last executing test programs: 10m34.295217738s ago: executing program 1 (id=1099): socket$kcm(0xa, 0x3, 0x3a) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80^\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\xf9_\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe2aa, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000001340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x2, @private=0xa010101}, 0x10, &(0x7f0000000480)=[{&(0x7f00000003c0)="3346ffa757c57a0756f385f6b07989b437752c26968039da406066492b86af626f7a9a6bfb2a0484ef76b1f1e8efa6ed4a42e967c98af4719af23e6deeb7ee9a8d734c38f6d658d384092ebb1149bf3db9c972f58696b591d5fbce82866229606f3ee5d9245b5370b802914720ac9b7a1e49a9e6083d00dbbc1baf1e95ea977bef060245d8941f2a4bcf9d7cedf7a098cb4632d130b1b5392d6db1efe34b039fc262124b2c7ef78d05", 0xa9}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfbd1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb7}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@rr={0x7, 0x7, 0xae, [@private=0xa010101]}, @lsrr={0x83, 0x17, 0x49, [@local, @multicast1, @empty, @loopback, @local]}, @timestamp_addr={0x44, 0x4c, 0x17, 0x1, 0x6, [{@remote, 0x81}, {@loopback, 0xa38a}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@multicast2, 0x80000001}, {@remote, 0x8}, {@empty, 0x461}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x5}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x158}, 0x4000048) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0xff}, 0x10018c, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4a}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56}, 0x20) 10m29.2194124s ago: executing program 1 (id=1117): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x60, 0x3b7, 0x0, 0x0, 0x7, 0x2, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, [@exit, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x18, &(0x7f00000000c0)=""/24, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m13.855764598s ago: executing program 32 (id=1117): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x60, 0x3b7, 0x0, 0x0, 0x7, 0x2, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfff}, [@exit, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x18, &(0x7f00000000c0)=""/24, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.967213862s ago: executing program 5 (id=3862): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f8021f0000440002000800d30461bc24eeb556a705251e61821498fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd001b7800002000"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(r0, &(0x7f0000003240)={&(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000031c0)=[{&(0x7f00000006c0)="fc33a3fb9e4cdd205e1529f4946e8b2c1cd0bf6a2a2938932d48cff9026f0566afe308433737b7ab5df5752e962a8e0a31d1c253cffe58ce22ff39180da59f29a5733e112891c7b8845a00a4399499542ad6c917c2fcfe03feef2b31e9baaf1308638fcb69f7b9a2573bfe57ca878f4f8b03b3c3b9b79c790833a28454a2613206ad5f6ea7f2236c1da651c3b33a030cc079e3", 0x93}, {&(0x7f00000007c0)="aff02fc8db44eee871a9097fb4debcfb36056021e119", 0x16}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="9dbfda506969902860362d17d87092bded13b7746d18bdaf231cbcb5d64d89a6ad4fde80a685e392920d027eb3087b3a5d6a2079bb002ab1aa20b834e0c5e8a65a307897676128", 0x47}, {&(0x7f0000003140)="507b1e9cad07f82998edd9c84dde90d6dcb21277baecb1b76ea0bde29955d51227343e747965d72e25910558e26db76096ec52e64bc1a489da20cd8f15bc7ebb96c10eddb0bbddcb116e8a89d480e3c1a8dbea568ff3e36c106b85eac323fede2b8ac8588d473b7928541d0a72d673ff6465a00451d80275e445", 0x7a}], 0x5}, 0x80) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b35d25a806f8c6394f91424fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0x4d, &(0x7f0000002040)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000003000000000000004a00ffb562ce0000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xe9, &(0x7f0000000380)=""/233, 0x41000, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.time_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0xc601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x10, 0xfc, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b595"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') close(r6) socket$kcm(0x10, 0x2, 0x0) 6.206600311s ago: executing program 5 (id=3867): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80000000, 0x9}, 0x10138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000018000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.761008655s ago: executing program 4 (id=3869): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.643396689s ago: executing program 2 (id=3871): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x8, [@enum64={0xf, 0x5, 0x0, 0x13, 0x1, 0x0, [{0x6, 0xeb44, 0x200}, {0x1, 0x7fffffff, 0x1}, {0x10, 0x8, 0x20000}, {0x7, 0x7fffffff, 0x100}, {0xd, 0x81}]}, @enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x4}, {0xa, 0x3}]}, @union={0x5, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x9, 0x4, 0x4}, {0x6, 0x4, 0x9}, {0xe, 0x5, 0x6}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @func={0xd, 0x0, 0x0, 0xc, 0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000400)=""/2, 0xe4, 0x2, 0x1, 0xf4c4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, r2}, 0x38) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 5.507394283s ago: executing program 5 (id=3872): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000001760fc8561277237000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x6, 0x0}, 0x8) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x5, 0x18}, 0xc) mkdir(&(0x7f0000000040)='./file0\x00', 0x60) r11 = openat$cgroup_ro(r5, &(0x7f00000008c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000095000000000000000500000018110000", @ANYRES32=r6, @ANYBLOB="0005000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000085100000020000007bdc1842850000006f0000008da1200010000000c5a8fcffffffffffbf91000000000000b7020000020000008500000085000000b700000000000000950000000000000006511b7df87d25432e5dc0125d7e62070636328dda7286850ed011363610c3fff6bc653726512bb0814c82fbc5d238512242f389f2b01fb3d6c9e9e4a81536"], &(0x7f0000000600)='GPL\x00', 0xd4c, 0xf2, &(0x7f0000000640)=""/242, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r7, 0x8, &(0x7f0000000740)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xa, 0xb, 0xc58e}, 0x10, r9, r3, 0x3, &(0x7f0000000900)=[r10, r4, r11], &(0x7f0000000940)=[{0x1, 0x5, 0xb}, {0x2, 0x1, 0x10, 0x9}, {0x4, 0x3, 0x8, 0x6}], 0x10, 0x7}, 0x94) 5.436052736s ago: executing program 4 (id=3873): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) r3 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x7}, 0x103865, 0x0, 0x51, 0x0, 0x2, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000000c0)=0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91324fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$kcm(r3, &(0x7f0000001000)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x8, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="e78e05", 0x3}], 0x1, 0x0, 0x18}, 