last executing test programs: 8.809136342s ago: executing program 0 (id=3490): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100faffff23000000000000000000000007"], 0x48}, 0x200040c4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e37040001", 0x27}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502"], 0xfe33) 8.558175158s ago: executing program 0 (id=3494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="18000000000000002900000039000000000002"], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x8, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000200)=""/130, 0x28, 0x82, 0x0, 0x1ba5784a, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) (async) socket$kcm(0xa, 0x2, 0x73) (async) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="18000000000000002900000039000000000002"], 0x18}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@float={0x8, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000200)=""/130, 0x28, 0x82, 0x0, 0x1ba5784a, 0x10000, @value=r1}, 0x28) (async) 8.301905415s ago: executing program 0 (id=3495): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000040000"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x10100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.880773545s ago: executing program 4 (id=3501): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 7.880027865s ago: executing program 0 (id=3502): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000000)=""/22, 0x16}], 0x3, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200edf8ffffff000000000000000085000000bc0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.531919575s ago: executing program 4 (id=3503): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00040e02000400062e1b004161976cb9f62687", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) socket$kcm(0xa, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="5c00000014006b030231a6080c000af32cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4918037e786a6d1000000e6657594f181", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x800}}]}}, 0x0, 0x52}, 0x28) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x8000) 7.490790676s ago: executing program 0 (id=3504): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000180)="aced48", 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, &(0x7f0000000200)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x2e, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x3b, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07", @ANYRESOCT], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10aa00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 7.057810627s ago: executing program 4 (id=3505): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d0001", 0x23}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', @multicast}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1800030000000000000020000700000044040100"], 0x18}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10881, 0xac5d, 0x3, 0x0, 0x0, 0x2, 0x7c3}, 0x0, 0xb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0xb4318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2005, 0x0, 0x51}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000008000000000800000000875b21fc7cc2000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffc9b) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0x33fe0) 6.915219581s ago: executing program 2 (id=3507): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff000000007110ba000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 6.831409553s ago: executing program 1 (id=3508): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x18, r0}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x333}, {}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x3, 0xa, 0x7, 0x100, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0xee, &(0x7f00000002c0)=""/238, 0x0, 0x29, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000700)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xc, 0x3, 0xfffff001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r5, 0x1], &(0x7f0000000840)=[{0x1, 0x2, 0xc, 0xb}], 0x10, 0xfffffffe}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x3, @loopback}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="97c7f5ca48bb5fdeea3db60c58f931213f44f38a937d38b91f3cb1369eb59454e7c8e5851204c079170b1ed51e168fc1901a001cf4fb1ce8b827f5dbcff391db5626b1d7a028be1a496d62474d1254cdb2e48df01f8b678a187ba4f0ca6799f5e47614089390022697f78ad9f6fab8c9f57b645c2d725b6e6e2efcac436a8e84ae45f5dd987e42ba8dde19aea4e8dc1c9f9fff2455d402dd4a021f2afa73dddd2f2a738611a598923bba9339cf8a859753decb51fa8a6f58806f860bd7f82af7309cf9a4d6249746b5b7ee9b4703fd8d7313", 0xd2}], 0x1, &(0x7f0000000b00)=[{0x100, 0x115, 0x6, "9ba9dbf36a4743a9e3c884448a23d87e79a2912414ee4c62cf226560fe36fe8e04d168af3d16681cb8758afa8bfdfaec4b4839f156387b97acf6362b6757fb8d3ec594134b18bb80ec7f21b6cae778686d587eab719f5eb212dba56bcc536f607b846854e9ffa8e11b300b4ea5cfa693803142fbb0f6aedea31b5dd5f2e0ac26086bf9e918f76a662dc626c2360d5a2d7a8cfa848828274f3befa055d79034f408747937d3928dbd290b727131e4954870737516b47f861771f9ff81570e97e1dc57c58e5f4b5a25e73c76ff5fcb493fb0c1d873d6f7ba7cdd50216989ef46df30fdce2f2680eb84bf"}, {0x90, 0x119, 0x46fae25d, "1ee4a77b125cde40f2d4e2f0bc99be7ce0e9d4e64a7c2386c4f298988c45318ecaa6c28a2a91925fcb5aa9b93bec4b49a3302de0c8f958d44ce350ccc29cb934016f5ac493f6abb4b649fac1249a3a600abbcf0c1120f33445c9918c2bf5165d1f120ead3c0b87b6d6f198f793dfdedce85abae56643fe2b7732c18b4a"}, {0x20, 0x1, 0x8, "a9792a48260d436c558cc8e0"}, {0xa8, 0x115, 0x8001, "2f23856a785c60eca1ae1442717f978de8a067460e7574ed20f6842275952ccfae757651014e412475719e96244db7dc3da160df5c46ce69636493c0e4b6aeeab3e53e62e166cac6653e2326d5e10667f9e014d5dafb6083a80fd5ab622b5d98dc59f2ed68a061afc643f409e016bf757837acc3c12ab745bb5d9274e215126ec05a2becf41044ef0064f31d0c1f9eeaca20056156"}, {0x38, 0x119, 0x4000000, "9fb3eb9ff183cc7d7f497199c0507bb6274960daf9a9412a5ceac221593da7c30260e409"}, {0x68, 0x104, 0xe889, "3760e305307883bc0b822b41ab0ac01ae39c418d2f499b70c8605ef8f8b5ced1bb228ff9f5c264397c45bf030182ff0b39c129795092f960a99d37151ba3a7204244d8540f0693eee31ff640fb7c0db2dbc8"}, {0xb0, 0x10e, 0x5493, "a61ee8b8f6a3e192d54365bae0bdbeb44f277a906cd08daafcad1850e0ac6425177324f3e0cb1dab5d0a2eb634d0b42bb18c9477b0844ee335bdeb560665655f9984f7f836b66a209496468cea31ab4418384f2698b4570341616c93a896a1eb53dc8e2eb125cc91e2165867a87127cbdfb240fb49f4ed689b8b21fa7a0e18bdf8235e3747b7b7a63fa716df3523323aa53e1beb7e241a1883819d3a277ba94c"}, {0x38, 0x102, 0x5, "0103670472c1e4cac0ae60da31bea956cccf72d9ea88143c718e717f165d0c82955f68527962c767"}, {0xe0, 0x111, 0x8, "bfd08f102c2cf66e43e21f2555c0fa57272a50e42bc9fbae46a7fe27cdc2fbde9ab56173f5daf35b7f5d06376c3bd514f5a0d6a635b3c761e33ec9eed64299f283c18e28e33b3847f6b92e112691dd3cd64b24c1850415d308233d9d43ebf3cf1e7bde299f9eac8afbd3fae40f056b61cd5766b4a1befa6996ccdbb7d871d3e7edc98df212829cb4ba59980eb22c1452d20b7708b51a41cd52d8fbae97490f397b7d4b232b625a50d1f45618c634687bed6777b81fa8e9a12b5198ce65b5204e8bf8e55cf1ebfa787d"}], 0x4c0}, 0x20000081) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001000), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000001040)={[{0x2d, 'memory'}, {0x2b, 'rlimit'}, {0x2d, 'net_prio'}, {0x2b, 'net_cls'}, {0x2d, 'cpu'}, {0x2b, 'freezer'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'blkio'}]}, 0x4d) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{r5, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)='%ps \x00'}, 0x20) r10 = perf_event_open$cgroup(&(0x7f0000001280)={0x2, 0x80, 0x10, 0xbf, 0x4, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000001240), 0x2}, 0x401, 0x80000001, 0xfffffffe, 0x3, 0x6, 0x2, 0x200, 0x0, 0xffff0000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x0, 0x80, 0x80, 0x7, 0x5, 0xaf, 0x0, 0x7ff, 0x12008, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000001180), 0xb}, 0x200, 0x80, 0xdd, 0x9, 0x7, 0x8, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x10, r10, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@bloom_filter={0x1e, 0x9, 0x8, 0x1, 0x48820, r5, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @value=r4}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000013c0)=@generic={&(0x7f0000001380)='./file0\x00', r6}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001400)={r5, 0x0, 0xffffffffffffffff}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001640)={&(0x7f0000001440)="f122d5adf35926d5d5bcfe0350489002", &(0x7f0000001480)=""/13, &(0x7f00000014c0)="642e338df03e43e2a25ce1d30457753020d4ab3dff4d2ce5ab643d0498806660fe5a03b773f31b74293e9caac53df1a0e9c646a80e4b24b13d9eb5173343b9ff208c83607337d98319353d8feb103632a8f54b5de0dfbdcec5f34df89cec1374dda157621581d6deb879636cb1b50296b29bfd2b6c1882397b46da0c86db2a1e3c01405ccbdeb39e71c1cf56220a7861ca4d2deff1e221e98d0366b96322d7388503eeb34b13582d3a3030", &(0x7f0000001580)="986df10991c4e42101f0652ce9d4e4e3d95fae26d1d07a569b117b99e72d22037214822b836a1892608e234ff05b8d47c085bc90a042265c34c1d58d308b2fb22a4690d01a39bf2734bf04ad402a13758978f9dd997845ebe983032db3c28e49633f67eff789226d6bb5c95fe4ef7d1141b6eff29e187f6df55122ec90f920fe796f1978e88aa5ef6c0e9c15043a22", 0x62, r11}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r10, 0xc008240a, &(0x7f0000001680)={0x1, 0x0, [0x0]}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0)=r3, 0x4) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x6, [@union={0x7, 0x8, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x5, 0x1}, {0x10, 0x1, 0xfff}, {0x5, 0x2, 0x4}, {0x9, 0x4, 0x1}, {0xf, 0x4, 0xc2}, {0xd, 0x3, 0x9}, {0x6, 0x5, 0x3}, {0xa, 0x1, 0x5ea}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x5, [{0x8, 0x3, 0x873}]}, @float={0x8, 0x0, 0x0, 0x10, 0x2}, @enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0x5, [{0x6, 0x3}, {0x2, 0x7, 0x3}]}]}, {0x0, [0x2e, 0x5f, 0x0, 0xe]}}, &(0x7f0000001880)=""/174, 0xea, 0xae, 0x1, 0x7, 0x10000}, 0x28) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x3, 0x200, 0xff, 0xa0c4, r9, 0x5, '\x00', r2, r12, 0x4, 0x0, 0x2, 0xd, @value=r13}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r6, 0x0, 0xa5, 0xef, &(0x7f0000001980)="ffe7e902b6a0fa7b22adfb8e3dd556c3584aa75ea9c08b52e52be44e4957cd40d0c360701bbe111cd64825b407b163980e6606e0ecfe12ad2765933661dca77310b185975a29fbc14208a3f2a07cdf02b6f477067d81b24725472e5ca5e7805c804dfe3af3897151ecf0c6d8ab66717a32e445a71543f60aac37f288848f6843e6a97a0f850a42babb5b4be15726e543ae866f1a7765b171cf69776b68800a8ffd723849ba", &(0x7f0000001a40)=""/239, 0x3, 0x0, 0x19, 0x43, &(0x7f0000001b40)="6c72c406634bbe66e6e289457ff3d5a406a3340e60363eb8ac", &(0x7f0000001b80)="d0d02d9d8708e2cb5ff6ce6dd51fc411e88987dbbfb50d47f7acce8a7bcddee785d3477b8c39094e97f0dd5a03ee18c6037bbbbd729fb2855312eeba3a3d388b10b2ac", 0x4, 0x0, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_ext={0x1c, 0x16, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @ldst={0x0, 0x3, 0x0, 0xc, 0x3, 0xfffffffffffffff0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x812}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d40)='syzkaller\x00', 0xfffffa4c, 0x69, &(0x7f0000001d80)=""/105, 0x41100, 0x10, '\x00', r2, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x3, 0x10, 0x3, 0x1}, 0x10, 0xf785, 0xffffffffffffffff, 0x1, &(0x7f0000001e40)=[r11], &(0x7f0000001e80)=[{0x2, 0x5, 0x2, 0xc}], 0x10, 0x5d}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001f80)='cgroup.threads\x00', 0x2, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0x20, 0x6, 0x7, 0x8000, 0x40000, r14, 0x2000000, '\x00', r2, r12, 0x0, 0x1, 0x2}, 0x50) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002240)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x7651, '\x00', r2, r13, 0x2, 0x0, 0x5}, 0x50) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000022c0)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0xb, 0xe, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r11}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}]}, &(0x7f0000002040)='GPL\x00', 0x9, 0xc7, &(0x7f0000002080)=""/199, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2f, r12, 0x8, &(0x7f0000002180)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r3, r6, 0x2, &(0x7f0000002340)=[r14, r9, r15, r16, r17, r9], &(0x7f0000002380)=[{0x0, 0x4, 0x9, 0x4}, {0x4, 0x2, 0x9, 0x4}], 0x10, 0xd}, 0x94) 6.56164972s ago: executing program 1 (id=3509): r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffff", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e120800140000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/213, 0xd5}], 0x1}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x7f00, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000104, 0x0, 0x23}, 0x4004910) setsockopt$sock_attach_bpf(r3, 0x29, 0x3b, &(0x7f0000000100)=r4, 0x120) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x36, &(0x7f0000000100)=r8, 0x120) 6.55152704s ago: executing program 3 (id=3510): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e12090006000468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) (async) sendmsg$inet(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.230934668s ago: executing program 2 (id=3511): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x1148c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x110, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) close(0x3) openat$cgroup_subtree(r2, &(0x7f0000000980), 0x2, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000940)=r7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000751791f10020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r2}, 0x8) write$cgroup_subtree(r10, &(0x7f0000000a00)=ANY=[@ANYBLOB='-rlimit -hugetlb \x00hugetlb +freezep '], 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 6.229066239s ago: executing program 1 (id=3512): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x101) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r6) (async) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.274383825s ago: executing program 3 (id=3513): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 3.207102497s ago: executing program 4 (id=3514): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r1) (async) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 3.099081629s ago: executing program 2 (id=3515): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) socket$kcm(0x21, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES8=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f00000000000000000800cd3b6a"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f", 0xa2}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000500)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="ff45c66edabe48699472288d955f6163d32bdfb704f660959db6c7df6d3ae7066eef4a3e56e2d93e5a884e7be9f6cef63b89f808542333a5c7fe8b1965306ee17a4f4d370556c5418f93d2948909462753cb62fc9dd57d71cb580f528199c2e75011836239f272520636b7196297b05e7032", 0x72}, {&(0x7f0000000600)="163126cecacb9f07c2cd945b32531341a7af446eacc19863c9a6ec78bad0bf8ad8fbdbc977abbb3bc156f396fd28b33276650f82811358202be2", 0x3a}], 0x2, &(0x7f0000000680)=[{0xb8, 0x3a, 0x2, "4a0a06dabf6295b7333b7361cd4a6c098f5e4c36f08c965eb5989c9b29c6499d06823baea1d5172133a5493d61a0e9411986b5b0dd6a70e468933a3d81d4bdc2cb8052b2a667598a560c9de9d3652c29360ebc1fb8f6b0b43b0162f83ce4cd465236904be1ec824f8c91ca344ccd2748304130551a65eb020d4e4930dcacbc1b2c5af570a54957e9b295f8c429d3d440169ff11b8b817bac27e9f1d578b64d9249e2"}], 0xb8}, 0x8041) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r5 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x602, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r7}, 0x38) 3.098810229s ago: executing program 1 (id=3516): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00040e02000400062e1b004161976cb9f62687", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) socket$kcm(0xa, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="5c00000014006b030231a6080c000af32cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4918037e786a6d1000000e6657594f181", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x800}}]}}, 0x0, 0x52}, 0x28) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x8000) 2.962490383s ago: executing program 3 (id=3517): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="018d00000300"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000380), 0x8, 0x2a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r3, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6a2c, 0x7}, 0x12000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.884990115s ago: executing program 1 (id=3518): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb44a93abb3327ba23872f0a2fba24107c7d0009000e000a0010000000ba80010000005a8c377432d6d5f7ce23718ab40fbf426d43d35096eb2839557f6039", 0x5a}], 0x1}, 0x4080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000002085000000a0000000bf0900000000000026090600000003e7040000000600000018010000786c6c2500000000002020207d9af8ff00000000ad91ffff0000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b7000000000000029500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.050982807s ago: executing program 2 (id=3519): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15917939fc24ceb8}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r5, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r7], 0x12) perf_event_open$cgroup(0x0, r8, 0xe, r3, 0x0) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.019005997s ago: executing program 4 (id=3520): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1800, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x2, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x8000, 0x20000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x5, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000004740)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x1, 0x2}]}]}}}], 0x18}, 0x40000d0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0xffffffffffffffff, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)='\xf5T\x9f\xf0,\xb1\x89j\xd2\x93\nJm\x93I\x19\x0e\xa4\x97\rR \x0f=\xb9K\t\xe6:F%\xfb)SX\xe4\x81*\xdc\tm\xf7\x8a\xcaZ\xfen\xf1\x9d\x81\xc6\xc5g\xad\xca\xd0W,\xa3P^3\\V\xba\xec\x15\xfb\xe0r\x81\x97g\x06\xe8\xa11\x90\x01\xb2Y6\x92z\xc3\\\xeb\x84\xa7\xea\xee\xae\xbb\xc4P\xf5\xc0;Ucyow\x91\xe0\xf6%l+\xea]>\xdb\xac\xb7\xf5\xf1G}oE0\xd8\xa4\xd0\x98h\xcd1d\x88\xdb!