an invalid length. [ 2053.091597][T16644] device syzkaller0 entered promiscuous mode [ 2056.378367][T16664] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.15103'. [ 2056.771468][T16685] netlink: 'syz.3.15111': attribute type 29 has an invalid length. [ 2056.784020][T16685] netlink: 'syz.3.15111': attribute type 29 has an invalid length. [ 2056.794689][T16685] netlink: 'syz.3.15111': attribute type 29 has an invalid length. [ 2056.807187][T16685] netlink: 'syz.3.15111': attribute type 29 has an invalid length. [ 2057.514796][T16654] delete_channel: no stack [ 2059.034567][T16762] netlink: 'syz.2.15142': attribute type 21 has an invalid length. [ 2059.228334][T16773] netlink: 'syz.2.15146': attribute type 27 has an invalid length. [ 2059.237358][T16773] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2059.494939][T16781] netlink: 'syz.0.15149': attribute type 29 has an invalid length. [ 2059.518065][T16781] netlink: 'syz.0.15149': attribute type 29 has an invalid length. [ 2059.568691][T16781] netlink: 'syz.0.15149': attribute type 29 has an invalid length. [ 2059.628536][T16781] netlink: 'syz.0.15149': attribute type 29 has an invalid length. [ 2060.382116][T16789] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15151'. [ 2060.994280][T16828] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.15164'. [ 2061.056252][T16828] netlink: 10 bytes leftover after parsing attributes in process `syz.4.15164'. [ 2061.837397][T16850] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.15174'. [ 2061.968043][T16850] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2062.088344][T16857] device bridge0 entered promiscuous mode [ 2062.792005][T16861] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15179'. [ 2062.849556][T16882] netlink: 830 bytes leftover after parsing attributes in process `syz.0.15179'. [ 2063.025922][T16880] delete_channel: no stack [ 2063.555493][T16908] IPv6: NLM_F_CREATE should be specified when creating new route [ 2063.572080][T16908] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15195'. [ 2065.162414][T16962] delete_channel: no stack [ 2065.746109][T16985] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.756543][T16985] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.917070][T16999] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.15229'. [ 2066.295803][T17011] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15235'. [ 2066.305694][T17002] delete_channel: no stack [ 2067.359017][T17040] validate_nla: 6 callbacks suppressed [ 2067.359036][T17040] netlink: 'syz.2.15246': attribute type 22 has an invalid length. [ 2067.374593][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15246'. [ 2067.413178][T17044] tun0: tun_chr_ioctl cmd 1074025680 [ 2067.418571][T15349] Bluetooth: hci3: ISO packet for unknown connection handle 3902 [ 2067.564035][T17052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15247'. [ 2067.589923][T17052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15247'. [ 2067.607059][T17054] FAULT_INJECTION: forcing a failure. [ 2067.607059][T17054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2067.636280][T17054] CPU: 0 PID: 17054 Comm: syz.1.15248 Not tainted syzkaller #0 [ 2067.643878][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2067.653950][T17054] Call Trace: [ 2067.657245][T17054] [ 2067.660185][T17054] dump_stack_lvl+0x188/0x24e [ 2067.664923][T17054] ? show_regs_print_info+0x12/0x12 [ 2067.670144][T17054] ? load_image+0x400/0x400 [ 2067.674667][T17054] ? __lock_acquire+0x7d10/0x7d10 [ 2067.679709][T17054] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 2067.685972][T17054] should_fail_ex+0x399/0x4d0 [ 2067.690677][T17054] _copy_from_user+0x2c/0x170 [ 2067.695373][T17054] __sys_bpf+0x2ea/0x780 [ 2067.699636][T17054] ? bpf_link_show_fdinfo+0x380/0x380 [ 2067.705046][T17054] ? lock_chain_count+0x20/0x20 [ 2067.709917][T17054] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2067.715933][T17054] __x64_sys_bpf+0x78/0x90 [ 2067.720371][T17054] do_syscall_64+0x4c/0xa0 [ 2067.724810][T17054] ? clear_bhb_loop+0x60/0xb0 [ 2067.729516][T17054] ? clear_bhb_loop+0x60/0xb0 [ 2067.734217][T17054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2067.740139][T17054] RIP: 0033:0x7f629eb9c629 [ 2067.744566][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2067.764175][T17054] RSP: 002b:00007f629fac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2067.772588][T17054] RAX: ffffffffffffffda RBX: 00007f629ee15fa0 RCX: 00007f629eb9c629 [ 2067.780552][T17054] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2067.788517][T17054] RBP: 00007f629fac3090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.796478][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2067.804438][T17054] R13: 00007f629ee16038 R14: 00007f629ee15fa0 R15: 00007ffc7152e338 [ 2067.812413][T17054] [ 2067.860157][T17052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15247'. [ 2067.906778][T17052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15247'. [ 2070.357823][T17112] netlink: 'syz.4.15268': attribute type 10 has an invalid length. [ 2070.395325][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15271'. [ 2070.407929][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15271'. [ 2070.421094][T17116] netlink: 33 bytes leftover after parsing attributes in process `syz.2.15271'. [ 2070.855420][T17128] delete_channel: no stack [ 2070.863700][T17136] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2070.883472][T17136] CPU: 1 PID: 17136 Comm: syz.2.15278 Not tainted syzkaller #0 [ 2070.891074][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2070.901149][T17136] Call Trace: [ 2070.904441][T17136] [ 2070.907389][T17136] dump_stack_lvl+0x188/0x24e [ 2070.912101][T17136] ? show_regs_print_info+0x12/0x12 [ 2070.917332][T17136] ? load_image+0x400/0x400 [ 2070.921876][T17136] sysfs_warn_dup+0x8a/0xa0 [ 2070.926413][T17136] sysfs_do_create_link_sd+0xc0/0x110 [ 2070.931817][T17136] device_add+0x7ed/0xfb0 [ 2070.936190][T17136] wiphy_register+0x1d9f/0x2ac0 [ 2070.941095][T17136] ? cfg80211_event_work+0x40/0x40 [ 2070.946241][T17136] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2070.952467][T17136] ? rtnl_unlock+0x5/0x10 [ 2070.956866][T17136] ieee80211_register_hw+0x2d00/0x39f0 [ 2070.962378][T17136] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2070.967951][T17136] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2070.973545][T17136] ? ieee80211_tasklet_handler+0x20/0x20 [ 2070.979220][T17136] ? memset+0x1e/0x40 [ 2070.983236][T17136] ? __hrtimer_init+0x186/0x270 [ 2070.988122][T17136] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2070.993901][T17136] hwsim_new_radio_nl+0xafa/0xce0 [ 2070.998972][T17136] genl_family_rcv_msg_doit+0x22a/0x330 [ 2071.004542][T17136] ? end_current_label_crit_section+0x170/0x170 [ 2071.010808][T17136] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2071.016740][T17136] ? bpf_lsm_capable+0x5/0x10 [ 2071.021448][T17136] ? security_capable+0x85/0xb0 [ 2071.026345][T17136] genl_rcv_msg+0x604/0x790 [ 2071.030894][T17136] ? genl_bind+0x360/0x360 [ 2071.035335][T17136] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2071.041707][T17136] netlink_rcv_skb+0x1fb/0x450 [ 2071.046513][T17136] ? genl_bind+0x360/0x360 [ 2071.050966][T17136] ? netlink_ack+0x1170/0x1170 [ 2071.055779][T17136] ? down_read+0x1a8/0x2d0 [ 2071.060232][T17136] genl_rcv+0x24/0x40 [ 2071.064256][T17136] netlink_unicast+0x74d/0x8d0 [ 2071.069148][T17136] netlink_sendmsg+0x8ad/0xbd0 [ 2071.073945][T17136] ? lockdep_hardirqs_on+0x94/0x140 [ 2071.079180][T17136] ? netlink_getsockopt+0x550/0x550 [ 2071.084414][T17136] ? security_socket_sendmsg+0x56/0xa0 [ 2071.089912][T17136] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2071.095223][T17136] ? security_socket_sendmsg+0x7c/0xa0 [ 2071.100715][T17136] ? netlink_getsockopt+0x550/0x550 [ 2071.105944][T17136] ____sys_sendmsg+0x5be/0x970 [ 2071.110749][T17136] ? __sys_sendmsg_sock+0x30/0x30 [ 2071.115811][T17136] ? __import_iovec+0x315/0x500 [ 2071.120697][T17136] ? import_iovec+0x6f/0xa0 [ 2071.125224][T17136] ___sys_sendmsg+0x2a2/0x360 [ 2071.129930][T17136] ? try_to_wake_up+0x6ae/0x1080 [ 2071.134905][T17136] ? __sys_sendmsg+0x290/0x290 [ 2071.139758][T17136] __se_sys_sendmsg+0x1bb/0x2a0 [ 2071.144646][T17136] ? __x64_sys_sendmsg+0x80/0x80 [ 2071.149618][T17136] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2071.155509][T17136] do_syscall_64+0x4c/0xa0 [ 2071.159919][T17136] ? clear_bhb_loop+0x60/0xb0 [ 2071.164589][T17136] ? clear_bhb_loop+0x60/0xb0 [ 2071.169278][T17136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2071.175162][T17136] RIP: 0033:0x7ff63239c629 [ 2071.179567][T17136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2071.199179][T17136] RSP: 002b:00007ff6332cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2071.207621][T17136] RAX: ffffffffffffffda RBX: 00007ff632615fa0 RCX: 00007ff63239c629 [ 2071.215614][T17136] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2071.223606][T17136] RBP: 00007ff632432b39 R08: 0000000000000000 R09: 0000000000000000 [ 2071.231594][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2071.239577][T17136] R13: 00007ff632616038 R14: 00007ff632615fa0 R15: 00007ffcdec06f08 [ 2071.247575][T17136] [ 2071.290305][T17150] __nla_validate_parse: 5 callbacks suppressed [ 2071.290323][T17150] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15283'. [ 2071.611531][T17162] FAULT_INJECTION: forcing a failure. [ 2071.611531][T17162] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.640744][T17162] CPU: 1 PID: 17162 Comm: syz.4.15286 Not tainted syzkaller #0 [ 2071.648338][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2071.658396][T17162] Call Trace: [ 2071.661676][T17162] [ 2071.664601][T17162] dump_stack_lvl+0x188/0x24e [ 