0x41) 5.337970259s ago: executing program 2 (id=3874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ce00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x10}}], 0x28}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0), 0x8) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.137933205s ago: executing program 0 (id=3875): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x1041a1, 0xc, 0x0, 0x1, 0x0, 0xfffffffe, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 2.123849452s ago: executing program 0 (id=3876): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x2004, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c042, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935", 0x8d}, {&(0x7f0000000080)="b5fb6b998870a172cca313c87b", 0xd}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 2.055973724s ago: executing program 3 (id=3877): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.954123808s ago: executing program 5 (id=3878): socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40010120) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x12, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10003}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000010000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0x2000}, 0x60) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r5) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) 1.906164279s ago: executing program 4 (id=3879): socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000700"/28], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0xc8, 0x0, 0x2, 0x1, 0x8010, 0x8, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020c00000000000000000000000000000003e07e1944ef9c34ef697e813c271556f928a0780859186569197d526b178797e520cffe7045f16c4860a38f455a1ace123b5d008f5aab0a1a0ada0f0ef6faaa1e088425b8fdb83b0a0ff023ed4c56e4e8c25edcd58b115c4f9c82840487986c29040b00d8b93ec92da1740fd6e61c0ee1e73fb3cb6de7d8a78"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x7aa6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000fd600afeb1fdbe1b00000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0xa, 0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r4], 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000a00)=""/225, 0xe1, 0x0, &(0x7f0000000b00)=""/210, 0xd2}}, 0x10) r7 = socket$kcm(0x2b, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x17, &(0x7f0000000200)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x1a, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000007f00000018110000", @ANYRES32=r0, @ANYBLOB="043e65c59aa2e52e9ea133aaeeaf82b3e6f03ea7bf49c13091ffc508aa0bb71ec595e22047b3086b8d99f1a114a1a8aceb275c8e65cc545701ac215884149e6c4102776128721093cc67951faa0f4e85d2ac03325d30fc05a56ee842ac4dfdfc051cac7f32806a09fc29f4ae879eeffa59085a83734e8298a4aa7201e5ca10f125c7e9f43e43ed25abb68dd5cab12409c2fa719b7b2b66c51ca3fa1a10fd18d6e597b4b6c8c085f8a40564c9520eda363d3d16d6ef36c1d9f41be986b7267d5f609aa19f54bafdd0e532e129ec2ec2af7fa86e4271dd4abde8e2843f9b9a6206109866751f788c5e30375c0145c9f84a00c0037f823b02"], &(0x7f0000000640)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x60, '\x00', r5, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x804, 0x3, 0x6, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x9, &(0x7f0000000cc0)=[r8], &(0x7f0000000dc0)=[{0x5, 0x2, 0xd, 0xa}, {0x5, 0x5, 0x1, 0x6}, {0x1, 0x4, 0x1, 0xa}, {0x1, 0x2, 0x5, 0x1}, {0x0, 0x2, 0x10}, {0x4, 0x3, 0xc, 0x4}, {0x8, 0x3, 0x2, 0xc}, {0x0, 0x2, 0xd, 0x7}, {0x1, 0x2, 0x2, 0x8}], 0x10, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a60100000300000004000000000000000100000000000012050008000400000000000012030000000600000000000010080000000061726a95"], 0x0, 0x67}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.8727529s ago: executing program 2 (id=3880): socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open$cgroup(&(0x7f0000000dc0)={0x2, 0x80, 0x1, 0xb, 0x0, 0x4, 0x0, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0xffff, 0xfffffffffffff945}, 0x204, 0x7fffffff, 0xfe5, 0x5, 0x3, 0xb, 0x200, 0x0, 0x1, 0x0, 0xb}, r1, 0x8, r0, 0x2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xcf, 0x4, 0x8, 0x6, 0x0, 0x2eabdff3, 0x40, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x4, 0xe9, 0x6, 0x5, 0x9, 0xffffff80, 0x3, 0x0, 0xb375e5e, 0x0, 0x1}, 0x0, 0xc, r3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="200000000000000084000000020000007e8b000000d4970a27000000e7000000e8da1fc6d025352ae77337b68dbbe8e5359f2b73fd617bf0e62349a27dc77a"], 0x20}, 0x8014) 1.763387594s ago: executing program 0 (id=3881): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xfeffffff}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 1.696123436s ago: executing program 3 (id=3882): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3e1002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'pimreg0\x00', @local}) setsockopt$sock_attach_bpf(r0, 0x0, 0x33, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)="6e297750f8e896f4a94c8222f345a0d5d08f", 0x12}, 0x40811) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x107412, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000001240)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000000000085000000950000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)}, 0x0) (async) close(r6) (async) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0xc008744c, &(0x7f0000000180)) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mkdir(0x0, 0xec) 1.651245228s ago: executing program 2 (id=3883): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.57129796s ago: executing program 4 (id=3884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x8, 0x8}, {0x40000000, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1000c, 0x5}]}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a365ce4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff0000e1fffffffffffff39956e4f98b53ced9802b", 0xd8}], 0x1}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRESDEC=r1, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f94424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000350e000085000000640500"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r8 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = getpid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x4, 0x10, 0x1, 0x10, 0x0, 0x3, 0x31000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf10, 0x1, @perf_config_ext={0x2, 0x8}, 0x19042, 0x8ee1, 0xdfa, 0x0, 0x8000, 0x4, 0x5, 0x0, 0x40, 0x0, 0x5}, r10, 0x4, r3, 0x0) r11 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB='c$'], 0xa) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) 1.57103302s ago: executing program 0 (id=3885): socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x15, 0x800, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 5) 1.513360812s ago: executing program 3 (id=3886): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x1041a1, 0xc, 0x0, 0x1, 0x0, 0xfffffffe, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 