last executing test programs: 44.078154435s ago: executing program 1 (id=3380): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x2d, 0x0, 0x2a, 0x1}]}, {0x0, [0x30, 0x0, 0x5f, 0x5f, 0x5f, 0x2e, 0x0]}}, &(0x7f00000006c0)=""/73, 0x3d, 0x49, 0x1, 0x5, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0x2, '\x00', r5, r6, 0x4, 0x3, 0x3}, 0x50) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0x11, 0x2, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 43.735878977s ago: executing program 1 (id=3382): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x5f, 0xe]}}, &(0x7f0000000480)=""/171, 0x29, 0xab, 0x1}, 0x28) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000140)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @link_local}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x1f, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x35}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x7, 0x1, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffffffffff5}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 43.421837386s ago: executing program 1 (id=3384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800002c1d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e0000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) (async) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x68}, 0x0) 5.646297661s ago: executing program 4 (id=3533): socket$kcm(0x29, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000c400"], 0x0, 0x1a}, 0x28) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84d61, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7b3, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x49, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x42, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe6}, 0x100664, 0xc78, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009", 0x1b}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x5, 0x0) 5.646042501s ago: executing program 0 (id=3534): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000000b01000000000000b00000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.468865491s ago: executing program 3 (id=3536): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x109008, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff030703000000b89e08f586dd", 0x0, 0x402f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x40, 0x5, 0x2d, 0x5, 0x0, 0x52d99d19, 0x3800, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x0, 0x1}, 0x1109, 0x9, 0x0, 0x7, 0x6, 0x101, 0x2, 0x0, 0x91, 0x0, 0xff}, r2, 0xd, r0, 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)=r1}, 0x20) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, 0x0, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = socket$kcm(0x2, 0x5, 0x84) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000140)="aa6e25806dfeab10143dbabe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @rand_addr=0x64010102}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000440)="815f", 0x2}], 0x1}, 0x4000800) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) sendmsg$inet(r10, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) (async) sendmsg$inet(r10, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) (async, rerun: 32) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r10, 0x84, 0x11, &(0x7f0000000000)=r13, 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000001001811000015000000000000004aff2e300314abecc36c19acb067", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x18, &(0x7f00000003c0)=""/24, 0x41000, 0x1, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000440)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, 0x0, 0x5, &(0x7f00000008c0)=[r8, r9, r13, r14], &(0x7f0000000900)=[{0x3, 0x3, 0x3, 0xb}, {0x3, 0x1, 0xe, 0x2}, {0x2, 0x2, 0x10, 0x2}, {0x4, 0x4, 0x10}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x5d}, 0x94) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0xff, 0x3, 0x5, 0x9, 0x0, 0x31bf, 0x80000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0x6}, 0x440, 0x7, 0x9, 0x8, 0x3, 0x10, 0x8, 0x0, 0x1000, 0x0, 0x9}, r15, 0x8, r3, 0x1) 5.406282847s ago: executing program 4 (id=3537): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpu.stat\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13, 0x0, 0x10010, 0x80000001, 0x840, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x32}, @tail_call]}, &(0x7f0000000280)='GPL\x00', 0x10000, 0x1000, &(0x7f0000001fc0)=""/4096, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a890d26bdbfc7b2, r2, 0x8, &(0x7f00000006c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x10, 0x4, 0xf}, 0x10, 0xffffffffffffffff, r3, 0x8, &(0x7f0000000800)=[0x1, r5, 0x1, r6], &(0x7f0000000840)=[{0x3, 0x3, 0xf, 0x9}, {0x2, 0x1, 0x2, 0x9}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x3, 0x0, 0x3}, {0x3, 0x5, 0xd, 0x1}, {0x0, 0x3, 0xc, 0x3}, {0x2, 0x5, 0x10}, {0x4, 0x2, 0x8, 0xb}], 0x10, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e700"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r9 = socket$kcm(0x2a, 0x2, 0x0) socketpair(0x28, 0x6, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x140803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r9, 0x0, 0x40002182) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.405929197s ago: executing program 0 (id=3538): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x80, 0x6, 0x7, 0x1, 0x0, 0x8000000000000001, 0x40, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x7fff}, 0x110004, 0x9, 0x6, 0x2, 0x27a, 0x4, 0x4, 0x0, 0x9a31, 0x0, 0x8001}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000400)='\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x80000001}, 0x8) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000580)={r0, 0x0, 0x5f, 0x0, &(0x7f0000000480)="1c989065569cfcb50e18758a468eec25f5de148809acdafb308a262c3a5e4a4a683c2c16c8e5331e161479734f0ef28b83a9be4653cf4ca6273328c696e0aeabab8646a84527223555f0576c707bcf1ff5f184e13ffa1b6f6557feb4969c1f", 0x0, 0xe, 0x0, 0x7a, 0x0, &(0x7f0000000500)="b702fbcbd872bca8732daca2d1bfcd63dfe94df72377f1b52453ead50129e4052271399aa2242a3c9cbf5ad0de35b43962c94e04d6a3d4a8a7b1e419a7a92b40947667adce39d3d121a47d9a83903c7813c180a367eab15f6ec60cf6c2210700dc09918d1333b520490d64bb237de2a2eb825bb2f7af55afed02", 0x0, 0x2, 0x0, 0x5}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000600)='\x00') r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file1\x00', 0x0, 0x18, r0}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x20081, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000700)=r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r3, 0x13, 0x0, 0xb997, &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], 0x0}, 0x40) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000008c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@cgroup=r7, r0, 0x1e, 0x4, r0, @void, @value=r8, @void, @void, r6}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)) openat$cgroup_int(r8, &(0x7f0000000980)='cgroup.clone_children\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x125480, 0x0) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000a00)=r8) r10 = perf_event_open$cgroup(&(0x7f0000000a40)={0x5, 0x80, 0x6, 0xf9, 0xfb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x2, @perf_config_ext={0x80, 0x10}, 0x20, 0x100, 0xff, 0x3, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, r8, 0xf, r2, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x31d0) r11 = openat$cgroup_ro(r5, &(0x7f0000000ac0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x5) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000b40)={0x7, &(0x7f0000000b00)=[{0x0, 0xb, 0x1, 0x1}, {0x7, 0x6, 0x7, 0xf}, {0xd, 0x83, 0x0, 0xfffffe95}, {0x5, 0x6, 0xb, 0x8660}, {0x8000, 0x40, 0xe2, 0x7f}, {0x1, 0x0, 0x8, 0xff}, {0x800, 0x8, 0x0, 0xb05}]}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000bc0)={0x286, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@map=r3, r11, 0x21, 0x2024, 0x0, @void, @void, @value=r13, @void, r6}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000c00)={'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) openat$cgroup_subtree(r7, &(0x7f0000000c40), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000c80)={r12, r5}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000cc0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x1, 0x0, 0x1, 0x7, 0xa, 0x30, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc000000, 0x0, 0x0, 0x0, 0x8d3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0xa, 0xb, 0x20, 0x10}, @exit], &(0x7f0000000d80)='syzkaller\x00', 0x8, 0x79, &(0x7f0000000dc0)=""/121, 0x40f00, 0x46, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x1, 0x8, 0x6, 0xffff}, 0x10, r1, 0x0, 0x3, &(0x7f0000001040)=[r8, r8, 0x1, r3, 0xffffffffffffffff], &(0x7f0000001080)=[{0x3, 0x5, 0xb, 0x1}, {0x1, 0x4, 0x1, 0x4}, {0x1, 0x1, 0x2, 0x4}], 0x10, 0xf}, 0x94) 5.249554251s ago: executing program 2 (id=3539): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa2a1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d80000001400810d4e81f782db44b9040a11080211140000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9e403c629394d5aa000000000003897827792", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200)=r10, 0x4) socket$kcm(0x2, 0x3, 0x2) 5.179672955s ago: executing program 3 (id=3540): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x36, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305828, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0600000004000000080000000f0000", @ANYRES32=0x0], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000640)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r6}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) 3.52627725s ago: executing program 0 (id=3541): r0 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x890c, &(0x7f0000000000)={'pimreg0\x00', @random="0200"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000600)={r7}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f0000000340)=0x7db) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000740)="a9517af231", &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random}) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x20000000) 3.52539791s ago: executing program 2 (id=3542): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r2}, 0x38) syz_clone(0x9040000, 0x0, 0x21, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x31) 3.470236087s ago: executing program 4 (id=3543): mkdir(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x29, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x4845) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.352875151s ago: executing program 3 (id=3544): r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x3, 0x5, 0x2, 0x2080, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="540da555969b44f6d7e9ac35467f8389f3a04e91d9846dead8a616fa6d861659e5b999f8d67a01eb9d303de5495191bf7c17b5930948601460edada3cc0f92563a9c932e5ffd30abc423d6ca25739966f07388c6f144041be0f38cc4f72e1f066c6ef3f8756cd3bd8646b134e1e2649ee259f391b98a8025e8179899771e6920cddff999f17e7a17a08b7ab60c02b2ab35746ef0ca36ae6ce4b91e68597059788215cdb3a61fb683ee50b89dc3f3ab8f12845ee835a31cc3b91397f48160c083e25c5a1c3f79df652f597a506fe3793a6ecb49c9be", 0xd5}, {&(0x7f0000000300)="3b11ce8fc36b9a038a443ea28df13d64b575e02c5bb4845689a05032f7ae7d3c94ce97fa4161a81aaae2cc5a3380b4f27f0e6822e1c917da0c9a87c37274b61ad9e3f3980e0d3030014b277ed6b171f2ba28d32b47efe7ea9c6f141646a0f6602c4bbf6586706ee3dfe93501ce", 0x6d}, {&(0x7f0000000380)="782115236f2d9344a051b4cafe73e8d53b4089e9d3d504d220e87b008981ab2f9447105d461c8080bb67e7f0cfc96ca8", 0x30}, {&(0x7f00000003c0)="b63c88241fbbeb3e9a25c0036ccd00e37382231c9d3087187ac818ff1285d9f65575c6a92f1e8f72", 0x28}, {&(0x7f0000000400)="943d082cde3e0f67046e25ed2ed736fbd00640af5158dacc698f1de8ac43bb0f595a97602d26def890", 0x29}, {&(0x7f0000000440)="4483e84623e40c5ab178121807ed459415d5268ec08d20248b5607cf4585fcda23f135ab68704d4d35eeddc9486d08a49cb5a34e56e53a912953cf5059c3e9b8547b1e7aaff5d9514abb951adc6c43fa0016eef3df1cdee9050536c1b4be57f167c30c4bf570b17a", 0x68}, {&(0x7f00000004c0)="1e997c47aa36e07b73cc5b26508c711e00e1ffebddd660b92fd9838b2009ca8db703e85146a74b654369c0bee776cf69575ef7726f795585f76c84d5ab427ee35c75653a5560bd6bd0b40ad9638f7108cd47a036717f47e286d4635a7aa3af83147a5739c4b57777f8c4c3365ba31cc90e2d9aa2a75563f77244753095f0d56d2f6e71dc19e6a3440ab8574cf2e4323a3f6b4be8", 0x94}], 0x7, 0x0, 0x0, 0x40814}, 0x40040) sendmsg$kcm(r0, &(0x7f0000002000)={&(0x7f0000000640)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000006c0)="c910ec2f56c005ebf8e288585af1668dd158bf1110f8d186abb48fd33b1f43d593f5fedfde4f53a2ba9e0e554a378cc4bf7443601a2dac79c970d0c43f029593f5b54aafabe591a702aa1874231d97dd2e8ef9af602abe4acdd3c61b8be2b83709e06d215892f343eb93a4910f83d90919bf1c5d43a3b28084dd998760439aee5007f6e926ada9d7896dcb4612d5", 0x8e}, {&(0x7f0000000780)="5e6231e15598c816e177b1278a6c724dd563b64d856f9e12dd17591aa8ee8eb4eb60cdff03c04577f1cde04e831ea7dfe5a3a1d9bd41f236f1edb02ad8c409b56cb1b3de0175a920ba5e5e273726ab9f26d0a8024155a47bc860e54ae55788cb4e0175e39d66dc868524f4e3cdd467f208a11203d0257d9c4ccbcf6db5c9a2c4c4e1f27006125ec6c44b1776439ea948e1b119a97026f764a445eee8a464c7bdda19e2ec3801cc", 0xa7}, {&(0x7f0000000840)="fc9adf4c62eb4d35d0813eb9038098b655c1192686c8a01dbbfcf91a8084ccf2857cc7b94c807ce5deeaf15412191e2c8a0444373456848f63faaaddaed8066f11d40a83eff80c9f383b2da8b8b6469258de51ab5efb9bfc669ba1549f6ba806478ebc0c2fe81a2abe5831e209e717c3779c0460cc2c7daee7416d8e392bc9e0ffaa604f3af4f854208ce7798faece50c553bdfc732cd65227768500bfd6926752eb7f398175", 0xa6}, {&(0x7f0000000900)="8c4190e6b1ee02ff9498b76e8e25fb33027de505279042b81f0e9bceffc312c4ac3e4182a594b2be968b22385e654d174399c1faebccba3cab869b6ce7ce7d383f63ea4498052f97ff87be04778415f28bd96acb3bacbda32df6a79ac91f38de527249bf477997e45e4e642c6ec047da17c0cb9ecae1df7ef08ba7ef97b5d0747c02e413620c244d77e3548ba5408df6d7bb77ffc7a9f268aa4819cb2954636eb34e4c974de75bb94860cf42643b6dba66e8a67128870bd15b73e4", 0xbb}, {&(0x7f00000009c0)="4aa74c2d495649831c296425993abde1ca8ae8167bb0ddae324e59543c6aad9a9e077934b07acdd05bf083846a68fa115598c33f68fe6c4855b008eeac4d7a23c079d5205c8a", 0x46}, {&(0x7f0000000a40)="79273aece0dfd7b80211240aa7c8299f2989010b0543f1db48b9721bf7e23fe95d600d9d50b95f9112c86c83b87472750042b432021d010626d5848bf8ecd87de4156f9051d998815b39b40c0bfff76356ce26325d2a472c1834e17de6939c910788857e72e8cb951b7bb84fd0456b6d7bb132b5573510d34bab3d3e67eb95b04d33b92d6cb478a7417b8e60aad8ae249b90158d9d6c575a3667fdb3dca30c97db0d0f0fd7a5423750a7b41b016af4e3f69995c3bb8f9a0ceef820eb2609dedccceb81faad41310147a167adcd223c0999f11e7219b6a3c0b4", 0xd9}, {&(0x7f0000000b40)="95ce0a393793908892ee3dfd99b256e389803de12ffb06746275994a91c56cf71e45fea03401b44ca7", 0x29}], 0x7, &(0x7f0000000c00)=[{0x48, 0x111, 0x9, "3469d4fa0a951033f32ef2be8ba03b2deace3882f1d81cb548ab47c1c33f94beb04892480e7f1efa42fb3286c438c9be3e285fd970"}, {0x1010, 0x102, 0x2, "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"}, {0xf8, 0x102, 0xfbc, "67b66b9ba8edc192ba2cb6e480a4a9fdb08423f9528ad9189d8817c5355fc794544c01c011ca5b3dcc2838dff864aff99cf556b2758689134473f67d6f27a87482d178c398b9e8b8bb1c190c5f0b2b0c3a99bc64f4a64e8a5efae4d3bf912a80f6d90613d9768568e46e1c532cb19b9526467c410e79b91f56babe818ceae45bdd115fd81529c4f65ef8f5c62cb9ee2cae1dfeea33efe8f73ca0a99da29ce7a49ffc2ef5c508a97fc760d467ef778a11d1846a85226943ee4fa5ce210db8f57b550b0952beecdd826d2290f3b2a909dfb6959542aa95a1385b3cf1f81c171cda18311f036b"}, {0x48, 0xff, 0x8, "c6e0912d4c7f8dac00b8c268d918ee2d90cf509a8eb43faa9287ee899c01361e61f8f85ed9307243d5b5f755fc215e05bf3886abec9a72"}, {0x30, 0x1, 0x86, "7a4dbb60c4597da3861a9f5a22138fa4b2b88c876d611d0ee7cd73e0"}, {0x90, 0x101, 0x6, "963bbe696001b7095d71c663065bd3947ba0b3225d83eae876c0514005ad9bc325fe0b79dfe4d35b71dcf158ab92425baefd8be4c3d5e7448005eedca93a3a9230a10eccdd16ab9de7d9e044ada1602989b1e5fab98d4034d366bfd84e907a975986ac63ef4c3589895b5ab5a620ac856ba1c2a223d75bd86edc82c3ab3b3d73"}, {0x28, 0x117, 0xfffffff9, "31f2161dd80e8125a9d1e0304324f25eebf6dc"}, {0xc8, 0x10c, 0x8, "600c980ad2e72c2e47de65344714c8b06527ebc51f797c67ab917ab303bf48a1fa38f66e0c95a38b36dfafd6d6afb622660ceeac0969009175006cd424472e25f3e63dd52b6ae53e94521e8cfd8756af70a05894ef1fc1b2da96f3255fda1ae6f87897b09f152994ec438c5a5441e3750e4f7bcb90325c10f4ff231e94b443b38c7a79e5a5ff721f9a00d0915a59e58421644e2901690422805d5c876ea12c38c10bf5b59946be3cdca889410b52eb7237db298161"}, {0x60, 0x111, 0x1000, "2df4a2bd2b32eeacf3e0315aae43a8b2147428ad9769c77ed302fbed849d653b7ab87168f76183380be994a0947897079e9db0d38ffdc2770baf1a6fda89af0b85c7c5da6d6641569bfe"}, {0x28, 0x108, 0x2, "8adca88453e7b8f333f14a1e87b7de78c9835c1e4026bc"}], 0x13d0}, 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003200)={&(0x7f0000002040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16d, 0x16d, 0x3, [@enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x7}, {0x6, 0x9}]}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @restrict={0xe}, @struct={0x10, 0x8, 0x0, 0x4, 0x1, 0x7, [{0x2, 0x3, 0x5}, {0x10, 0x2, 0x5}, {0xd, 0x1, 0x4}, {0x8, 0x1, 0xfffffc01}, {0x5, 0x5, 0x80000001}, {0x10, 0x3, 0x4}, {0x6, 0x1, 0x2}, {0x10, 0x3, 0xfff}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x62, 0x2}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x2}]}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x7, 0x8f20}], "cc"}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x2000}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x30, 0x4}, @struct={0xf, 0x8, 0x0, 0x4, 0x0, 0x8, [{0x8, 0x2, 0x6}, {0xc, 0x0, 0x9}, {0xe, 0x0, 0xfffffffa}, {0xa, 0x5, 0xfffffffc}, {0x4, 0x0, 0x9}, {0x3, 0x5, 0x2}, {0xd, 0x2, 0x92}, {0xc, 0x0, 0x4d7}]}]}, {0x0, [0x30]}}, &(0x7f0000002200)=""/4096, 0x18b, 0x1000, 0x1, 0x5, 0x10000, @value=r3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000032c0)={r3, 0x58, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003300)={0x1b, 0x0, 0x0, 0xfff, 0x0, r3, 0x1, '\x00', r7, r6, 0x0, 0x0, 0x1}, 0x50) recvmsg(r2, &(0x7f0000003600)={&(0x7f0000003380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003400)=""/95, 0x5f}, {&(0x7f0000003480)=""/151, 0x97}], 0x2, &(0x7f0000003580)=""/121, 0x79}, 0x20002062) r9 = perf_event_open$cgroup(&(0x7f0000003680)={0x2, 0x80, 0x8, 0xd3, 0x7f, 0x1, 0x0, 0x9, 0x80000, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000003640), 0x2}, 0x10000, 0x7fffffff, 0xfffffeff, 0x9, 0xc20d, 0x703, 0x95fe, 0x0, 0x6a680, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x5) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003980)={0x6, 0x15, &(0x7f0000003700)=@raw=[@generic={0x81, 0xe, 0x0, 0x5, 0x2}, @jmp={0x5, 0x0, 0x2, 0xb, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x724}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000037c0)='GPL\x00', 0x3ff, 0x1, &(0x7f0000003800)=""/1, 0x41100, 0x9, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003840)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003880)={0x5, 0x6, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000038c0)=[r4, r3, r8, r3], &(0x7f0000003900)=[{0x5, 0x2, 0x0, 0x3}, {0x3, 0x4, 0x10, 0x7}, {0x4, 0x4, 0x2}, {0x1, 0x1, 0xa, 0x1}, {0x3, 0x2, 0x8, 0x8}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$ENABLE_STATS(0x20, &(0x7f0000003a40), 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003cc0)=@base={0x8, 0x8, 0xd, 0x5a0, 0x0, r3, 0x5, '\x00', r7, r6, 0x5}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003d40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60, '\x00', 0x0, r6, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003ec0)={0x11, 0xe, &(0x7f0000003a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0xc7}, @jmp={0x5, 0x1, 0xa, 0x5, 0xb, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x1, 0x7, 0x2, 0x6, 0xffffffffffffffff}, @cb_func={0x18, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb84d}, @ldst={0x3, 0x0, 