\xd6U\xf8`Y\x1b}\xbd\xcaeZx\x11\"\xcdM[\x8c\x1b,\xf4z\x9e\x86\x8f]PY\x99\xe3\x1d\xd9e\xf3>\xb8\xff\\=\xbf\xc7*\xed\x88\xf7\x8b\xea\xf9DE\xb2\xa7\xfc\xe9E\x8bo\xfa\xae1\x85\x82\xd7?\x92\x98\xb3L\xce\xe3\x11Z`9\xa8\xf7=[\xe9\n!?\xef\xfe\xbfv8\xa1(\xdf\xd7H\xfay2\x019f\xc6q\x934\xc0\xda\xa4\x11B\xf7\xd3\xef:\xf23?\x94\x7f\xe9\x9d>\xaaIc\x1b\x92.\xce8\x8eM\xb7\x95jb\xd6\x85\"\xb4\xce\x1e\x96\xc1') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB='\x00'/17, @ANYRES32], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.303090016s ago: executing program 3 (id=3521): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0x2}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000040)=0x2, &(0x7f0000000300)=r5, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000300)=r5, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x20, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x56d7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x2, 0xe, 0x8, 0xe, 0x65}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x3, 0x2, 0x0, 0x3, 0xa, 0x50, 0x10}]}, &(0x7f0000000740)='GPL\x00', 0x9, 0x31, &(0x7f0000000780)=""/49, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r9, r1, r7, r6, r2, r6], &(0x7f0000000840)=[{0x2, 0x4, 0x6, 0x8}, {0x0, 0x5, 0x6, 0x9}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.295901136s ago: executing program 2 (id=3522): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x480, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r5, &(0x7f0000001cc0)={&(0x7f0000000a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/98, 0x62}], 0x3, &(0x7f0000001c00)=""/161, 0xa1}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x38}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 457.071108ms ago: executing program 3 (id=3523): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x9}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0xffffffffffffffff, r0, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f", 0x55}, {&(0x7f0000000100)="51285c29090e430cf95a04ba3225b53f3a277e6e80af5b3fe795eb01e1579dae66f1f8a48c66f137a86ae76703b8b9bf63bffae0b17bb8091f5c03add4b8ab20e514e49824494fa5cc77d96e302c710d583f3007d9d449bf7cb62f24c9c2e654e859da6e412d32e7e28304a518a7565b8ab950f89fa8906ec80afedb2d2a809cb425bcd3", 0x84}], 0x2}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xad, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 278.920802ms ago: executing program 1 (id=3524): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0xfffffffffffffffa}, 0x8, 0x0, 0xc2be, 0x0, 0x4, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60109e43051482c137153e370248078000f01700d1bd", 0x29}], 0x1}, 0x1810) r1 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x39, 0x0, 0x0, 0x0, 0x1, 0x20048, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xab, 0xcae}, 0x1, 0x7fff, 0x0, 0x7, 0x5, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffcd5, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) r8 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) sendmsg$inet(r8, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) close(r9) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0xa) r10 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x80044944, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000000000007d7f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000100000000000000000000000000000000000001000000000000006ed0271b8dfd043303239b4b6238725572f09ccd4b50f57298ce6ad532ce863897fe8e3e0e6b28dd96a61afb35374f128c40997e47f9641182dc396fb2732eacba26f8b4b8ca1a9066c35ca75ddfa5c0a29fe5078dc2d785b5d79d761c0699e515f648c5b321089282ce5f4752c09f7de3eedadea8e4c4c6c709b32567c1e3bd061cb9d38ad38b77c93dfe576bed9ded54406b1089aa96f246ebff8a460c71070f1535971d773eb1a9e27d343206209e88d9b79c6b430660092fe8f17d"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r12, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r12, 0x0, &(0x7f0000001700)=""/53}, 0x20) 245.330083ms ago: executing program 4 (id=3525): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffd8c, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890c, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 106.036317ms ago: executing program 2 (id=3526): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000020, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(r4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) (async) socket$kcm(0xa, 0x2, 0x0) 15.263419ms ago: executing program 0 (id=3527): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=3528): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00040e02000400062e1b004161976cb9f62687", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) socket$kcm(0xa, 0xd, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="5c00000014006b030231a6080c000af32cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4918037e786a6d1000000e6657594f181", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x800}}]}}, 0x0, 0x52}, 0x28) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x8000) kernel console output (not intermixed with test programs): h some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.352051][T10234] netlink: 'syz.2.1609': attribute type 10 has an invalid length. [ 400.366662][T10234] device veth0_macvtap left promiscuous mode [ 400.598641][T10236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1610'. [ 400.648175][T10241] netlink: 'syz.1.1610': attribute type 12 has an invalid length. [ 400.675545][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1610'. [ 400.713456][T10243] netlink: 'syz.1.1610': attribute type 10 has an invalid length. [ 401.444095][T10267] FAULT_INJECTION: forcing a failure. [ 401.444095][T10267] name failslab, interval 1, probability 0, space 0, times 1 [ 401.504290][T10267] CPU: 0 PID: 10267 Comm: syz.1.1619 Not tainted syzkaller #0 [ 401.513910][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.528949][T10267] Call Trace: [ 401.535226][T10267] [ 401.540817][T10267] dump_stack_lvl+0x188/0x24e [ 401.547295][T10267] ? show_regs_print_info+0x12/0x12 [ 401.554087][T10267] ? load_image+0x410/0x410 [ 401.560938][T10267] ? __might_sleep+0xd0/0xd0 [ 401.569143][T10267] ? __lock_acquire+0x7c40/0x7c40 [ 401.575466][T10267] should_fail_ex+0x390/0x4c0 [ 401.581917][T10267] should_failslab+0x5/0x20 [ 401.589129][T10267] slab_pre_alloc_hook+0x59/0x300 [ 401.595759][T10267] ? __lock_acquire+0x138a/0x7c40 [ 401.602819][T10267] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 401.612461][T10267] __kmem_cache_alloc_node+0x4f/0x270 [ 401.621270][T10267] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 401.628053][T10267] __kmalloc+0xa3/0x240 [ 401.634150][T10267] tomoyo_realpath_from_path+0xe2/0x5c0 [ 401.641880][T10267] ? tomoyo_domain+0xd2/0x120 [ 401.648075][T10267] ? tomoyo_path_number_perm+0x205/0x650 [ 401.655026][T10267] tomoyo_path_number_perm+0x22f/0x650 [ 401.663688][T10267] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 401.676046][T10267] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 401.687887][T10267] ? ksys_write+0x1ce/0x260 [ 401.693990][T10267] ? common_file_perm+0x171/0x1c0 [ 401.701270][T10267] ? __fget_files+0x28/0x460 [ 401.707948][T10267] security_file_ioctl+0x6c/0xa0 [ 401.716311][T10267] __se_sys_ioctl+0x48/0x170 [ 401.722859][T10267] do_syscall_64+0x4c/0xa0 [ 401.730581][T10267] ? clear_bhb_loop+0x60/0xb0 [ 401.738427][T10267] ? clear_bhb_loop+0x60/0xb0 [ 401.746176][T10267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.755018][T10267] RIP: 0033:0x7f225fb9e019 [ 401.764059][T10267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.792444][T10267] RSP: 002b:00007f2260b38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.806827][T10267] RAX: ffffffffffffffda RBX: 00007f225fe25fa0 RCX: 00007f225fb9e019 [ 401.819815][T10267] RDX: 0000200000000080 RSI: 0000000000008910 RDI: 0000000000000005 [ 401.832356][T10267] RBP: 00007f2260b38090 R08: 0000000000000000 R09: 0000000000000000 [ 401.845555][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.856426][T10267] R13: 00007f225fe26038 R14: 00007f225fe25fa0 R15: 00007ffc44941078 [ 401.868114][T10267] [ 402.175695][T10267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 402.384345][T10286] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 403.966819][T10370] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1637'. [ 404.455585][T10382] netlink: 'syz.4.1639': attribute type 10 has an invalid length. [ 404.485396][T10382] netlink: 'syz.4.1639': attribute type 25 has an invalid length. [ 404.523900][T10382] netlink: 'syz.4.1639': attribute type 25 has an invalid length. [ 407.876441][T10446] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 408.078762][ T4289] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 408.383942][T10460] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.1654'. [ 409.295720][T10470] netlink: 'syz.3.1660': attribute type 21 has an invalid length. [ 409.332615][T10470] netlink: 'syz.3.1660': attribute type 6 has an invalid length. [ 409.396136][T10470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1660'. [ 409.519514][T10474] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1661'. [ 410.239619][T10487] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 410.275259][T10487] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 410.634059][T10490] netlink: 'syz.3.1665': attribute type 10 has an invalid length. [ 410.663716][T10490] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1665'. [ 410.785320][T10490] device hsr0 entered promiscuous mode [ 410.943791][T10490] bridge0: port 2(hsr0) entered blocking state [ 411.033339][T10490] bridge0: port 2(hsr0) entered disabled state [ 411.079118][T10496] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1666'. [ 411.171206][T10490] bridge0: port 2(hsr0) entered blocking state [ 411.183015][T10490] bridge0: port 2(hsr0) entered forwarding state [ 412.006323][T10522] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1675'. [ 412.276017][T10527] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1673'. [ 413.334802][T10545] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1682'. [ 414.140577][T10577] mac80211_hwsim hwsim19 ªªªªªª: renamed from wlan0 [ 414.374528][T10583] netlink: 'syz.1.1693': attribute type 3 has an invalid length. [ 414.413599][T10583] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1693'. [ 414.496971][T10583] bridge0: port 4(dummy0) entered blocking state [ 414.506750][T10583] bridge0: port 4(dummy0) entered forwarding state [ 414.517046][T10583] bridge0: port 3(team0) entered blocking state [ 414.526367][T10583] bridge0: port 3(team0) entered forwarding state [ 414.536295][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.546075][T10583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.554561][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.565024][T10583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.584219][T10583] device bridge0 entered promiscuous mode [ 414.767106][ T8727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 416.590225][T10629] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1706'. [ 416.619749][T10629] netlink: zone id is out of range [ 416.632175][T10629] netlink: zone id is out of range [ 416.691743][T10629] netlink: del zone limit has 4 unknown bytes [ 417.077216][T10633] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 417.123510][T10633] netlink: 'syz.3.1706': attribute type 25 has an invalid length. [ 417.653711][T10650] netlink: 'syz.3.1712': attribute type 39 has an invalid length. [ 418.096783][T10661] netlink: 'syz.3.1716': attribute type 39 has an invalid length. [ 418.199082][T10666] delete_channel: no stack [ 418.217206][T10666] delete_channel: no stack [ 418.779673][T10673] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1719'. [ 419.258299][T10685] netlink: 'syz.2.1722': attribute type 3 has an invalid length. [ 419.344528][T10685] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1722'. [ 422.507622][T10713] netlink: 'syz.2.1729': attribute type 30 has an invalid length. [ 422.670920][T10718] netlink: 'syz.4.1730': attribute type 9 has an invalid length. [ 422.702774][T10708] netlink: 'syz.4.1730': attribute type 13 has an invalid length. [ 422.739082][T10718] netlink: 'syz.4.1730': attribute type 8 has an invalid length. [ 422.772796][T10708] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1730'. [ 422.790582][T10718] netlink: 355 bytes leftover after parsing attributes in process `syz.4.1730'. [ 422.805644][T10713] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1729'. [ 425.075766][T10767] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1746'. [ 425.182295][T10768] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1746'. [ 426.803849][T10789] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1753'. [ 427.445034][T10809] netlink: 'syz.4.1757': attribute type 29 has an invalid length. [ 427.628623][T10809] netlink: 'syz.4.1757': attribute type 29 has an invalid length. [ 428.361863][T10826] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1763'. [ 428.508491][T10831] netlink: 'syz.2.1763': attribute type 3 has an invalid length. [ 428.713452][T10831] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1763'. [ 428.730986][T10837] netlink: 'syz.3.1767': attribute type 3 has an invalid length. [ 428.746409][T10837] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1767'. [ 428.807971][T10842] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1770'. [ 429.330392][T10826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.489965][T10826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.605237][T10826] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 429.749104][T10826] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 429.978095][T10826] bond0 (unregistering): Released all slaves [ 430.116470][T10860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1773'. [ 432.455299][ T4289] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 432.744330][T10911] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.1787'. [ 432.965315][T10915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 433.135789][T10915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.132460][T10952] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 434.151539][T10952] netlink: 'syz.0.1800': attribute type 29 has an invalid length. [ 434.513464][ T4289] Bluetooth: hci0: command 0x2016 tx timeout [ 435.004378][T10980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1808'. [ 435.232038][T10983] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 435.320909][T10983] netlink: 'syz.0.1809': attribute type 3 has an invalid length. [ 435.344187][T10988] netlink: 'syz.1.1812': attribute type 4 has an invalid length. [ 435.369842][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1809'. [ 435.393463][T10988] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1812'. [ 435.751469][T10996] netlink: 'syz.1.1815': attribute type 2 has an invalid length. [ 435.785833][T10996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1815'. [ 438.565896][T11039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 438.572562][T11039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 438.621277][T11039] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1826'. [ 439.626088][T11068] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1833'. [ 439.956435][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.963188][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.557370][T11090] netlink: 'syz.1.1840': attribute type 2 has an invalid length. [ 440.644164][T11093] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1839'. [ 442.252944][T11113] delete_channel: no stack [ 442.976913][T11145] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1855'. [ 443.079308][T11145] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 443.157575][ T4330] bridge0: port 3(team0) entered disabled state [ 443.201257][T11153] netlink: 'syz.1.1855': attribute type 40 has an invalid length. [ 443.772081][T11170] netlink: 'syz.2.1861': attribute type 10 has an invalid length. [ 444.258802][T11177] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 444.276024][T11177] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1863'. [ 444.298529][T11177] device hsr0 entered promiscuous mode [ 445.158551][T11199] netlink: 'syz.0.1870': attribute type 10 has an invalid length. [ 445.397387][T11199] team0: Device veth1_vlan failed to register rx_handler [ 446.028912][T11218] netlink: 'syz.0.1876': attribute type 10 has an invalid length. [ 446.129147][T11218] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1876'. [ 451.605165][T11273] netlink: 'syz.2.1892': attribute type 39 has an invalid length. [ 453.141504][T11318] netlink: 'syz.3.1906': attribute type 2 has an invalid length. [ 453.189677][T11318] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.1906'. [ 453.348185][T11325] netlink: 'syz.1.1908': attribute type 3 has an invalid length. [ 453.367087][T11325] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1908'. [ 453.722398][T11336] netlink: 'syz.1.1912': attribute type 2 has an invalid length. [ 453.810552][T11334] netlink: 'syz.3.1911': attribute type 10 has an invalid length. [ 453.916642][T11334] bridge0: port 3(dummy0) entered disabled state [ 453.959304][T11334] device dummy0 left promiscuous mode [ 453.985269][T11334] bridge0: port 3(dummy0) entered disabled state [ 454.149080][T11334] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 454.886301][T11373] netlink: 'syz.2.1923': attribute type 17 has an invalid length. [ 454.900418][T11373] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1923'. [ 454.915796][T11373] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.983276][T11373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.712082][T11401] netlink: 'syz.4.1931': attribute type 39 has an invalid length. [ 457.028905][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 457.079381][T11430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1938'. [ 457.645699][T11456] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.878503][T11475] netlink: 'syz.2.1950': attribute type 39 has an invalid length. [ 461.339191][T11492] netlink: 'syz.4.1959': attribute type 10 has an invalid length. [ 462.516811][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 464.870737][T11530] netlink: 'syz.1.1970': attribute type 39 has an invalid length. [ 465.073706][T11539] device sit0 entered promiscuous mode [ 465.856987][T11554] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1979'. [ 466.678323][T11574] netlink: 'syz.4.1986': attribute type 28 has an invalid length. [ 466.690924][T11574] netlink: 'syz.4.1986': attribute type 29 has an invalid length. [ 466.702406][T11574] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1986'. [ 466.947578][T11577] ref_ctr_offset mismatch. inode: 0x888 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 467.201049][T11581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1989'. [ 467.260404][T11581] netlink: 'syz.2.1989': attribute type 8 has an invalid length. [ 467.388378][T11594] netlink: 'syz.2.1989': attribute type 3 has an invalid length. [ 467.426472][T11595] netlink: 'syz.1.1994': attribute type 5 has an invalid length. [ 467.451193][T11594] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1989'. [ 467.601354][T11592] device sit0 entered promiscuous mode [ 467.845728][T11581] netlink: 'syz.2.1989': attribute type 27 has an invalid length. [ 468.108560][T11606] netlink: 'syz.0.2006': attribute type 1 has an invalid length. [ 468.281006][T11613] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1996'. [ 468.690335][T11608] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.1996'. [ 468.706227][T11620] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1999'. [ 469.191236][T11625] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2000'. [ 469.677629][T11640] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2004'. [ 469.694273][T11640] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 469.740187][T11640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.012158][T11679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2013'. [ 472.044514][T11702] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2017'. [ 472.069350][T11702] bond0: (slave bond_slave_0): Releasing backup interface [ 472.118228][T11702] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 472.340360][T11712] netlink: 'syz.4.2021': attribute type 2 has an invalid length. [ 472.368799][T11712] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 472.394401][T11712] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2021'. [ 474.504024][T11718] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2020'. [ 474.530563][T11722] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 474.537259][T11722] syzkaller0: linktype set to 8 [ 474.575971][T11733] netlink: 'syz.4.2026': attribute type 10 has an invalid length. [ 474.597966][T11733] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2026'. [ 474.741252][T11736] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 474.811763][T11736] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2028'. [ 474.921481][T11736] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2028'. [ 475.405314][T11756] netlink: 'syz.1.2034': attribute type 9 has an invalid length. [ 475.926564][T11762] netlink: 'syz.2.2036': attribute type 1 has an invalid length. [ 475.947111][T11762] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2036'. [ 476.981896][T11776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.034565][T11776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.937995][T11776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.955200][T11776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.980906][T11776] batman_adv: batadv0: Removing interface: vlan1 [ 480.051034][T11781] netlink: 'syz.0.2043': attribute type 6 has an invalid length. [ 480.062527][T11781] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2043'. [ 480.083998][T11787] netlink: 'syz.2.2044': attribute type 7 has an invalid length. [ 480.325491][T11795] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2046'. [ 480.351133][T11795] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.2046'. [ 480.409308][T11795] tc_dump_action: action bad kind [ 481.674566][T11828] netlink: 'syz.2.2057': attribute type 39 has an invalid length. [ 481.735686][T11831] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 481.755425][T11831] netlink: 'syz.3.2058': attribute type 4 has an invalid length. [ 481.769527][T11831] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2058'. [ 481.816281][T11831] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 481.949141][T11834] netlink: 'syz.1.2060': attribute type 10 has an invalid length. [ 482.608846][T11860] netlink: 'syz.1.2065': attribute type 17 has an invalid length. [ 482.636318][T11860] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2065'. [ 485.362797][T11868] device syzkaller0 entered promiscuous mode [ 487.607869][T11895] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2074'. [ 487.620931][T11895] tc_dump_action: action bad kind [ 489.195286][T11928] netlink: 'syz.0.2082': attribute type 9 has an invalid length. [ 489.287844][T11928] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2082'. [ 490.176518][T11951] netlink: 'syz.2.2090': attribute type 3 has an invalid length. [ 490.200140][T11951] netlink: 'syz.2.2090': attribute type 4 has an invalid length. [ 490.221554][T11951] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.2090'. [ 493.226582][T12018] syz.0.2106[12018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.256602][T12018] syz.0.2106[12018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.249093][T12059] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2121'. [ 497.681204][T12113] netlink: 'syz.0.2140': attribute type 21 has an invalid length. [ 499.157902][T12168] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2156'. [ 499.701913][T12191] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 501.474281][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.480700][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.051873][T12234] netlink: 'syz.4.2173': attribute type 21 has an invalid length. [ 503.529375][T12250] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2178'. [ 504.610469][T12273] netlink: 'syz.2.2183': attribute type 29 has an invalid length. [ 504.684170][T12273] netlink: 'syz.2.2183': attribute type 29 has an invalid length. [ 505.514305][T12261] netlink: 'syz.3.2180': attribute type 2 has an invalid length. [ 505.541729][T12261] netlink: 'syz.3.2180': attribute type 3 has an invalid length. [ 505.623948][T12261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2180'. [ 506.012540][T12298] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2190'. [ 506.092572][T12292] netlink: 'syz.0.2186': attribute type 7 has an invalid length. [ 507.255889][T12327] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2195'. [ 507.277581][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.301371][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.349169][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.361125][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.375826][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.397656][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.442827][T12318] netlink: 'syz.4.2195': attribute type 10 has an invalid length. [ 509.655870][T12380] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2213'. [ 509.925300][T12387] netlink: 'syz.0.2216': attribute type 2 has an invalid length. [ 509.957219][T12387] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2216'. [ 509.985970][T12389] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2217'. [ 510.027501][T12389] device hsr_slave_0 left promiscuous mode [ 510.746112][T12407] netlink: 'syz.1.2224': attribute type 29 has an invalid length. [ 510.805345][T12407] netlink: 'syz.1.2224': attribute type 29 has an invalid length. [ 510.814104][T12404] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2221'. [ 510.877908][T12412] netlink: 'syz.1.2224': attribute type 3 has an invalid length. [ 510.928223][T12412] netlink: 'syz.1.2224': attribute type 8 has an invalid length. [ 510.969196][T12412] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.2224'. [ 511.014758][T12407] netlink: 'syz.1.2224': attribute type 29 has an invalid length. [ 511.064819][T12407] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2224'. [ 511.404138][T12422] netlink: 'syz.2.2227': attribute type 21 has an invalid length. [ 511.910908][T12431] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2228'. [ 512.323715][T12455] netlink: 'syz.3.2235': attribute type 6 has an invalid length. [ 512.390577][T12457] IPv6: Can't replace route, no match found [ 512.446265][T12457] netlink: 'syz.2.2236': attribute type 6 has an invalid length. [ 512.502927][T12457] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.2236'. [ 514.421936][T12484] netlink: 'syz.0.2240': attribute type 21 has an invalid length. [ 514.441108][T12484] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2240'. [ 514.853485][T12489] tap0: tun_chr_ioctl cmd 1074025677 [ 514.881739][T12489] tap0: linktype set to 774 [ 515.044211][T12489] netlink: 'syz.3.2244': attribute type 11 has an invalid length. [ 515.112000][T12489] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2244'. [ 515.612854][T12487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.004370][T12511] device sit0 left promiscuous mode [ 516.149142][T12516] device sit0 entered promiscuous mode [ 516.844665][T12535] validate_nla: 2 callbacks suppressed [ 516.844776][T12535] netlink: 'syz.4.2255': attribute type 3 has an invalid length. [ 516.867496][T12535] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2255'. [ 516.990735][T12518] netlink: 'syz.0.2252': attribute type 12 has an invalid length. [ 516.999572][T12518] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2252'. [ 517.269500][T12542] netlink: 'syz.4.2257': attribute type 2 has an invalid length. [ 517.302989][T12542] netlink: 161460 bytes leftover after parsing attributes in process `syz.4.2257'. [ 517.348250][T12542] netlink: 'syz.4.2257': attribute type 2 has an invalid length. [ 517.366861][T12542] netlink: 'syz.4.2257': attribute type 4 has an invalid length. [ 517.395071][T12542] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2257'. [ 518.724164][T12568] device sit0 entered promiscuous mode [ 519.942896][T12581] netlink: 'syz.2.2270': attribute type 10 has an invalid length. [ 520.451714][T12592] tipc: Started in network mode [ 520.456935][T12592] tipc: Node identity 9215a268, cluster identity 4711 [ 520.482799][T12592] tipc: Node number set to 2450891368 [ 520.863267][T12606] netlink: 'syz.3.2277': attribute type 2 has an invalid length. [ 520.871507][T12606] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2277'. [ 523.038861][T12675] netlink: 'syz.4.2293': attribute type 2 has an invalid length. [ 523.245772][T12682] netlink: 'syz.3.2295': attribute type 2 has an invalid length. [ 524.606384][T12719] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2307'. [ 524.794375][T12721] netlink: 'syz.4.2308': attribute type 10 has an invalid length. [ 525.066026][T12731] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2312'. [ 525.664227][T12749] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 525.753074][T12749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.824672][T12755] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2318'. [ 526.485090][T12774] netlink: 'syz.4.2324': attribute type 12 has an invalid length. [ 526.523386][T12774] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2324'. [ 527.116587][T12793] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2329'. [ 527.187387][T12794] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2329'. [ 527.241143][T12793] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 528.879179][T12803] netlink: 'syz.4.2331': attribute type 3 has an invalid length. [ 528.958946][T12803] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2331'. [ 531.348679][T12862] netlink: 'syz.2.2350': attribute type 12 has an invalid length. [ 531.358408][T12862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2350'. [ 531.370883][T12866] netlink: 'syz.1.2348': attribute type 39 has an invalid length. [ 531.387043][T12860] device sit0 left promiscuous mode [ 531.711010][T12871] device sit0 entered promiscuous mode [ 532.011989][T12898] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.2358'. [ 532.027888][T12897] netlink: 'syz.4.2358': attribute type 9 has an invalid length. [ 532.058532][T12898] netlink: zone id is out of range [ 532.077602][T12897] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2358'. [ 532.135441][T12898] netlink: zone id is out of range [ 532.148053][T12898] netlink: zone id is out of range [ 532.176250][T12898] netlink: zone id is out of range [ 532.242914][T12898] netlink: zone id is out of range [ 532.251192][T12898] netlink: zone id is out of range [ 532.266651][T12898] netlink: zone id is out of range [ 532.282306][T12898] netlink: zone id is out of range [ 532.289895][T12898] netlink: zone id is out of range [ 532.307133][T12898] netlink: zone id is out of range [ 532.451279][T12911] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2363'. [ 534.720983][T12959] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2377'. [ 535.402822][T12971] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.2382'. [ 535.599986][T12970] C: renamed from team_slave_0 [ 535.644782][T12970] netlink: 'syz.4.2380': attribute type 2 has an invalid length. [ 535.652922][T12970] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2380'. [ 536.045143][T12992] netlink: 'syz.3.2387': attribute type 29 has an invalid length. [ 536.075073][T12992] netlink: 'syz.3.2387': attribute type 29 has an invalid length. [ 536.106707][T13003] netlink: 'syz.3.2387': attribute type 29 has an invalid length. [ 536.158031][T12992] netlink: 'syz.3.2387': attribute type 29 has an invalid length. [ 541.647680][T13057] netlink: 'syz.0.2406': attribute type 2 has an invalid length. [ 541.673299][T13057] netlink: 'syz.0.2406': attribute type 4 has an invalid length. [ 541.681128][T13057] netlink: 'syz.0.2406': attribute type 8 has an invalid length. [ 541.734185][T13057] netlink: 'syz.0.2406': attribute type 9 has an invalid length. [ 541.748144][T13057] netlink: 'syz.0.2406': attribute type 10 has an invalid length. [ 541.765577][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 541.810339][T13087] IPv6: Can't replace route, no match found [ 541.833710][T13108] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 541.879421][T13108] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2424'. [ 542.356191][T13133] netlink: 'syz.2.2432': attribute type 2 has an invalid length. [ 542.377130][T13133] netlink: 144220 bytes leftover after parsing attributes in process `syz.2.2432'. [ 542.381346][T13136] netlink: 'syz.1.2433': attribute type 10 has an invalid length. [ 542.442503][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.482154][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.606511][T13140] netlink: 'syz.0.2435': attribute type 2 has an invalid length. [ 542.616437][T13142] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2436'. [ 542.700556][T13140] device 0 entered promiscuous mode [ 543.433250][T13161] netlink: 'syz.0.2441': attribute type 2 has an invalid length. [ 543.454877][T13161] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2441'. [ 544.472185][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'. [ 