1.354963907s ago: executing program 2 (id=3887): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.024361268s ago: executing program 4 (id=3888): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40) socketpair(0x2c, 0x5, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1d, 0x2, 0x1000000, &(0x7f0000000000)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x647}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000980)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007f0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x81, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x400000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) 1.007280058s ago: executing program 3 (id=3889): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0x210100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 904.581851ms ago: executing program 5 (id=3890): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe55b204000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f01ea23b77edf704bc2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350d3798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='#', 0x1}], 0x1}, 0x400c804) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)="454f644e5495", 0x6}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002900)=[{&(0x7f00000002c0)="07c824456f2dd7f76f5275ba3e795e42d48e640b6a4a63a267a3880521a819f980da4a22e635ceb9c09dcd06814ddfd4aac089399d10b74517666c7a133462e81932bff93c2cff4e47dd339421bc50d7fd5d3267ae7ba46d4c2990749a2deed5408edfde331719afc266d53e6f73e713d7a79fbe349351d966385add82617bbc5d288bf953e57f92b376ab0d5cf2c2216317ba28b2b2ca49167805794b0a2c505271d6e86d6cc312070a6e2bbadd4e4006477360b6fd273dae36f7011c74ab48", 0xc0}, {&(0x7f0000000380)="9a361d725465c3e8583e116dc485503d5932d43b9978f9bfd06652ce306f320ef648fc19489fd19e9f6b9e8b8ac9c805314815032f828d13e79bae89332ee938066719807faeaa6af734d0935a1cc1c1919b87d61392c51fdb67d58b929e", 0x5e}, {&(0x7f0000000500)="ec21a715df8c97e007c33c7f1927b7d16a6daa43ae614535fa3018ea4e6348c43b916b4ef52ae46b0d74916ad9b9389fb53b46708beea1de8473bf07e077e0c74c6510be4bc466bb0c23504e701d391f61427f1365d393f270ea9772834dcb30d9155013333dcd64003c5fc0c84ddcd2a15f18e157a7c1bd9f16aec21a6fc53ed876cbc94da82020d0c22158008ecc12c9805d7c1fcf873e398f25413596f833e5e2742da189eddbf0243782f6f67944f92926ec85e7d5f11fabc0234677239c385bfdb36bea15ebb6bdaf5946248846a4f0e0d97e63a0ebff9f73532690", 0xde}, {&(0x7f0000000600)="27124d5d24d3e041c1d2e8dc71f38fe310d194dd885efa393104d021e469de92fd6d8dab38130d94ae43dc55e68749c215d85479a79857d6dce20d7449e7c82771", 0x41}, {&(0x7f0000001800)="f98d035a90a5ee0c9dfc70c309bf642250b7c98e2f349833fefea7cd8d33b5c300a9df58e2b5939645834b12b0077862d3ca8763261dd129ba3f1f552ffb40b133da144050be42320c876840905b68799fb7e099632578f3884719ffa1ad5fbf8b3be27af0edab1f4cd674b97de317f2de1dba4ebe9862e6df6c002ae32f1fe3f50df7b221a2fde9d4552cc636bbda66fb66703d6be194ab82f0cd2a78bbd96331f432e4e1cd243b01a0d64e02a5142c716460f6e20d02cb1c0cf6b26702e8e4ec8f5ac84ee0799a99f014476865c1845425f054ed0a5f7f3a0c29ac56643758c6e19d0ba6f58a215e3d9bb2ce96e6866a09795f63deb30e63dcd046dc5d7725184603f56166acd5797a30de2ba139a046e028b2e3c4d3d844a4648a43896d0e8c47ec992189515af490992ea3a0c57be2db11b5e37554ac81236f6cb9c5e704fab4d14ba0a536f9e08caa8dff72aaa1f669d545583a0da67bd1c2f9acdf50925e0ac5552aceff312b27fd544612384e606abf5539f7ce22001423d9ca3c2fdb59992ade9f0c08801fffce42aaf795f376e77ee14993264bb4042e41174aee17336067ac9c2ca9e28854922d425a138124ef944892a3e794013f784d19ccf2bd4c923423183b0e90972fd67710e422b86c2ac8eaee90151092ccd6f7bb96064b713015148b700056f97f0552d343ea1e2eb70049ccca3b0145fa76f7b08202d19b56bf360fbc25d897aa81c026b6dbdbc50346a269b48c3c33c4bc58f079ff5d742622ea84cca045cbd488745cd866f66d87801d9ef2ab35c3d223969c314bfe8ff06fbff8bfcb3a34cae684440e3f8e9d518aad2eae1980e0a9b31c4313a5a32efac365ea4646aba2ec94ccb91001a04a2799f48ac301fd30d3f48a87fbd539f740c2a20bcd8e13a54b26d3e1429e02a5e1fd50fb7035c3c03f54fd3eeaa8c9cd8b28ce9f8bc632d21d45bf9d7fc38ecf14f9cbd11520312aa15433daa2199ebc076984363dc2346a75f8f63131bed0da07e0f2bb7a21edfd985ab9a62fc717c663dcea8ceb79ea65be930db295fc02b1e16d81f5201b8246c7a97e0eaca61b13619ce116f1063ca21b49799cc4ae7435fc4ca244118742e48d5de9c30f9ac86a20cc9482e24e262d480b24bdb2fd5483657b10f4e44cda52f580ded993302cd70a922713281309735f85f12d82b7b507084fd39eacce2f170410c2e2bc3457d5a047ec13da8393fb1187dfbd7db4eb8357aca72abe1e8b4f0776d755261e8ee836c1ba7ddb1ef68ec902982b4d77b81408f5a6175f7a0f3715b7e099c84798b7772d9df63269154f6acc5470e88b9f32a2d18009ad3141039417f19fed1122989469239ad0464c5927f69a4513f07a087c5da37c045fc3498e4fc332600c186a04e57ffec4fb41edcbdb04b03c223eff4444267db3372eef9400aa57a1ad3062198e0aad9f02a3d7d8f4ebd8212ecb0aa7a92e84fe85077b1a6863458f82fa066a1f64de52a21f72ba046dcde5c706f3330aba2498f2e1f30440c6bac4fd6e8599790780f53a455957475321c3b25fe4d8535ff24e2a5804ea5635742f54530cc73f5f8fc38465d999c43779be97fa5b1b43b0a1a017b758b7697758bddb2812a6413174ca04ea5fd87bd3afbb1d8b1569545fad2811e1c9b2609ec9764b06a884c8ed65e29aafda1d9afceed857e4ea41245b4b0fb24abf03871068158bba9af608bcc64f59d42d9861d001a08e5b4a3188f3e69cce771f4eb27e961b4ce8bacb1e68710a18050e6f623006d062b2f96755e1ef3487bb8142c919ef5905f0ca2713e4b244e5094b34549d291b2f7d445ce55f1fcdd12d452b0bcf8ef2c0ead2732be06c4733f07c7411999404605d02e75ddbdfff40a0b8cc74ab9d95fd8d69d01d97a69e82589f8611f25cb7c7af50f21a6f279b77810c02d65600c8dfc5c080b96a51f88bcc744e63f3fa22a48950586a8371170569f2378288461386021a28afc692f0c6450063db272955125f8e8db63515c0a456dfe0b65566e0e8f495a8916887c13285414ea48e21812c530ff857679a3411b2b3eae07cb922302d85312e3836cfa3ad5b46e2458e1c010f11469e327be5dba9dba46fb6f71f2f77920bec06cf04925d4121e7decb0ed361f1af7136c8eb194f1ac650fbf94d69192926054b145949d6264d9639027bf837929ba71c91e386e99e6226f38b3a3dc812ae7f7f30661a2a543bc551e27e6cc9662f16a7e4cb0a7c7ecb3743faa11cca61e7675b9fda412d6c93d124e7c0d3fcd1aef69b4addcc71eca03069940ae72ac8defdc80e2a3f4f5901eeae782e93e96d6aaf3e69d60007e7ddb1a8837c1dabf46fbd48d514377724f7a54f6d0d1a7a3525e3d45e85d1ba49402a96ec26c497f80794372b5006feae2733d818193fcccce90783b6b11a376f988318be75d5381a4e57e72b1e99eb4b7822593b511d8c48c8e1cfd84d86fb65c5be3b02694514b6527812fc7fcf3b8157771f7114ab44e0e76a9a2fe0e65b0fa1c0b05417147be6b99dd719629bf36db5c33fd45132535b4e82505bc7a309d9ad5eff4f8d35922e9b576e6cebb8b381ff3327931a9688f99aa2661bffdd397807b95c6c2f672694859887b1fdd119ece0fc3e145d541632b7c956902695c26f35adc07decb09d24e492a8df30e717a6403d5984c3872b86ae3e1c96df57847b65d07da13819665d984a1b869cc77c7bf87745ade3d91f92514b9c4815b5ef4498a242e46a9a844a53bd8972e1dd70405b33874eb4d6158a1377bcd3a3d11201847d34a0f8df004d8653587c427e8f85d38b7d3b62ff259185d1c9ff30888c23cd00696dc25337b4f88e74bf9f93875f41ede89114c8d3a26d888dd2a1d6ae1b37acdeff5a0941ec714ff25c626627a9b330e132816b24743d21370b2b144ede4e317c62047eb7848a87b81ffe75ff4fbcf2ec1b519d46d9cccdd25447949458f1b52a47c2912993e6a1716aae5d1e5b60e5856a3f9158d606bb6073cb4cecdf3cdcf68c7d767d3d3702ddb0dafdbc10066faf3c76244339cb01248c6519857acc33c994c28b99da052d6f82b00aabc041b7b2fc0d02809574402fe790194647b33b71e7caae