0x1, 0x7, 0x9, 0x18, 0x4}]}, &(0x7f0000003b00)='GPL\x00', 0x2, 0xc1, &(0x7f0000003b40)=""/193, 0x41000, 0x27, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003c40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000003c80)={0x2, 0xd, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000003dc0)=[r4, r8, r3, r4, r8, r11, r12, r4, r4, r3], &(0x7f0000003e00)=[{0x0, 0x3, 0xf, 0x5}, {0x0, 0x4, 0xb, 0xc}, {0x2, 0x4, 0xc, 0x8}, {0x3, 0x4, 0xb, 0x1}, {0x5, 0x5, 0x7, 0x7}, {0x1, 0x4, 0x1, 0xc}, {0x5, 0x1, 0xb}, {0x4, 0x4, 0xc, 0x1}, {0x5, 0x4, 0x10, 0x9}], 0x10, 0xffff}, 0x94) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003f80)='syz0\x00', 0x200002, 0x0) r14 = openat$cgroup_type(r13, &(0x7f0000003fc0), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000004000)='\x1a)\'\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004140)={@fallback=r14, 0x12, 0x0, 0x27e44956, &(0x7f0000004040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000004080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000040c0)=[0x0], &(0x7f0000004100)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004180)={@ifindex=r7, r10, 0x1f, 0x8, r10, @void, @value=r10, @void, @void, r16}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000004480)={&(0x7f00000041c0)="0a32f97cbd3ec47f5fe7064d442ee0e033159ccf5461d0fd736511153bca669029e326c50f381f2992697290637173db90748439a754309861474cc22fe1d92dc4394b25607159ba8e95089f44147f6eb02280dd50fd61261a5f804939f56556a19a5e2bd55c0a", &(0x7f0000004240)=""/126, &(0x7f00000042c0)="4a50e066ae0158f772457f090e9b55c68f1a82d1fd6cc9c07cd5453825101941c00cb3000f9d4d58d0a18b74449ff30149d241d712ce92f3e2f5a987f6faad42d85bde57726c19f0d2362a941adce51b9748f56d8e67f78a462893760f7484d82e156cf065b62e7ef9cb5684086ce50614795025684e6be296f8eefcba495c9b6887438418313f377cf8696137a4ccceb69c896f3f0029", &(0x7f0000004380)="b4dfc131b73356df248e16b1112b8e5d4507dc3b1fe78c683d86e6ca31f242998d5123ad10ae661b7ae702f7bb0abaa70ad7f66fc920878df8975580a00e7b1c2c824aaeb0db0831c643c986c77a544a03744950c3fcedd52f590d7e58c4ceb14b2f086644a04d78b8e5a553d1f395a2badeafd59895a1f6a47b62fdb8784e3d3b9b17cf3c4ac4c4ba240ad1e5c8a174a0a481e4e1d9ae85832056afa2ddfac29dbab1e34291b87742b3c233c06abd226f0d19008514cf218628d1b1b2a1cfec7242444ad655c7848e778ba9b777a7e8497176379cbfbe52be1d517b18140cc081de6ca55180743b9af3e5245ff4861684501223b3", 0xf, r12, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000047c0)={&(0x7f00000044c0)="1a844bb06f2519ad405f4831ae0ed91e3b74f1136f643e219d3c74f63c21562bdadb182f1a76e70150196a66b4b4276073537a46a995d883b462589ed1b415a3ddb75ea7b4703bf83d4544053ed3aaea7a9794f2ddce0845f5ddd3b995cc24b1401ea10e07dda19c0c6b620912be35235040390a087d8719ff9ca40ca9e79f83e8dafe1d24f289f36f2f3256215b0235ac2128f6581d36a6a13400a03f20ddfd3bfb1c37f60e19dd11ee081d756fb5ee828c98cf65b087342a29a825e74ef680dd9a11667049568be35469344ced", &(0x7f00000045c0)=""/129, &(0x7f0000004680)="cc7253cdbb9ed3e8b59834c57e60a69b52b612adc2781742ea2f9e7b4ac0658b2ed094e90797f494be3635e9d51d8c6f52ae4dcbdde6e77343fdc5ef439f5d7ac5dc157e646edd42fc0593e18b207b068dc089a76f081f0bef2b1e1175", &(0x7f0000004700)="b75dfa00339050e65f1d155f043f2130e233051884dde6c9948693d6d495eab487d8fe51aa4e71d26383db8626997e205a1b54ee0f27d01652221d485f51cc082a81c5a393c7751db11d962c931a60c0970114dc99a0aa1f29d669e93199b5074fea36527a37aa86a124d04c86701d16cb88764425faf8ce518b4fe6647f9b6aaf", 0x2, r8}, 0x38) ioctl$TUNSETVNETBE(r15, 0x400454de, &(0x7f0000004800)) socketpair(0x2c, 0x2, 0x8, &(0x7f0000004840)) bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x8, 0x2e, &(0x7f0000004880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6580}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @call={0x85, 0x0, 0x0, 0x1a}, @ldst={0x0, 0x2, 0x6, 0xb, 0x8, 0x1, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@llx}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000004a00)='syzkaller\x00', 0x1, 0x4a, &(0x7f0000004a40)=""/74, 0x40f00, 0x50, '\x00', r7, @cgroup_skb, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004ac0)={0x4, 0x10, 0x7, 0x2}, 0x10, 0xffffffffffffffff, r15, 0x8, &(0x7f0000004b00)=[r12, r15, r12, r11, r12, r4, r12, r8], &(0x7f0000004b40)=[{0x4, 0x2, 0x0, 0x7}, {0x5, 0x3, 0x5, 0xc}, {0x3, 0x5, 0xa, 0x8}, {0x2, 0x5, 0x0, 0xa}, {0x3, 0x2, 0xa, 0xa}, {0x2, 0x1, 0xf, 0x2}, {0x2, 0x5, 0x10, 0x2}, {0x2, 0x3, 0xa, 0xa}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r15, 0x2402, 0x42a8) 3.187264773s ago: executing program 4 (id=3545): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20040000) (async, rerun: 64) r0 = socket$kcm(0x1e, 0x5, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/255, 0xff}], 0x1, &(0x7f0000000480)=""/9, 0x9}, 0x40000010) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x882a, 0x0, 0x0, 0x4, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x36}, 0x10}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0f00ca80fac9eb16b96c0000040000000400000012000000aa86d87aaa625c88042a22935031fe4d6d4c2db799d42e03fc6a6b04000000000000001600fe3c46539825adfa204cf550f14cf8bd45c457e132100e538ba70ec91bd7040af7cd4cf4f02e3852105ede4c0ade8b21f308b305d27a8ff6cf5e21701dd6942bc9a45da64e0fb72ac4b294da3457a57e63b2fe1c1405182fb008d56a8fa918436c21a2fe3c9f102f1bb176b0a045cb55cc4eb3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$kcm(0x2, 0x6, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) 3.17433781s ago: executing program 1 (id=3387): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x58}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}, 0x15) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x58}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}, 0x15) socket$kcm(0x2a, 0x2, 0x0) (async) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8918, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711207000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.964169572s ago: executing program 3 (id=3546): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1}, 0x2100) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000a00000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)='J', 0x1}, {&(0x7f0000000000)="75eb37aa95a82ba88cac1f0884becdd8d6a919ccaf3947866e3c81f1344f785c42148c6ca86f032d", 0x28}], 0x2}, 0x0) 2.873439092s ago: executing program 2 (id=3547): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000000b010000000000ffff0f00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.844528335s ago: executing program 4 (id=3548): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r1, 0x0, 0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0xd4, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000600)="0c932f36fc954edb3ad249d35b55ea33b380efd1fc79863cfae83d3f29ca5c32febf1b7f0f135d7854e8561149a8923a26e4437e2b1dd253ed8b1e5c43d6149a5b494a113ff67d0ed9793e77350ffb2444d0417eeb6d48ceac82afd5931beaa0c63a1057b59f8ad88ecf9fb88df7c03ec61d3d9db5627c7165ea039b1d779f58fa84e80d5a9716d507dc0783ac028bb4686f7adb93f92e0c350672de31572c73213dde154a7277ac89", 0xa9}], 0x1, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xce}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @multicast2}}}], 0x38}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200000000000000000000000000000000000000f4aa7ab43953e577b94c0464b48ed610175f0c31c6ad203a8b86ce27c19c3b437dcaeac6bd8d8c8abee0ec2d00a3238afbfc2f19fea5"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x30, r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040094c72139b0c64f1f0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) openat$cgroup_ro(r0, &(0x7f0000000500)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb5de, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.786604672s ago: executing program 1 (id=3549): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xff, 0x0, 0x3, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x10c21a, 0xac5d, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007912480000000000632a04ff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0xa, 0x0, @private}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffffffff8000}, 0x400}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000012000000000000000000959a2d78cb547ca6cfa3a1ef9a209ec3e98e886c6d9ad2689c65e98f2656f653dc8e596b3482b717a6d016d3ff34", @ANYRES8=r3, @ANYBLOB="c92019ed979ba771153f4a903ba9e38cd34851fa3fe67984d2e2313114c42f399be0168649acea06a0809df83530d09a5a88d4f41f95552fb52ada1c1050d82224100b5e440c9687f97a0446d530395aa9ccc5c84273fd6e2b694b8f312b98c6bd7243f7e596f1ca107401665a105f0762057651b9be08921949232f109b59b5c5d37b249c4ccbc6ca8c7acf46f8d6bb1e082fa57aed848b651c1e3cf31fa08caf773a7e25eff2a485847d71a8bd173048d31e8f956d35", @ANYRESDEC=r1], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x58}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xa, 0x6, 0x40, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x84) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) 2.622228875s ago: executing program 0 (id=3550): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x2, 0x3, 0x2) (async) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14000, 0x0, 0x0, 0x0, 0xcd, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r2, 0xa) (async) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf402d191d195443f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (rerun: 32) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x2, 0x6, 0x8, 0x0, 0x5, 0x840d, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x4, 0x3ff}, 0x20088, 0xe, 0x80, 0x3, 0x2, 0x0, 0x8, 0x0, 0x407, 0x0, 0xd1}, r3, 0x7, 0xffffffffffffffff, 0x3) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 2.617018704s ago: executing program 2 (id=3551): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xff4d, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000000)="2947ccfbab120bb6a8b56c98e1a7ed6ec32a95f5b36c25f8f1fb47a8fd016fe86c485fcfa4c498dcb012f98a823c30a6593f327de820bf8e88ee3a7ca89887949cc1a3f9bd67757f3b93cc151c32de4ebf397f52cb315c5e718c8063a54da3b500cf0804ef2467582d3a51eab11ec2", 0x6f}], 0x2}, 0x8094) 2.441612824s ago: executing program 0 (id=3552): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xffffffff, 0x3, 0x5}, 0x10}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1c, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x17, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) close(r7) sendmsg$inet(r8, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'ip6erspan0\x00', 0x20}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x1f2f, 0x22, 0x0, &(0x7f0000000440)="9f449470fe919559684010a408002d7a5d4153f0226dcacf36a548ab01b5cb16afce", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xd7, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x7, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8924, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9a30, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xc8cd08778ed29b20}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x8, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0], 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff000300119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 2.220485204s ago: executing program 3 (id=3553): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x1e, 0x0, 0xc3, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)="f8c450", &(0x7f0000000280), 0x5, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r4}, 0x38) r5 = openat$cgroup_ro(r0, &(0x7f0000000240)='memory.swap.current\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map=r4, r1, 0x1c, 0x2002, r2, @value=r5, @void, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x50) 2.045111124s ago: executing program 2 (id=3554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x5, 0x69886d8}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = socket$kcm(0xa, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001740)={0x0, 0x82b5, 0xdbe475e41721781c}, 0xc) (async) sendmsg$inet(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea2", 0xf0b}], 0x1, &(0x7f0000000f80)=[@ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x5c, [@private=0xa010102, @empty, @empty, @broadcast, @broadcast, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback]}]}}}], 0x38}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2) (async) sendmsg$tipc(r4, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000009c0)={r3}) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0) (async) r6 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) (async) recvmsg(r7, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r8 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 1.910237923s ago: executing program 0 (id=3555): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x4, 0x8, 0xc, 0x40101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x20000054) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d0085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00353d4cf80614d97e39001e0000000008a600000700000000000000", @ANYRES32=0x1, @ANYBLOB="00008100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r4}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) 1.577112338s ago: executing program 1 (id=3556): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x8000) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x4, &(0x7f0000000040)=r3, 0x4) 1.576066877s ago: executing program 4 (id=3557): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x6084, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0205000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB], 0x1b) socket$kcm(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2bc, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xcc, 0xc}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000008000000000000000000767f0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, &(0x7f0000000d80)=[{0x0, 0x28}], 0x1}, 0x20040000) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e5450000120091ef"], 0xfe33) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000040) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000a48d9a97f9a3542460750542ad2426381818f1faf849e2f6ac1ba953ade88661a656aca44eb97e053f2b81a0cadaa5d112a44630862b063a90094db8330ea348916cca5b8e6dc80dceee3a1f1b261ecbc074bdd0ae5279bed487e61b8de2830400000000000000d07fe6926e0f8d504478ab0ffd41d73e7ab0"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 1.354225927s ago: executing program 2 (id=3558): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000800000000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001f0000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x69) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0x8, 0x4, 0x8, 0x80, 0xffffffffffffffff, 0xffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xd, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000780)=""/125, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x16, 0xc, 0x800, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r3, r4, r5, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x2, 0x4, 0x8}, {0x5, 0x4, 0x2, 0x2}, {0x2, 0x3, 0xd, 0xc}], 0x10, 0x80000001}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r10, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40002043) sendmsg$inet(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="2600000000000000000000009a8c876897be0d6f0862ba66565cbede6f77a8f0f2db72d8754b9c16d8a07863c811f41a3022ecde62cf2aa2bd633076a3b05687f327d012c54163e781bfbb4af04e3dec8954d5f80c09db9cc7a8f4e4bf03d1d9f8f57b7776a7c877f62a131447d4c221badaf897f67564eb5700000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x8, 0x8, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r12) close(r8) 0s ago: executing program 3 (id=3559): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000094000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000061c6e1fdb1d79ba5"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@ifindex, 0x2e, 0x0, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000001700)}, 0x40) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000087000000060000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d03442f3e7eb314b843d1b5d0000005aad2c95cdd5e7035be296000000000000a9d322c672e83d0b"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="0400000000000000", @ANYRES32=r5, @ANYBLOB="427a0680af93b23c5cb1b7ad4b3e2cde710558bbaa59514e91004d454719068344104c03ee79b227118b990dea16c4e099ca112bd0f950d95918b07ab0be4765902c8747c1b7185f0aa9390ac046d220d9a1bef98da94e835f0f0c30e9d62cafcedb87d05900af859c3d86a140deef79378aad5f6400e0242d217566251bdfe05fdb2af8faaa82efd27faeee76426d8d34c2398b24c24c3fae00577b9b8f7dbdc96e3bf05278f1ad4a772f60f9c8d262f4f0d2bb831d58e33eb9de33d08211ce", @ANYRES32=r8, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): .1.2056': attribute type 10 has an invalid length. [ 476.278276][T11762] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2056'. [ 476.989869][T11786] netlink: 'syz.0.2064': attribute type 29 has an invalid length. [ 477.019876][T11786] netlink: 'syz.0.2064': attribute type 3 has an invalid length. [ 477.033238][T11786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2064'. [ 477.301287][T11799] netlink: 'syz.0.2069': attribute type 3 has an invalid length. [ 477.315234][T11799] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2069'. [ 477.716172][T11816] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2071'. [ 477.821453][T11819] device veth1_macvtap entered promiscuous mode [ 478.416619][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2079'. [ 478.503555][T11846] device pim6reg1 entered promiscuous mode [ 480.125232][T11883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2094'. [ 480.405515][T11883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2094'. [ 480.577285][T11888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2094'. [ 481.270331][T11911] netlink: 'syz.0.2102': attribute type 13 has an invalid length. [ 481.283283][T11911] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2102'. [ 485.817515][T11962] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 485.873521][T11962] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2115'. [ 487.882934][T11951] device lo left promiscuous mode [ 487.898533][T11951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.012489][T11963] netlink: 'syz.3.2115': attribute type 11 has an invalid length. [ 488.035854][T11963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2115'. [ 488.048493][T11965] netlink: 'syz.1.2116': attribute type 21 has an invalid length. [ 488.067498][T11965] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2116'. [ 488.087131][T11965] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 488.646390][T11985] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2123'. [ 489.072873][T12003] netlink: 'syz.0.2127': attribute type 29 has an invalid length. [ 489.113502][T12003] netlink: 'syz.0.2127': attribute type 29 has an invalid length. [ 489.479095][T12022] netlink: 'syz.1.2130': attribute type 2 has an invalid length. [ 489.519955][T12022] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2130'. [ 489.543474][T12011] netlink: 'syz.1.2130': attribute type 3 has an invalid length. [ 489.586070][T12011] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2130'. [ 490.141525][T12043] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2138'. [ 490.174430][ T4281] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 490.295495][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2140'. [ 490.482902][T12054] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2141'. [ 490.920177][T12066] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2146'. [ 490.990979][T12065] delete_channel: no stack [ 491.503023][T12086] netlink: 'syz.1.2150': attribute type 2 has an invalid length. [ 491.511415][T12086] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2150'. [ 491.698190][T12090] netlink: 'syz.1.2150': attribute type 3 