547.325796][T13272] validate_nla: 1 callbacks suppressed [ 547.325829][T13272] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 547.562775][T13272] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2472'. [ 550.385299][T13355] FAULT_INJECTION: forcing a failure. [ 550.385299][T13355] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 550.424731][T13355] CPU: 1 PID: 13355 Comm: syz.0.2495 Not tainted syzkaller #0 [ 550.432291][T13355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.442660][T13355] Call Trace: [ 550.445980][T13355] [ 550.449048][T13355] dump_stack_lvl+0x188/0x24e [ 550.453796][T13355] ? show_regs_print_info+0x12/0x12 [ 550.459503][T13355] ? load_image+0x410/0x410 [ 550.464064][T13355] ? __lock_acquire+0x7c40/0x7c40 [ 550.469201][T13355] should_fail_ex+0x390/0x4c0 [ 550.473962][T13355] _copy_from_user+0x2c/0x170 [ 550.478777][T13355] __sys_bpf+0x2ea/0x780 [ 550.483150][T13355] ? bpf_link_show_fdinfo+0x380/0x380 [ 550.488868][T13355] ? lock_chain_count+0x20/0x20 [ 550.493807][T13355] __x64_sys_bpf+0x78/0x90 [ 550.498300][T13355] do_syscall_64+0x4c/0xa0 [ 550.502790][T13355] ? clear_bhb_loop+0x60/0xb0 [ 550.507627][T13355] ? clear_bhb_loop+0x60/0xb0 [ 550.512423][T13355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.518482][T13355] RIP: 0033:0x7f6509f9e019 [ 550.522978][T13355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.542651][T13355] RSP: 002b:00007f650adb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.551189][T13355] RAX: ffffffffffffffda RBX: 00007f650a225fa0 RCX: 00007f6509f9e019 [ 550.559308][T13355] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 550.567390][T13355] RBP: 00007f650adb2090 R08: 0000000000000000 R09: 0000000000000000 [ 550.575517][T13355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.583843][T13355] R13: 00007f650a226038 R14: 00007f650a225fa0 R15: 00007fff0dd37938 [ 550.591910][T13355] [ 550.646809][T13353] device syzkaller0 entered promiscuous mode [ 554.790725][T13374] tap0: tun_chr_ioctl cmd 1074025681 [ 555.120715][T13413] sctp: [Deprecated]: syz.1.2510 (pid 13413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.120715][T13413] Use struct sctp_sack_info instead [ 555.247404][T13418] netlink: 'syz.4.2513': attribute type 4 has an invalid length. [ 555.273829][T13418] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2513'. [ 557.093664][T13471] tap0: tun_chr_ioctl cmd 1074025677 [ 557.099594][T13471] tap0: linktype set to 773 [ 557.206216][T13471] netlink: 'syz.0.2528': attribute type 29 has an invalid length. [ 557.234282][T13471] netlink: 'syz.0.2528': attribute type 29 has an invalid length. [ 557.256640][T13474] netlink: 'syz.0.2528': attribute type 29 has an invalid length. [ 557.284886][T13473] netlink: 'syz.1.2530': attribute type 10 has an invalid length. [ 557.300000][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2530'. [ 557.661125][T13473] batman_adv: batadv0: Adding interface: virt_wifi0 [ 557.673313][T13473] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.738288][T13473] batman_adv: batadv0: Interface activated: virt_wifi0 [ 558.666953][T13499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.619808][T13514] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2542'. [ 560.582506][T13526] netlink: 'syz.1.2547': attribute type 39 has an invalid length. [ 562.010350][T13556] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2553'. [ 562.048741][T13556] ¥: port 1(team0) entered blocking state [ 562.073401][T13556] ¥: port 1(team0) entered disabled state [ 562.110668][T13556] device team0 entered promiscuous mode [ 562.137299][T13556] device team_slave_0 entered promiscuous mode [ 562.157614][T13556] device team_slave_1 entered promiscuous mode [ 562.574314][T13571] netlink: 'syz.0.2558': attribute type 10 has an invalid length. [ 562.779721][T13571] device team0 left promiscuous mode [ 562.798583][T13571] device team_slave_0 left promiscuous mode [ 562.818428][T13571] device team_slave_1 left promiscuous mode [ 562.835790][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.842257][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.852908][T13571] ¥: port 1(team0) entered disabled state [ 563.001880][T13571] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.083032][T13571] bond0: (slave team0): Enslaving as an active interface with an up link [ 563.368045][T13600] syz.0.2565[13600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.368164][T13600] syz.0.2565[13600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.868114][T13645] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 565.031388][T13645] bridge0: port 3(team0) entered disabled state [ 565.086185][T13645] device team0 left promiscuous mode [ 565.127836][T13645] device team_slave_0 left promiscuous mode [ 565.205090][T13645] device team_slave_1 left promiscuous mode [ 565.281236][T13645] bridge0: port 3(team0) entered disabled state [ 565.588689][T13664] netlink: 'syz.4.2586': attribute type 3 has an invalid length. [ 565.649025][T13664] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2586'. [ 568.079441][T13663] netlink: 'syz.4.2586': attribute type 21 has an invalid length. [ 568.096864][T13663] netlink: 'syz.4.2586': attribute type 2 has an invalid length. [ 568.123283][T13663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2586'. [ 568.709508][T13693] device syzkaller0 entered promiscuous mode [ 569.029362][T13712] netlink: 'syz.1.2596': attribute type 4 has an invalid length. [ 569.038307][T13712] netlink: 63143 bytes leftover after parsing attributes in process `syz.1.2596'. [ 569.372351][T13725] netlink: 'syz.0.2601': attribute type 3 has an invalid length. [ 569.412226][T13725] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2601'. [ 570.162601][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 570.370971][T13746] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2607'. [ 570.416551][T13746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 570.461027][T13746] net_ratelimit: 3549 callbacks suppressed [ 570.461045][T13746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.899646][ T4286] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 570.902962][T13758] netlink: 'syz.3.2611': attribute type 10 has an invalid length. [ 571.251486][T13758] team0: Device gre0 is of different type [ 571.807910][T13782] netlink: 'syz.0.2616': attribute type 10 has an invalid length. [ 571.917728][T13788] netlink: 'syz.4.2618': attribute type 16 has an invalid length. [ 571.942985][T13788] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2618'. [ 571.956945][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 572.831387][T13801] netlink: 'syz.3.2622': attribute type 11 has an invalid length. [ 572.861854][T13801] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2622'. [ 572.913500][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 573.052095][T13813] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2624'. [ 573.178099][T13813] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 573.220393][T13812] netlink: 'syz.0.2626': attribute type 16 has an invalid length. [ 573.232326][T13812] netlink: 'syz.0.2626': attribute type 3 has an invalid length. [ 573.254583][T13812] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2626'. [ 573.278034][T13813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.560956][T13850] netlink: 'syz.0.2638': attribute type 2 has an invalid length. [ 578.255115][T13896] netlink: 'syz.2.2650': attribute type 10 has an invalid length. [ 578.327719][T13896] device team0 left promiscuous mode [ 578.345642][T13903] netlink: 'syz.4.2649': attribute type 30 has an invalid length. [ 578.417187][T13896] device team_slave_0 left promiscuous mode [ 578.464076][T13896] device team_slave_1 left promiscuous mode [ 578.550200][T13911] netlink: 'syz.0.2651': attribute type 13 has an invalid length. [ 578.583348][T13911] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2651'. [ 580.173055][T13937] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2658'. [ 580.817934][T13957] netlink: 'syz.0.2665': attribute type 4 has an invalid length. [ 580.835722][T13959] netlink: 'syz.2.2667': attribute type 21 has an invalid length. [ 580.871012][T13957] netlink: 194832 bytes leftover after parsing attributes in process `syz.0.2665'. [ 581.983678][T13976] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2672'. [ 582.385248][T13989] netlink: 'syz.2.2678': attribute type 10 has an invalid length. [ 582.730371][T14000] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 582.950143][T14007] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 582.959422][T14007] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 583.311778][T14012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2686'. [ 584.965044][T14056] netlink: 'syz.0.2697': attribute type 29 has an invalid length. [ 584.990631][T14056] netlink: 'syz.0.2697': attribute type 3 has an invalid length. [ 585.041989][T14056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2697'. [ 586.082444][T14086] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2705'. [ 586.113994][T14086] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2705'. [ 586.318960][ T4289] Bluetooth: hci3: Malformed LE Event: 0x0d [ 586.339836][T14092] netlink: 'syz.0.2708': attribute type 3 has an invalid length. [ 586.348317][T14092] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2708'. [ 586.363769][T14095] netlink: 'syz.4.2709': attribute type 5 has an invalid length. [ 586.461421][T14092] netlink: 'syz.0.2708': attribute type 3 has an invalid length. [ 586.495751][T14092] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2708'. [ 586.626643][T14105] netlink: 'syz.4.2711': attribute type 1 has an invalid length. [ 586.645099][T14105] netlink: 'syz.4.2711': attribute type 1 has an invalid length. [ 586.657185][T14105] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2711'. [ 588.435683][T14130] device sit0 left promiscuous mode [ 589.035417][T14155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 589.076738][T14155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 589.115646][T14157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 589.142328][T14155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 590.239690][T14186] netlink: 'syz.1.2731': attribute type 29 has an invalid length. [ 590.304016][T14186] netlink: 'syz.1.2731': attribute type 29 has an invalid length. [ 590.325956][T14189] netlink: 'syz.1.2731': attribute type 1 has an invalid length. [ 590.415975][T14189] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2731'. [ 590.624235][T14202] netlink: 'syz.3.2735': attribute type 29 has an invalid length. [ 590.695897][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'. [ 590.733771][T14203] netlink: 'syz.3.2735': attribute type 21 has an invalid length. [ 590.755704][T14202] netlink: 'syz.3.2735': attribute type 29 has an invalid length. [ 590.856818][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'. [ 591.446776][T14208] netlink: 'syz.2.2736': attribute type 10 has an invalid length. [ 591.461101][T14208] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2736'. [ 592.949641][T14243] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2747'. [ 593.319974][T14264] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2752'. [ 595.321579][T14315] netlink: 'syz.0.2764': attribute type 10 has an invalid length. [ 595.371310][T14315] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2764'. [ 595.443587][T14315] device hsr0 entered promiscuous mode [ 595.483204][T14315] bridge0: port 3(hsr0) entered blocking state [ 595.490729][T14315] bridge0: port 3(hsr0) entered disabled state [ 595.581051][T14315] bridge0: port 3(hsr0) entered blocking state [ 595.589459][T14315] bridge0: port 3(hsr0) entered forwarding state [ 596.891371][T14358] device syzkaller0 entered promiscuous mode [ 598.804804][T14401] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2788'. [ 598.909748][T14406] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2789'. [ 599.098759][T14408] netlink: 'syz.0.2791': attribute type 1 has an invalid length. [ 599.133977][T14408] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2791'. [ 599.602102][T14426] netlink: 'syz.3.2795': attribute type 1 has an invalid length. [ 599.653548][T14426] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.2795'. [ 600.898208][T14443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2801'. [ 601.258327][T14454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2805'. [ 601.570146][T14468] netlink: 'syz.2.2808': attribute type 4 has an invalid length. [ 601.585855][T14472] netlink: 'syz.0.2809': attribute type 29 has an invalid length. [ 601.609312][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 601.652573][T14470] netlink: 'syz.2.2808': attribute type 11 has an invalid length. [ 601.680754][T14470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2808'. [ 601.694587][T14476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2811'. [ 601.713007][T14472] netlink: 'syz.0.2809': attribute type 29 has an invalid length. [ 601.742628][T14476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2811'. [ 601.807340][T14473] netlink: 'syz.0.2809': attribute type 29 has an invalid length. [ 603.161215][T14510] netlink: 'syz.0.2819': attribute type 10 has an invalid length. [ 603.171507][T14510] device team0 entered promiscuous mode [ 603.180021][T14510] device team_slave_0 entered promiscuous mode [ 603.188259][T14510] device team_slave_1 entered promiscuous mode [ 603.251489][T14510] bond0: (slave team0): Releasing backup interface [ 603.378628][T14510] bridge0: port 4(team0) entered blocking state [ 603.404361][T14510] bridge0: port 4(team0) entered disabled state [ 603.541897][T14530] netlink: 'syz.4.2823': attribute type 2 has an invalid length. [ 603.682873][T14521] device syzkaller0 entered promiscuous mode [ 603.846466][T14533] __nla_validate_parse: 5 callbacks suppressed [ 603.846535][T14533] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2824'. [ 603.893681][T14533] bridge_slave_1: default FDB implementation only supports local addresses [ 605.043217][T14560] netlink: 'syz.4.2832': attribute type 9 has an invalid length. [ 605.051053][T14560] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2832'. [ 605.267587][T14567] delete_channel: no stack [ 606.610529][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 606.620799][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 606.631661][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 606.650092][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 606.657984][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 606.666166][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 608.764326][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 609.526412][T14574] netlink: 'syz.3.2837': attribute type 10 has an invalid length. [ 609.648297][T14575] netlink: 'syz.3.2837': attribute type 13 has an invalid length. [ 609.664941][T14607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2846'. [ 609.691489][T14608] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 609.758350][T14612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2847'. [ 609.842350][T14614] netlink: 'syz.4.2848': attribute type 21 has an invalid length. [ 609.871173][T14614] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2848'. [ 609.890391][T14614] netlink: 'syz.4.2848': attribute type 4 has an invalid length. [ 609.903022][T14617] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2849'. [ 609.912847][T14614] netlink: 'syz.4.2848': attribute type 5 has an invalid length. [ 609.921649][T14614] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2848'. [ 609.931125][T14617] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 610.331379][T14593] chnl_net:caif_netlink_parms(): no params data found [ 610.518921][T14593] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.526255][T14593] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.560438][T14593] device bridge_slave_0 entered promiscuous mode [ 610.579257][T14593] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.592426][T14593] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.602285][T14593] device bridge_slave_1 entered promiscuous mode [ 610.661404][T14593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.707011][T14593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.803656][T14593] team0: Port device team_slave_0 added [ 610.850229][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 610.859439][T14593] team0: Port device team_slave_1 added [ 610.944197][T14593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.967035][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.006527][T14593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.036953][T14593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.049584][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.104747][T14593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.457686][T14593] device hsr_slave_0 entered promiscuous mode [ 611.519006][T14593] device hsr_slave_1 entered promiscuous mode [ 611.536240][T14593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.565902][T14593] Cannot create hsr debugfs directory [ 