3b07f9adea768943218216bc8a02b8676c3241ee08673f52ca1171c4c79135de9ef487db86e612f22b14f033f56333e24c6afdc4bd2f7c49656c367c0ffa580df3954ecda7de36a8ac83c81c6e76873c895d97ccecfa9059ddc889d8d90f56abc1db36a4b3ded8a084d64f0fc5f73e27d62af3f506a47699d6bf2dccee5708ba8672cb254c56a41660c700a86dcd7f91c78066596006a6fadac40df7f5566165539952deca52248215ecd010273ef2077110fe81d15251096cc01b103a9d7fbb771273ddd4c20ebebaa1a27bb047bed0d2ccc0875da553e3d7696e05bf3d710952de903a6d0f45199b84adf4c7e32b4a85347c6b496f60ea83b37a9d23e2633497062dfcf12cb8a9052644f14fce3be0e0f2d0503d110c4bb3572fd63a76b2558b51c4e9ce384e56f90b4eca488b1961644c32a372663d976d90e46dd42e7d993fe4b4184a59f6f8c55de37c29f2d4789f44e1eb16bd9325ed44260b01d9110b87dc1a213fcdd7019a38fb11268de56b35d452f27756afeba1095384b0bed63e745c7e4c724822051eaa4bab0750572d4c0b4495247dde313a2dc869152f21b745bf0edb19009a2e591bb2f589091f3507c022dfb06c29d39e4d99ae0f814733f3e360f1dd33b879b320f0fd43bb09a32fb533aae8ffd75d9c08d31eddb5c676545d5378a75c1a5232935b5a2110dbb8e31eac638eb4a3d9728c3ad83c8a7454dd6cd6edd6f7cc7f45e399ff076373bb0a9dc18d70bc79a58942033a7ecc45b91e18f5ae00170ec85cb9c6df12b19af58f5752e8763451d4d1c63f185f0b16b33b6a7aa2262270e957ae479769e131fd2fb424e3ffdb733c4079995463f3a10f7f99f1cc619f01b4a80301b10db9407e3ec8ca22897e20a2130bfdc3a25c6c835fbdb0d8d98a49daff923c49e7e4a023a971213b7cee91887255265aa6605d4ac39ad9ec735b268bb5024a36e09d6baa14dd8cfbd5aa5a77f6e3f48c04dfb5e0103e65d6bd890daea9ee5c5fa64ea91e5ee7d9669654cc8f39e1edde544b768f16fbda7f018d1638259db140ec5d468df7bbb6b47f4e57f4173f8b50b083762e5135fc76b6b337b9c5429c62162e92e665dceda7402701393f60f4d39d861febcd7d7a96507f7b33462bbdb3823c9c1785dea0525354fae631cabf851d84bbedd42092bff8bc4eed597fba07fb8b559ce7b7d6c311870cf49cd24c6b79cc16c8035db1160fb8857863856be8229ed4820250ea2edd6debb40bd8da3c28c00fcccf02b2995bd7d51aad61d6464ebcbdd1d09260223e1621b76be4ff1178647de0075d8a6c9573e757e556d1504d7ad8fd8fa485efaa068113cfdc0d4c10f2a9f2862fffccc9adacf4b0f1f41a1ae94aebb56331dc2d6d75aeb7fc720d1d7d8d1d7adc344bafb95aeb39848cf42fab78c29b5b91fffce0be5065ee07c66f0e148c4d0696d0b4197cb010c935145ad0b87eef7415ade3df86d6065ff1ace45e6285c9c5cdcadaf9a0b55a2f5d378fa72a4ea00128639628dd183c194a9b6948b3f175d95747af6ea72c798d24e196f83c9e0b808421749c95c0799357f6926fe03208bda5adbbde0651d736d153cfed882065c5ea22d3885d0eba67bfe9b56858f29af7ffeb46ec35476ed2b7ededc2b69e2322eb28cdadaca7e0ed7a3651656ff93b4b348744af007965b37b68f2a962ad942c418a4708b028d07faa3544ee8957978070e78fabbb2917d18d1b065070e7ba5152884aea4fbf00adb49776866daaa8653c0a6676477441f4465af1bda0368f9c18b0394041cc405fdf32548cf63c5d7447045b226b7353b025e763dbb8286ad9016b7a0e91739405553af310b0c8bc554ad237f08d2fc463be98fa8d7dc06da22c631fa788da96470eb2820536404a7a8029f1ad6002b5ed5a36f8afd6aaac2b8ed6960663be6c05ded5640c278ed308f73ad4ac555b0215f66e252456450ff665e5d5bc1845b2cb096fdaeed9559ee05c3ba14fbca439781a42255180ddd13a4a523f40d267112e57d472a8b08abfb6e2e4e41b9a05269bf475c1a60157b1120e460e51a39d4bb11ef5350972660a46435042cd8013ad3b67cdd318708ca781af4d547a5fc601f10eb5db151d40ea6deaad602004fd21d6f3035434573e3d09877b21882db3584005bfbe6e9da8941a08ad232198272211b02cac2c8a85e0e264f20bdc363b4f61fc35d90dcd3f5869a5cb1927024165891f6f233efb652cee317740ac9f452c3770db1588aaf79da1eddb1d7992c15e233c3d5efbc7d29cdb7a7d09affec6f0bdb4c9440d3c23b042fc42f013b77388a21a39a51c8a1703e8b5da1a5a835cbaf3c2dacd88aa1f0bdcc13fde767272750f039816043d7956c743f2647e67f8be8314848bd943f5b72882fac1e66d4cf4360fedcdae47bb0a43d757807adb13997e9286e5a2d90a1556bfca2514a37bd31d05ede3bd2ad82cf56817d9a0db3b7a6d241c352b0b0b83a66df63a8ac2ce98b9dffb7892b44162d695b85b0cc7e5ea9b0c4468c32e93897290cc2a21029366d4a8f869211c31d5d5a450b6d34968a6cd46f41b3684220650caf39dc6054d0cdd7c03864af48890aaf1f0b669e602ee1a2196f691e9a3cb68f998ee8721e03973916198b6be3a94b551271c5e45d2213e5690ca55382447", 0x1000}, {&(0x7f0000002800)="a07523517715a418a4fd35a6fdb2ae775181864c78dedc0d4956e5476c4dbbedcba88a48bf798cbc674a4817c23840e0e7665008b984c2869d4d4588f4d7f034a0c4811de618ba0d336183ef2146fe180024a5da51d30c73faf43d1bc3027dab04d6d6de298fedb7ab3be7e8007a3c94873d5a5547dc8de0dcbc13c8b888300966964415b495af4a6eb509dc45cef9ad370cf1d4fcf08e51a4281c74f744ba7ad3f511ed81df10ceeb6a1adfa598b89f1dcebe4e4584c9de01db8826781826e71d37e7f7a30e9b1a0d8cc32ca4b69e1e6efd8d073f", 0xd5}], 0x6}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000640)) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 687.253469ms ago: executing program 0 (id=3891): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r3 = perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x5, 0x0, 0x0, 0x9, 0x8208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0xd50308a5edee8cd0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000100)) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2867) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000140081044ea1f782db44b904022008f130000000040000a118000200e014000e00000e1208000f0100030000000016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dbe5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e7ae4001b146222fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00d95667e0060000000000000080ca9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ff070dd68adb000000000000000000000083ea32baf4ef367516", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040000) 275.271902ms ago: executing program 2 (id=3892): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 255.015532ms ago: executing program 3 (id=3893): socket$kcm(0x1e, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open$cgroup(&(0x7f0000000dc0)={0x2, 0x80, 0x1, 0xb, 0x0, 0x4, 0x0, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0xffff, 0xfffffffffffff945}, 0x204, 0x7fffffff, 0xfe5, 0x5, 0x3, 0xb, 0x200, 0x0, 0x1, 0x0, 0xb}, r1, 0x8, r0, 0x2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xcf, 0x4, 0x8, 0x6, 0x0, 0x2eabdff3, 0x40, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x4, 0xe9, 0x6, 0x5, 0x9, 0xffffff80, 0x3, 0x0, 0xb375e5e, 0x0, 0x1}, 0x0, 0xc, r3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="200000000000000084000000020000007e8b000000d4970a27000000e7000000e8da1fc6d025352ae77337b68dbbe8e5359f2b73fd617bf0e62349a27dc77a"], 0x20}, 0x8014) 164.976645ms ago: executing program 5 (id=3894): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x2004, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c042, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x1800000000000000) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935", 0x8d}, {&(0x7f0000000080)="b5fb6b998870a172cca313c87b", 0xd}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r1) 163.827675ms ago: executing program 4 (id=3895): socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x12280, &(0x7f0000000080), 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) perf_event_open(0x0, r1, 0x10, r0, 0x1) (async) perf_event_open(0x0, r1, 0x10, r0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 119.891347ms ago: executing program 0 (id=3896): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x2c, 