has an invalid length. [ 491.906496][T12090] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2150'. [ 493.169701][T12100] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 493.176596][T12100] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 495.968925][T12102] sctp: [Deprecated]: syz.1.2155 (pid 12102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.968925][T12102] Use struct sctp_sack_info instead [ 497.119502][T12165] netlink: 'syz.0.2171': attribute type 21 has an invalid length. [ 497.129036][T12165] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 498.344750][T12207] netlink: 'syz.1.2186': attribute type 3 has an invalid length. [ 498.416015][T12207] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 498.465983][T12207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2186'. [ 498.494822][T12204] netlink: 'syz.1.2186': attribute type 2 has an invalid length. [ 498.513029][T12204] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.2186'. [ 500.060651][T12264] netlink: 'syz.4.2206': attribute type 2 has an invalid length. [ 500.201445][T12268] netlink: 'syz.0.2207': attribute type 3 has an invalid length. [ 500.244700][T12268] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.2207'. [ 500.932084][T12264] device 0 entered promiscuous mode [ 501.433604][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.440423][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.323354][T12331] device syzkaller0 entered promiscuous mode [ 502.394176][T12335] netlink: 'syz.4.2226': attribute type 5 has an invalid length. [ 505.552326][T12347] netlink: 'syz.1.2230': attribute type 10 has an invalid length. [ 505.561806][T12347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2230'. [ 505.574215][T12330] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 506.057527][T12385] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2241'. [ 506.128908][T12389] netlink: 'syz.2.2243': attribute type 21 has an invalid length. [ 506.921473][T12415] netlink: 'syz.0.2250': attribute type 21 has an invalid length. [ 506.941535][T12415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2250'. [ 507.300420][T12427] netlink: 'syz.1.2253': attribute type 29 has an invalid length. [ 507.326122][T12427] netlink: 'syz.1.2253': attribute type 29 has an invalid length. [ 507.445629][T12436] nr0: port 1(hsr0) entered blocking state [ 507.469899][T12436] nr0: port 1(hsr0) entered disabled state [ 507.520610][T12435] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2255'. [ 507.643681][T12435] netlink: 'syz.4.2255': attribute type 10 has an invalid length. [ 507.735068][T12435] team0: Device hsr_slave_0 failed to register rx_handler [ 508.290940][T12457] b‹¡Y­4`Ò˜: renamed from lo [ 508.711490][T12474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 508.728552][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 508.737210][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 508.758238][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 508.766329][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 508.773810][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 509.142832][T12491] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2272'. [ 509.360548][T12472] chnl_net:caif_netlink_parms(): no params data found [ 509.532809][T12501] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2275'. [ 509.808326][T12472] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.837592][T12472] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.864875][T12472] device bridge_slave_0 entered promiscuous mode [ 509.943150][T12472] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.996713][T12472] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.025423][T12472] device bridge_slave_1 entered promiscuous mode [ 510.240233][T12472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.292893][T12472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.512590][T12472] team0: Port device team_slave_0 added [ 510.605158][T12472] team0: Port device team_slave_1 added [ 510.732272][T12472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.754747][T12472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.832546][T12472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.866184][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 510.876759][T12524] netlink: 'syz.1.2283': attribute type 46 has an invalid length. [ 510.886440][T12524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2283'. [ 510.948578][T12472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.955606][T12472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.993593][T12472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.228032][T12472] device hsr_slave_0 entered promiscuous mode [ 511.256494][T12472] device hsr_slave_1 entered promiscuous mode [ 511.945846][T12536] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 511.964227][T12536] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2287'. [ 512.181600][T12472] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.519333][T12540] netlink: 'syz.2.2289': attribute type 29 has an invalid length. [ 512.540455][T12472] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.616635][T12540] netlink: 'syz.2.2289': attribute type 29 has an invalid length. [ 512.660378][T12546] netlink: 'syz.4.2290': attribute type 46 has an invalid length. [ 512.869266][T12472] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.946047][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 513.070151][T12472] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.198946][T12556] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2293'. [ 513.464326][T12567] netlink: 'syz.2.2296': attribute type 3 has an invalid length. [ 513.481668][T12567] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2296'. [ 514.548692][ T4274] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 515.031413][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 515.834710][T12585] netlink: 'syz.1.2301': attribute type 4 has an invalid length. [ 515.842725][T12595] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2304'. [ 515.860011][T12472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 515.893758][T12472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 515.921361][T12472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 515.931473][T12472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.137128][T12602] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2305'. [ 516.169796][T12602] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2305'. [ 516.192856][T12601] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2305'. [ 516.216051][T12603] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2305'. [ 516.242596][T12472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.259851][T12602] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2305'. [ 517.056515][T12616] netlink: 'syz.1.2309': attribute type 10 has an invalid length. [ 517.104521][T12616] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 517.113390][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 517.141340][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 517.153013][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.164260][T12472] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.232796][T12627] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2315'. [ 517.252410][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 517.266271][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.313796][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.321124][ T6472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.359858][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 517.383878][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.403166][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.410415][ T6472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.427220][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 517.449355][T12633] netlink: 'syz.1.2316': attribute type 3 has an invalid length. [ 517.489519][T12633] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2316'. [ 517.504054][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 517.533388][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.624810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.654100][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.689437][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 517.754065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.789008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.840527][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.872956][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.928968][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.973004][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.019044][T12472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.050990][T12647] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2319'. [ 518.197315][T12649] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2320'. [ 518.419231][ T6502] device 0 left promiscuous mode [ 518.845347][T12669] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.856058][T12669] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2324'. [ 520.097798][ T4274] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 521.560771][T12689] netlink: 'syz.3.2328': attribute type 21 has an invalid length. [ 521.576170][T12689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2328'. [ 521.585331][T12689] netlink: 'syz.3.2328': attribute type 1 has an invalid length. [ 521.593925][T12695] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2332'. [ 522.516744][ T4274] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 525.734232][T12705] netlink: 'syz.2.2333': attribute type 10 has an invalid length. [ 525.755951][T12705] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2333'. [ 525.860652][T12749] device syzkaller0 entered promiscuous mode [ 526.049130][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.058276][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.110652][T12472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.231382][T12767] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2351'. [ 526.425918][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.434791][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.504914][ T6502] device gretap0 left promiscuous mode [ 526.512539][ T6502] : port 1(gretap0) entered disabled state [ 526.562784][T12772] netlink: 'syz.3.2355': attribute type 7 has an invalid length. [ 526.574108][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.588387][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.600956][T12472] device veth0_vlan entered promiscuous mode [ 526.660155][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.687782][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.749222][T12472] device veth1_vlan entered promiscuous mode [ 526.892388][T12778] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2358'. [ 526.899755][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 526.929930][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 527.041194][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.053329][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.073871][T12472] device veth0_macvtap entered promiscuous mode [ 527.114219][T12472] device veth1_macvtap entered promiscuous mode [ 527.251728][T12472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.295463][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.337472][T12472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.345544][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 527.385520][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.401389][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.479846][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.503601][T12472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.537203][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.552567][T12472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.564627][T12472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.583596][T12472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.602758][T12790] netlink: 'syz.3.2363': attribute type 2 has an invalid length. [ 527.619014][T12790] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2363'. [ 527.644197][T12789] netlink: 'syz.3.2363': attribute type 2 has an invalid length. [ 527.654989][T12789] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2363'. [ 527.695909][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.705237][T10317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.769568][T12472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.778782][T12472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.805855][T12472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.832251][T12472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.687611][ T6502] bond0: (slave wlan1): Releasing backup interface [ 528.740795][T12815] netlink: 61787 bytes leftover after parsing attributes in process `syz.2.2369'. [ 531.870554][ T6502] nr0: port 1(hsr0) entered disabled state [ 531.931465][ T6502] device hsr_slave_0 left promiscuous mode [ 531.938338][ T6502] device hsr_slave_1 left promiscuous mode [ 532.009037][ T6502] device veth0_macvtap left promiscuous mode [ 532.187188][T12877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2386'. [ 532.873804][T12886] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2388'. [ 533.001856][ T6502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.073411][ T6502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.487903][ T6502] bond0 (unregistering): Released all slaves [ 533.582359][ T6465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.614526][ T6465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.639937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 533.788037][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.803398][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.869531][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 534.241306][T12907] netlink: 'syz.0.2261': attribute type 10 has an invalid length. [ 534.260071][T12907] team0: Cannot enslave team device to itself [ 535.799183][T12928] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.846906][T12928] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2398'. [ 536.362735][T12956] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2405'. [ 537.440666][T12976] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2413'. [ 537.572231][T12977] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2411'. [ 537.584587][T12982] syz.4.2412[12982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.584703][T12982] syz.4.2412[12982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.212020][T13012] netlink: 'syz.4.2425': attribute type 10 has an invalid length. [ 539.232349][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2425'. [ 539.290130][T13012] device ipvlan1 entered promiscuous mode [ 539.342207][T13012] bridge0: port 4(ipvlan1) entered blocking state [ 539.411786][T13012] bridge0: port 4(ipvlan1) entered disabled state [ 539.509729][T13012] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 539.569815][T13014] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 539.583021][T13021] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 540.268033][T13039] netlink: 'syz.1.2431': attribute type 29 has an invalid length. [ 540.300600][T13039] netlink: 'syz.1.2431': attribute type 29 has an invalid length. [ 544.700301][T13089] netlink: 'syz.4.2447': attribute type 8 has an invalid length. [ 544.708983][T13085] netlink: 'syz.0.2446': attribute type 3 has an invalid length. [ 544.729252][T13085] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2446'. [ 544.776675][T13089] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 544.784660][T13089] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.2447'. [ 544.806776][T13090] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.2447'. [ 546.314723][T13114] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2454'. [ 546.351246][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.426394][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.486038][T13114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.525882][T13114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.577067][T13114] device batadv_slave_1 entered promiscuous mode [ 547.947305][T13145] netlink: 113680 bytes leftover after parsing attributes in process `syz.2.2459'. [ 549.179956][T13174] netlink: 'syz.4.2469': attribute type 46 has an invalid length. [ 550.341010][T13196] device sit0 left promiscuous mode [ 553.471724][T13213] device syzkaller0 entered promiscuous mode [ 553.480028][T13226] netlink: 'syz.0.2481': attribute type 10 has an invalid length. [ 553.489932][T13226] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.498779][T13226] bond0: (slave team0): Enslaving as an active interface with an up link [ 553.507500][T13231] netlink: 'syz.2.2483': attribute type 10 has an invalid length. [ 553.568326][T13231] bond0: (slave wlan1): Releasing backup interface [ 553.612004][T13231] device wlan1 left promiscuous mode [ 553.639828][T13231] device wlan1 entered promiscuous mode [ 553.663281][T13231] team0: Port device wlan1 added [ 556.959299][T13256] syz.4.2491[13256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.959411][T13256] syz.4.2491[13256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.974634][T13274] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 558.141062][T13274] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2494'. [ 558.727811][T13285] netlink: 'syz.3.2496': attribute type 10 has an invalid length. [ 558.979663][T13291] netlink: 'syz.0.2500': attribute type 10 has an invalid length. [ 559.100900][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2500'. [ 559.122639][T13291] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 559.153533][T13291] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.190378][T13291] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 559.677900][T13295] device syzkaller0 entered promiscuous mode [ 560.447896][T13336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2513'. [ 562.872642][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.879140][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.267602][T13365] netlink: 'syz.3.2521': attribute type 3 has an invalid length. [ 563.286814][T13365] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2521'. [ 564.431638][T13336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2513'. [ 564.852884][T13388] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2525'. [ 566.739429][T13430] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 566.824557][T13430] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.2539'. [ 566.867353][T13437] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2541'. [ 566.930972][T13433] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.2540'. [ 567.083342][T13432] device syzkaller0 entered promiscuous mode [ 572.642501][T13462] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 572.650553][T13462] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2549'. [ 573.288916][T13492] netlink: 'syz.3.2557': attribute type 39 has an invalid length. [ 574.252850][T13510] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2562'. [ 574.793864][T13530] netlink: 'syz.2.2566': attribute type 29 has an invalid length. [ 574.802919][T13529] netlink: 'syz.3.2567': attribute type 13 has an invalid length. [ 574.815630][T13529] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2567'. [ 574.877128][T13533] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2567'. [ 