611.770080][T10402] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.010965][T10402] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.126079][T14677] netlink: 'syz.3.2864': attribute type 17 has an invalid length. [ 612.143590][T14677] netlink: 'syz.3.2864': attribute type 16 has an invalid length. [ 612.151565][T14677] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2864'. [ 612.362873][T10402] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.538151][T10402] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.687976][T14686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2865'. [ 612.913477][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 612.956973][T10402] device 0 left promiscuous mode [ 614.266889][T14720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2873'. [ 614.333041][T14720] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2873'. [ 614.522146][T14723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2873'. [ 614.993548][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 615.238265][T14741] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 615.310783][T14593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.342867][T14593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.420055][T14750] __nla_validate_parse: 1 callbacks suppressed [ 615.420095][T14750] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2879'. [ 615.454299][T14593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.489026][T14593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.552069][T14750] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 615.765076][T14753] netlink: 'syz.4.2880': attribute type 2 has an invalid length. [ 615.786059][T14753] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2880'. [ 616.023301][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2881'. [ 616.980060][T14593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.012293][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.056592][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.084054][T14593] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.115121][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.135638][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.158418][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.165959][ T5208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.193784][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.216804][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.247297][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.299939][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.307207][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.467242][T14787] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2886'. [ 617.534617][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.561402][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 617.597401][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 617.654159][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 617.721318][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 617.891069][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 617.901437][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 617.916734][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 617.927898][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.010986][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.047440][T10402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.072043][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.095138][T10402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.116901][T10402] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 618.153009][T10402] batman_adv: batadv0: Removing interface: virt_wifi0 [ 618.190154][T10402] bridge0: port 4(dummy0) entered disabled state [ 618.202338][T10402] device bridge_slave_0 left promiscuous mode [ 618.209780][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.243636][T10402] device veth1_macvtap left promiscuous mode [ 618.250246][T10402] device veth0_macvtap left promiscuous mode [ 618.266522][T10402] device veth1_vlan left promiscuous mode [ 618.791476][T14823] netlink: 'syz.4.2896': attribute type 2 has an invalid length. [ 619.081524][T14825] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2897'. [ 619.105879][T14825] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2897'. [ 619.687718][T10402] team0 (unregistering): Port device team_slave_1 removed [ 619.738116][T10402] team0 (unregistering): Port device team_slave_0 removed [ 620.197560][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.207761][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.220162][T14593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 620.229490][T14805] netlink: 'syz.3.2892': attribute type 21 has an invalid length. [ 620.242952][T14805] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2892'. [ 620.417071][T14836] netlink: 'syz.3.2899': attribute type 3 has an invalid length. [ 620.426132][T14836] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2899'. [ 620.480769][T14823] device 0 entered promiscuous mode [ 620.491774][T14834] netlink: 'syz.2.2898': attribute type 21 has an invalid length. [ 620.609878][T14836] device sit0 entered promiscuous mode [ 621.041567][T14847] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2902'. [ 621.842792][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.851995][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.870447][T14593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.921298][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 621.942395][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 621.997317][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 622.007552][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.021491][T14593] device veth0_vlan entered promiscuous mode [ 622.029702][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 622.041731][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 622.061749][T14593] device veth1_vlan entered promiscuous mode [ 622.110095][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 622.120191][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 622.129710][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 622.140641][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 622.156812][T14593] device veth0_macvtap entered promiscuous mode [ 622.171647][T14593] device veth1_macvtap entered promiscuous mode [ 622.211266][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.231250][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.242111][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.255267][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.267964][T14593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.276654][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 622.288230][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 622.298419][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 622.308173][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 622.321367][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.334827][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.345590][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.356255][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.368218][T14593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.380149][T14593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.392587][T14593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.405996][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.416938][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.433592][T14593] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.442551][T14593] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.452369][T14593] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.462943][T14593] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.977463][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.000594][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.043762][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 624.120977][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.132847][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.177226][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.312921][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.319351][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.236158][T14894] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 626.279640][T14894] netlink: 'syz.3.2913': attribute type 4 has an invalid length. [ 626.291062][T14894] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2913'. [ 626.636382][T14904] netlink: 'syz.0.2915': attribute type 12 has an invalid length. [ 626.663338][T14904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2915'. [ 627.744207][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.753501][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.762986][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.771552][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.779575][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 627.787183][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.873314][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 630.783280][T14937] netlink: 'syz.2.2925': attribute type 3 has an invalid length. [ 630.791122][T14937] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2925'. [ 631.162202][T14927] chnl_net:caif_netlink_parms(): no params data found [ 631.728703][T14927] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.779617][T14927] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.817471][T14927] device bridge_slave_0 entered promiscuous mode [ 631.852419][T14927] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.882498][T14927] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.909354][T14927] device bridge_slave_1 entered promiscuous mode [ 632.005220][ T4290] Bluetooth: hci3: command 0x041b tx timeout [ 632.090052][T14927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.161045][T14927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.292697][T14927] team0: Port device team_slave_0 added [ 632.326845][T14927] team0: Port device team_slave_1 added [ 632.415095][T14927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.458287][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.599670][T14927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.644447][T14927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.681743][T14927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.781057][T14927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.864624][T14927] device hsr_slave_0 entered promiscuous mode [ 632.943023][T14927] device hsr_slave_1 entered promiscuous mode [ 633.024225][T14927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.032083][T14927] Cannot create hsr debugfs directory [ 633.226654][T10402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.375376][T10402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.607154][T10402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.775196][T15011] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 633.782185][T15011] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 633.864224][T10402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.033518][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 634.882649][T10402] device 0 left promiscuous mode [ 635.027668][T10402] device 0 left promiscuous mode [ 635.459813][T10402] tipc: Left network mode [ 635.608726][T15057] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 635.853466][T15046] netlink: 'syz.1.2953': attribute type 21 has an invalid length. [ 635.873455][T15057] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 636.114112][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 636.219114][T15059] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 636.456378][T15064] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 636.485957][T15069] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 637.019629][T14927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 637.035513][T15083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2960'. [ 637.150272][T15083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2960'. [ 637.184788][T14927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 637.261437][T15090] netlink: 'syz.2.2962': attribute type 21 has an invalid length. [ 637.290727][T15088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2960'. [ 637.392779][T14927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.759361][T14927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 638.206943][T15092] netlink: 'syz.2.2962': attribute type 14 has an invalid length. [ 638.233498][T15092] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2962'. [ 638.457898][T15112] netlink: 'syz.3.2964': attribute type 8 has an invalid length. [ 638.473337][T15083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2960'. [ 638.505245][T15112] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 638.543623][T15112] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.2964'. [ 638.593295][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2962'. [ 639.255850][T15123] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2968'. [ 639.293928][T15122] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2968'. [ 639.389703][T14927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.449991][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.475606][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.504688][T15127] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2969'. [ 639.547011][T14927] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.053455][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 640.073990][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.118940][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.126194][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.169259][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 640.192850][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 640.218395][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.225677][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.351277][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.369712][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 640.392697][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 640.424272][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 640.460604][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 640.695068][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 640.708049][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 640.727711][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 640.744604][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 640.774053][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 640.788932][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 640.804169][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 640.879825][T10402] device hsr_slave_0 left promiscuous mode [ 640.892063][T10402] device hsr_slave_1 left promiscuous mode [ 640.901688][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.923380][T10402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.948623][T10402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.956769][T10402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.989137][T10402] batman_adv: batadv0: Interface deactivated: vlan1 [ 640.996143][T10402] batman_adv: batadv0: Removing interface: vlan1 [ 641.008642][T10402] device bridge_slave_0 left promiscuous mode [ 641.024403][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.055595][T10402] device veth1_vlan left promiscuous mode [ 643.039982][T14927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.298108][T15163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.305438][T15163] IPv6: NLM_F_CREATE should be set when creating new route [ 643.312821][T15163] IPv6: NLM_F_CREATE should be set when creating new route [ 643.320115][T15163] IPv6: NLM_F_CREATE should be set when creating new route [ 643.438519][T15168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.915213][T15181] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2983'. [ 644.109739][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.133601][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.289499][T14927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.523895][T15191] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2986'. [ 645.170380][T15205] validate_nla: 2 callbacks suppressed [ 645.170398][T15205] netlink: 'syz.0.2988': attribute type 10 has an invalid length. [ 645.273354][T15205] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2988'. [ 645.762441][T15219] netlink: 'syz.0.2992': attribute type 10 has an invalid length. [ 645.823023][T15219] netlink: 'syz.0.2992': attribute type 4 has an invalid length. [ 645.963246][T15219] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2992'. [ 646.055236][T15219] bridge0: port 4(team0) entered disabled state [ 646.147818][T15219] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 646.253440][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 646.262681][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.276732][T15230] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2994'. [ 646.332996][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 