0x3, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xffff0000}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 0s ago: executing program 3 (id=3897): socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 2293 Not tainted syzkaller #0 [ 654.105894][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.116001][T13090] Call Trace: [ 654.119315][T13090] [ 654.122284][T13090] dump_stack_lvl+0x188/0x24e [ 654.127017][T13090] ? show_regs_print_info+0x12/0x12 [ 654.132286][T13090] ? load_image+0x400/0x400 [ 654.136848][T13090] ? __might_sleep+0xd0/0xd0 [ 654.141492][T13090] ? __lock_acquire+0x7d10/0x7d10 [ 654.146581][T13090] should_fail_ex+0x399/0x4d0 [ 654.151317][T13090] should_failslab+0x5/0x20 [ 654.155879][T13090] slab_pre_alloc_hook+0x59/0x310 [ 654.160947][T13090] ? is_bpf_text_address+0x22/0x2a0 [ 654.166190][T13090] kmem_cache_alloc+0x56/0x2f0 [ 654.171004][T13090] ? __alloc_file+0x25/0x230 [ 654.175642][T13090] __alloc_file+0x25/0x230 [ 654.180103][T13090] alloc_empty_file+0x90/0x180 [ 654.184898][T13090] path_openat+0x10f/0x2ee0 [ 654.189435][T13090] ? verify_lock_unused+0x140/0x140 [ 654.194669][T13090] ? kasan_set_track+0x60/0x70 [ 654.199470][T13090] ? perf_trace_lock+0xf8/0x390 [ 654.204354][T13090] ? __x64_sys_openat+0x135/0x160 [ 654.209418][T13090] ? do_filp_open+0x430/0x430 [ 654.214153][T13090] ? perf_trace_lock+0xf8/0x390 [ 654.219038][T13090] ? trace_event_raw_event_lock+0x250/0x250 [ 654.224972][T13090] do_filp_open+0x1f1/0x430 [ 654.229505][T13090] ? vfs_tmpfile+0x480/0x480 [ 654.234143][T13090] ? _raw_spin_unlock+0x24/0x40 [ 654.239027][T13090] ? alloc_fd+0x58f/0x630 [ 654.243400][T13090] do_sys_openat2+0x150/0x4b0 [ 654.248117][T13090] ? task_work_run+0x216/0x260 [ 654.252909][T13090] ? do_sys_open+0xe0/0xe0 [ 654.257353][T13090] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 654.263363][T13090] ? lock_chain_count+0x20/0x20 [ 654.268251][T13090] __x64_sys_openat+0x135/0x160 [ 654.273135][T13090] do_syscall_64+0x4c/0xa0 [ 654.277573][T13090] ? clear_bhb_loop+0x60/0xb0 [ 654.282286][T13090] ? clear_bhb_loop+0x60/0xb0 [ 654.286996][T13090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 654.292933][T13090] RIP: 0033:0x7f055235d68e [ 654.297369][T13090] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 654.317020][T13090] RSP: 002b:00007f0553290ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.325475][T13090] RAX: ffffffffffffffda RBX: 00007f05532916c0 RCX: 00007f055235d68e [ 654.333471][T13090] RDX: 0000000000000000 RSI: 00007f0553290f90 RDI: ffffffffffffff9c [ 654.341474][T13090] RBP: 00007f0553291090 R08: 0000000000000000 R09: 0000000000000000 [ 654.349473][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.357472][T13090] R13: 00007f0552616038 R14: 00007f0552615fa0 R15: 00007ffda6ff0128 [ 654.365491][T13090] [ 654.371645][ T4337] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.692092][T13103] netlink: 'syz.0.2297': attribute type 2 has an invalid length. [ 654.721167][T13103] netlink: 'syz.0.2297': attribute type 8 has an invalid length. [ 654.771442][T13103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2297'. [ 654.957818][T13108] netlink: 'syz.5.2298': attribute type 4 has an invalid length. [ 655.795023][T13123] netlink: 'syz.4.2302': attribute type 17 has an invalid length. [ 655.842950][T13123] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2302'. [ 656.558291][T13141] netlink: 'syz.2.2306': attribute type 16 has an invalid length. [ 656.647877][T13141] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2306'. [ 657.363495][T13150] delete_channel: no stack [ 657.789566][T13164] netlink: 'syz.4.2315': attribute type 7 has an invalid length. [ 657.902254][T13164] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.2315'. [ 659.978292][T13200] team0: Port device team_slave_0 removed [ 660.307866][T13199] delete_channel: no stack [ 660.358765][T13217] netlink: 'syz.4.2323': attribute type 16 has an invalid length. [ 660.503769][T13217] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2323'. [ 660.676680][T13225] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 660.713435][T13225] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2329'. [ 660.877054][T13224] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 661.207975][T13221] device syzkaller0 entered promiscuous mode [ 666.202692][T13259] netlink: 'syz.4.2339': attribute type 10 has an invalid length. [ 666.230333][T13259] team0: Device wg1 is of different type [ 666.774356][T13278] netlink: 'syz.4.2343': attribute type 16 has an invalid length. [ 666.923255][T13278] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2343'. [ 667.037200][T13283] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2345'. [ 667.209624][T13287] device pim6reg1 entered promiscuous mode [ 667.634232][T13293] netlink: 'syz.5.2348': attribute type 10 has an invalid length. [ 667.653064][T13293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2348'. [ 667.670477][T13293] netlink: 'syz.5.2348': attribute type 10 has an invalid length. [ 667.706497][T13293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2348'. [ 667.785577][T13299] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2348'. [ 667.910583][T13299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.983952][T13299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.051563][T13299] bond0 (unregistering): Released all slaves [ 668.415388][T13326] netlink: 'syz.0.2356': attribute type 15 has an invalid length. [ 668.471439][T13326] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2356'. [ 669.215046][T13339] sctp: [Deprecated]: syz.2.2361 (pid 13339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.215046][T13339] Use struct sctp_sack_info instead [ 669.426605][T13354] netlink: 'syz.4.2359': attribute type 16 has an invalid length. [ 669.488329][T13354] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2359'. [ 669.761568][T13336] delete_channel: no stack [ 670.293765][ T4286] Bluetooth: hci4: ISO packet for unknown connection handle 3078 [ 670.315546][T13371] netlink: 'syz.0.2368': attribute type 39 has an invalid length. [ 670.438072][T13374] netlink: 'syz.3.2369': attribute type 16 has an invalid length. [ 670.486472][T13374] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2369'. [ 670.497514][T13378] net_ratelimit: 3547 callbacks suppressed [ 670.497531][T13378] sock: sock_set_timeout: `syz.4.2372' (pid 13378) tries to set negative timeout [ 670.679034][T13382] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2373'. [ 670.690854][T13385] netlink: 'syz.4.2372': attribute type 29 has an invalid length. [ 670.715481][T13384] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2371'. [ 670.742992][T13378] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 671.209342][T13401] sctp: [Deprecated]: syz.0.2376 (pid 13401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.209342][T13401] Use struct sctp_sack_info instead [ 673.567558][T13392] device syzkaller0 