574.893958][T13529] erspan0: refused to change device tx_queue_len [ 574.946348][T13529] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 575.041830][T13530] netlink: 'syz.2.2566': attribute type 29 has an invalid length. [ 575.056999][T13534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.075099][T13534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.411626][T13550] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.2572'. [ 575.426847][T13550] netlink: zone id is out of range [ 575.432277][T13550] netlink: zone id is out of range [ 576.915930][T13576] syz.0.2581[13576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.916111][T13576] syz.0.2581[13576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.189859][T13596] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2587'. [ 578.800547][T13626] syz.3.2595[13626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.800664][T13626] syz.3.2595[13626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.013686][T13678] netlink: 'syz.0.2610': attribute type 39 has an invalid length. [ 582.629016][T13690] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2612'. [ 582.670311][T13695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2612'. [ 582.708857][T13695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2612'. [ 582.743132][T13690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2612'. [ 582.794770][T13695] netlink: 'syz.2.2612': attribute type 10 has an invalid length. [ 582.873191][T13695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2612'. [ 582.940210][T13695] team0: Device b‹¡Y­4`Ò˜ is loopback device. Loopback devices can't be added as a team port [ 582.953166][T13695] A link change request failed with some changes committed already. Interface b‹¡Y­4`Ò˜ may have been left with an inconsistent configuration, please check. [ 583.514421][T13721] netlink: 'syz.0.2617': attribute type 21 has an invalid length. [ 583.534336][T13721] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.611437][T13721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.618837][T13721] IPv6: NLM_F_CREATE should be set when creating new route [ 583.626170][T13721] IPv6: NLM_F_CREATE should be set when creating new route [ 583.633420][T13721] IPv6: NLM_F_CREATE should be set when creating new route [ 585.604432][T13732] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2634'. [ 585.646805][T13732] netlink: zone id is out of range [ 585.671187][T13732] netlink: zone id is out of range [ 585.686338][T13732] netlink: zone id is out of range [ 585.701724][T13732] netlink: zone id is out of range [ 585.716321][T13732] netlink: zone id is out of range [ 585.722274][T13732] netlink: zone id is out of range [ 585.769611][T13732] netlink: zone id is out of range [ 585.787135][T13732] netlink: zone id is out of range [ 585.822451][T13732] netlink: zone id is out of range [ 586.048422][T13745] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 586.182499][T13745] device veth1_macvtap left promiscuous mode [ 586.700141][T13761] netlink: 'syz.3.2633': attribute type 12 has an invalid length. [ 586.766516][T13761] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2633'. [ 586.787898][T13763] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2636'. [ 587.111316][T13772] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2638'. [ 587.321490][T13782] netlink: 'syz.0.2641': attribute type 3 has an invalid length. [ 587.329631][T13782] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2641'. [ 587.360726][T13774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.376747][T13774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.572383][T13774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.598524][T13774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.689553][T13774] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 587.718773][T13774] batman_adv: batadv0: Removing interface: virt_wifi0 [ 588.030376][T13791] netlink: 'syz.3.2640': attribute type 21 has an invalid length. [ 588.045292][T13791] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2640'. [ 588.163116][T13808] netlink: 16083 bytes leftover after parsing attributes in process `syz.0.2646'. [ 588.407390][T13811] netlink: 'syz.2.2645': attribute type 21 has an invalid length. [ 588.415490][T13811] netlink: 'syz.2.2645': attribute type 6 has an invalid length. [ 588.523732][T13811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2645'. [ 588.538502][T13815] IPv6: Can't replace route, no match found [ 588.562231][T13821] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.593891][T13818] netlink: 'syz.4.2649': attribute type 10 has an invalid length. [ 588.614051][T13818] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2649'. [ 588.635610][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 589.505055][T13850] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 589.538594][T13850] team0: Device bond0 is already an upper device of the team interface [ 589.902866][T13860] netlink: 'syz.1.2660': attribute type 1 has an invalid length. [ 590.787319][ T6472] wlan1: Trigger new scan to find an IBSS to join [ 593.826026][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 594.141402][T13909] __nla_validate_parse: 3 callbacks suppressed [ 594.141434][T13909] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2674'. [ 594.193944][T13910] netlink: 'syz.0.2674': attribute type 25 has an invalid length. [ 594.974778][T13917] netlink: 'syz.2.2675': attribute type 39 has an invalid length. [ 595.841337][T13938] bond0: (slave team0): Error: Slave device does not support XDP [ 596.090415][T13949] FAULT_INJECTION: forcing a failure. [ 596.090415][T13949] name failslab, interval 1, probability 0, space 0, times 0 [ 596.143939][T13949] CPU: 1 PID: 13949 Comm: syz.4.2685 Not tainted syzkaller #0 [ 596.151679][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.161957][T13949] Call Trace: [ 596.165255][T13949] [ 596.168219][T13949] dump_stack_lvl+0x188/0x24e [ 596.173031][T13949] ? show_regs_print_info+0x12/0x12 [ 596.178268][T13949] ? load_image+0x400/0x400 [ 596.182804][T13949] ? verify_lock_unused+0x140/0x140 [ 596.188046][T13949] should_fail_ex+0x399/0x4d0 [ 596.192765][T13949] should_failslab+0x5/0x20 [ 596.197290][T13949] slab_pre_alloc_hook+0x59/0x310 [ 596.202377][T13949] kmem_cache_alloc+0x56/0x2f0 [ 596.207169][T13949] ? skb_clone+0x1e7/0x370 [ 596.211786][T13949] skb_clone+0x1e7/0x370 [ 596.216057][T13949] __netlink_deliver_tap+0x3ed/0x800 [ 596.221382][T13949] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.226609][T13949] netlink_deliver_tap+0x19c/0x1b0 [ 596.231746][T13949] netlink_sendskb+0x64/0x130 [ 596.236449][T13949] netlink_ack+0xcdd/0x1170 [ 596.241015][T13949] ? netlink_dump+0xd00/0xd00 [ 596.245715][T13949] ? sock_diag_lock_handler+0x19/0x280 [ 596.251211][T13949] ? inet_diag_unregister+0xb0/0xb0 [ 596.256434][T13949] ? sock_diag_rcv_msg+0x3f6/0x5f0 [ 596.261572][T13949] netlink_rcv_skb+0x280/0x450 [ 596.266374][T13949] ? sock_diag_bind+0xa0/0xa0 [ 596.271080][T13949] ? netlink_ack+0x1170/0x1170 [ 596.275885][T13949] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.281110][T13949] sock_diag_rcv+0x26/0x40 [ 596.285536][T13949] netlink_unicast+0x74d/0x8d0 [ 596.290342][T13949] netlink_sendmsg+0x8ad/0xbd0 [ 596.295172][T13949] ? netlink_getsockopt+0x550/0x550 [ 596.300420][T13949] ? aa_sock_msg_perm+0x94/0x150 [ 596.305403][T13949] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 596.310805][T13949] ? security_socket_sendmsg+0x7c/0xa0 [ 596.316377][T13949] ? netlink_getsockopt+0x550/0x550 [ 596.321601][T13949] ____sys_sendmsg+0x5be/0x970 [ 596.326411][T13949] ? __sys_sendmsg_sock+0x30/0x30 [ 596.331466][T13949] ? __import_iovec+0x315/0x500 [ 596.336364][T13949] ? import_iovec+0x6f/0xa0 [ 596.340892][T13949] ___sys_sendmsg+0x2a2/0x360 [ 596.345694][T13949] ? __sys_sendmsg+0x290/0x290 [ 596.350532][T13949] ? __lock_acquire+0x7d10/0x7d10 [ 596.355624][T13949] __se_sys_sendmsg+0x1bb/0x2a0 [ 596.360593][T13949] ? __x64_sys_sendmsg+0x80/0x80 [ 596.365582][T13949] ? lockdep_hardirqs_on+0x94/0x140 [ 596.370889][T13949] do_syscall_64+0x4c/0xa0 [ 596.375428][T13949] ? clear_bhb_loop+0x60/0xb0 [ 596.380140][T13949] ? clear_bhb_loop+0x60/0xb0 [ 596.384926][T13949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.390898][T13949] RIP: 0033:0x7eff9cd9c799 [ 596.395347][T13949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.415142][T13949] RSP: 002b:00007eff9dc31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.423576][T13949] RAX: ffffffffffffffda RBX: 00007eff9d015fa0 RCX: 00007eff9cd9c799 [ 596.432347][T13949] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 596.440337][T13949] RBP: 00007eff9dc31090 R08: 0000000000000000 R09: 0000000000000000 [ 596.448324][T13949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.456311][T13949] R13: 00007eff9d016038 R14: 00007eff9d015fa0 R15: 00007fffb92bf0a8 [ 596.464323][T13949] [ 596.501272][T13954] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2687'. [ 596.514976][T13954] netlink: 'syz.2.2687': attribute type 10 has an invalid length. [ 596.867309][T10317] wlan1: Trigger new scan to find an IBSS to join [ 597.158437][T13977] netlink: 'syz.3.2692': attribute type 39 has an invalid length. [ 597.664074][T13991] FAULT_INJECTION: forcing a failure. [ 597.664074][T13991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.689619][T13991] CPU: 0 PID: 13991 Comm: syz.0.2699 Not tainted syzkaller #0 [ 597.697164][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.702526][T13993] netlink: 'syz.1.2698': attribute type 3 has an invalid length. [ 597.707761][T13991] Call Trace: [ 597.707801][T13991] [ 597.707813][T13991] dump_stack_lvl+0x188/0x24e [ 597.726660][T13991] ? show_regs_print_info+0x12/0x12 [ 597.731927][T13991] ? load_image+0x400/0x400 [ 597.735965][T13993] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2698'. [ 597.736465][T13991] ? __lock_acquire+0x7d10/0x7d10 [ 597.736501][T13991] ? snprintf+0xe5/0x140 [ 597.755396][T13991] should_fail_ex+0x399/0x4d0 [ 597.760589][T13991] _copy_to_user+0x2c/0x130 [ 597.765169][T13991] simple_read_from_buffer+0xe3/0x150 [ 597.770696][T13991] proc_fail_nth_read+0x1a6/0x220 [ 597.775775][T13991] ? proc_fault_inject_write+0x310/0x310 [ 597.781436][T13991] ? fsnotify_perm+0x248/0x550 [ 597.786241][T13991] ? proc_fault_inject_write+0x310/0x310 [ 597.791901][T13991] vfs_read+0x2de/0xa00 [ 597.796094][T13991] ? kernel_read+0x1e0/0x1e0 [ 597.800707][T13991] ? __fget_files+0x28/0x4b0 [ 597.805320][T13991] ? __fget_files+0x28/0x4b0 [ 597.809950][T13991] ? __fget_files+0x43d/0x4b0 [ 597.814666][T13991] ? __fdget_pos+0x2ae/0x360 [ 597.819485][T13991] ? ksys_read+0x71/0x250 [ 597.823841][T13991] ksys_read+0x14c/0x250 [ 597.828197][T13991] ? vfs_write+0xa30/0xa30 [ 597.832638][T13991] ? lockdep_hardirqs_on+0x94/0x140 [ 597.837868][T13991] do_syscall_64+0x4c/0xa0 [ 597.842305][T13991] ? clear_bhb_loop+0x60/0xb0 [ 597.846997][T13991] ? clear_bhb_loop+0x60/0xb0 [ 597.851817][T13991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.857730][T13991] RIP: 0033:0x7fa8c655cfce [ 597.862165][T13991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 597.881886][T13991] RSP: 002b:00007fa8c7410fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 597.890588][T13991] RAX: ffffffffffffffda RBX: 00007fa8c74116c0 RCX: 00007fa8c655cfce [ 597.898580][T13991] RDX: 000000000000000f RSI: 00007fa8c74110a0 RDI: 0000000000000005 [ 597.906565][T13991] RBP: 00007fa8c7411090 R08: 0000000000000000 R09: 0000000000000000 [ 597.914553][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.922539][T13991] R13: 00007fa8c6816038 R14: 00007fa8c6815fa0 R15: 00007ffcf3928a08 [ 597.930553][T13991] [ 598.312202][ T56] wlan1: Creating new IBSS network, BSSID a6:87:58:a5:67:cf [ 598.391808][T14007] netlink: 'syz.3.2701': attribute type 3 has an invalid length. [ 598.410488][T14007] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2701'. [ 598.525052][T14009] netlink: 'syz.0.2703': attribute type 21 has an invalid length. [ 598.551218][T14009] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2703'. [ 598.725364][T14014] netlink: 'syz.1.2705': attribute type 4 has an invalid length. [ 598.775917][T14014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2705'. [ 599.124531][T14026] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 599.412918][T14025] netlink: 'syz.4.2707': attribute type 39 has an invalid length. [ 600.124920][T14043] netlink: 'syz.3.2711': attribute type 21 has an invalid length. [ 600.165920][T14043] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2711'. [ 600.463964][T14071] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 600.498810][T14073] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2720'. [ 601.671514][T14101] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.2727'. [ 601.837790][ T4337] wlan1: Trigger new scan to find an IBSS to join [ 601.917618][T14109] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2731'. [ 603.312282][T14139] net_ratelimit: 3 callbacks suppressed [ 603.312300][T14139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 603.324831][T14139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 604.867216][T10317] wlan1: Trigger new scan to find an IBSS to join [ 606.142371][ T9] wlan1: Creating new IBSS network, BSSID 4e:be:64:25:6f:d2 [ 606.471781][T14172] netlink: 'syz.4.2747': attribute type 3 has an invalid length. [ 606.515983][T14172] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2747'. [ 606.547476][T14168] device syzkaller0 entered promiscuous mode [ 606.558244][T14169] netlink: 'syz.3.2743': attribute type 21 has an invalid length. [ 606.566539][T14169] netlink: 'syz.3.2743': attribute type 11 has an invalid length. [ 606.574897][T14165] netlink: 'syz.3.2743': attribute type 10 has an invalid length. [ 606.626581][T14175] netlink: 'syz.4.2747': attribute type 13 has an invalid length. [ 606.634957][T14175] netlink: 'syz.4.2747': attribute type 14 has an invalid length. [ 606.645121][T14175] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2747'. [ 609.878273][T14190] netlink: 'syz.0.2752': attribute type 1 has an invalid length. [ 609.886319][T14190] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2752'. [ 610.088015][T14231] netlink: 'syz.2.2764': attribute type 3 has an invalid length. [ 610.105859][T14231] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2764'. [ 610.145443][T14231] netlink: 'syz.2.2764': attribute type 13 has an invalid length. [ 610.177289][T14231] netlink: 'syz.2.2764': attribute type 14 has an invalid length. [ 610.185180][T14231] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2764'. [ 611.303037][T14271] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2778'. [ 611.525255][T14279] validate_nla: 2 callbacks suppressed [ 611.525273][T14279] netlink: 'syz.3.2781': attribute type 3 has an invalid length. [ 611.544889][T14279] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2781'. [ 611.664580][T14284] netlink: 'syz.3.2781': attribute type 13 has an invalid length. [ 611.678936][T14284] netlink: 'syz.3.2781': attribute type 14 has an invalid length. [ 611.688684][T14284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2781'. [ 613.310639][T14315] netlink: 'syz.0.2790': attribute type 2 has an invalid length. [ 613.589019][T14297] netlink: 'syz.3.2785': attribute type 3 has an invalid length. [ 613.640275][T14297] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2785'. [ 613.782404][T14329] device syzkaller0 entered promiscuous mode [ 614.771424][T14357] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2800'. [ 614.988969][T14367] netlink: 'syz.3.2804': attribute type 2 has an invalid length. [ 617.199216][T14343] netlink: 'syz.4.2797': attribute type 21 has an invalid length. [ 617.207224][T14343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2797'. [ 617.219665][T14357] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.2800'. [ 617.229444][T14367] netlink: 'syz.3.2804': attribute type 46 has an invalid length. [ 620.291809][T14425] netlink: 145408 bytes leftover after parsing attributes in process `syz.3.2817'. [ 620.368260][T14435] netlink: 'syz.2.2810': attribute type 3 has an invalid length. [ 620.428023][T14435] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2810'. [ 620.453024][T14441] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2821'. [ 620.518372][T14440] netlink: 'syz.0.2820': attribute type 21 has an invalid length. [ 620.526315][T14440] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2820'. [ 620.597315][T14441] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2821'. [ 621.031662][T14454] delete_channel: no stack [ 623.069529][T14510] netlink: 'syz.0.2841': attribute type 2 has an invalid length. [ 623.080041][T14510] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2841'. [ 623.613282][T14513] netlink: 'syz.3.2842': attribute type 6 has an invalid length. [ 623.657770][T14513] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2842'. [ 623.812505][T14535] netlink: 'syz.0.2847': attribute type 10 has an invalid length. [ 623.861886][T14535] netlink: 56823 bytes leftover after parsing attributes in process `syz.0.2847'. [ 624.383691][T14547] device pim6reg1 entered promiscuous mode [ 624.547907][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.554483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.498485][T14586] netlink: 'syz.1.2860': attribute type 33 has an invalid length. [ 625.522834][T14586] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2860'. [ 625.628533][T14586] netlink: 'syz.1.2860': attribute type 3 has an invalid length. [ 625.686436][T14586] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 625.732108][T14586] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2860'. [ 625.825320][T14596] netlink: 'syz.2.2864': attribute type 21 has an invalid length. [ 625.886125][T14596] netlink: 'syz.2.2864': attribute type 2 has an invalid length. [ 626.690322][T14618] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2871'. [ 626.990590][T14633] netlink: 'syz.2.2873': attribute type 10 has an invalid length. [ 627.219164][T14633] device vxcan1 entered promiscuous mode [ 627.225001][T14633] team0: Device vxcan1 is of different type [ 627.704241][T14650] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 627.723332][T14650] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2880'. [ 629.169310][T14676] netlink: 'syz.2.2885': attribute type 4 has an invalid length. [ 630.980551][T14733] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 631.025801][T14733] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2898'. [ 631.507182][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 631.752730][T14762] sock: sock_timestamping_bind_phc: sock not bind to device [ 632.056553][T14761] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2907'. [ 632.134381][T14761] device hsr_slave_0 left promiscuous mode [ 632.159384][T14761] device hsr_slave_1 left promiscuous mode [ 632.774121][T14785] netlink: 'syz.3.2914': attribute type 29 has an invalid length. [ 632.786468][T14785] netlink: 'syz.3.2914': attribute type 29 has an invalid length. [ 632.801864][T14788] netlink: 'syz.4.2915': attribute type 29 has an invalid length. [ 632.807662][T14785] netlink: 'syz.3.2914': attribute type 29 has an invalid length. [ 632.819987][T14788] netlink: 'syz.4.2915': attribute type 29 has an invalid length. [ 632.831451][T14788] netlink: 'syz.4.2915': attribute type 29 has an invalid length. [ 635.596918][ T4281] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 635.605638][ T4281] Bluetooth: hci2: Injecting HCI hardware error event [ 635.615653][ T4274] Bluetooth: hci2: hardware error 0x00 [ 636.172863][ T4337] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 