2071.669279][T17162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2071.675432][T17162] ? show_regs_print_info+0x12/0x12 [ 2071.680631][T17162] ? load_image+0x400/0x400 [ 2071.685139][T17162] should_fail_ex+0x399/0x4d0 [ 2071.689821][T17162] should_failslab+0x5/0x20 [ 2071.694328][T17162] slab_pre_alloc_hook+0x59/0x310 [ 2071.699348][T17162] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2071.705934][T17162] ? bpf_test_init+0x9f/0x140 [ 2071.710613][T17162] __kmem_cache_alloc_node+0x4f/0x260 [ 2071.715991][T17162] ? bpf_test_init+0x9f/0x140 [ 2071.720661][T17162] __kmalloc+0xa0/0x240 [ 2071.724820][T17162] bpf_test_init+0x9f/0x140 [ 2071.729320][T17162] bpf_prog_test_run_xdp+0x484/0xf10 [ 2071.734610][T17162] ? dev_put+0x80/0x80 [ 2071.738681][T17162] ? dev_put+0x80/0x80 [ 2071.742742][T17162] bpf_prog_test_run+0x31e/0x390 [ 2071.747679][T17162] __sys_bpf+0x62b/0x780 [ 2071.751924][T17162] ? bpf_link_show_fdinfo+0x380/0x380 [ 2071.757305][T17162] ? lock_chain_count+0x20/0x20 [ 2071.762241][T17162] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2071.768233][T17162] __x64_sys_bpf+0x78/0x90 [ 2071.772649][T17162] do_syscall_64+0x4c/0xa0 [ 2071.777060][T17162] ? clear_bhb_loop+0x60/0xb0 [ 2071.781731][T17162] ? clear_bhb_loop+0x60/0xb0 [ 2071.786402][T17162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2071.792289][T17162] RIP: 0033:0x7f016659c629 [ 2071.796695][T17162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2071.816294][T17162] RSP: 002b:00007f01673bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2071.824700][T17162] RAX: ffffffffffffffda RBX: 00007f0166815fa0 RCX: 00007f016659c629 [ 2071.832665][T17162] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2071.840631][T17162] RBP: 00007f01673bf090 R08: 0000000000000000 R09: 0000000000000000 [ 2071.848594][T17162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2071.856559][T17162] R13: 00007f0166816038 R14: 00007f0166815fa0 R15: 00007ffea4fd36a8 [ 2071.864539][T17162] [ 2073.089520][T17193] netlink: 'syz.0.15297': attribute type 3 has an invalid length. [ 2073.103474][T17193] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.15297'. [ 2073.590327][T17202] netlink: 'syz.1.15301': attribute type 9 has an invalid length. [ 2073.622085][T17202] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.15301'. [ 2073.643746][T17204] netlink: 'syz.2.15302': attribute type 10 has an invalid length. [ 2073.686410][T17204] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15302'. [ 2074.081053][T17196] delete_channel: no stack [ 2074.735085][T17202] netlink: 'syz.1.15301': attribute type 2 has an invalid length. [ 2075.359966][T17249] device wg2 entered promiscuous mode [ 2075.682980][T17267] netlink: 'syz.4.15325': attribute type 10 has an invalid length. [ 2075.719590][T17267] netlink: 55 bytes leftover after parsing attributes in process `syz.4.15325'. [ 2077.368886][T17312] netlink: 'syz.1.15338': attribute type 21 has an invalid length. [ 2077.387725][T17312] netlink: 'syz.1.15338': attribute type 11 has an invalid length. [ 2077.469346][T17311] netlink: 'syz.1.15338': attribute type 21 has an invalid length. [ 2077.513133][T17311] netlink: 'syz.1.15338': attribute type 11 has an invalid length. [ 2077.749081][T17317] delete_channel: no stack [ 2078.303052][T17331] netlink: 'syz.1.15346': attribute type 10 has an invalid length. [ 2078.330150][T17331] netlink: 55 bytes leftover after parsing attributes in process `syz.1.15346'. [ 2078.351267][T17337] netlink: 'syz.2.15348': attribute type 9 has an invalid length. [ 2078.351291][T17337] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.15348'. [ 2078.716227][T17344] FAULT_INJECTION: forcing a failure. [ 2078.716227][T17344] name failslab, interval 1, probability 0, space 0, times 0 [ 2078.758823][T17344] CPU: 0 PID: 17344 Comm: syz.0.15351 Not tainted syzkaller #0 [ 2078.766435][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2078.776503][T17344] Call Trace: [ 2078.779786][T17344] [ 2078.782728][T17344] dump_stack_lvl+0x188/0x24e [ 2078.787425][T17344] ? show_regs_print_info+0x12/0x12 [ 2078.792638][T17344] ? load_image+0x400/0x400 [ 2078.797150][T17344] ? __might_sleep+0xd0/0xd0 [ 2078.801747][T17344] ? __lock_acquire+0x7d10/0x7d10 [ 2078.806788][T17344] should_fail_ex+0x399/0x4d0 [ 2078.811483][T17344] should_failslab+0x5/0x20 [ 2078.816001][T17344] slab_pre_alloc_hook+0x59/0x310 [ 2078.821032][T17344] ? __lock_acquire+0x7d10/0x7d10 [ 2078.826053][T17344] ? kvmalloc_node+0x6c/0x180 [ 2078.830731][T17344] __kmem_cache_alloc_node+0x4f/0x260 [ 2078.836096][T17344] ? schedule_delayed_monitor_work+0x160/0x160 [ 2078.842253][T17344] ? kvmalloc_node+0x6c/0x180 [ 2078.846927][T17344] __kmalloc_node+0xa0/0x240 [ 2078.851515][T17344] kvmalloc_node+0x6c/0x180 [ 2078.856016][T17344] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 2078.861382][T17344] ? 0xffffffffa0003e40 [ 2078.865527][T17344] ? text_poke_copy+0x79/0x90 [ 2078.870213][T17344] ? 0xffffffffa0003e40 [ 2078.874364][T17344] ? 0xffffffffa0003e40 [ 2078.878510][T17344] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 2078.884405][T17344] ? 0xffffffffa0003e40 [ 2078.888554][T17344] ? xdp_convert_md_to_buff+0x330/0x330 [ 2078.894118][T17344] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2078.900360][T17344] ? bpf_test_init+0x119/0x140 [ 2078.905121][T17344] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2078.910578][T17344] bpf_prog_test_run_xdp+0x736/0xf10 [ 2078.915871][T17344] ? dev_put+0x80/0x80 [ 2078.919939][T17344] ? dev_put+0x80/0x80 [ 2078.923999][T17344] bpf_prog_test_run+0x31e/0x390 [ 2078.928934][T17344] __sys_bpf+0x62b/0x780 [ 2078.933173][T17344] ? bpf_link_show_fdinfo+0x380/0x380 [ 2078.938551][T17344] ? lock_chain_count+0x20/0x20 [ 2078.943401][T17344] __x64_sys_bpf+0x78/0x90 [ 2078.947812][T17344] do_syscall_64+0x4c/0xa0 [ 2078.952221][T17344] ? clear_bhb_loop+0x60/0xb0 [ 2078.956890][T17344] ? clear_bhb_loop+0x60/0xb0 [ 2078.961561][T17344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2078.967442][T17344] RIP: 0033:0x7f4924b9c629 [ 2078.971848][T17344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2078.991445][T17344] RSP: 002b:00007f4922df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2078.999851][T17344] RAX: ffffffffffffffda RBX: 00007f4924e15fa0 RCX: 00007f4924b9c629 [ 2079.007812][T17344] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2079.015780][T17344] RBP: 00007f4922df6090 R08: 0000000000000000 R09: 0000000000000000 [ 2079.023738][T17344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2079.031696][T17344] R13: 00007f4924e16038 R14: 00007f4924e15fa0 R15: 00007ffcdd23c098 [ 2079.039670][T17344] [ 2079.511957][T17368] delete_channel: no stack [ 2079.517074][T17368] delete_channel: no stack [ 2079.654200][T17371] can: request_module (can-proto-0) failed. [ 2080.459661][T17384] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.15365'. [ 2080.828846][T17397] netlink: 'syz.2.15372': attribute type 10 has an invalid length. [ 2080.837715][T17397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15372'. [ 2080.859675][T17397] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2080.874329][T17397] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2080.923894][T17397] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2081.374786][T17417] netlink: 'syz.3.15379': attribute type 10 has an invalid length. [ 2081.434273][T17417] device wlan1 left promiscuous mode [ 2081.492943][T17417] team0: Port device wlan1 added [ 2081.659061][T17426] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.15382'. [ 2082.085226][T17443] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15388'. [ 2082.379992][T17454] netlink: 'syz.4.15393': attribute type 10 has an invalid length. [ 2082.493697][T17454] team0: Device vxcan1 is of different type [ 2084.578968][T17480] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15406'. [ 2084.596842][T17480] device hsr_slave_0 left promiscuous mode [ 2084.617156][T17480] device hsr_slave_1 left promiscuous mode [ 2084.938252][T17498] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.15412'. [ 2085.114516][T17505] netlink: 'syz.2.15416': attribute type 21 has an invalid length. [ 2085.132078][T17505] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15416'. [ 2085.155850][T17505] netlink: 'syz.2.15416': attribute type 5 has an invalid length. [ 2085.177028][T17505] netlink: 'syz.2.15416': attribute type 6 has an invalid length. [ 2085.202917][T17505] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15416'. [ 2086.025976][T17529] delete_channel: no stack [ 2086.266620][T17533] delete_channel: no stack [ 2086.691906][T17549] delete_channel: no stack [ 2086.696963][T17549] delete_channel: no stack [ 2087.237612][T17554] FAULT_INJECTION: forcing a failure. [ 2087.237612][T17554] name failslab, interval 1, probability 0, space 0, times 0 [ 2087.270822][T17554] CPU: 1 PID: 17554 Comm: syz.3.15435 Not tainted syzkaller #0 [ 2087.278424][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2087.288472][T17554] Call Trace: [ 2087.291754][T17554] [ 2087.294675][T17554] dump_stack_lvl+0x188/0x24e [ 2087.299357][T17554] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2087.305505][T17554] ? show_regs_print_info+0x12/0x12 [ 2087.310705][T17554] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2087.316878][T17554] should_fail_ex+0x399/0x4d0 [ 2087.321565][T17554] should_failslab+0x5/0x20 [ 2087.326068][T17554] slab_pre_alloc_hook+0x59/0x310 [ 2087.331093][T17554] ? page_pool_create+0x6d/0x5c0 [ 2087.336032][T17554] __kmem_cache_alloc_node+0x4f/0x260 [ 2087.341403][T17554] ? page_pool_create+0x6d/0x5c0 [ 2087.346338][T17554] kmalloc_node_trace+0x22/0xe0 [ 2087.351198][T17554] page_pool_create+0x6d/0x5c0 [ 2087.355969][T17554] bpf_test_run_xdp_live+0x223/0x1a90 [ 2087.361345][T17554] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2087.366637][T17554] ? text_poke_copy+0x79/0x90 [ 2087.371332][T17554] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2087.376630][T17554] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 2087.382529][T17554] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2087.387810][T17554] ? xdp_convert_md_to_buff+0x330/0x330 [ 2087.393372][T17554] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2087.399616][T17554] ? bpf_test_init+0x119/0x140 [ 2087.404370][T17554] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2087.409822][T17554] bpf_prog_test_run_xdp+0x736/0xf10 [ 2087.415112][T17554] ? dev_put+0x80/0x80 [ 2087.419180][T17554] ? dev_put+0x80/0x80 [ 2087.423253][T17554] bpf_prog_test_run+0x31e/0x390 [ 2087.428197][T17554] __sys_bpf+0x62b/0x780 [ 2087.432437][T17554] ? bpf_link_show_fdinfo+0x380/0x380 [ 2087.437816][T17554] ? lock_chain_count+0x20/0x20 [ 2087.442689][T17554] __x64_sys_bpf+0x78/0x90 [ 2087.447116][T17554] do_syscall_64+0x4c/0xa0 [ 2087.451540][T17554] ? clear_bhb_loop+0x60/0xb0 [ 2087.456234][T17554] ? clear_bhb_loop+0x60/0xb0 [ 2087.460931][T17554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2087.466843][T17554] RIP: 0033:0x7f7a16b9c629 [ 2087.471252][T17554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2087.490851][T17554] RSP: 002b:00007f7a179fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2087.499254][T17554] RAX: ffffffffffffffda RBX: 00007f7a16e15fa0 RCX: 00007f7a16b9c629 [ 2087.507230][T17554] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2087.515212][T17554] RBP: 00007f7a179fe090 R08: 0000000000000000 R09: 0000000000000000 [ 2087.523196][T17554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.531165][T17554] R13: 00007f7a16e16038 R14: 00007f7a16e15fa0 R15: 00007fff4897d808 [ 2087.539146][T17554] [ 2087.616683][T17556] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.15437'. [ 2088.773749][T17596] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15452'. [ 2088.801061][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2088.824420][T17598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2088.890139][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2088.931815][T17598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2089.407785][T17616] netlink: 'syz.0.15459': attribute type 10 has an invalid length. [ 2089.504475][T17616] team0: Device vxcan1 is of different type [ 2090.734430][T17643] device wlan1 entered promiscuous mode [ 2090.756302][T17637] delete_channel: no stack [ 2090.887496][T17641] delete_channel: no stack [ 2091.187618][T17652] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15474'. [ 2091.789143][T17672] netlink: 'syz.2.15478': attribute type 10 has an invalid length. [ 2091.837241][T17672] team0: Device vxcan1 is of different type [ 2093.105461][T17681] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.15484'. [ 2093.115363][T17677] delete_channel: no stack [ 2093.478068][T17700] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15489'. [ 2093.706084][T17700] team0: Port device team_slave_0 removed [ 2093.733251][T17700] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2093.754331][T17702] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.15491'. [ 2094.449179][T17727] delete_channel: no stack [ 2094.525362][T17734] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15504'. [ 2094.564423][T17734] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2094.625589][T17742] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15507'. [ 2098.814737][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.824056][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.724787][T17797] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15524'. [ 2099.958644][T17808] netlink: 'syz.2.15528': attribute type 33 has an invalid length. [ 2099.968621][T17808] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15528'. [ 2101.343689][T17852] delete_channel: no stack [ 2102.108019][T17859] delete_channel: no stack [ 2102.196778][T17866] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15552'. [ 2102.395006][T17874] netlink: 'syz.4.15554': attribute type 2 has an invalid length. [ 2102.465513][T17876] netlink: 'syz.4.15554': attribute type 2 has an invalid length. [ 2103.038596][T17909] netlink: 'syz.4.15566': attribute type 2 has an invalid length. [ 2103.111456][T17913] netlink: 'syz.1.15569': attribute type 33 has an invalid length. [ 2103.127765][T17913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15569'. [ 2103.500053][T17926] delete_channel: no stack [ 2103.643116][T17938] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.15579'. [ 2103.962651][T17951] netlink: 'syz.0.15584': attribute type 10 has an invalid length. [ 2103.997214][T17951] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15584'. [ 2105.001274][T17959] delete_channel: no stack [ 2105.440763][T17975] netlink: 'syz.1.15591': attribute type 21 has an invalid length. [ 2105.573179][T17975] netlink: 'syz.1.15591': attribute type 2 has an invalid length. [ 2105.751026][T17975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15591'. [ 2106.043041][T17989] netlink: 'syz.2.15595': attribute type 10 has an invalid length. [ 2106.114655][T17989] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15595'. [ 2106.134268][T17992] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15598'. [ 2106.844497][T18007] netlink: 'syz.3.15603': attribute type 39 has an invalid length. [ 2106.993664][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15605'. [ 2107.328280][T18032] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.15613'. [ 2108.649958][T18061] delete_channel: no stack [ 2109.098225][T18080] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15629'. [ 2110.469454][T18127] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.15647'. [ 2110.511349][T18127] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.15647'. [ 2110.623515][T18135] netlink: 'syz.3.15647': attribute type 19 has an invalid length. [ 2111.099497][T18139] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15650'. [ 2112.436900][T18157] netlink: 'syz.2.15657': attribute type 21 has an invalid length. [ 2112.446184][T18157] netlink: 'syz.2.15657': attribute type 1 has an invalid length. [ 2112.737383][T18167] delete_channel: no stack [ 2113.961296][T18191] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15669'. [ 2114.441167][T18213] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.15678'. [ 2114.473472][T18213] openvswitch: netlink: Key type 386 is out of range max 32 [ 2115.790166][T18238] delete_channel: no stack [ 2115.801661][T18243] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15689'. [ 2116.086079][T18254] netlink: 'syz.2.15694': attribute type 39 has an invalid length. [ 2117.544595][T18283] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.15704'. [ 2117.613824][T18290] sctp: [Deprecated]: syz.2.15707 (pid 18290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2117.613824][T18290] Use struct sctp_sack_info instead [ 2117.657465][T18291] sctp: [Deprecated]: syz.2.15707 (pid 18291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2117.657465][T18291] Use struct sctp_sack_info instead [ 2117.733370][T18289] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.15707'. [ 2117.847524][T18295] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15709'. [ 2118.063963][T18303] netlink: 'syz.4.15712': attribute type 21 has an invalid length. [ 2118.098238][T18303] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15712'. [ 2118.162347][T18303] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.15712'. [ 2118.770035][T18308] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15714'. [ 2119.332044][T18308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2119.363766][T18308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2119.388603][T18308] bond0 (unregistering): Released all slaves [ 2119.794317][T18325] delete_channel: no stack [ 2120.129193][T18341] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15725'. [ 2121.373428][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 2121.649123][T18379] delete_channel: no stack [ 2121.815519][T18391] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.15747'. [ 2122.045438][T18402] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15750'. [ 2122.057511][T18400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15752'. [ 2122.488339][T18410] delete_channel: no stack [ 2123.119651][T18442] __nla_validate_parse: 1 callbacks suppressed [ 2123.119669][T18442] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.15768'. [ 2124.356859][T18491] delete_channel: no stack [ 2124.398030][T18504] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.15794'. [ 2125.280796][T18511] delete_channel: no stack [ 2125.962136][T18551] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.15811'. [ 2126.147089][T18556] netlink: 'syz.3.15813': attribute type 21 has an invalid length. [ 2126.175589][T18556] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15813'. [ 2126.480633][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 2126.481166][T15349] Bluetooth: hci3: command 0x0406 tx timeout [ 2128.380013][T18589] delete_channel: no stack [ 2131.895181][T18607] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.15831'. [ 2132.649466][T18662] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 2133.256647][T18672] delete_channel: no stack [ 2133.276689][T18677] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.15860'. [ 2133.323953][T18680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15862'. [ 2133.414900][T18685] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15865'. [ 