646.364367][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.401037][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.444351][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.486777][T14927] device veth0_vlan entered promiscuous mode [ 646.565084][T14927] device veth1_vlan entered promiscuous mode [ 646.679602][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 646.689825][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 646.734186][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 646.762390][T15238] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2998'. [ 646.783301][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.796210][T14927] device veth0_macvtap entered promiscuous mode [ 646.834714][T14927] device veth1_macvtap entered promiscuous mode [ 646.922892][T15238] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 646.958019][T15238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 646.997719][T15238] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 647.120625][T15248] device aaaaaaaaaaaaaaa entered promiscuous mode [ 647.195737][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.225418][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.239030][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.252552][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.305224][T14927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.329777][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 647.346364][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 647.357778][T15253] netlink: 'syz.3.3003': attribute type 3 has an invalid length. [ 647.375001][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 647.383652][T15253] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3003'. [ 647.402436][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.423460][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.435074][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.453247][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.489606][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.520285][T14927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.532652][T14927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.552001][T14927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.580787][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 647.609387][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 647.666359][T14927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.684334][T14927] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.703220][T14927] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.715140][T14927] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.990051][ T8730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.012005][ T8730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.194873][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.281946][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.322211][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.430903][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 649.815864][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 649.827374][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 649.839576][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 649.847970][ T4290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 649.872302][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 649.882103][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.216940][T15322] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.3021'. [ 650.233643][T15322] openvswitch: netlink: Key type 386 is out of range max 32 [ 650.672694][T15328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3024'. [ 650.748929][T15314] chnl_net:caif_netlink_parms(): no params data found [ 651.001088][ T4330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.097413][T15337] netlink: 'syz.1.3028': attribute type 3 has an invalid length. [ 651.165939][T15337] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3028'. [ 651.377096][ T4330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.997155][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 652.386025][ T4330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.437890][T15314] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.481551][T15314] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.490460][T15314] device bridge_slave_0 entered promiscuous mode [ 652.554322][ T4330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.575799][T15314] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.582962][T15314] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.597798][T15314] device bridge_slave_1 entered promiscuous mode [ 652.700170][T15314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.786027][T15314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.032815][T15314] team0: Port device team_slave_0 added [ 653.076102][T15314] team0: Port device team_slave_1 added [ 654.252243][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 654.328020][T15413] tap0: tun_chr_ioctl cmd 35111 [ 654.434050][T15314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.441067][T15314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.545482][T15314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.767870][T15314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.788497][T15314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.939254][T15314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.242831][T15434] netlink: 'syz.3.3051': attribute type 2 has an invalid length. [ 655.271927][T15444] FAULT_INJECTION: forcing a failure. [ 655.271927][T15444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.287321][T15440] netlink: 'syz.4.3053': attribute type 29 has an invalid length. [ 655.321582][T15444] CPU: 1 PID: 15444 Comm: syz.0.3054 Not tainted syzkaller #0 [ 655.329141][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.339248][T15444] Call Trace: [ 655.342562][T15444] [ 655.345536][T15444] dump_stack_lvl+0x188/0x24e [ 655.350282][T15444] ? show_regs_print_info+0x12/0x12 [ 655.355540][T15444] ? load_image+0x410/0x410 [ 655.360093][T15444] ? __lock_acquire+0x7c40/0x7c40 [ 655.365188][T15444] should_fail_ex+0x390/0x4c0 [ 655.369921][T15444] _copy_from_user+0x2c/0x170 [ 655.374650][T15444] ___sys_sendmsg+0x1c3/0x360 [ 655.379513][T15444] ? __sys_sendmsg+0x2a0/0x2a0 [ 655.384357][T15444] ? __lock_acquire+0x7c40/0x7c40 [ 655.389493][T15444] __se_sys_sendmsg+0x1c3/0x2b0 [ 655.394416][T15444] ? __x64_sys_sendmsg+0x80/0x80 [ 655.399428][T15444] ? lockdep_hardirqs_on+0x94/0x140 [ 655.404682][T15444] do_syscall_64+0x4c/0xa0 [ 655.409155][T15444] ? clear_bhb_loop+0x60/0xb0 [ 655.413884][T15444] ? clear_bhb_loop+0x60/0xb0 [ 655.418618][T15444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.424556][T15444] RIP: 0033:0x7f6509f9e019 [ 655.429025][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.448687][T15444] RSP: 002b:00007f650adb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.457162][T15444] RAX: ffffffffffffffda RBX: 00007f650a225fa0 RCX: 00007f6509f9e019 [ 655.465186][T15444] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 655.473214][T15444] RBP: 00007f650adb2090 R08: 0000000000000000 R09: 0000000000000000 [ 655.481265][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.489293][T15444] R13: 00007f650a226038 R14: 00007f650a225fa0 R15: 00007fff0dd37938 [ 655.497367][T15444] [ 655.558089][T15314] device hsr_slave_0 entered promiscuous mode [ 655.586514][T15314] device hsr_slave_1 entered promiscuous mode [ 655.628136][T15440] netlink: 'syz.4.3053': attribute type 29 has an invalid length. [ 655.759296][T15449] netlink: 'syz.1.3056': attribute type 46 has an invalid length. [ 655.777862][T15449] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3056'. [ 656.700149][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 657.073018][T15466] netlink: 'syz.3.3061': attribute type 2 has an invalid length. [ 657.093405][T15466] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3061'. [ 657.431530][T15481] FAULT_INJECTION: forcing a failure. [ 657.431530][T15481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.523634][T15481] CPU: 0 PID: 15481 Comm: syz.3.3066 Not tainted syzkaller #0 [ 657.531196][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.541303][T15481] Call Trace: [ 657.544623][T15481] [ 657.547597][T15481] dump_stack_lvl+0x188/0x24e [ 657.552348][T15481] ? show_regs_print_info+0x12/0x12 [ 657.557618][T15481] ? load_image+0x410/0x410 [ 657.562187][T15481] ? __lock_acquire+0x7c40/0x7c40 [ 657.567279][T15481] should_fail_ex+0x390/0x4c0 [ 657.572542][T15481] _copy_from_user+0x2c/0x170 [ 657.577358][T15481] __copy_msghdr+0x384/0x560 [ 657.582029][T15481] ___sys_sendmsg+0x210/0x360 [ 657.586773][T15481] ? __sys_sendmsg+0x2a0/0x2a0 [ 657.591639][T15481] ? __lock_acquire+0x7c40/0x7c40 [ 657.596758][T15481] __se_sys_sendmsg+0x1c3/0x2b0 [ 657.601833][T15481] ? __x64_sys_sendmsg+0x80/0x80 [ 657.606828][T15481] ? lockdep_hardirqs_on+0x94/0x140 [ 657.612071][T15481] do_syscall_64+0x4c/0xa0 [ 657.616661][T15481] ? clear_bhb_loop+0x60/0xb0 [ 657.621399][T15481] ? clear_bhb_loop+0x60/0xb0 [ 657.626164][T15481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.632100][T15481] RIP: 0033:0x7f4f0bd9e019 [ 657.636557][T15481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.656213][T15481] RSP: 002b:00007f4f09ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.664677][T15481] RAX: ffffffffffffffda RBX: 00007f4f0c025fa0 RCX: 00007f4f0bd9e019 [ 657.672690][T15481] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 657.680701][T15481] RBP: 00007f4f09ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 657.688711][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.696718][T15481] R13: 00007f4f0c026038 R14: 00007f4f0c025fa0 R15: 00007ffc20cbd9e8 [ 657.704754][T15481] [ 658.753736][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 659.189141][ T4330] device hsr_slave_0 left promiscuous mode [ 659.233562][ T4330] device hsr_slave_1 left promiscuous mode [ 659.243563][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.281685][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.375097][ T4330] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 659.382258][ T4330] batman_adv: batadv0: Removing interface: virt_wifi0 [ 659.511758][ T4330] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 659.534284][ T4330] batman_adv: batadv0: Removing interface: veth0_vlan [ 659.581507][ T4330] batman_adv: batadv0: Interface deactivated: vlan1 [ 659.633418][ T4330] batman_adv: batadv0: Removing interface: vlan1 [ 659.670253][T15553] FAULT_INJECTION: forcing a failure. [ 659.670253][T15553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.693382][T15553] CPU: 0 PID: 15553 Comm: syz.3.3080 Not tainted syzkaller #0 [ 659.701020][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 659.711137][T15553] Call Trace: [ 659.714461][T15553] [ 659.717426][T15553] dump_stack_lvl+0x188/0x24e [ 659.722159][T15553] ? show_regs_print_info+0x12/0x12 [ 659.727420][T15553] ? load_image+0x410/0x410 [ 659.731978][T15553] ? __lock_acquire+0x7c40/0x7c40 [ 659.737066][T15553] should_fail_ex+0x390/0x4c0 [ 659.741811][T15553] _copy_from_user+0x2c/0x170 [ 659.746590][T15553] iovec_from_user+0x143/0x360 [ 659.751511][T15553] __import_iovec+0x6c/0x510 [ 659.756286][T15553] import_iovec+0x6f/0xa0 [ 659.760672][T15553] ___sys_sendmsg+0x252/0x360 [ 659.765419][T15553] ? __sys_sendmsg+0x2a0/0x2a0 [ 659.770294][T15553] ? __lock_acquire+0x7c40/0x7c40 [ 659.775412][T15553] __se_sys_sendmsg+0x1c3/0x2b0 [ 659.780330][T15553] ? __x64_sys_sendmsg+0x80/0x80 [ 659.785476][T15553] ? lockdep_hardirqs_on+0x94/0x140 [ 659.790743][T15553] do_syscall_64+0x4c/0xa0 [ 659.795219][T15553] ? clear_bhb_loop+0x60/0xb0 [ 659.800063][T15553] ? clear_bhb_loop+0x60/0xb0 [ 659.804835][T15553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.810793][T15553] RIP: 0033:0x7f4f0bd9e019 [ 659.815271][T15553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.835099][T15553] RSP: 002b:00007f4f09ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.843545][T15553] RAX: ffffffffffffffda RBX: 00007f4f0c025fa0 RCX: 00007f4f0bd9e019 [ 659.851545][T15553] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 659.859728][T15553] RBP: 00007f4f09ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 659.867737][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.875732][T15553] R13: 00007f4f0c026038 R14: 00007f4f0c025fa0 R15: 00007ffc20cbd9e8 [ 659.883741][T15553] [ 659.927032][ T4330] device veth0_vlan left promiscuous mode [ 664.197120][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 664.262211][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 664.761897][T15546] netlink: 'syz.1.3079': attribute type 2 has an invalid length. [ 664.772068][T15560] netlink: 'syz.3.3083': attribute type 11 has an invalid length. [ 664.782246][T15560] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3083'. [ 664.948307][T15562] device syzkaller0 entered promiscuous mode [ 665.019107][T14895] syzkaller0: tun_net_xmit 48 [ 665.246700][T15314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 665.288735][T15314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 665.426058][T15314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 665.510359][T15314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 667.006472][T15600] FAULT_INJECTION: forcing a failure. [ 667.006472][T15600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.049217][T15600] CPU: 0 PID: 15600 Comm: syz.1.3092 Not tainted syzkaller #0 [ 667.056795][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.066925][T15600] Call Trace: [ 667.070270][T15600] [ 667.073265][T15600] dump_stack_lvl+0x188/0x24e [ 667.078038][T15600] ? show_regs_print_info+0x12/0x12 [ 667.083326][T15600] ? load_image+0x410/0x410 [ 667.088176][T15600] ? __might_fault+0xa6/0x120 [ 667.093038][T15600] should_fail_ex+0x390/0x4c0 [ 667.097819][T15600] copyin+0x1b/0x120 [ 667.101808][T15600] _copy_from_iter+0x447/0x1130 [ 667.106772][T15600] ? copyout_mc+0x110/0x110 [ 667.111395][T15600] ? __check_object_size+0x86/0xa70 [ 667.116671][T15600] ? ping_common_sendmsg+0x93/0x2a0 [ 667.121998][T15600] ping_common_sendmsg+0xb8/0x2a0 [ 667.127108][T15600] ping_v6_sendmsg+0x1f9/0x1170 [ 667.132179][T15600] ? print_unlock_imbalance_bug+0x160/0x160 [ 667.138266][T15600] ? ping_v6_pre_connect+0x30/0x30 [ 667.143473][T15600] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 667.149549][T15600] ? lock_chain_count+0x20/0x20 [ 667.154573][T15600] ? inet_sendmsg+0x109/0x2a0 [ 667.159374][T15600] ? __local_bh_enable_ip+0x136/0x1c0 [ 667.164888][T15600] ? lockdep_hardirqs_on+0x94/0x140 [ 667.170167][T15600] ? _local_bh_enable+0xa0/0xa0 [ 667.175182][T15600] ? do_raw_spin_unlock+0x11d/0x230 [ 667.180478][T15600] ? inet_sendmsg+0x109/0x2a0 [ 667.185250][T15600] ? inet_sendmsg+0x109/0x2a0 [ 667.190012][T15600] ? inet_send_prepare+0x250/0x250 [ 667.195230][T15600] ____sys_sendmsg+0x5ed/0x9a0 [ 667.200091][T15600] ? __sys_sendmsg_sock+0x30/0x30 [ 667.205181][T15600] ? __import_iovec+0x306/0x510 [ 667.210129][T15600] ? import_iovec+0x6f/0xa0 [ 667.214709][T15600] ___sys_sendmsg+0x2a2/0x360 [ 667.219513][T15600] ? __sys_sendmsg+0x2a0/0x2a0 [ 667.224431][T15600] ? __lock_acquire+0x7c40/0x7c40 [ 667.229581][T15600] __se_sys_sendmsg+0x1c3/0x2b0 [ 667.234509][T15600] ? __x64_sys_sendmsg+0x80/0x80 [ 667.239589][T15600] ? lockdep_hardirqs_on+0x94/0x140 [ 667.244870][T15600] do_syscall_64+0x4c/0xa0 [ 667.249401][T15600] ? clear_bhb_loop+0x60/0xb0 [ 667.254194][T15600] ? clear_bhb_loop+0x60/0xb0 [ 667.258949][T15600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.264948][T15600] RIP: 0033:0x7fe0def9e019 [ 667.269429][T15600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.289126][T15600] RSP: 002b:00007fe0dfd85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.297605][T15600] RAX: ffffffffffffffda RBX: 00007fe0df225fa0 RCX: 00007fe0def9e019 [ 667.305640][T15600] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 667.313652][T15600] RBP: 00007fe0dfd85090 R08: 0000000000000000 R09: 0000000000000000 [ 667.321679][T15600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.329713][T15600] R13: 00007fe0df226038 R14: 00007fe0df225fa0 R15: 00007ffe27885058 [ 667.337776][T15600] [ 669.292146][T15585] tipc: Started in network mode [ 669.297807][T15585] tipc: Node identity 9215a268, cluster identity 4711 [ 669.306479][T15585] tipc: Node number set to 2450891368 [ 669.556265][T15314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.612177][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.622838][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.645685][T15314] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.709889][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.738097][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.800894][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.808317][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.989126][T15617] netlink: 'syz.4.3095': attribute type 2 has an invalid length. [ 670.059409][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.077376][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 670.142753][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 