636.663938][T14835] netlink: 'syz.4.2927': attribute type 10 has an invalid length. [ 636.720938][T14835] bond0: (slave wlan1): Releasing backup interface [ 636.802027][T14835] device wlan1 entered promiscuous mode [ 636.808705][T14835] team0: Device wlan1 is of different type [ 636.911356][T14838] netlink: 'syz.1.2928': attribute type 21 has an invalid length. [ 637.750637][T14862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2934'. [ 638.386220][ T4274] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 643.232707][T14886] netlink: 'syz.4.2942': attribute type 21 has an invalid length. [ 643.244790][T14887] tipc: Started in network mode [ 643.253934][T14887] tipc: Node identity 9215a268, cluster identity 4711 [ 643.261829][T14887] tipc: Node number set to 2450891368 [ 643.546630][T14896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2945'. [ 644.088356][T14916] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2943'. [ 645.522399][T14949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2960'. [ 646.986381][T14960] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2966'. [ 647.027059][T14960] device hsr_slave_0 left promiscuous mode [ 647.058641][T14960] device hsr_slave_1 left promiscuous mode [ 647.828893][T14989] netlink: 'syz.1.2973': attribute type 29 has an invalid length. [ 647.937366][T14989] netlink: 'syz.1.2973': attribute type 29 has an invalid length. [ 648.570678][T14999] netlink: 'syz.1.2976': attribute type 12 has an invalid length. [ 648.616201][T14999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2976'. [ 649.205590][T15014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2978'. [ 649.567164][T15028] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2982'. [ 653.439383][T15028] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 653.449211][T15050] tipc: Started in network mode [ 653.454110][T15050] tipc: Node identity 9215a268, cluster identity 4711 [ 653.465890][T15028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 653.475508][T15028] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 653.484604][T15050] tipc: Node number set to 2450891368 [ 653.827422][T15056] netlink: 'syz.3.2989': attribute type 29 has an invalid length. [ 653.926734][T15056] netlink: 'syz.3.2989': attribute type 29 has an invalid length. [ 654.031496][T15071] netlink: 'syz.4.2993': attribute type 3 has an invalid length. [ 654.058550][T15065] netlink: 'syz.3.2989': attribute type 29 has an invalid length. [ 654.109162][T15068] netlink: 'syz.3.2989': attribute type 29 has an invalid length. [ 654.272108][T15056] netlink: 'syz.3.2989': attribute type 29 has an invalid length. [ 654.660171][T15088] netlink: 'syz.3.2999': attribute type 21 has an invalid length. [ 654.670553][T15088] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2999'. [ 654.734900][T15088] netlink: 'syz.3.2999': attribute type 4 has an invalid length. [ 655.353688][T15095] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2998'. [ 655.845189][T15111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3006'. [ 656.051479][T15111] device bridge_slave_0 left promiscuous mode [ 656.059549][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.532545][T15143] device syzkaller0 entered promiscuous mode [ 657.560923][T15188] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3019'. [ 658.351330][T15197] netlink: 'syz.3.3028': attribute type 3 has an invalid length. [ 658.395388][T15197] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3028'. [ 661.467903][T15217] netlink: 'syz.1.3037': attribute type 4 has an invalid length. [ 661.486242][T15217] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3037'. [ 662.012330][T15217] wlan1: mtu less than device minimum [ 662.123039][T15227] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3038'. [ 662.191198][T15244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3041'. [ 663.761102][T15271] netlink: 'syz.0.3060': attribute type 10 has an invalid length. [ 663.797771][T15271] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3060'. [ 664.245548][T15280] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.3053'. [ 664.270049][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.282115][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.290944][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.301970][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.312591][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 664.322319][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.415838][T15280] openvswitch: netlink: Key type 386 is out of range max 32 [ 664.753887][T15293] netlink: 'syz.0.3054': attribute type 29 has an invalid length. [ 664.838386][T15293] netlink: 'syz.0.3054': attribute type 29 has an invalid length. [ 664.864506][T15295] netlink: 'syz.0.3054': attribute type 29 has an invalid length. [ 665.089507][T15284] chnl_net:caif_netlink_parms(): no params data found [ 665.462686][T15284] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.491778][T15284] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.541650][T15284] device bridge_slave_0 entered promiscuous mode [ 665.634679][T15284] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.672598][T15284] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.749544][T15284] device bridge_slave_1 entered promiscuous mode [ 665.990145][T15284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.104145][T15284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.350682][T15317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3058'. [ 666.397726][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 666.524234][T15284] team0: Port device team_slave_0 added [ 666.618474][T15284] team0: Port device team_slave_1 added [ 666.764260][T15331] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.3064'. [ 666.781516][T15284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.792688][T15284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.821479][T15284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.962110][T15284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.978578][T15284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.045962][T15284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.137380][T15339] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3066'. [ 667.164830][T15340] netlink: 'syz.2.3066': attribute type 1 has an invalid length. [ 667.182990][T15340] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3066'. [ 667.196728][T15341] netlink: 'syz.2.3066': attribute type 1 has an invalid length. [ 667.235564][T15284] device hsr_slave_0 entered promiscuous mode [ 667.235963][T15341] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3066'. [ 667.251830][T15284] device hsr_slave_1 entered promiscuous mode [ 667.272590][T15284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.286159][T15284] Cannot create hsr debugfs directory [ 667.299424][T15342] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.3067'. [ 667.438572][T15347] netlink: 'syz.1.3068': attribute type 41 has an invalid length. [ 668.465826][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 670.377425][T15355] netlink: 'syz.2.3069': attribute type 20 has an invalid length. [ 670.471134][T15362] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3071'. [ 670.545759][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 670.743331][T15284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.082027][T15284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.252307][T15284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.378602][T15284] bond0: (slave netdevsim0): Releasing backup interface [ 671.393904][T15284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.586797][T15398] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3081'. [ 671.841592][T15402] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 671.899520][T15402] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 671.980100][T15284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.082964][T15284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 672.179245][T15284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.268594][T15284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 672.625841][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 672.938725][T15284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.015914][T15284] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.027427][T15385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3076'. [ 673.084585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.146664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 673.177564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 673.216825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.279033][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.287225][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.319577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.347898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.384633][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.391953][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.448528][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.538761][T15459] netlink: 'syz.1.3099': attribute type 2 has an invalid length. [ 673.559466][T15459] netlink: 'syz.1.3099': attribute type 8 has an invalid length. [ 673.574598][T15459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3099'. [ 673.608024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 673.627930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.639200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.654648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.672383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.683470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.693941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 673.760851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.794641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.810159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.832994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 673.855034][T15284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.903425][T15478] netlink: 'syz.0.3103': attribute type 2 has an invalid length. [ 673.935255][T15478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3103'. [ 674.414024][T15491] device wg2 entered promiscuous mode [ 674.785100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 674.818533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.854742][T15284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.909977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 674.929711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 675.021322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 675.086492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 675.119846][T15284] device veth0_vlan entered promiscuous mode [ 675.141480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 675.178516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 675.245158][T15284] device veth1_vlan entered promiscuous mode [ 675.321812][T15513] netlink: 'syz.0.3111': attribute type 12 has an invalid length. [ 675.335235][T15513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3111'. [ 675.454409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 675.593168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 675.656561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 675.694758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 675.741549][T15284] device veth0_macvtap entered promiscuous mode [ 675.847378][T15284] device veth1_macvtap entered promiscuous mode [ 675.927226][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 675.967385][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 676.031159][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.333449][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.399809][T15284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.451949][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 676.463891][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 676.484165][T15524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3109'. [ 676.599005][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.636082][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.677505][T15284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.721784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 676.942045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 677.018650][T15284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.060159][T15284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.093089][T15284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.105804][T15284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.136206][T15534] netlink: 121300 bytes leftover after parsing attributes in process `syz.0.3115'. [ 677.195068][T15531] netlink: 'syz.2.3114': attribute type 39 has an invalid length. [ 677.405533][T15537] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3117'. [ 677.869127][T15552] device wg2 entered promiscuous mode [ 677.930082][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.996151][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.254251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.424133][ T6465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.470791][ T6465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.483769][T15566] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3126'. [ 678.589936][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 680.339899][T15649] netlink: 'syz.0.3137': attribute type 40 has an invalid length. [ 681.230919][T15658] netlink: 'syz.2.3139': attribute type 29 has an invalid length. [ 681.494024][ T4274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 681.502971][T15658] netlink: 'syz.2.3139': attribute type 29 has an invalid length. [ 681.504713][ T4274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 681.529116][ T4274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.540501][ T4274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 681.560906][ T4274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 681.568895][ T4274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 681.662295][T15662] delete_channel: no stack [ 681.822062][T15670] netlink: 'syz.0.3143': attribute type 10 has an invalid length. [ 681.891867][T15670] device veth0_macvtap left promiscuous mode [ 682.229740][T15677] device pim6reg1 left promiscuous mode [ 682.876323][T15664] chnl_net:caif_netlink_parms(): no params data found [ 683.152927][T15709] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.3151'. [ 683.434269][T15664] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.452297][T15664] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.485912][T15664] device bridge_slave_0 entered promiscuous mode [ 683.503554][T15706] netlink: 'syz.2.3154': attribute type 13 has an invalid length. [ 683.571292][T15706] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.3154'. [ 683.621731][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 684.434499][T15664] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.474387][T15664] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.537180][T15664] device bridge_slave_1 entered promiscuous mode [ 684.911627][T15664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.978516][T15664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.142136][T15664] team0: Port device team_slave_0 added [ 685.173823][T15664] team0: Port device team_slave_1 added [ 685.219088][T15760] netlink: 'syz.2.3166': attribute type 3 has an invalid length. [ 685.247619][T15760] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3166'. [ 685.260988][T15664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.288506][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.355588][T15664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.380896][T15764] netlink: 'syz.1.3167': attribute type 21 has an invalid length. [ 685.406160][T15664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.423734][T15664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.482057][T15664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.668257][ T4274] Bluetooth: hci5: command 0x041b tx timeout [ 685.751050][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.757465][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.141203][T15664] device hsr_slave_0 entered promiscuous mode [ 686.172182][T15664] device hsr_slave_1 entered promiscuous mode [ 686.206373][T15664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.225121][T15664] Cannot create hsr debugfs directory [ 686.583421][T15790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3174'. [ 686.994572][T15664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.034734][T15810] netlink: 'syz.1.3180': attribute type 10 has an invalid length. [ 687.055846][T15810] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3180'. [ 687.073253][T15810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 687.629224][T15664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.745914][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 687.786038][T15822] netlink: 'syz.2.3185': attribute type 1 has an invalid length. [ 687.794033][T15822] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3185'. [ 687.913637][T15664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.262873][T15664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.411244][T15848] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3189'. [ 688.889938][T15664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 688.939255][T15664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 688.985014][T15664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 689.069813][T15664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 689.111747][T15865] device wlan1 entered promiscuous mode [ 689.544013][T15664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.563248][T15880] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3197'. [ 689.614631][T15882] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3197'. [ 689.719791][T15880] device team_slave_0 left promiscuous mode [ 689.846036][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 690.339927][T15880] team0: Port device team_slave_0 removed [ 690.350585][T15880] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 690.374704][T15889] netlink: 'syz.0.3199': attribute type 15 has an invalid length. [ 690.388065][T15891] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3197'. [ 690.431468][T15894] netlink: 'syz.2.3201': attribute type 10 has an invalid length. [ 690.450202][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 690.467570][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 690.523207][T15664] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.536966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 690.557046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 690.566460][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.573611][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.676794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 690.717362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 690.780855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 690.804070][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.811311][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.832631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 690.913112][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.937296][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 691.013410][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 691.087216][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 