2133.503931][T18685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2133.548118][T18685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2133.568165][T18685] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2133.593849][T18685] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2133.610054][T18685] bond0 (unregistering): Released all slaves [ 2136.749101][T15349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2136.773753][T15349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2136.796843][T15349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2136.840773][T15349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2136.848945][T13792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2136.856633][T15349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2137.626681][T18788] delete_channel: no stack [ 2137.658018][T18791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15896'. [ 2137.839169][T18779] chnl_net:caif_netlink_parms(): no params data found [ 2137.862099][T18797] netlink: 'syz.1.15898': attribute type 3 has an invalid length. [ 2137.883665][T18797] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15898'. [ 2138.045777][T18803] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15899'. [ 2138.160754][T18779] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.167965][T18779] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.176544][T18779] device bridge_slave_0 entered promiscuous mode [ 2138.219668][T18779] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.234069][T18779] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.290409][T18779] device bridge_slave_1 entered promiscuous mode [ 2138.493226][T18779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.880969][T15349] Bluetooth: hci4: command 0x0409 tx timeout [ 2139.849789][T18779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2140.023181][ T5798] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.094159][T18779] team0: Port device team_slave_0 added [ 2140.187958][ T5798] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.215440][T18779] team0: Port device team_slave_1 added [ 2140.236562][T18838] device sit0 entered promiscuous mode [ 2140.572572][ T5798] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.588353][T18846] netlink: 'syz.2.15916': attribute type 27 has an invalid length. [ 2140.607883][T18846] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15916'. [ 2140.700268][T18779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2140.741918][T18779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.812231][T18779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2140.853793][T18779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2140.874338][T18779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2140.909810][T18779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2140.960801][T15349] Bluetooth: hci4: command 0x041b tx timeout [ 2141.074989][ T5798] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.206314][T18862] netlink: 'syz.2.15923': attribute type 10 has an invalid length. [ 2141.219991][T18862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15923'. [ 2141.231661][T18862] device team0 entered promiscuous mode [ 2141.249770][T18862] device team_slave_0 entered promiscuous mode [ 2141.256267][T18862] device team_slave_1 entered promiscuous mode [ 2141.263082][T18862] bridge0: port 3(team0) entered blocking state [ 2141.269499][T18862] bridge0: port 3(team0) entered disabled state [ 2141.278076][T18862] bridge0: port 3(team0) entered blocking state [ 2141.284476][T18862] bridge0: port 3(team0) entered forwarding state [ 2141.325580][T18779] device hsr_slave_0 entered promiscuous mode [ 2141.365726][T18779] device hsr_slave_1 entered promiscuous mode [ 2141.491841][T18871] delete_channel: no stack [ 2141.627593][ T5798] device 0 left promiscuous mode [ 2142.007928][T18889] netlink: 'syz.3.15929': attribute type 27 has an invalid length. [ 2142.035764][T18886] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15930'. [ 2142.073662][T18889] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15929'. [ 2142.728089][T18908] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2142.736896][T18908] dvmrp1: linktype set to 768 [ 2143.046193][T15349] Bluetooth: hci4: command 0x040f tx timeout [ 2144.092799][T18940] netlink: 'syz.1.15945': attribute type 27 has an invalid length. [ 2144.131048][T18940] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15945'. [ 2144.181299][T18943] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.15947'. [ 2144.390320][T18943] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.15947'. [ 2144.669899][T18779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2145.047902][T18779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2145.121109][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 2145.137476][T18779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2145.268531][T18779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2146.310413][ T5798] device hsr_slave_0 left promiscuous mode [ 2146.334779][ T5798] device hsr_slave_1 left promiscuous mode [ 2146.353342][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2146.366999][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2146.391091][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2146.398551][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2146.436692][ T5798] device veth1_macvtap left promiscuous mode [ 2146.442895][ T5798] device veth1_vlan left promiscuous mode [ 2146.456207][T18982] delete_channel: no stack [ 2146.458966][ T5798] device veth0_vlan left promiscuous mode [ 2146.761964][ T5798] team0 (unregistering): Port device geneve0 removed [ 2147.608168][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 2147.647757][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 2148.006497][T18996] netlink: 'syz.4.15958': attribute type 10 has an invalid length. [ 2148.061707][T18996] team0 (unregistering): Port device team_slave_1 removed [ 2148.078758][T18996] team0 (unregistering): Port device geneve0 removed [ 2148.218592][T18779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2148.258461][T18779] 8021q: adding VLAN 0 to HW filter on device team0 [ 2148.293825][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2148.307998][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2148.339145][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2148.415050][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2148.424232][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.431412][T14076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2148.445269][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2148.484041][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2148.501643][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2148.546271][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.553463][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2148.626742][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2148.651800][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2148.678889][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2148.688157][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2148.699211][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2148.710473][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2148.719641][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2148.797463][T18779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2148.841630][T18779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2148.895086][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2148.915199][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2149.004862][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2149.071774][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2149.186908][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2149.550370][T19027] netlink: 'syz.4.15968': attribute type 29 has an invalid length. [ 2149.625644][T19027] netlink: 'syz.4.15968': attribute type 29 has an invalid length. [ 2149.691532][T19028] netlink: 'syz.4.15968': attribute type 29 has an invalid length. [ 2149.822362][T19030] netlink: 'syz.2.15970': attribute type 10 has an invalid length. [ 2149.837449][T19030] bridge0: port 3(team0) entered disabled state [ 2149.945828][T19030] bridge0: port 3(team0) entered disabled state [ 2149.983990][T19030] device team_slave_0 left promiscuous mode [ 2150.019535][T19030] team0 (unregistering): Port device team_slave_0 removed [ 2150.027326][T19030] device team_slave_1 left promiscuous mode [ 2150.056117][T19030] team0 (unregistering): Port device team_slave_1 removed [ 2150.136093][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2150.153414][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2150.229834][T18779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2150.272115][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2150.282271][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2150.371588][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2150.385882][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2150.414090][T18779] device veth0_vlan entered promiscuous mode [ 2150.427831][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2150.465993][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2151.430444][T18779] device veth1_vlan entered promiscuous mode [ 2151.460813][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2151.503129][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2151.530237][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2151.534247][T19064] delete_channel: no stack [ 2151.574186][T18779] device veth0_macvtap entered promiscuous mode [ 2151.605440][T18779] device veth1_macvtap entered promiscuous mode [ 