entered promiscuous mode [ 673.618692][T13409] validate_nla: 2 callbacks suppressed [ 673.618710][T13409] netlink: 'syz.4.2377': attribute type 16 has an invalid length. [ 673.634595][T13409] __nla_validate_parse: 3 callbacks suppressed [ 673.634609][T13409] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2377'. [ 678.542391][T13425] netlink: 'syz.4.2381': attribute type 4 has an invalid length. [ 678.673701][T13429] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2383'. [ 680.429063][T13479] netlink: 'syz.5.2391': attribute type 16 has an invalid length. [ 680.452965][T13479] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2391'. [ 680.477687][T13482] netlink: 'syz.3.2394': attribute type 4 has an invalid length. [ 680.533362][T13482] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2394'. [ 681.151422][T13499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2399'. [ 681.709370][T13517] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2405'. [ 681.976574][T13522] netlink: 'syz.5.2406': attribute type 4 has an invalid length. [ 682.011773][T13522] netlink: 134728 bytes leftover after parsing attributes in process `syz.5.2406'. [ 683.092889][T13535] netlink: 'syz.5.2409': attribute type 16 has an invalid length. [ 683.153103][T13535] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2409'. [ 683.549653][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 684.071509][T13553] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 684.100993][T13553] netlink: 21063 bytes leftover after parsing attributes in process `syz.4.2415'. [ 684.525522][T13566] netlink: 'syz.2.2418': attribute type 10 has an invalid length. [ 684.991849][T13566] team0: Device hsr_slave_0 failed to register rx_handler [ 685.776829][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.783382][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.694357][T13577] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2421'. [ 686.740217][T13578] netlink: 'syz.5.2421': attribute type 12 has an invalid length. [ 686.775120][T13578] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2421'. [ 686.957337][T13585] netlink: 'syz.4.2422': attribute type 46 has an invalid length. [ 686.984861][T13585] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2422'. [ 687.181043][T13589] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 687.264159][T13599] netlink: 'syz.0.2424': attribute type 16 has an invalid length. [ 687.343500][T13599] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2424'. [ 688.040102][T13616] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2430'. [ 688.774071][T13650] netlink: 'syz.2.2439': attribute type 4 has an invalid length. [ 688.822522][T13650] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2439'. [ 688.973711][T13654] delete_channel: no stack [ 689.234317][T13663] netlink: 'syz.3.2441': attribute type 16 has an invalid length. [ 689.312683][T13663] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2441'. [ 689.743804][T13668] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2444'. [ 690.078458][T13684] netlink: 'syz.3.2448': attribute type 10 has an invalid length. [ 690.262583][T13684] team0: Device hsr_slave_0 failed to register rx_handler [ 690.679715][T13700] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2452'. [ 690.714965][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 690.855466][T13703] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2454'. [ 691.086167][T13713] netlink: 'syz.5.2457': attribute type 3 has an invalid length. [ 691.131714][T13713] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2457'. [ 691.412661][T13729] netlink: 'syz.2.2458': attribute type 16 has an invalid length. [ 691.420572][T13729] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2458'. [ 692.000625][T13744] delete_channel: no stack [ 692.593223][T13765] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2469'. [ 693.041665][T13783] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2472'. [ 693.171896][T13783] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 693.335677][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 693.684206][T13828] netlink: 'syz.3.2478': attribute type 16 has an invalid length. [ 694.442533][T13850] netlink: 'syz.2.2491': attribute type 16 has an invalid length. [ 694.470961][T13850] __nla_validate_parse: 1 callbacks suppressed [ 694.470979][T13850] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2491'. [ 695.647411][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 696.225547][T13908] netlink: 'syz.2.2499': attribute type 6 has an invalid length. [ 696.273130][T13908] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2499'. [ 696.305710][T13911] netlink: 'syz.5.2498': attribute type 16 has an invalid length. [ 696.326910][T13911] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2498'. [ 696.661386][T13924] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2502'. [ 696.735546][T13925] -: renamed from syzkaller0 [ 696.900028][T13926] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 696.922869][T13926] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2502'. [ 697.061894][T13929] netlink: 'syz.0.2504': attribute type 4 has an invalid length. [ 697.612160][T13946] netlink: 'syz.4.2510': attribute type 3 has an invalid length. [ 697.638460][T13946] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2510'. [ 697.776764][T13956] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2512'. [ 698.250723][T13982] netlink: 'syz.4.2515': attribute type 16 has an invalid length. [ 698.374459][T13982] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2515'. [ 698.471806][T13984] netlink: 'syz.2.2517': attribute type 2 has an invalid length. [ 698.503790][T13984] netlink: 'syz.2.2517': attribute type 8 has an invalid length. [ 698.539332][T13984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2517'. [ 700.045387][T14013] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2526'. [ 702.209342][T14025] validate_nla: 1 callbacks suppressed [ 702.209360][T14025] netlink: 'syz.5.2527': attribute type 21 has an invalid length. [ 702.263018][T14025] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2527'. [ 702.450351][T14033] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 702.458859][T14033] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 702.493483][T14033] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 702.583105][T14033] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 702.599656][T14033] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 702.628924][T14041] netlink: 'syz.0.2534': attribute type 10 has an invalid length. [ 702.657728][T14041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2534'. [ 702.688855][T14041] device ipvlan1 entered promiscuous mode [ 702.759964][T14041] bridge0: port 4(ipvlan1) entered blocking state [ 702.793207][T14041] bridge0: port 4(ipvlan1) entered disabled state [ 702.866762][T14041] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 