691.110474][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 691.142906][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 691.168193][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 691.182411][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 691.213233][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 691.227381][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 691.296100][T15664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 691.932815][T15929] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3209'. [ 691.944359][T15924] netlink: 'syz.0.3209': attribute type 29 has an invalid length. [ 691.957763][T15924] netlink: 'syz.0.3209': attribute type 29 has an invalid length. [ 692.142493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 692.158317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 692.180631][T15664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.807156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 692.821501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 692.851236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 692.871879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 692.887537][T15664] device veth0_vlan entered promiscuous mode [ 692.895455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 692.910547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 692.929160][T15664] device veth1_vlan entered promiscuous mode [ 692.972351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 692.986494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 692.995167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 693.009857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 693.024565][T15664] device veth0_macvtap entered promiscuous mode [ 693.048616][T15664] device veth1_macvtap entered promiscuous mode [ 693.084815][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.100760][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.114327][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.129675][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.142316][T15664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.155335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 693.165054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 693.178799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.196227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.213754][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.225803][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.242104][T15664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.253323][T15664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.270320][T15664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.283931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.298269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 693.321708][T15664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.335089][T15664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.346152][T15664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.355141][T15664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.029135][T15939] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3210'. [ 694.088139][T15939] device batadv_slave_1 entered promiscuous mode [ 694.129831][ T6465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.166756][ T6465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.222252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 694.323452][ T6465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.359572][ T6465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.420174][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.981402][T15994] delete_channel: no stack [ 696.985062][T16028] netlink: 'syz.2.3232': attribute type 2 has an invalid length. [ 697.044105][T16028] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3232'. [ 697.195243][T16030] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3234'. [ 698.034027][T16030] device hsr_slave_0 left promiscuous mode [ 698.056711][T16030] device hsr_slave_1 left promiscuous mode [ 698.518775][T16044] netlink: 'syz.2.3239': attribute type 41 has an invalid length. [ 698.570162][T16044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3239'. [ 698.614771][T16044] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 698.666362][T16055] netlink: 'syz.0.3241': attribute type 10 has an invalid length. [ 698.674481][T16055] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3241'. [ 698.695266][T16043] netlink: 'syz.2.3239': attribute type 41 has an invalid length. [ 698.732119][T16043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3239'. [ 698.852480][T16043] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 699.063236][T16074] netlink: 'syz.0.3247': attribute type 21 has an invalid length. [ 699.223774][T16074] netlink: 'syz.0.3247': attribute type 10 has an invalid length. [ 699.342979][T16074] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 699.400164][T16089] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3245'. [ 700.030361][T16092] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3249'. [ 700.040523][T16095] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 700.083882][T16095] device netdevsim0 entered promiscuous mode [ 700.091924][T16095] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 700.620982][T16118] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3256'. [ 700.877805][T16127] device sit0 entered promiscuous mode [ 702.269613][T16162] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3269'. [ 702.296768][T16167] netlink: 'syz.4.3268': attribute type 21 has an invalid length. [ 702.309028][T16167] netlink: 'syz.4.3268': attribute type 4 has an invalid length. [ 702.318593][T16167] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3268'. [ 703.222453][T16181] netlink: 'syz.3.3276': attribute type 21 has an invalid length. [ 703.282778][T16181] netlink: 'syz.3.3276': attribute type 2 has an invalid length. [ 707.101264][T16244] netlink: 'syz.1.3295': attribute type 29 has an invalid length. [ 707.156214][T16244] netlink: 'syz.1.3295': attribute type 29 has an invalid length. [ 707.327114][T16252] netlink: 'syz.4.3296': attribute type 21 has an invalid length. [ 707.406004][T16252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3296'. [ 708.038037][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.058883][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.068799][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.077622][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.085253][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 708.092604][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 708.642016][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 709.088859][T16272] chnl_net:caif_netlink_parms(): no params data found [ 709.153586][T16316] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 709.161611][T16316] netlink: 'syz.0.3313': attribute type 4 has an invalid length. [ 709.212125][T16316] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3313'. [ 709.254010][T16300] netlink: 'syz.4.3309': attribute type 10 has an invalid length. [ 709.351299][T16300] bond0: (slave bond_slave_0): Releasing backup interface [ 709.466297][T16318] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 709.474124][T16318] netlink: 'syz.0.3313': attribute type 4 has an invalid length. [ 709.506971][T16318] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3313'. [ 709.730556][T16308] device syzkaller0 entered promiscuous mode [ 710.145870][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 710.476166][T16342] can: request_module (can-proto-5) failed. [ 710.900901][T16352] cgroup: fork rejected by pids controller in /syz0 [ 712.230066][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 712.911000][T16350] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3320'. [ 712.924213][T16457] pimreg0: tun_chr_ioctl cmd 1074025673 [ 713.052204][ T2878] tipc: Left network mode [ 713.052878][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.082622][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.097172][T16272] device bridge_slave_0 entered promiscuous mode [ 713.113242][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.121149][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.175491][T16272] device bridge_slave_1 entered promiscuous mode [ 713.305046][ T2878] device ip6gretap0 left promiscuous mode [ 713.321178][ T2878] : port 1(ip6gretap0) entered disabled state [ 713.393536][T16469] netlink: 'syz.3.3325': attribute type 7 has an invalid length. [ 713.401695][T16470] netlink: 'syz.3.3325': attribute type 7 has an invalid length. [ 713.492948][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.513332][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.653691][T16272] team0: Port device team_slave_0 added [ 713.673388][T16482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3327'. [ 713.871921][T16272] team0: Port device team_slave_1 added [ 714.070865][T16484] can: request_module (can-proto-0) failed. [ 714.321014][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 714.390538][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.403183][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.444568][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.458891][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.467606][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.495560][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.821530][T16272] device hsr_slave_0 entered promiscuous mode [ 714.849556][T16272] device hsr_slave_1 entered promiscuous mode [ 714.886082][T16272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.893717][T16272] Cannot create hsr debugfs directory [ 715.244240][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 715.263229][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 715.273317][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.281439][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.289427][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 715.296758][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.419612][T16519] netlink: 'syz.3.3334': attribute type 29 has an invalid length. [ 715.752931][T16512] netlink: 'syz.3.3334': attribute type 46 has an invalid length. [ 715.861414][T16519] netlink: 'syz.3.3334': attribute type 29 has an invalid length. [ 716.412889][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 717.361321][T12474] Bluetooth: hci3: command 0x0409 tx timeout [ 718.974282][T16537] netlink: 'syz.3.3338': attribute type 3 has an invalid length. [ 718.982295][T16537] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3338'. [ 718.991804][T16541] netlink: 'syz.1.3340': attribute type 10 has an invalid length. [ 719.007315][T16541] device wlan1 left promiscuous mode [ 719.049983][T16541] bond0: (slave wlan1): Releasing backup interface [ 719.080322][T16541] device wlan1 entered promiscuous mode [ 719.100920][T16541] team0: Port device wlan1 added [ 719.257171][T16546] netlink: 'syz.3.3342': attribute type 10 has an invalid length. [ 719.304183][T16546] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3342'. [ 719.452543][T12474] Bluetooth: hci3: command 0x041b tx timeout [ 719.721438][T16549] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3342'. [ 720.169732][T16272] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.202068][T16558] netlink: 'syz.4.3345': attribute type 10 has an invalid length. [ 720.213581][T16558] device veth0_macvtap left promiscuous mode [ 720.250286][T16563] netlink: 'syz.1.3347': attribute type 1 has an invalid length. [ 720.269163][T16563] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3347'. [ 720.384561][T16272] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.405316][ T2878] nr0: port 1(hsr0) entered disabled state [ 720.419332][ T2878] device hsr_slave_0 left promiscuous mode [ 720.426879][ T2878] device hsr_slave_1 left promiscuous mode [ 720.449751][ T2878] device veth1_macvtap left promiscuous mode [ 720.456093][ T2878] device veth0_macvtap left promiscuous mode [ 720.462247][ T2878] device veth1_vlan left promiscuous mode [ 721.513970][ T2878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.516301][T12474] Bluetooth: hci3: command 0x040f tx timeout [ 721.836706][ T2878] bond0 (unregistering): Released all slaves [ 721.918564][T16272] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.051364][T16272] bond0: (slave netdevsim0): Releasing backup interface [ 722.065216][T16272] device netdevsim0 left promiscuous mode [ 722.076846][T16272] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.102959][T16513] chnl_net:caif_netlink_parms(): no params data found [ 722.427186][T16513] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.434450][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.473043][T16513] device bridge_slave_0 entered promiscuous mode [ 722.505544][T16513] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.541536][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.560738][T16513] device bridge_slave_1 entered promiscuous mode [ 722.571351][T16272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 722.595407][T16272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 722.637810][T16272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 722.661053][T16272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 722.683532][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.718783][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.841630][T16513] team0: Port device team_slave_0 added [ 722.855075][T16513] team0: Port device team_slave_1 added [ 722.916294][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.943801][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.068550][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.139685][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.175755][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.296331][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.541673][T16513] device hsr_slave_0 entered promiscuous mode [ 723.585978][T12474] Bluetooth: hci3: command 0x0419 tx timeout [ 723.593138][T16513] device hsr_slave_1 entered promiscuous mode [ 723.610147][T16513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.633600][T16513] Cannot create hsr debugfs directory [ 723.709016][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.741207][T16607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3358'. [ 723.972695][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 723.995294][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.017033][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.062850][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.073344][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 724.082800][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.089980][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.126470][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 724.136438][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 724.145500][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.154580][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.161774][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.172183][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 724.204126][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.224195][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.266304][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.281190][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.356856][T16513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.426026][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 724.447826][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.463038][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.475416][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.528481][T16513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.579216][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.607095][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.653356][T16513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.670216][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.754232][T16513] bond0: (slave netdevsim0): Releasing backup interface [ 724.777925][T16513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.049548][T16513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 725.081980][T16513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 725.099191][T16513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 725.161387][T16513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 726.145007][T16632] netlink: 'syz.4.3364': attribute type 10 has an invalid length. [ 726.274806][T16632] team0: Device vxcan1 is of different type [ 726.473067][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.512961][T16640] netlink: 'syz.3.3366': attribute type 29 has an invalid length. [ 726.534676][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 726.580699][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.770777][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 726.811056][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 726.936173][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 726.957532][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.027415][T16513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.070003][T16272] device veth0_vlan entered promiscuous mode [ 727.091939][T16640] netlink: 'syz.3.3366': attribute type 10 has an invalid length. [ 727.125401][T16640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.253447][T16640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.311595][T16640] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 727.389279][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.422323][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.463027][T16272] device veth1_vlan entered promiscuous mode [ 727.555802][T16513] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.608384][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 727.633260][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 727.699856][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 727.742307][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 727.879617][T16272] device veth0_macvtap entered promiscuous mode [ 727.914279][T16648] IPv6: Can't replace route, no match found [ 727.934696][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 727.948237][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 727.974381][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 727.994390][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.001706][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.042345][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3368'. [ 728.077683][T16272] device veth1_macvtap entered promiscuous mode [ 728.108682][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.134448][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 728.159582][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 728.191456][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 728.200796][ T2878] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.208008][ T2878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.251367][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 728.356968][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 728.374111][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 728.403982][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 728.431586][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.463217][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.494523][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.515603][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.561509][T16272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.624383][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 