670.151969][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.159194][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.218765][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 670.283270][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 670.325527][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.389735][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.448144][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.488204][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.569173][T15314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 670.628770][T15314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.668341][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.689281][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.722357][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.741324][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 670.797591][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 670.829462][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 670.905321][T15643] netlink: 'syz.3.3101': attribute type 21 has an invalid length. [ 670.923318][T15643] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3101'. [ 671.984777][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 672.030401][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 672.063320][T15314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.540903][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.606104][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.688664][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 672.711386][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.744490][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 672.770066][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 672.790353][T15314] device veth0_vlan entered promiscuous mode [ 672.829844][T15314] device veth1_vlan entered promiscuous mode [ 672.892958][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 672.907108][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 672.984518][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.000133][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.034536][T15314] device veth0_macvtap entered promiscuous mode [ 673.045680][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.069571][T15314] device veth1_macvtap entered promiscuous mode [ 673.144486][T15314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.162471][T15314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.181631][T15314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.199730][T15314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.210166][T15314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.234741][T15314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.262928][T15314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.279219][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.312700][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.377148][T15314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.408309][T15314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.453214][T15314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.499944][T15314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.513250][T15314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.546820][T15314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.579396][T15314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.666537][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 673.739146][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.832502][T15314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.867501][T15314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.917399][T15314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.961591][T15314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.671313][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.706005][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.734083][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 674.765225][T15745] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3127'. [ 674.800556][ T8729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.835173][ T8729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.861007][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.112643][T15754] netlink: 'syz.3.3130': attribute type 10 has an invalid length. [ 675.201709][T15756] netlink: 'syz.2.3012': attribute type 27 has an invalid length. [ 675.233737][T15756] netlink: 'syz.2.3012': attribute type 25 has an invalid length. [ 675.350037][T15767] netlink: 'syz.0.3133': attribute type 5 has an invalid length. [ 676.165636][T15786] netlink: 'syz.1.3136': attribute type 3 has an invalid length. [ 676.229770][T15786] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3136'. [ 676.634340][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.645813][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.656655][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.665952][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.675126][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 676.684727][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 677.166647][ T8729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.271846][T15799] netlink: 'syz.2.3140': attribute type 21 has an invalid length. [ 677.312415][T15799] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3140'. [ 677.381250][T15804] netlink: 'syz.4.3142': attribute type 15 has an invalid length. [ 677.403604][T15804] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3142'. [ 677.527880][ T8729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.646297][T15817] netlink: 'syz.4.3145': attribute type 1 has an invalid length. [ 677.669479][T15817] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3145'. [ 677.697934][ T8729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.899911][ T8729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.280936][T15795] chnl_net:caif_netlink_parms(): no params data found [ 678.800715][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 679.550581][T15795] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.558525][T15795] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.568763][T15795] device bridge_slave_0 entered promiscuous mode [ 679.579080][T15795] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.586648][T15795] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.597744][T15795] device bridge_slave_1 entered promiscuous mode [ 679.814085][T15795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.834511][T15877] netlink: 'syz.2.3158': attribute type 3 has an invalid length. [ 679.842375][T15877] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3158'. [ 679.868432][T15795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.942149][T15795] team0: Port device team_slave_0 added [ 680.022847][T15795] team0: Port device team_slave_1 added [ 680.150763][T15795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.203086][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.271714][T15795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.370813][T15883] netlink: 'syz.2.3160': attribute type 15 has an invalid length. [ 680.405367][T15795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.425289][T15795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.481778][T15795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.570509][T15888] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3163'. [ 680.636483][T15893] netlink: 'syz.4.3163': attribute type 2 has an invalid length. [ 680.756973][T15795] device hsr_slave_0 entered promiscuous mode [ 680.796357][T15795] device hsr_slave_1 entered promiscuous mode [ 680.823978][T15795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 680.833417][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 680.857495][T15795] Cannot create hsr debugfs directory [ 682.649147][T15950] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 682.913464][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 683.112280][T15950] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 683.133883][T15953] netlink: 'syz.2.3178': attribute type 10 has an invalid length. [ 683.166007][T15952] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 683.279530][T15954] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 683.620532][T15958] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 683.749631][ T8729] device hsr_slave_0 left promiscuous mode [ 683.809871][ T8729] device hsr_slave_1 left promiscuous mode [ 683.827106][ T8729] bridge0: port 2(hsr0) entered disabled state [ 683.872183][ T8729] device bridge_slave_0 left promiscuous mode [ 683.897260][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.039579][ T8729] device veth1_macvtap left promiscuous mode [ 684.053894][ T8729] device veth0_macvtap left promiscuous mode [ 684.071992][T15978] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 684.076504][ T8729] device veth1_vlan left promiscuous mode [ 684.995251][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 685.716102][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.722561][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.088993][ T8729] team0 (unregistering): Port device team_slave_1 removed [ 686.171238][ T8729] team0 (unregistering): Port device team_slave_0 removed [ 686.234675][ T8729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.314428][ T8729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.397877][ T8729] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 686.724642][ T8729] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 686.804881][ T8729] bond0 (unregistering): Released all slaves [ 686.935104][T15970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.950801][T15970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.965105][T15970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.980028][T15970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.101314][T15978] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3183'. [ 687.112782][T15978] device hsr_slave_0 left promiscuous mode [ 687.128478][T15978] device hsr_slave_1 left promiscuous mode [ 687.398529][T15795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 687.468654][T15795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 687.540080][T15795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 687.613296][T15795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 688.106830][T15795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.164678][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.200281][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.236109][T15795] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.395824][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.409069][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.430230][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.437499][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.673223][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 688.682269][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.756003][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.788095][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.795411][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.842064][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.879675][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.970655][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 688.985751][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.093108][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.114657][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.148384][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.164447][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.194598][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.212027][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.245886][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.279615][T15795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.798144][T16066] netlink: 'syz.4.3204': attribute type 10 has an invalid length. [ 689.837603][T16066] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3204'. [ 689.892508][T16072] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3205'. [ 690.570588][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.585235][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.650237][T15795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.121735][T16105] netlink: 'syz.2.3212': attribute type 29 has an invalid length. [ 691.188721][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 691.229862][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 691.270669][T16105] netlink: 'syz.2.3212': attribute type 29 has an invalid length. [ 691.328909][T16107] netlink: 'syz.2.3212': attribute type 29 has an invalid length. [ 691.489740][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 691.514195][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.537927][T15795] device veth0_vlan entered promiscuous mode [ 691.560262][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.586006][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.620391][T15795] device veth1_vlan entered promiscuous mode [ 691.736869][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 691.765656][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.800690][T15795] device veth0_macvtap entered promiscuous mode [ 691.864829][T15795] device veth1_macvtap entered promiscuous mode [ 692.192314][T16126] device syzkaller0 entered promiscuous mode [ 692.350841][T16128] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3218'. [ 692.384470][T16128] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 692.446517][T16128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.963404][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 694.976941][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 694.988183][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 695.013726][T16137] netlink: 'syz.0.3220': attribute type 13 has an invalid length. [ 695.021631][T16137] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.3220'. [ 695.034181][T16138] netlink: 'syz.0.3220': attribute type 25 has an invalid length. [ 695.058547][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.079734][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.100123][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.123185][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.143645][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.200239][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.225011][T15795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.234871][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 695.255422][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 695.286909][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.320197][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.357710][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.379164][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.391225][T15795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.416761][T15795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.479014][T15795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.498945][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 695.510346][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.527788][T15795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.567623][T15795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.576662][T15795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.600989][T15795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.881907][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.903149][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.960725][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 696.986483][ T8730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.009177][ T8730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.043312][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 697.411874][ T4286] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 698.708966][T16201] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.735108][T16189] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3234'. [ 698.766641][T16189] netlink: zone id is out of range [ 698.774027][T16189] netlink: zone id is out of range [ 698.799383][T16189] netlink: zone id is out of range [ 698.829274][T16189] netlink: zone id is out of range [ 698.857993][T16189] netlink: zone id is out of range [ 698.890446][T16189] netlink: get zone limit has 8 unknown bytes [ 698.954833][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 698.978177][T16212] syz.1.3238 (16212) used obsolete PPPIOCDETACH ioctl [ 699.217053][T16217] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3240'. [ 699.254788][T16218] netlink: 'syz.3.3240': attribute type 3 has an invalid length. [ 699.262609][T16218] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3240'. [ 700.768800][ T8729] wlan1: Trigger new scan to find an IBSS to join [ 701.635445][T16250] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3248'. [ 702.335569][T16271] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3251'. [ 703.600094][T16314] sock: sock_timestamping_bind_phc: sock not bind to device [ 703.636016][T16316] netlink: 'syz.3.3268': attribute type 3 has an invalid length. [ 703.763490][T16316] netlink: 'syz.3.3268': attribute type 304 has an invalid length. [ 704.171307][T16332] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.3272'. [ 704.331597][T16340] netlink: 'syz.1.3273': attribute type 10 has an invalid length. [ 704.353552][T16340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3273'. [ 704.362598][T16340] device dummy0 entered promiscuous mode [ 704.535075][T16340] bridge0: port 3(dummy0) entered blocking state [ 704.541772][T16340] bridge0: port 3(dummy0) entered disabled state [ 704.626403][T16340] bridge0: port 3(dummy0) entered blocking state [ 704.633538][T16340] bridge0: port 3(dummy0) entered forwarding state [ 704.845164][ T8730] wlan1: Trigger new scan to find an IBSS to join [ 705.046964][T16351] netlink: 'syz.2.3277': attribute type 11 has an invalid length. [ 705.114263][T16351] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3277'. [ 705.658970][T16358] netlink: 'syz.2.3280': attribute type 1 has an invalid length. [ 705.716408][T16358] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3280'. [ 705.907472][ T8730] wlan1: Creating new IBSS network, BSSID 2a:15:1f:4c:51:d8 [ 706.170856][T16382] sock: sock_timestamping_bind_phc: sock not bind to device [ 706.451707][T16381] netlink: 'syz.0.3288': attribute type 2 has an invalid length. [ 706.543631][T16381] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3288'. [ 706.810118][T16386] netlink: 'syz.1.3289': attribute type 21 has an invalid length. [ 706.853230][T16386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3289'. [ 707.061116][T16400] €Â0: renamed from pim6reg1 [ 707.210690][T16402] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3292'. [ 707.505114][T16414] netlink: 'syz.4.3297': attribute type 10 has an invalid length. [ 707.821414][T16414] team0: Port device geneve1 added [ 707.900246][T16422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 707.977267][T16422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.067844][T16425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 708.110009][T16425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.701978][T16434] netlink: 'syz.1.3301': attribute type 2 has an invalid length. [ 708.710623][T16434] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3301'. [ 708.954962][T16441] sctp: [Deprecated]: syz.2.3303 (pid 16441) Use of int in maxseg socket option. [ 708.954962][T16441] Use struct sctp_assoc_value instead [ 710.168017][T16465] netlink: 'syz.2.3310': attribute type 21 has an invalid length. [ 710.210956][T16468] netlink: 'syz.2.3310': attribute type 49 has an invalid length. [ 710.262136][T16467] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 710.294769][T16467] dvmrp1: linktype set to 768 [ 710.321993][T16471] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3314'. [ 710.401284][T16471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.471575][T16471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.545118][T16471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.583309][T16471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.612297][T16471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.627977][T16471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.657119][T16471] device batadv_slave_1 entered promiscuous mode [ 711.433548][T16495] netlink: 'syz.3.3319': attribute type 2 has an invalid length. [ 711.495225][T16495] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3319'. [ 711.598259][T16487] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3316'. [ 711.741094][T16510] sock: sock_timestamping_bind_phc: sock not bind to device [ 713.185135][T16507] netlink: 'syz.2.3316': attribute type 10 has an invalid length. [ 713.204656][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.221531][T16507] device bridge_slave_1 left promiscuous mode [ 713.228847][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.280830][T16507] team0: Port device bridge_slave_1 added [ 715.131661][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 715.608944][T16589] device syzkaller0 entered promiscuous mode [ 715.814534][T16597] bridge0: port 3(hsr0) entered disabled state [ 715.970366][T16597] device bridge_slave_1 left promiscuous mode [ 715.995938][T16597] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.016227][T16597] device bridge_slave_0 left promiscuous mode [ 716.035765][T16597] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.923155][T16608] netlink: 'syz.4.3354': attribute type 10 has an invalid length. [ 721.931203][T16613] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3356'. [ 722.007228][T16613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.035290][T16613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.055978][T16613] bond0 (unregistering): Released all slaves [ 725.240573][T16665] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3370'. [ 725.814895][T16686] netlink: 'syz.0.3377': attribute type 10 has an invalid length. [ 725.850274][T16686] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.3377'. [ 726.494872][T16692] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3382'. [ 726.528735][T16692] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 726.570842][T16692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.595029][T16702] device macsec0 entered promiscuous mode [ 727.078604][T16709] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 727.171521][T16715] netlink: 'syz.2.3388': attribute type 11 has an invalid length. [ 727.194938][T16715] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3388'. [ 727.220016][T16714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.238929][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.345483][T16709] device bridge_slave_1 left promiscuous mode [ 727.371400][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.779763][T16722] netlink: 'syz.1.3391': attribute type 10 has an invalid length. [ 728.025223][T16735] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3394'. [ 728.127729][T16735] netlink: 'syz.4.3394': attribute type 3 has an invalid length. [ 728.141537][T16735] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3394'. [ 728.872686][T16767] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.3407'. [ 729.583971][T16779] netlink: 'syz.3.3411': attribute type 21 has an invalid length. [ 729.636785][T16779] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 729.664850][T16779] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3411'. [ 729.780299][T16774] netlink: 'syz.1.3410': attribute type 13 has an invalid length. [ 729.857973][T16774] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3410'. [ 730.107299][T16774] erspan0: refused to change device tx_queue_len [ 730.203738][T16783] netlink: 'syz.3.3411': attribute type 21 has an invalid length. [ 730.242338][T16783] netlink: 'syz.3.3411': attribute type 1 has an invalid length. [ 730.265416][T16783] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3411'. [ 730.613865][T16798] syz.4.3417[16798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.613974][T16798] syz.4.3417[16798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 730.655700][T16796] delete_channel: no stack [ 732.359355][T16869] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3437'. [ 732.396029][T16867] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3435'. [ 732.545627][T16867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.594155][T16867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.619687][T16867] bond0 (unregistering): Released all slaves [ 733.347562][T16891] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3444'. [ 733.873183][ T4290] Bluetooth: hci5: command 0x0406 tx timeout [ 734.680461][ T4290] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 734.741273][T16929] delete_channel: no stack [ 734.747648][T16929] delete_channel: no stack [ 734.901759][T16936] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.3460'. [ 734.947991][T16936] openvswitch: netlink: Message has 48126 unknown bytes. [ 735.155787][T16952] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3465'. [ 735.264296][T16958] netlink: 'syz.0.3467': attribute type 2 has an invalid length. [ 735.389876][T16965] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.3469'. [ 735.517586][T16966] device syzkaller0 entered promiscuous mode [ 736.045665][T10401] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 736.996903][T17003] netlink: 'syz.1.3483': attribute type 22 has an invalid length. [ 737.073713][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 738.427202][T17064] netlink: 'syz.3.3499': attribute type 39 has an invalid length. [ 738.473678][T17064] device macvlan0 entered promiscuous mode [ 738.770576][T17055] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3497'. [ 738.989727][T17076] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3504'. [ 739.367031][T17081] device batadv0 entered promiscuous mode [ 739.441116][T17083] device bond_slave_1 entered promiscuous mode [ 739.792638][T17090] netlink: 'syz.3.3510': attribute type 6 has an invalid length. [ 739.847955][T17090] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3510'. [ 740.125492][ T4290] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 742.198586][ T4290] Bluetooth: hci4: command 0x2016 tx timeout [ 742.780536][T17097] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 742.811619][T17097] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 742.825494][T17097] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 745.483862][T17133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3521'. [ 745.493749][T17136] netlink: 'syz.2.3522': attribute type 10 has an invalid length. [ 745.641068][T17136] team0: Port device geneve1 added [ 745.975492][T17143] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3523'. [ 746.224320][T17150] ------------[ cut here ]------------ [ 746.230699][T17150] WARNING: CPU: 1 PID: 17150 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 746.241200][T17150] Modules linked in: [ 746.245200][T17150] CPU: 1 PID: 17150 Comm: syz.2.3526 Not tainted syzkaller #0 [ 746.255530][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.265961][T17150] RIP: 0010:perf_pending_task+0x353/0x480 [ 746.271769][T17150] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 746.291546][T17150] RSP: 0018:ffffc900049d78e8 EFLAGS: 00010293 [ 746.297728][T17150] RAX: ffffffff81a7add3 RBX: ffff888056a6a258 RCX: ffff88802ef71e00 [ 746.305800][T17150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 746.313867][T17150] RBP: ffff888056a6a020 R08: ffff88802ef72803 R09: 1ffff11005dee500 [ 746.321906][T17150] R10: dffffc0000000000 R11: ffffed1005dee501 R12: ffff88802ef71e00 [ 746.329984][T17150] R13: ffff888055d35960 R14: 0000000000000000 R15: 1ffff1100ad4d404 [ 746.338060][T17150] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 746.347129][T17150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.353926][T17150] CR2: 000000110c2d873a CR3: 000000003de94000 CR4: 00000000003506e0 [ 746.361992][T17150] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 746.370613][T17150] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 746.378692][T17150] Call Trace: [ 746.382037][T17150] [ 746.385115][T17150] task_work_run+0x1d0/0x260 [ 746.389891][T17150] ? task_work_cancel+0x220/0x220 [ 746.396119][T17150] ? do_raw_spin_unlock+0x11d/0x230 [ 746.401610][T17150] do_exit+0x9d5/0x2570 [ 746.405990][T17150] ? __sched_text_start+0x8/0x8 [ 746.410927][T17150] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 746.417349][T17150] ? put_task_struct+0x80/0x80 [ 746.423333][T17150] ? preempt_schedule_common+0xa5/0xd0 [ 746.429670][T17150] ? preempt_schedule+0xbc/0xd0 [ 746.434774][T17150] ? schedule_preempt_disabled+0x20/0x20 [ 746.440764][T17150] do_group_exit+0x229/0x2e0 [ 746.445488][T17150] get_signal+0x1259/0x1340 [ 746.450079][T17150] arch_do_signal_or_restart+0xc4/0x1310 [ 746.455975][T17150] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 746.462497][T17150] ? do_futex+0x310/0x320 [ 746.467175][T17150] ? get_sigframe_size+0x10/0x10 [ 746.472184][T17150] ? __ia32_sys_get_robust_list+0x100/0x100 [ 746.478392][T17150] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 746.484681][T17150] ? exit_to_user_mode_loop+0x3b/0x110 [ 746.490333][T17150] exit_to_user_mode_loop+0x70/0x110 [ 746.495766][T17150] exit_to_user_mode_prepare+0xee/0x180 [ 746.501480][T17150] syscall_exit_to_user_mode+0x16/0x40 [ 746.507182][T17150] do_syscall_64+0x58/0xa0 [ 746.511673][T17150] ? clear_bhb_loop+0x60/0xb0 [ 746.516493][T17150] ? clear_bhb_loop+0x60/0xb0 [ 746.521274][T17150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.527447][T17150] RIP: 0033:0x7f1f1cf9e019 [ 746.531923][T17150] Code: Unable to access opcode bytes at 0x7f1f1cf9dfef. [ 746.539112][T17150] RSP: 002b:00007f1f1b1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 746.547635][T17150] RAX: fffffffffffffe00 RBX: 00007f1f1d225fa8 RCX: 00007f1f1cf9e019 [ 746.556331][T17150] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f1d225fa8 [ 746.564419][T17150] RBP: 00007f1f1d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 746.573387][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.581424][T17150] R13: 00007f1f1d226038 R14: 00007ffe34442ce0 R15: 00007ffe34442dc8 [ 746.589519][T17150] [ 746.592612][T17150] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 746.599931][T17150] CPU: 1 PID: 17150 Comm: syz.2.3526 Not tainted syzkaller #0 [ 746.607452][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 746.617984][T17150] Call Trace: [ 746.621319][T17150] [ 746.624272][T17150] dump_stack_lvl+0x188/0x24e [ 746.628986][T17150] ? memcpy+0x3c/0x60 [ 746.633264][T17150] ? show_regs_print_info+0x12/0x12 [ 746.638522][T17150] ? load_image+0x410/0x410 [ 746.643115][T17150] panic+0x2d3/0x710 [ 746.647114][T17150] ? bpf_jit_dump+0xd0/0xd0 [ 746.651664][T17150] __warn+0x2f8/0x4f0 [ 746.655676][T17150] ? perf_pending_task+0x353/0x480 [ 746.661012][T17150] ? perf_pending_task+0x353/0x480 [ 746.666257][T17150] report_bug+0x2ba/0x4f0 [ 746.670686][T17150] ? perf_pending_task+0x353/0x480 [ 746.675947][T17150] handle_bug+0x3a/0x70 [ 746.680181][T17150] exc_invalid_op+0x16/0x40 [ 746.684733][T17150] asm_exc_invalid_op+0x16/0x20 [ 746.689624][T17150] RIP: 0010:perf_pending_task+0x353/0x480 [ 746.695657][T17150] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 746.716542][T17150] RSP: 0018:ffffc900049d78e8 EFLAGS: 00010293 [ 746.722705][T17150] RAX: ffffffff81a7add3 RBX: ffff888056a6a258 RCX: ffff88802ef71e00 [ 746.730718][T17150] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 746.738714][T17150] RBP: ffff888056a6a020 R08: ffff88802ef72803 R09: 1ffff11005dee500 [ 746.746712][T17150] R10: dffffc0000000000 R11: ffffed1005dee501 R12: ffff88802ef71e00 [ 746.754710][T17150] R13: ffff888055d35960 R14: 0000000000000000 R15: 1ffff1100ad4d404 [ 746.762747][T17150] ? perf_pending_task+0x353/0x480 [ 746.768288][T17150] ? perf_pending_task+0x353/0x480 [ 746.773454][T17150] task_work_run+0x1d0/0x260 [ 746.778087][T17150] ? task_work_cancel+0x220/0x220 [ 746.783186][T17150] ? do_raw_spin_unlock+0x11d/0x230 [ 746.788628][T17150] do_exit+0x9d5/0x2570 [ 746.792917][T17150] ? __sched_text_start+0x8/0x8 [ 746.797811][T17150] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 746.803869][T17150] ? put_task_struct+0x80/0x80 [ 746.808761][T17150] ? preempt_schedule_common+0xa5/0xd0 [ 746.814260][T17150] ? preempt_schedule+0xbc/0xd0 [ 746.819323][T17150] ? schedule_preempt_disabled+0x20/0x20 [ 746.825040][T17150] do_group_exit+0x229/0x2e0 [ 746.829763][T17150] get_signal+0x1259/0x1340 [ 746.834347][T17150] arch_do_signal_or_restart+0xc4/0x1310 [ 746.840047][T17150] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 746.846359][T17150] ? do_futex+0x310/0x320 [ 746.850728][T17150] ? get_sigframe_size+0x10/0x10 [ 746.855727][T17150] ? __ia32_sys_get_robust_list+0x100/0x100 [ 746.861750][T17150] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 746.868438][T17150] ? exit_to_user_mode_loop+0x3b/0x110 [ 746.874581][T17150] exit_to_user_mode_loop+0x70/0x110 [ 746.880005][T17150] exit_to_user_mode_prepare+0xee/0x180 [ 746.885626][T17150] syscall_exit_to_user_mode+0x16/0x40 [ 746.891160][T17150] do_syscall_64+0x58/0xa0 [ 746.895669][T17150] ? clear_bhb_loop+0x60/0xb0 [ 746.900395][T17150] ? clear_bhb_loop+0x60/0xb0 [ 746.905117][T17150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.911140][T17150] RIP: 0033:0x7f1f1cf9e019 [ 746.915588][T17150] Code: Unable to access opcode bytes at 0x7f1f1cf9dfef. [ 746.922723][T17150] RSP: 002b:00007f1f1b1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 746.931209][T17150] RAX: fffffffffffffe00 RBX: 00007f1f1d225fa8 RCX: 00007f1f1cf9e019 [ 746.939208][T17150] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f1d225fa8 [ 746.947207][T17150] RBP: 00007f1f1d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 746.955225][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.963215][T17150] R13: 00007f1f1d226038 R14: 00007ffe34442ce0 R15: 00007ffe34442dc8 [ 746.971226][T17150] [ 746.974864][T17150] Kernel Offset: disabled [ 746.979205][T17150] Rebooting in 86400 seconds..