703.204470][T14059] netlink: 'syz.4.2535': attribute type 16 has an invalid length. [ 703.249317][T14059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2535'. [ 703.446762][T14064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2538'. [ 703.474129][T14067] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2539'. [ 703.527582][T14064] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2538'. [ 703.552433][T14070] netlink: 'syz.5.2540': attribute type 1 has an invalid length. [ 703.559667][T14067] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2539'. [ 703.621272][T14067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.963866][T14067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.495258][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.538376][T14099] netlink: 'syz.0.2548': attribute type 3 has an invalid length. [ 704.547502][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.566980][T14099] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2548'. [ 704.580886][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.608793][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.621038][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.640288][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.667565][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.691034][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 704.716366][T14097] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 707.853853][T14124] netlink: 'syz.0.2552': attribute type 16 has an invalid length. [ 707.996089][T14124] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2552'. [ 713.358063][T14188] netlink: 'syz.0.2570': attribute type 16 has an invalid length. [ 713.463246][T14188] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2570'. [ 713.580546][T14189] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2573'. [ 713.643280][T14198] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2573'. [ 714.044401][T14209] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2576'. [ 714.655818][T14234] netlink: 'syz.5.2584': attribute type 27 has an invalid length. [ 714.964799][T14249] delete_channel: no stack [ 715.136328][T14258] netlink: 15119 bytes leftover after parsing attributes in process `syz.5.2590'. [ 715.265998][T14266] netlink: 'syz.2.2589': attribute type 16 has an invalid length. [ 715.340092][T14266] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2589'. [ 715.427417][T14265] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2591'. [ 715.482062][T14268] netlink: 'syz.4.2591': attribute type 6 has an invalid length. [ 717.250860][T14312] netlink: 'syz.0.2604': attribute type 3 has an invalid length. [ 717.350463][T14312] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2604'. [ 717.409512][T14324] netlink: 'syz.3.2605': attribute type 16 has an invalid length. [ 717.438773][T14324] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2605'. [ 717.485266][T14314] netlink: 'syz.0.2604': attribute type 21 has an invalid length. [ 718.342646][T14340] net_ratelimit: 16089 callbacks suppressed [ 718.342684][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.412907][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.443229][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.471341][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.484577][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.495475][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.506646][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.517371][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.528401][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 718.539306][T14340] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 719.598359][T14370] netlink: 'syz.5.2618': attribute type 16 has an invalid length. [ 719.683952][T14370] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2618'. [ 719.940733][T14379] netlink: 'syz.2.2622': attribute type 21 has an invalid length. [ 719.963043][T14379] netlink: 'syz.2.2622': attribute type 6 has an invalid length. [ 720.002788][T14379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2622'. [ 720.172446][T14387] netlink: 'syz.4.2624': attribute type 21 has an invalid length. [ 720.201404][T14387] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2624'. [ 720.230724][T14387] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2624'. [ 720.276177][T14394] netlink: 'syz.0.2623': attribute type 39 has an invalid length. [ 723.915087][T14430] netlink: 'syz.2.2637': attribute type 3 has an invalid length. [ 723.923946][T14430] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2637'. [ 723.969284][T14433] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2632'. [ 724.055674][T14432] netlink: 'syz.5.2635': attribute type 16 has an invalid length. [ 724.091822][T14432] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2635'. [ 727.820025][T14467] netlink: 'syz.2.2650': attribute type 21 has an invalid length. [ 727.918649][T14467] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2650'. [ 728.003933][T14467] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2650'. [ 728.088383][T14476] ref_ctr_offset mismatch. inode: 0xb23 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 729.333355][T14520] netlink: 'syz.2.2664': attribute type 2 has an invalid length. [ 729.373001][T14521] netlink: 'syz.2.2664': attribute type 2 has an invalid length. [ 729.799921][T14520] device 0 entered promiscuous mode [ 729.861176][T14521] device 1 entered promiscuous mode [ 730.193531][ T4286] Bluetooth: hci5: ISO packet for unknown connection handle 5 [ 730.673732][T14561] netlink: 'syz.5.2674': attribute type 21 has an invalid length. [ 731.911192][T14593] netlink: 'syz.4.2685': attribute type 1 has an invalid length. [ 732.076293][T14591] netlink: 'syz.3.2684': attribute type 10 has an invalid length. [ 732.151365][T14591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2684'. [ 732.238238][T14591] device ipvlan1 entered promiscuous mode [ 732.333338][T14591] bridge0: port 3(ipvlan1) entered blocking state [ 732.368761][T14591] bridge0: port 3(ipvlan1) entered disabled state [ 732.414615][T14591] net_ratelimit: 1147 callbacks suppressed [ 732.414632][T14591] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 732.951438][T14624] netlink: 'syz.4.2693': attribute type 13 has an invalid length. [ 732.971729][T14622] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2691'. [ 733.005557][T14624] netlink: 'syz.4.2693': attribute type 58 has an invalid length. [ 733.053554][T14624] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2693'. [ 733.110639][T14619] netlink: 'syz.5.2690': attribute type 17 has an invalid length. [ 733.156098][T14619] netlink: 'syz.5.2690': attribute type 16 has an invalid length. [ 733.228552][T14619] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2690'. [ 738.068760][T14687] tc_dump_action: action bad kind [ 738.314962][T14696] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2712'. [ 