728.642775][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.663171][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.686731][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 728.696921][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 728.706303][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 728.715233][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 728.737191][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.759463][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.780462][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.802738][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.831816][T16272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 728.853034][T16272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.881344][T16272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.916908][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 728.940452][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 728.965200][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 728.983343][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.008195][T16513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 729.030381][T16272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.059757][T16272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.081289][T16272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.102418][T16272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.661130][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.679560][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.782008][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.826990][ T4764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.844403][ T4764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.963465][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.030152][T16667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3372'. [ 730.462660][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 730.486064][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 730.572651][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.813713][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 730.846566][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 731.109264][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 731.158147][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 731.242071][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 731.286514][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 731.334465][T16513] device veth0_vlan entered promiscuous mode [ 731.407636][T16513] device veth1_vlan entered promiscuous mode [ 731.461719][T16681] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3376'. [ 731.571123][T16681] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 731.571963][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 731.581442][T16681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 731.606550][T16681] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 731.647473][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 731.691341][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 731.727161][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 731.756578][T16513] device veth0_macvtap entered promiscuous mode [ 731.794243][T16513] device veth1_macvtap entered promiscuous mode [ 731.879672][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 731.942751][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 731.963282][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.995933][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.020182][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.045700][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.069669][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.103367][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.151855][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.206993][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 732.218304][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 732.268391][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.323326][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.364035][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.375214][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.387509][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.398423][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.408690][T16513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.419741][T16513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.436147][T16513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.445521][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 732.484222][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 732.510543][T16513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.545892][T16513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.554794][T16513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.582301][T16513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.591202][T16697] netlink: 'syz.2.3379': attribute type 2 has an invalid length. [ 732.591273][T16697] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3379'. [ 732.999720][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.022728][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.051456][ T6500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 733.097602][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.105499][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.152976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.665619][T16740] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.3390'. [ 734.768849][T16740] netlink: 'syz.4.3390': attribute type 13 has an invalid length. [ 734.816120][T16740] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3390'. [ 734.863075][T16740] erspan0: refused to change device tx_queue_len [ 734.879341][T16740] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 735.753262][ T6465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.770763][T12474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.780698][T12474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.788967][T12474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 735.810233][T12474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 735.820707][T12474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 735.828638][T12474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 735.952736][T16761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3396'. [ 736.024901][T16764] netlink: 'syz.2.3398': attribute type 2 has an invalid length. [ 736.089578][ T6465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.153069][T16764] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3398'. [ 736.520115][ T6465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.803167][T16783] sctp: [Deprecated]: syz.4.3401 (pid 16783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.803167][T16783] Use struct sctp_sack_info instead [ 736.959896][T16785] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.3401'. [ 736.998740][ T6465] device netdevsim0 left promiscuous mode [ 737.066547][ T6465] team0: Port device netdevsim0 removed [ 737.074993][ T6465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.518298][ T6465] device 0 left promiscuous mode [ 737.608439][ T6465] device 1 left promiscuous mode [ 737.845391][ T6465] tipc: Left network mode [ 737.906472][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 737.916155][T16817] netlink: 'syz.4.3411': attribute type 3 has an invalid length. [ 737.988646][T16817] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3411'. [ 738.428789][T16766] chnl_net:caif_netlink_parms(): no params data found [ 738.499742][T16832] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3413'. [ 738.641729][T16832] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 738.957171][T16824] device syzkaller0 entered promiscuous mode [ 738.957296][T16845] netlink: 'syz.4.3415': attribute type 3 has an invalid length. [ 738.994477][T16845] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3415'. [ 739.987043][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 742.067616][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 742.289295][T16871] netlink: 'syz.2.3419': attribute type 46 has an invalid length. [ 742.313594][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.332292][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.393312][T16766] device bridge_slave_0 entered promiscuous mode [ 742.546776][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.553995][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.573426][T16766] device bridge_slave_1 entered promiscuous mode [ 742.782113][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.810856][T16893] netlink: 'syz.4.3426': attribute type 40 has an invalid length. [ 742.938496][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.120259][T16766] team0: Port device team_slave_0 added [ 743.131560][T16766] team0: Port device team_slave_1 added [ 743.328629][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.366217][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.525793][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.624912][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.634893][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.785773][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.902455][T16926] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3434'. [ 744.155799][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 744.202249][T16914] device syzkaller0 entered promiscuous mode [ 744.225069][T16766] device hsr_slave_0 entered promiscuous mode [ 744.242064][T16766] device hsr_slave_1 entered promiscuous mode [ 744.254451][T16766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 744.275243][T16766] Cannot create hsr debugfs directory [ 744.419748][T16916] delete_channel: no stack [ 744.467650][ T6465] device wlan1 left promiscuous mode [ 744.489248][ T6465] team0: Port device wlan1 removed [ 747.198980][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.205425][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.142416][T16970] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.3446'. [ 749.160094][T16970] openvswitch: netlink: Flow actions attr not present in new flow. [ 751.088536][T16979] delete_channel: no stack [ 751.148750][T16989] netlink: 'syz.3.3450': attribute type 11 has an invalid length. [ 751.195832][T16989] netlink: 'syz.3.3450': attribute type 6 has an invalid length. [ 751.265853][T16989] netlink: 125060 bytes leftover after parsing attributes in process `syz.3.3450'. [ 751.403810][ T6465] device bridge_slave_1 left promiscuous mode [ 751.423670][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.570023][ T6465] device veth0_macvtap left promiscuous mode [ 753.312092][ T6465] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 753.540233][ T6465] device team_slave_1 left promiscuous mode [ 753.576784][ T6465] team0 (unregistering): Port device team_slave_1 removed [ 754.004576][ T6465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.967592][ T6465] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 755.068955][ T6465] device bridge0 left promiscuous mode [ 755.096681][ T6465] team0 (unregistering): Port device bridge0 removed [ 755.205170][ T6465] bond0 (unregistering): Released all slaves [ 755.559896][T17009] netlink: 'syz.2.3456': attribute type 13 has an invalid length. [ 755.576657][T17009] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3456'. [ 755.621883][T17009] erspan0: refused to change device tx_queue_len [ 756.091559][T17054] netlink: 'syz.0.3464': attribute type 2 has an invalid length. [ 756.202017][T17054] netlink: 'syz.0.3464': attribute type 1 has an invalid length. [ 756.245835][T17054] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3464'. [ 756.971501][T17068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3467'. [ 757.021100][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 757.551726][T17088] netlink: 'syz.2.3470': attribute type 46 has an invalid length. [ 757.595753][T17088] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3470'. [ 757.638173][T17079] netlink: 'syz.2.3470': attribute type 10 has an invalid length. [ 758.037136][T17079] batman_adv: batadv0: Adding interface: netdevsim0 [ 758.068427][T17079] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.125974][T17079] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 758.321827][T17096] netlink: 'syz.4.3472': attribute type 10 has an invalid length. [ 759.334697][T17112] netlink: 'syz.2.3475': attribute type 10 has an invalid length. [ 759.385479][T17112] team0: Cannot enslave team device to itself [ 759.651169][T16766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 759.705299][T16766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 759.735317][T17128] netlink: 'syz.4.3478': attribute type 10 has an invalid length. [ 760.302314][T17128] team0 (unregistering): Port device team_slave_0 removed [ 760.368825][T17128] team0 (unregistering): Port device team_slave_1 removed [ 760.499614][T16766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 760.562493][T16766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 760.966920][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.086856][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.156216][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 761.175406][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 761.234900][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 761.264896][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 761.295428][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.302914][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.340930][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 761.397115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 761.425703][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.433189][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.512231][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 761.536986][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 761.571944][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 761.641440][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 761.670802][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 761.724958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 761.767242][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 761.854874][T16766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.915877][T16766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.015253][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 762.053387][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 762.078789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 762.110831][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 762.159322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 762.189336][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 762.275842][T17199] netlink: 'syz.0.3495': attribute type 10 has an invalid length. [ 762.284069][T17199] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3495'. [ 762.631658][T17206] netlink: 'syz.4.3497': attribute type 13 has an invalid length. [ 762.675248][T17206] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3497'. [ 762.748335][T17212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3498'. [ 762.838535][T17206] erspan0: refused to change device tx_queue_len [ 763.229849][T17212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3498'. [ 763.415548][T17216] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 763.458767][ T9] tipc: Left network mode [ 763.463423][T17214] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3498'. [ 764.148933][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.234862][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.286843][T17225] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3499'. [ 764.514234][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.639255][T17244] netlink: 'syz.0.3506': attribute type 2 has an invalid length. [ 764.889173][T17249] netlink: 'syz.2.3504': attribute type 10 has an invalid length. [ 765.060547][T17249] device veth0_vlan left promiscuous mode [ 765.110248][T17249] device veth0_vlan entered promiscuous mode [ 765.162312][T17249] team0: Device veth0_vlan failed to register rx_handler [ 765.222672][T17253] netlink: 'syz.4.3507': attribute type 11 has an invalid length. [ 765.245572][T17253] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3507'. [ 765.355161][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 765.385882][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 765.425348][T17262] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3509'. [ 765.462771][T17264] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3509'. [ 765.626053][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 765.642993][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.826234][ T6465] wlan1: Trigger new scan to find an IBSS to join [ 766.153392][T16766] device veth0_vlan entered promiscuous mode [ 766.172300][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 766.182521][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 766.191965][T17279] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.3512'. [ 766.202693][T17279] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 766.216475][T17282] netlink: 'syz.3.3512': attribute type 21 has an invalid length. [ 766.334458][T16766] device veth1_vlan entered promiscuous mode [ 766.385107][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 766.583491][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 766.618008][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 766.770745][T17293] netlink: 'syz.4.3515': attribute type 21 has an invalid length. [ 766.831163][T16766] device veth0_macvtap entered promiscuous mode [ 768.593346][T16766] device veth1_macvtap entered promiscuous mode [ 768.606194][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 768.625501][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 768.672755][T17305] delete_channel: no stack [ 768.708611][T17305] delete_channel: no stack [ 768.752260][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.791015][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.837660][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.881471][ T6465] wlan1: Trigger new scan to find an IBSS to join [ 768.905754][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.976019][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.008326][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.052184][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.080299][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.103248][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.348362][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 769.358884][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 769.383193][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.448747][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.485799][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.525806][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.554754][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.581783][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.631303][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.652077][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.672641][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.700097][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.716576][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.741491][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 