2151.647336][T18779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.710076][T18779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.765183][T18779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.813660][T18779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.854335][T18779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2151.885577][T18779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2151.942950][T18779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2151.993448][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2152.031800][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2152.049048][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2152.081713][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2152.113020][T19082] netlink: 'syz.1.15985': attribute type 10 has an invalid length. [ 2152.373026][T19082] team0 (unregistering): Port device team_slave_0 removed [ 2152.448959][T19082] team0 (unregistering): Port device team_slave_1 removed [ 2152.556743][T18779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.590483][T18779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.642833][T19091] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15988'. [ 2152.652251][T18779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.681104][T18779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.723444][T18779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2152.750927][T18779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2152.768368][T19092] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15988'. [ 2152.783203][T18779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.821406][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2152.848904][T14068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2152.961317][T19092] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15988'. [ 2152.997641][T18779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.024019][T18779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.043740][T18779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.052964][T18779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2153.069449][T19085] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.15988'. [ 2153.374026][T14076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.389870][T14076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.460921][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2153.561508][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.573310][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.585901][T19108] netlink: 'syz.4.15994': attribute type 3 has an invalid length. [ 2153.593141][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2153.610864][T19108] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15994'. [ 2153.734600][T19118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15996'. [ 2153.745554][T19117] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.15884'. [ 2153.827989][T19124] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15997'. [ 2154.087905][ T4282] Bluetooth: hci4: ISO packet for unknown connection handle 272 [ 2154.208047][T19135] delete_channel: no stack [ 2154.622725][T19154] netlink: 'syz.2.16010': attribute type 22 has an invalid length. [ 2154.636892][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16010'. [ 2154.656355][T19159] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16009'. [ 2157.903225][T19196] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16024'. [ 2158.840247][T19239] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16040'. [ 2158.912104][T19236] delete_channel: no stack [ 2159.006203][T19239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2159.065475][T19239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2159.126141][T19239] bond0 (unregistering): Released all slaves [ 2159.158627][T19243] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16042'. [ 2159.969614][T19286] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.16057'. [ 2160.248090][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.255625][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.482902][T19304] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16063'. [ 2161.300120][T19314] netlink: 'syz.3.16066': attribute type 1 has an invalid length. [ 2161.827340][T19337] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.16076'. [ 2161.989024][T19338] delete_channel: no stack [ 2162.126388][T19345] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16080'. [ 2162.705075][T19360] device syzkaller0 entered promiscuous mode [ 2166.030570][T19372] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16089'. [ 2166.303046][T19394] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.16095'. [ 2166.769693][T19409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16101'. [ 2166.793557][T19409] netlink: 'syz.2.16101': attribute type 4 has an invalid length. [ 2167.130373][T19419] device bridge_slave_1 left promiscuous mode [ 2167.214079][T19419] bridge0: port 2(bridge_slave_1) entered disabled state [ 2167.319725][T19419] device bridge_slave_0 left promiscuous mode [ 2167.368992][T19419] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.545442][T19427] netlink: 56079 bytes leftover after parsing attributes in process `syz.1.16105'. [ 2167.827383][T19439] delete_channel: no stack [ 2167.854312][T19446] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16114'. [ 2168.091091][T19452] delete_channel: no stack [ 2168.210712][T19457] sctp: [Deprecated]: syz.3.16118 (pid 19457) Use of int in max_burst socket option deprecated. [ 2168.210712][T19457] Use struct sctp_assoc_value instead [ 2168.312955][T19461] netlink: 'syz.2.16121': attribute type 29 has an invalid length. [ 2168.336990][T19461] netlink: 'syz.2.16121': attribute type 29 has an invalid length. [ 2168.358601][T19461] netlink: 'syz.2.16121': attribute type 29 has an invalid length. [ 2168.944943][T19498] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16132'. [ 2169.821599][T19542] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.16151'. [ 2169.930120][T19544] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16153'. [ 2170.660708][T19557] delete_channel: no stack [ 2171.111434][T15349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2171.130688][T15349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2171.144243][T15349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2171.163924][T15349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2171.177386][T15349] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2171.186502][T15349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2171.883161][T19561] chnl_net:caif_netlink_parms(): no params data found [ 2172.115383][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 2172.123078][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.131608][T19561] device bridge_slave_0 entered promiscuous mode [ 2172.141400][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 2172.148752][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.158305][T19561] device bridge_slave_1 entered promiscuous mode [ 2172.368912][T19561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2172.418894][T19573] delete_channel: no stack [ 2172.428464][T19561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2172.484789][T19561] team0: Port device team_slave_0 added [ 2172.504002][T19561] team0: Port device team_slave_1 added [ 2172.587720][T14068] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.808651][T14068] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.837891][T19561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2172.845675][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2172.872572][T19561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2172.885302][T19561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2172.894784][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2172.940634][T19561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2172.968474][T19599] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.16170'. [ 2173.014570][T19606] netlink: 'syz.1.16173': attribute type 3 has an invalid length. [ 2173.041142][T19606] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.16173'. [ 2173.055581][T14068] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.125093][T19561] device hsr_slave_0 entered promiscuous mode [ 2173.146298][T19561] device hsr_slave_1 entered promiscuous mode [ 2173.156571][T19561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2173.183542][T19561] Cannot create hsr debugfs directory [ 2173.242298][T14068] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.266052][T19613] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.16185'. [ 2173.280720][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 2174.036993][T19633] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16183'. [ 2174.625839][T19653] delete_channel: no stack [ 2174.691942][T19661] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.16193'. [ 2174.961396][T19561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2174.985096][T19561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2175.058351][T19561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2175.073562][T19561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2175.360724][ T4282] Bluetooth: hci5: command 0x041b tx timeout [ 2176.093304][T19698] raw_sendmsg: syz.0.16199 forgot to set AF_INET. Fix it! [ 2176.403118][T19698] netlink: 'syz.0.16199': attribute type 21 has an invalid length. [ 2176.430856][T19698] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16199'. [ 2176.472934][T19698] netlink: 'syz.0.16199': attribute type 5 has an invalid length. [ 2176.510477][T19698] netlink: 'syz.0.16199': attribute type 6 has an invalid length. [ 2176.537596][T19698] netlink: 3 bytes leftover after parsing attributes in process `syz.0.16199'. [ 2177.440793][ T4282] Bluetooth: hci5: command 0x040f tx timeout [ 2177.717401][T14068] device hsr_slave_0 left promiscuous mode [ 2177.726219][T14068] device hsr_slave_1 left promiscuous mode [ 2177.739778][T14068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2177.749953][T14068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2177.775213][T14068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2177.787342][T14068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2177.864317][T14068] device veth1_macvtap left promiscuous mode [ 2177.870405][T14068] device veth0_macvtap left promiscuous mode [ 2179.505864][T19735] delete_channel: no stack [ 2179.520710][T15349] Bluetooth: hci5: command 0x0419 tx timeout [ 2183.158601][T19561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2183.294338][T19561] 8021q: adding VLAN 0 to HW filter on device team0 [ 2183.410964][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2183.422874][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2183.476837][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2183.499530][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2183.513788][T19777] netlink: 'syz.1.16227': attribute type 3 has an invalid length. [ 2183.531988][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.539263][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2183.551995][T19777] netlink: 138524 bytes leftover after parsing attributes in process `syz.1.16227'. [ 2183.578226][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2183.610764][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2183.630385][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2183.661751][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.668916][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2183.704552][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2183.728785][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2183.754195][T19773] netlink: 'syz.1.16227': attribute type 2 has an invalid length. [ 2183.837060][T19773] netlink: 'syz.1.16227': attribute type 4 has an invalid length. [ 2183.872994][T19773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16227'. [ 2183.908900][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2183.919603][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2183.962164][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2183.990185][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2184.028958][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2184.039930][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2184.059201][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2184.102148][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2184.138598][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2184.172356][T19561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2185.316542][T19811] netlink: 'syz.1.16235': attribute type 21 has an invalid length. [ 2185.326606][T19811] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16235'. [ 2185.336075][T19811] netlink: 'syz.1.16235': attribute type 5 has an invalid length. [ 2185.344900][T19811] netlink: 'syz.1.16235': attribute type 6 has an invalid length. [ 2185.370469][T19811] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16235'. [ 2185.422416][T19561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2185.430678][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2185.438195][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2185.775300][T19819] delete_channel: no stack [ 2186.716211][ T4282] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2186.836452][T19840] netlink: 'syz.3.16244': attribute type 10 has an invalid length. [ 2186.887032][T19840] netlink: 55 bytes leftover after parsing attributes in process `syz.3.16244'. [ 2187.653257][T19858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16251'. [ 2187.688561][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2187.706723][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2187.789350][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2187.799590][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2187.809402][T19864] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16253'. [ 2187.854312][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2187.882023][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2187.900361][T19561] device veth0_vlan entered promiscuous mode [ 2187.943412][T19561] device veth1_vlan entered promiscuous mode [ 2188.009308][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2188.018258][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2188.027088][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2188.027741][T19873] delete_channel: no stack [ 2188.040902][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2188.056599][T19561] device veth0_macvtap entered promiscuous mode [ 2188.068395][T19561] device veth1_macvtap entered promiscuous mode [ 2188.146144][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.157662][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.172583][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.183431][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.193683][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2188.204658][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.252461][T19561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2188.295896][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2188.307185][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2188.315693][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2188.325089][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2188.337414][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.351305][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.380647][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.391352][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.413886][T19879] delete_channel: no stack [ 2188.419274][T19561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2188.458927][T19561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2188.503260][T19561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2188.548727][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2188.586040][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2188.630834][T19889] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16265'. [ 2188.648279][T19561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.658386][T19561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.675905][T19561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.695081][T19561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2189.051227][T14076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.078323][T14076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2189.110338][T14076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2189.158737][ T5798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2189.191187][ T5798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2189.217443][ T1430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2192.411395][T19926] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.16274'. [ 2192.441777][T19926] bridge_slave_1: default FDB implementation only supports local addresses [ 2193.139583][T19955] delete_channel: no stack [ 2193.915647][T19980] netlink: 'syz.1.16294': attribute type 4 has an invalid length. [ 2193.944492][T19980] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.16294'. [ 2194.566010][T19993] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.16297'. [ 2194.577221][T19992] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.16297'. [ 2194.791618][T19998] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.16299'. [ 2195.093556][ T4282] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 2195.383308][T20003] netlink: 'syz.2.16300': attribute type 10 has an invalid length. [ 2195.404402][T20003] netlink: 55 bytes leftover after parsing attributes in process `syz.2.16300'. [ 2195.800049][T20003] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2196.012797][T20003] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2196.389899][T20015] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.16302'. [ 2196.857899][T20023] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16308'. [ 2197.435177][T20023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2197.450041][T20023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2197.467617][T20023] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2197.485651][T20023] bond0 (unregistering): Released all slaves [ 2197.819372][T20042] delete_channel: no stack [ 2198.177245][T20058] delete_channel: no stack [ 2198.944699][T20089] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.16335'. [ 2198.970304][T20093] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16334'. [ 2200.732380][T20129] delete_channel: no stack [ 2201.593583][T20171] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16361'. [ 2201.921126][T20179] netlink: 'syz.0.16364': attribute type 10 has an invalid length. [ 2202.128031][T20168] delete_channel: no stack [ 2202.630142][T20179] team0: Port device geneve1 added [ 2202.864517][T20195] netlink: 126612 bytes leftover after parsing attributes in process `syz.2.16369'. [ 2202.879551][T20191] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16368'. [ 2202.889831][T20195] netlink: 17 bytes leftover after parsing attributes in process `syz.2.16369'. [ 2203.077953][T20205] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.16373'. [ 2203.225852][T20209] delete_channel: no stack [ 2203.439500][T20207] team0: Port device team_slave_0 removed [ 2203.472893][T20207] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2204.837407][T20246] netlink: 'syz.4.16391': attribute type 3 has an invalid length. [ 