769.753745][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 769.776095][T16766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.784962][T16766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.795196][T16766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.804798][T16766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.140931][ T9] device wlan1 left promiscuous mode [ 770.200772][ T9] team0: Port device wlan1 removed [ 770.335132][T17358] netlink: 'syz.4.3526': attribute type 4 has an invalid length. [ 770.373830][T17358] __nla_validate_parse: 4 callbacks suppressed [ 770.373850][T17358] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3526'. [ 770.658679][T17378] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3530'. [ 770.709784][T17358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 771.004523][T17378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3530'. [ 771.018829][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3531'. [ 771.100038][ T9] device veth0_macvtap left promiscuous mode [ 771.468664][T17411] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3537'. [ 771.826517][ T6465] wlan1: Creating new IBSS network, BSSID 26:7b:01:97:ab:c7 [ 772.124373][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 772.141912][ T9] device batadv_slave_0 left promiscuous mode [ 772.200510][ T9] device team_slave_1 left promiscuous mode [ 772.211181][ T9] team0 (unregistering): Port device team_slave_1 removed [ 772.377018][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.386427][ T9] device bond_slave_1 left promiscuous mode [ 772.449337][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.461695][ T9] device bond_slave_0 left promiscuous mode [ 772.889695][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 772.898444][ T9] device team0 left promiscuous mode [ 772.933340][ T9] bond0 (unregistering): Released all slaves [ 772.971815][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.988566][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.007796][T17416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3539'. [ 773.027400][T17411] netlink: 'syz.4.3537': attribute type 25 has an invalid length. [ 773.060999][ T2878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 773.193221][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.202371][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.211127][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.238257][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.280236][T17442] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 773.312955][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 773.317981][T17442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3541'. [ 773.335024][T17440] device bridge_slave_1 left promiscuous mode [ 773.353373][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.390849][T17449] Dead loop on virtual device ip6_vti0, fix it urgently! [ 773.438630][T17440] device bridge_slave_0 left promiscuous mode [ 773.463314][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.443977][T17474] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3549'. [ 774.497592][T17481] netlink: 'syz.2.3551': attribute type 6 has an invalid length. [ 774.506063][T17481] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3551'. [ 774.534145][T17490] tipc: Started in network mode [ 774.539720][T17490] tipc: Node identity 9215a268, cluster identity 4711 [ 774.564326][T17490] tipc: Node number set to 2450891368 [ 776.360973][T17510] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.3557'. [ 879.845601][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 879.852790][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17498/1:b..l [ 879.861113][ C1] (detected by 1, t=10502 jiffies, g=98541, q=735 ncpus=2) [ 879.868515][ C1] task:syz.0.3555 state:R running task stack:25496 pid:17498 ppid:16513 flags:0x00004000 [ 879.880353][ C1] Call Trace: [ 879.883668][ C1] [ 879.886635][ C1] __schedule+0x11d1/0x40e0 [ 879.891310][ C1] ? __sched_text_start+0x8/0x8 [ 879.896210][ C1] preempt_schedule_irq+0xbb/0x160 [ 879.901357][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 879.907134][ C1] ? rcu_is_watching+0x76/0xa0 [ 879.912020][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 879.917863][ C1] irqentry_exit+0x63/0x70 [ 879.922300][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 879.928304][ C1] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 879.934317][ C1] Code: 8a e8 46 56 dd 08 65 66 8b 05 7e 3b b4 7e 66 85 c0 75 54 bf 01 00 00 00 e8 6f 85 09 00 e8 0a 79 39 00 fb 65 8b 05 2a 0a b3 7e <85> c0 75 05 e8 79 1e b1 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 879.954205][ C1] RSP: 0018:ffffc9000c5577e0 EFLAGS: 00000282 [ 879.960402][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 219ccbb998c01f00 [ 879.968399][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 879.976568][ C1] RBP: ffffc9000c557870 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 879.984566][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffffffff886a8298 [ 879.992575][ C1] R13: ffff888079ff3280 R14: dffffc0000000000 R15: 1ffff920018aaefc [ 880.000571][ C1] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 880.006226][ C1] ? _local_bh_enable+0xa0/0xa0 [ 880.011104][ C1] ? rcu_is_watching+0x11/0xa0 [ 880.015946][ C1] ? netif_receive_skb_list+0xd7/0x4e0 [ 880.021428][ C1] ? bpf_test_run_xdp_live+0x178b/0x1a90 [ 880.027096][ C1] bpf_test_run_xdp_live+0x1834/0x1a90 [ 880.032591][ C1] ? 0xffffffffa00041c0 [ 880.036794][ C1] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 880.042547][ C1] ? xdp_convert_md_to_buff+0x330/0x330 [ 880.048165][ C1] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 880.054449][ C1] ? bpf_test_init+0x119/0x140 [ 880.059247][ C1] ? xdp_convert_md_to_buff+0x5b/0x330 [ 880.064821][ C1] bpf_prog_test_run_xdp+0x736/0xf10 [ 880.070155][ C1] ? dev_put+0x80/0x80 [ 880.074262][ C1] ? dev_put+0x80/0x80 [ 880.078358][ C1] bpf_prog_test_run+0x31e/0x390 [ 880.083339][ C1] __sys_bpf+0x62b/0x780 [ 880.087613][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 880.093037][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 880.099315][ C1] __x64_sys_bpf+0x78/0x90 [ 880.103771][ C1] do_syscall_64+0x4c/0xa0 [ 880.108233][ C1] ? clear_bhb_loop+0x60/0xb0 [ 880.112937][ C1] ? clear_bhb_loop+0x60/0xb0 [ 880.117642][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.123559][ C1] RIP: 0033:0x7f6a8539c799 [ 880.128002][ C1] RSP: 002b:00007f6a8623b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.136458][ C1] RAX: ffffffffffffffda RBX: 00007f6a85615fa0 RCX: 00007f6a8539c799 [ 880.144488][ C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 880.152680][ C1] RBP: 00007f6a85432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 880.160681][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.168763][ C1] R13: 00007f6a85616038 R14: 00007f6a85615fa0 R15: 00007ffe7cab3d68 [ 880.176781][ C1] [ 880.179824][ C1] rcu: rcu_preempt kthread starved for 10314 jiffies! g98541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 880.191036][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 880.201031][ C1] rcu: RCU grace-period kthread stack dump: [ 880.206961][ C1] task:rcu_preempt state:R running task stack:27472 pid:16 ppid:2 flags:0x00004000 [ 880.217770][ C1] Call Trace: [ 880.221071][ C1] [ 880.224030][ C1] __schedule+0x11d1/0x40e0 [ 880.228571][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 880.234584][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 880.240509][ C1] ? __sched_text_start+0x8/0x8 [ 880.245479][ C1] ? __mod_timer+0x91e/0xd00 [ 880.250193][ C1] schedule+0xb9/0x180 [ 880.254300][ C1] schedule_timeout+0x184/0x2d0 [ 880.259191][ C1] ? console_conditional_schedule+0x40/0x40 [ 880.265213][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 880.271158][ C1] ? update_process_times+0x1b0/0x1b0 [ 880.276593][ C1] ? prepare_to_swait_event+0x335/0x350 [ 880.282191][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 880.287167][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 880.293353][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 880.298138][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 880.303105][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 880.308329][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 880.313650][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 880.319225][ C1] rcu_gp_kthread+0x99/0x3b0 [ 880.323886][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 880.329033][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 880.335040][ C1] ? __kthread_parkme+0x162/0x1c0 [ 880.340101][ C1] kthread+0x29d/0x330 [ 880.344193][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 880.349327][ C1] ? kthread_blkcg+0xd0/0xd0 [ 880.353942][ C1] ret_from_fork+0x1f/0x30 [ 880.358401][ C1] [ 880.361451][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 880.367882][ C1] Sending NMI from CPU 1 to CPUs 0: [ 880.373208][ C0] NMI backtrace for cpu 0 [ 880.373222][ C0] CPU: 0 PID: 17503 Comm: syz.1.3556 Not tainted syzkaller #0 [ 880.373236][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.373243][ C0] RIP: 0010:perf_trace_buf_alloc+0x0/0x300 [ 880.373263][ C0] Code: 01 00 00 00 00 ad de 48 89 03 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 e9 f7 ff 43 80 7c 25 00 00 75 d3 eb d9 66 0f 1f 44 00 00 <55> 41 57 41 56 41 55 41 54 53 50 49 89 d7 49 89 f6 89 fb e8 28 e9 [ 880.373276][ C0] RSP: 0018:ffffc900000073b8 EFLAGS: 00000086 [ 880.373289][ C0] RAX: 1ffffffff196ff7c RBX: dffffc0000000000 RCX: 150241abbb4eed00 [ 880.373300][ C0] RDX: ffffc90000007420 RSI: ffffc90000007400 RDI: 0000000000000014 [ 880.373310][ C0] RBP: ffffc90000007498 R08: ffffffff8e1fcd2f R09: 1ffffffff1c3f9a5 [ 880.373320][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f9a6 R12: ffffffff8cb7fb60 [ 880.373330][ C0] R13: ffffe8ffffc34f78 R14: ffffffff8cb7fbe0 R15: 1ffff92000000e7c [ 880.373340][ C0] FS: 00007f6ce58026c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 880.373353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.373363][ C0] CR2: 0000200000001740 CR3: 000000005fe98000 CR4: 00000000003506f0 [ 880.373378][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 880.373387][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 880.373396][ C0] Call Trace: [ 880.373401][ C0] [ 880.373405][ C0] perf_trace_preemptirq_template+0x143/0x320 [ 880.373425][ C0] ? irqentry_enter+0x33/0x50 [ 880.373439][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 880.373459][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 880.373479][ C0] ? lock_chain_count+0x20/0x20 [ 880.373496][ C0] ? irqentry_enter+0x33/0x50 [ 880.373510][ C0] trace_hardirqs_off_finish+0x13f/0x180 [ 880.373529][ C0] irqentry_enter+0x33/0x50 [ 880.373541][ C0] sysvec_irq_work+0xa/0xc0 [ 880.373562][ C0] asm_sysvec_irq_work+0x16/0x20 [ 880.373577][ C0] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 880.373592][ C0] Code: 8a e8 46 56 dd 08 65 66 8b 05 7e 3b b4 7e 66 85 c0 75 54 bf 01 00 00 00 e8 6f 85 09 00 e8 0a 79 39 00 fb 65 8b 05 2a 0a b3 7e <85> c0 75 05 e8 79 1e b1 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 880.373603][ C0] RSP: 0018:ffffc900000075a0 EFLAGS: 00000286 [ 880.373614][ C0] RAX: 0000000000000101 RBX: 0000000000000200 RCX: 150241abbb4eed00 [ 880.373623][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 880.373633][ C0] RBP: ffffc90000007630 R08: ffffffff90af5337 R09: 1ffffffff215ea66 [ 880.373643][ C0] R10: dffffc0000000000 R11: fffffbfff215ea67 R12: ffffffff8903bf15 [ 880.373652][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000000eb4 [ 880.373663][ C0] ? ip6t_do_table+0x1d5/0x14d0 [ 880.373688][ C0] ? _local_bh_enable+0xa0/0xa0 [ 880.373700][ C0] ? ip6t_do_table+0x131e/0x14d0 [ 880.373721][ C0] ip6t_do_table+0x131e/0x14d0 [ 880.373747][ C0] ? ip6t_do_table+0x1d5/0x14d0 [ 880.373765][ C0] ? ip6t_alloc_initial_table+0x640/0x640 [ 880.373781][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 880.373798][ C0] ? ip6table_mangle_hook+0x466/0x7a0 [ 880.373814][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 880.373831][ C0] ? nf_nat_ipv6_local_fn+0x1f2/0x390 [ 880.373850][ C0] ? ip6t_alloc_initial_table+0x640/0x640 [ 880.373867][ C0] nf_hook_slow+0xb9/0x200 [ 880.373885][ C0] ndisc_send_skb+0x1390/0x14e0 [ 880.373902][ C0] ? ndisc_send_skb+0x1fa/0x14e0 [ 880.373922][ C0] ? ndisc_mc_map+0x810/0x810 [ 880.373937][ C0] ? skb_dst+0xd0/0xd0 [ 880.373963][ C0] addrconf_rs_timer+0x2d1/0x630 [ 880.373981][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 880.373996][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 880.374019][ C0] call_timer_fn+0x1ac/0x670 [ 880.374033][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 880.374048][ C0] ? call_timer_fn+0xcf/0x670 [ 880.374062][ C0] ? __run_timers+0x800/0x800 [ 880.374081][ C0] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 880.374098][ C0] __run_timers+0x53e/0x800 [ 880.374125][ C0] ? detach_timer+0x350/0x350 [ 880.374146][ C0] run_timer_softirq+0x63/0xf0 [ 880.374160][ C0] handle_softirqs+0x2a1/0x930 [ 880.374177][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 880.374193][ C0] ? do_softirq+0x210/0x210 [ 880.374208][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 880.374223][ C0] __irq_exit_rcu+0x13b/0x230 [ 880.374235][ C0] ? irq_exit_rcu+0x20/0x20 [ 880.374253][ C0] irq_exit_rcu+0x5/0x20 [ 880.374265][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 880.374285][ C0] [ 880.374289][ C0] [ 880.374294][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 880.374309][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 880.374323][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9e 02 2e f7 48 89 df e8 e6 ca 2e f7 e8 31 1f 52 f7 fb bf 01 00 00 00 86 2b 22 f7 65 8b 05 47 b0 cb 75 85 c0 74 02 5b c3 e8 94 c4 c9 [ 880.374334][ C0] RSP: 0018:ffffc9000c4a7b30 EFLAGS: 00000286 [ 880.374344][ C0] RAX: 150241abbb4eed00 RBX: ffff888028371280 RCX: 150241abbb4eed00 [ 880.374354][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 880.374364][ C0] RBP: ffffc9000c4a7c90 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 880.374374][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: dffffc0000000000 [ 880.374384][ C0] R13: 0000000100000000 R14: 0000000000000000 R15: 0000000000000020 [ 880.374401][ C0] signal_setup_done+0x2e6/0x490 [ 880.374421][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 880.374435][ C0] ? ptrace_signal+0x7d0/0x7d0 [ 880.374456][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 880.374469][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 880.374482][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 880.374495][ C0] ? _local_bh_enable+0xa0/0xa0 [ 880.374508][ C0] ? fpregs_activate+0xb0/0x230 [ 880.374522][ C0] ? fpu__clear_user_states+0x36/0x320 [ 880.374535][ C0] ? fpu__clear_user_states+0x1be/0x320 [ 880.374550][ C0] arch_do_signal_or_restart+0xf83/0x1350 [ 880.374566][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 880.374595][ C0] ? get_sigframe_size+0x10/0x10 [ 880.374611][ C0] ? lock_chain_count+0x20/0x20 [ 880.374641][ C0] exit_to_user_mode_loop+0x70/0x110 [ 880.374661][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 880.374681][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 880.374694][ C0] do_syscall_64+0x58/0xa0 [ 880.374710][ C0] ? clear_bhb_loop+0x60/0xb0 [ 880.374725][ C0] ? clear_bhb_loop+0x60/0xb0 [ 880.374741][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.374756][ C0] RIP: 0033:0x7f6ce49bbd10 [ 880.374768][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d 02 22 07 00 e8 65 65 f9 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 880.374779][ C0] RSP: 002b:00007f6ce5801a78 EFLAGS: 00000246 [ 880.374790][ C0] RAX: 0000000000000000 RBX: 00007f6ce4c15fa0 RCX: 00007f6ce499c799 [ 880.374799][ C0] RDX: 00007f6ce5801a80 RSI: 00007f6ce5801bb0 RDI: 0000000000000021 [ 880.374808][ C0] RBP: 00007f6ce4a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 880.374817][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.374825][ C0] R13: 00007f6ce4c16038 R14: 00007f6ce4c15fa0 R15: 00007ffe87cdd7f8 [ 880.374843][ C0] [ 881.106028][ T129] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17498 } 10542 jiffies s: 84173 root: 0x0/T [ 881.241201][ T129] rcu: blocking rcu_node structures (internal RCU debug): [ 882.334605][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 882.341157][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.185757][T12474] Bluetooth: hci0: command 0x0406 tx timeout [ 883.191878][T12474] Bluetooth: hci2: command 0x0406 tx timeout [ 883.936715][ T2878] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 884.933177][ T9] device 0 left promiscuous mode [ 885.125268][ T9] tipc: Left network mode [ 885.762861][ T9] syzkaller: port 1(erspan0) entered disabled state [ 885.792944][ T9] device erspan0 left promiscuous mode [ 885.799399][ T9] syzkaller: port 1(erspan0) entered disabled state [ 885.905861][T12474] Bluetooth: hci5: command 0x0406 tx timeout [ 886.565042][ T9] device hsr_slave_0 left promiscuous mode [ 886.576535][ T9] device hsr_slave_1 left promiscuous mode [ 886.582828][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.590658][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.599183][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.606785][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.614529][ T9] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 886.621876][ T9] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 886.638177][ T9] device bridge_slave_1 left promiscuous mode [ 886.644565][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.654170][ T9] device bridge_slave_0 left promiscuous mode [ 886.660528][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.674162][ T9] bridge0: port 3(team0) entered disabled state [ 886.682039][ T9] device bridge_slave_1 left promiscuous mode [ 886.688445][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.697644][ T9] device bridge_slave_0 left promiscuous mode [ 886.704005][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.733358][ T9] device veth1_macvtap left promiscuous mode [ 886.742541][ T9] device veth1_macvtap left promiscuous mode [ 886.749193][ T9] device veth0_macvtap left promiscuous mode [ 886.755399][ T9] device veth1_vlan left promiscuous mode [ 886.875939][T12474] Bluetooth: hci3: command 0x0406 tx timeout [ 886.882016][T12474] Bluetooth: hci1: command 0x0406 tx timeout [ 887.254448][ T9] team0 (unregistering): Port device team_slave_1 removed [ 887.302529][ T9] team0 (unregistering): Port device team_slave_0 removed [ 887.349637][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.404795][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.739652][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 887.778271][ T9] bond0 (unregistering): Released all slaves [ 888.044060][ T9] device geneve1 left promiscuous mode [ 888.052478][ T9] team0 (unregistering): Port device geneve1 removed [ 888.230552][ T9] device vlan0 left promiscuous mode [ 888.236511][ T9] device veth0_vlan left promiscuous mode [ 888.244755][ T9] team0 (unregistering): Port device vlan0 removed [ 888.466883][ T9] device team_slave_1 left promiscuous mode [ 888.475149][ T9] team0 (unregistering): Port device team_slave_1 removed [ 888.525380][ T9] device team_slave_0 left promiscuous mode [ 888.532506][ T9] team0 (unregistering): Port device team_slave_0 removed [ 888.577573][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.629013][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.932890][ T9] bond0 (unregistering): Released all slaves