2204.877072][T20246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16391'. [ 2204.976404][T20256] netlink: 'syz.4.16391': attribute type 3 has an invalid length. [ 2204.996397][T20256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16391'. [ 2205.159689][T20259] delete_channel: no stack [ 2205.254429][T20264] __sock_release: fasync list not empty! [ 2206.599165][T20308] netlink: 'syz.2.16414': attribute type 10 has an invalid length. [ 2206.900274][T20294] delete_channel: no stack [ 2207.607755][T20321] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16417'. [ 2207.693852][T20325] FAULT_INJECTION: forcing a failure. [ 2207.693852][T20325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2207.707804][T20324] netlink: 'syz.4.16418': attribute type 21 has an invalid length. [ 2207.735227][T20325] CPU: 1 PID: 20325 Comm: syz.2.16417 Not tainted syzkaller #0 [ 2207.742838][T20325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2207.752918][T20325] Call Trace: [ 2207.756225][T20325] [ 2207.759172][T20325] dump_stack_lvl+0x188/0x24e [ 2207.763884][T20325] ? show_regs_print_info+0x12/0x12 [ 2207.769106][T20325] ? load_image+0x400/0x400 [ 2207.773635][T20325] ? __lock_acquire+0x7d10/0x7d10 [ 2207.778683][T20325] ? __fget_files+0x28/0x4b0 [ 2207.783302][T20325] should_fail_ex+0x399/0x4d0 [ 2207.788004][T20325] _copy_from_user+0x2c/0x170 [ 2207.792710][T20325] generic_map_update_batch+0x4a1/0x810 [ 2207.798289][T20325] ? rcu_read_unlock+0xa0/0xa0 [ 2207.803071][T20325] ? __fdget+0x17c/0x200 [ 2207.807333][T20325] ? rcu_read_unlock+0xa0/0xa0 [ 2207.812108][T20325] bpf_map_do_batch+0x466/0x600 [ 2207.816983][T20325] __sys_bpf+0x6f7/0x780 [ 2207.821247][T20325] ? bpf_link_show_fdinfo+0x380/0x380 [ 2207.826651][T20325] ? lock_chain_count+0x20/0x20 [ 2207.831527][T20325] __x64_sys_bpf+0x78/0x90 [ 2207.835977][T20325] do_syscall_64+0x4c/0xa0 [ 2207.840406][T20325] ? clear_bhb_loop+0x60/0xb0 [ 2207.845093][T20325] ? clear_bhb_loop+0x60/0xb0 [ 2207.849785][T20325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2207.855693][T20325] RIP: 0033:0x7ff63239c629 [ 2207.860118][T20325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2207.879826][T20325] RSP: 002b:00007ff6332ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2207.888269][T20325] RAX: ffffffffffffffda RBX: 00007ff632616090 RCX: 00007ff63239c629 [ 2207.896260][T20325] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2207.904246][T20325] RBP: 00007ff6332ab090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.912231][T20325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2207.920222][T20325] R13: 00007ff632616128 R14: 00007ff632616090 R15: 00007ffcdec06f08 [ 2207.928229][T20325] [ 2208.129163][T20334] netlink: 'syz.0.16421': attribute type 2 has an invalid length. [ 2208.150671][T20334] netlink: 'syz.0.16421': attribute type 4 has an invalid length. [ 2208.192308][T20334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16421'. [ 2208.242719][T20338] netlink: 'syz.2.16424': attribute type 10 has an invalid length. [ 2208.498602][T20349] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.16428'. [ 2208.907213][T20360] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.16433'. [ 2209.582569][T20389] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16446'. [ 2209.773539][T20393] delete_channel: no stack [ 2209.829639][T20403] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16449'. [ 2210.217618][T20421] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.16458'. [ 2210.324443][T20424] FAULT_INJECTION: forcing a failure. [ 2210.324443][T20424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.370837][T20424] CPU: 1 PID: 20424 Comm: syz.3.16458 Not tainted syzkaller #0 [ 2210.378454][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2210.388524][T20424] Call Trace: [ 2210.391801][T20424] [ 2210.394725][T20424] dump_stack_lvl+0x188/0x24e [ 2210.399409][T20424] ? show_regs_print_info+0x12/0x12 [ 2210.404605][T20424] ? load_image+0x400/0x400 [ 2210.409105][T20424] ? __lock_acquire+0x7d10/0x7d10 [ 2210.414125][T20424] ? __fget_files+0x28/0x4b0 [ 2210.418718][T20424] should_fail_ex+0x399/0x4d0 [ 2210.423396][T20424] _copy_from_user+0x2c/0x170 [ 2210.428093][T20424] generic_map_update_batch+0x4f3/0x810 [ 2210.433640][T20424] ? rcu_read_unlock+0xa0/0xa0 [ 2210.438421][T20424] ? __fdget+0x17c/0x200 [ 2210.442679][T20424] ? rcu_read_unlock+0xa0/0xa0 [ 2210.447478][T20424] bpf_map_do_batch+0x466/0x600 [ 2210.452366][T20424] __sys_bpf+0x6f7/0x780 [ 2210.456608][T20424] ? bpf_link_show_fdinfo+0x380/0x380 [ 2210.461984][T20424] ? lock_chain_count+0x20/0x20 [ 2210.466847][T20424] __x64_sys_bpf+0x78/0x90 [ 2210.471257][T20424] do_syscall_64+0x4c/0xa0 [ 2210.475665][T20424] ? clear_bhb_loop+0x60/0xb0 [ 2210.480344][T20424] ? clear_bhb_loop+0x60/0xb0 [ 2210.485018][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2210.490904][T20424] RIP: 0033:0x7f7a16b9c629 [ 2210.495314][T20424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2210.514998][T20424] RSP: 002b:00007f7a179dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2210.523404][T20424] RAX: ffffffffffffffda RBX: 00007f7a16e16090 RCX: 00007f7a16b9c629 [ 2210.531367][T20424] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2210.539329][T20424] RBP: 00007f7a179dd090 R08: 0000000000000000 R09: 0000000000000000 [ 2210.547289][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2210.555254][T20424] R13: 00007f7a16e16128 R14: 00007f7a16e16090 R15: 00007fff4897d808 [ 2210.563229][T20424] [ 2210.822299][T20436] netlink: 'syz.4.16463': attribute type 4 has an invalid length. [ 2211.095867][T20445] delete_channel: no stack [ 2211.482293][T20459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16472'. [ 2211.748186][T20482] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16481'. [ 2212.018967][T20489] netlink: 'syz.4.16480': attribute type 10 has an invalid length. [ 2212.274652][T20489] team0: Port device wlan1 added [ 2212.549581][T20500] netlink: 'syz.2.16486': attribute type 11 has an invalid length. [ 2212.843111][T20510] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16488'. [ 2212.939399][T20510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2212.965750][T20510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2213.026147][T20510] bond0 (unregistering): Released all slaves [ 2213.119025][T20511] delete_channel: no stack [ 2213.223836][T20527] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.16496'. [ 2213.354299][T20534] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.16499'. [ 2213.418560][T20536] netlink: 'syz.0.16501': attribute type 21 has an invalid length. [ 2213.510935][T20536] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16501'. [ 2213.934318][ T4282] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2214.386773][T20564] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16509'. [ 2214.479117][T20577] FAULT_INJECTION: forcing a failure. [ 2214.479117][T20577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2214.513777][T20572] delete_channel: no stack [ 2214.573561][T20577] CPU: 1 PID: 20577 Comm: syz.1.16509 Not tainted syzkaller #0 [ 2214.581165][T20577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2214.591217][T20577] Call Trace: [ 2214.594485][T20577] [ 2214.597408][T20577] dump_stack_lvl+0x188/0x24e [ 2214.602089][T20577] ? show_regs_print_info+0x12/0x12 [ 2214.607281][T20577] ? load_image+0x400/0x400 [ 2214.611777][T20577] ? __lock_acquire+0x7d10/0x7d10 [ 2214.616795][T20577] ? __fget_files+0x28/0x4b0 [ 2214.621408][T20577] should_fail_ex+0x399/0x4d0 [ 2214.626100][T20577] _copy_from_user+0x2c/0x170 [ 2214.630782][T20577] generic_map_update_batch+0x4a1/0x810 [ 2214.636329][T20577] ? rcu_read_unlock+0xa0/0xa0 [ 2214.641093][T20577] ? __fdget+0x17c/0x200 [ 2214.645333][T20577] ? rcu_read_unlock+0xa0/0xa0 [ 2214.650087][T20577] bpf_map_do_batch+0x466/0x600 [ 2214.654935][T20577] __sys_bpf+0x6f7/0x780 [ 2214.659178][T20577] ? bpf_link_show_fdinfo+0x380/0x380 [ 2214.664554][T20577] ? lock_chain_count+0x20/0x20 [ 2214.669406][T20577] __x64_sys_bpf+0x78/0x90 [ 2214.673814][T20577] do_syscall_64+0x4c/0xa0 [ 2214.678223][T20577] ? clear_bhb_loop+0x60/0xb0 [ 2214.682891][T20577] ? clear_bhb_loop+0x60/0xb0 [ 2214.687561][T20577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2214.693443][T20577] RIP: 0033:0x7f629eb9c629 [ 2214.697848][T20577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.717529][T20577] RSP: 002b:00007f629faa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2214.725931][T20577] RAX: ffffffffffffffda RBX: 00007f629ee16090 RCX: 00007f629eb9c629 [ 2214.733894][T20577] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2214.741858][T20577] RBP: 00007f629faa2090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.749816][T20577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2214.757786][T20577] R13: 00007f629ee16128 R14: 00007f629ee16090 R15: 00007ffc7152e338 [ 2214.765757][T20577] [ 2215.016066][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2215.702574][T20612] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16527'. [ 2216.443379][ T4282] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2216.465719][T20628] delete_channel: no stack [ 2216.504723][T20636] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16531'. [ 2217.209370][T20655] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16545'. [ 2217.389524][T20660] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16543'. [ 2217.430361][T20660] device hsr_slave_0 left promiscuous mode [ 2217.499903][T20660] device hsr_slave_1 left promiscuous mode [ 2217.534176][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2217.970442][T20680] delete_channel: no stack [ 2218.008553][T20658] netlink: 'syz.0.16541': attribute type 10 has an invalid length. [ 2218.118175][T20658] team0: Port device wlan1 added [ 2218.570385][ T4282] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 2218.728806][T20712] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.16562'. [ 2218.883758][T20711] device veth0_vlan left promiscuous mode [ 2218.941504][T20711] device veth0_vlan entered promiscuous mode [ 2219.132966][T20723] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16564'. [ 2219.784776][T20733] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.16568'. [ 2219.985893][T20741] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16570'. [ 2219.999071][T20742] netlink: 'syz.2.16567': attribute type 10 has an invalid length. [ 2220.015225][T20742] device wlan1 left promiscuous mode [ 2220.161298][ T4282] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2221.694461][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.701577][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.944465][T20776] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16584'. [ 2223.843276][T20839] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16606'. [ 2224.260716][T20846] netlink: 'syz.0.16609': attribute type 46 has an invalid length. [ 2224.306239][T20846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16609'. [ 2225.735846][T20861] delete_channel: no stack [ 2226.209465][T20901] netlink: 10 bytes leftover after parsing attributes in process `syz.2.16630'. [ 2226.866814][T20906] netlink: 'syz.4.16632': attribute type 17 has an invalid length. [ 2226.883097][T20906] netlink: 148 bytes leftover after parsing attributes in process `syz.4.16632'. [ 2227.359280][T20910] delete_channel: no stack [ 2227.836103][T20937] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2227.871540][T20937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2228.117790][T20951] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.16650'. [ 2228.871324][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.886014][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.895164][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.904284][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.913370][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.922451][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.931519][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.940594][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2228.949646][T20954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2229.432931][T20969] delete_channel: no stack [ 2229.587228][T20979] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.16657'. [ 2229.761756][ T4345] wlan1: Trigger new scan to find an IBSS to join [ 2231.138579][T21008] delete_channel: no stack [ 2234.626051][T21041] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.16677'. [ 2234.801993][ T4355] wlan1: Trigger new scan to find an IBSS to join [ 2236.254446][T21070] delete_channel: no stack [ 2237.017290][ T5798] wlan1: Creating new IBSS network, BSSID 5e:5f:7e:d4:53:de [ 2237.295639][ T5798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2237.841037][T21118] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16704'. [ 2237.882331][T21118] net_ratelimit: 56 callbacks suppressed [ 2237.882346][T21118] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2238.572047][T21131] delete_channel: no stack [ 2239.570262][T21143] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.16711'. [ 2240.253055][T21151] netlink: 'syz.0.16714': attribute type 1 has an invalid length. [ 2241.848437][T21186] device veth0_vlan left promiscuous mode [ 2241.881535][T21186] device veth0_vlan entered promiscuous mode [ 2242.111870][T21194] delete_channel: no stack [ 2242.130308][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2242.169588][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2242.232289][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2242.308242][T21198] netlink: 160 bytes leftover after parsing attributes in process `syz.2.16732'. [ 2242.320800][T21198] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2243.018883][T21208] device syzkaller0 entered promiscuous mode [ 2270.960879][T13616] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2661 jiffies s: 280821 root: 0x2/. [ 2270.984454][T13616] rcu: blocking rcu_node structures (internal RCU debug): [ 2270.998313][T13616] Sending NMI from CPU 0 to CPUs 1: [ 2271.003605][ C1] NMI backtrace for cpu 1 [ 2271.003616][ C1] CPU: 1 PID: 21241 Comm: syz.0.16746 Not tainted syzkaller #0 [ 2271.003631][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2271.003639][ C1] RIP: 0010:preempt_count_sub+0x3b/0x160 [ 2271.003662][ C1] Code: bf 96 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 bd 00 00 00 83 3d 96 d6 66 15 00 75 25 65 8b 05 95 84 a9 7e 89 c1 81 e1 ff ff ff 7f <39> cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 [ 2271.003675][ C1] RSP: 0018:ffffc900001e0898 EFLAGS: 00000002 [ 2271.003688][ C1] RAX: 0000000000000102 RBX: dffffc0000000000 RCX: 0000000000000102 [ 2271.003699][ C1] RDX: 0000000000000100 RSI: ffffffff8adf0d00 RDI: 0000000000000001 [ 2271.003715][ C1] RBP: 1ffff1100cc027f7 R08: dffffc0000000000 R09: 1ffffffff215ea48 [ 2271.003726][ C1] R10: dffffc0000000000 R11: fffffbfff215ea49 R12: 0000000000120000 [ 2271.003737][ C1] R13: dffffc0000000000 R14: ffffffff8c64f988 R15: ffff888066013b80 [ 2271.003749][ C1] FS: 00007fa3583cb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2271.003762][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2271.003773][ C1] CR2: 0000000100000000 CR3: 000000007bbd5000 CR4: 00000000003506e0 [ 2271.003786][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 2271.003795][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2271.003805][ C1] Call Trace: [ 2271.003811][ C1] [ 2271.003817][ C1] migrate_enable+0x148/0x220 [ 2271.003837][ C1] trace_call_bpf+0x4b1/0x6b0 [ 2271.003855][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2271.003876][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2271.003896][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 2271.003909][ C1] ? sched_clock_cpu+0x6e/0x260 [ 2271.003928][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 2271.003951][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 2271.003971][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2271.003989][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2271.004008][ C1] ? __irq_exit_rcu+0x147/0x230 [ 2271.004022][ C1] ? irq_exit_rcu+0x20/0x20 [ 2271.004036][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2271.004052][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 2271.004071][ C1] trace_hardirqs_on+0x24/0x40 [ 2271.004088][ C1] asm_sysvec_irq_work+0x16/0x20 [ 2271.004103][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2271.004118][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2271.004130][ C1] RSP: 0018:ffffc900001e0c20 EFLAGS: 00000206 [ 2271.004141][ C1] RAX: 3e0ad532a4442d00 RBX: 1ffff9200003c18c RCX: 3e0ad532a4442d00 [ 2271.004152][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 2271.004163][ C1] RBP: ffffc900001e0d08 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 2271.004174][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 2271.004184][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 2271.004202][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 2271.004219][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2271.004234][ C1] ? lock_chain_count+0x20/0x20 [ 2271.004254][ C1] __rcu_read_unlock+0x78/0xd0 [ 2271.004269][ C1] rebalance_domains+0x8da/0xa10 [ 2271.004291][ C1] ? rebalance_domains+0x132/0xa10 [ 2271.004311][ C1] handle_softirqs+0x2a1/0x930 [ 2271.004329][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 2271.004345][ C1] ? do_softirq+0x210/0x210 [ 2271.004362][ C1] __irq_exit_rcu+0x13b/0x230 [ 2271.004375][ C1] ? irq_exit_rcu+0x20/0x20 [ 2271.004394][ C1] irq_exit_rcu+0x5/0x20 [ 2271.004406][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2271.004427][ C1] [ 2271.004431][ C1] [ 2271.004436][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2271.004452][ C1] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x80 [ 2271.004467][ C1] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 ed fa ff ff 66 90 66 90 e8 34 42 5c f7 e8 af 40 5c f7 fb 65 48 8b 05 36 d3 d5 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 91 a1 42 f7 48 [ 2271.004478][ C1] RSP: 0018:ffffc9000401ff08 EFLAGS: 00000286 [ 2271.004489][ C1] RAX: ffff888066013b80 RBX: 00000000000000ca RCX: 3e0ad532a4442d00 [ 2271.004499][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 2271.004510][ C1] RBP: ffffc9000401ff48 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 2271.004521][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 2271.004531][ C1] R13: 0000000000000000 R14: ffffc9000401ff58 R15: 0000000000000000 [ 2271.004548][ C1] ? syscall_enter_from_user_mode+0x21/0x80 [ 2271.004562][ C1] do_syscall_64+0x24/0xa0 [ 2271.004578][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2271.004593][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2271.004609][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2271.004624][ C1] RIP: 0033:0x7fa35759c629 [ 2271.004637][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2271.004648][ C1] RSP: 002b:00007fa3583cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2271.004663][ C1] RAX: ffffffffffffffda RBX: 00007fa357815fa8 RCX: 00007fa35759c629 [ 2271.004673][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa357815fac [ 2271.004683][ C1] RBP: 00007fa357815fa0 R08: 0012e4f767d57e62 R09: 0000000000000000 [ 2271.004693][ C1] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 2271.004707][ C1] R13: 00007fa357816038 R14: 00007ffddfba6bf0 R15: 00007ffddfba6cd8 [ 2271.004725][ C1] [ 2274.811097][T14076] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)