739.276552][T14703] netlink: 'syz.0.2715': attribute type 4 has an invalid length. [ 740.890687][T14729] netlink: 'syz.3.2723': attribute type 17 has an invalid length. [ 741.028453][T14726] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2722'. [ 741.052840][T14726] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 741.590849][T14743] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2727'. [ 741.690698][T14743] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 741.988026][T14755] sctp: [Deprecated]: syz.5.2731 (pid 14755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 741.988026][T14755] Use struct sctp_sack_info instead [ 742.264844][T14758] device syzkaller0 entered promiscuous mode [ 742.274876][T14766] netlink: 130181 bytes leftover after parsing attributes in process `syz.4.2733'. [ 742.302741][T14765] netlink: 'syz.3.2734': attribute type 21 has an invalid length. [ 742.310626][T14765] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 742.544259][T14772] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2736'. [ 747.133954][T14770] 0: renamed from pim6reg1 [ 747.157870][T14792] netlink: 'syz.0.2739': attribute type 2 has an invalid length. [ 747.176262][T14792] netlink: 'syz.0.2739': attribute type 4 has an invalid length. [ 747.191289][T14792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2739'. [ 747.204642][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.210975][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.268415][T14797] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2740'. [ 747.567228][T14814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2743'. [ 747.614735][T14816] netlink: 'syz.2.2746': attribute type 10 has an invalid length. [ 747.655218][T14816] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2746'. [ 748.424587][T14835] netlink: 'syz.0.2751': attribute type 13 has an invalid length. [ 748.458050][T14835] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2751'. [ 748.831304][T14845] netlink: 'syz.0.2754': attribute type 21 has an invalid length. [ 748.860048][T14845] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 748.879837][T14845] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2754'. [ 748.990567][T14856] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2754'. [ 749.209749][T14868] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2759'. [ 749.256969][T14868] netlink: 'syz.3.2759': attribute type 10 has an invalid length. [ 749.272753][T14868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2759'. [ 749.285361][T14868] device team0 entered promiscuous mode [ 749.293086][T14868] device team_slave_1 entered promiscuous mode [ 749.309397][T14868] device wlan1 entered promiscuous mode [ 749.317665][T14868] device geneve1 entered promiscuous mode [ 749.340574][T14868] bridge0: port 3(team0) entered blocking state [ 749.348470][T14868] bridge0: port 3(team0) entered disabled state [ 749.399397][T14868] bridge0: port 3(team0) entered blocking state [ 749.405962][T14868] bridge0: port 3(team0) entered forwarding state [ 749.459934][T14872] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2761'. [ 750.788854][T14900] netlink: 'syz.4.2767': attribute type 21 has an invalid length. [ 750.845713][T14903] netlink: 'syz.5.2769': attribute type 10 has an invalid length. [ 750.865290][T14903] device ipvlan1 entered promiscuous mode [ 750.879870][T14903] bridge0: port 4(ipvlan1) entered blocking state [ 750.889769][T14903] bridge0: port 4(ipvlan1) entered disabled state [ 750.902232][T14903] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 750.997914][T14900] sock: sock_set_timeout: `syz.4.2767' (pid 14900) tries to set negative timeout [ 751.712058][T14907] netlink: 'syz.0.2772': attribute type 21 has an invalid length. [ 752.271730][T14925] __nla_validate_parse: 3 callbacks suppressed [ 752.271768][T14925] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2778'. [ 752.836948][T14948] validate_nla: 2 callbacks suppressed [ 752.836987][T14948] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 752.961791][T14952] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 753.003653][T14948] team0: Device veth1_vlan failed to register rx_handler [ 753.154161][T14952] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 753.484342][T14959] syz.4.2785 (14959) used obsolete PPPIOCDETACH ioctl [ 753.571760][T14958] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 753.958707][T14983] netlink: 'syz.3.2792': attribute type 15 has an invalid length. [ 753.989344][T14983] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2792'. [ 754.710063][T11493] tipc: Subscription rejected, illegal request [ 754.724636][T15017] netlink: 'syz.5.2804': attribute type 7 has an invalid length. [ 754.792482][T15019] device pim6reg1 entered promiscuous mode [ 756.090535][T15079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2820'. [ 757.273883][T15107] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 757.490595][T15122] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2830'. [ 757.596234][T15124] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 757.664443][T15124] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2831'. [ 757.755228][T15131] netlink: 'syz.5.2834': attribute type 10 has an invalid length. [ 757.770925][T15131] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2834'. [ 757.812805][T15131] device dummy0 entered promiscuous mode [ 757.827185][T15131] bridge0: port 4(dummy0) entered blocking state [ 757.835993][T15131] bridge0: port 4(dummy0) entered disabled state [ 757.849360][T15131] bridge0: port 4(dummy0) entered blocking state [ 757.855879][T15131] bridge0: port 4(dummy0) entered forwarding state [ 757.905034][T15137] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2836'. [ 758.599181][T15151] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 758.790642][T15155] sock: sock_set_timeout: `syz.5.2839' (pid 15155) tries to set negative timeout [ 759.155016][T15173] netlink: 'syz.4.2843': attribute type 3 has an invalid length. [ 759.190232][T15173] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2843'. [ 759.713123][T15198] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2850'. [ 760.168359][T15222] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2855'. [ 763.178972][T15262] netlink: 'syz.5.2868': attribute type 3 has an invalid length. [ 763.224134][T15262] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2868'. [ 763.263056][T15265] netlink: 'syz.5.2868': attribute type 21 has an invalid length. [ 763.293626][T15265] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2868'. [ 763.339677][T15265] netlink: 'syz.5.2868': attribute type 4 has an invalid length. [ 763.402877][T15265] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2868'. [ 763.613553][T15274] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2872'. [ 763.688418][T15274] netlink: 'syz.0.2872': attribute type 3 has an invalid length. [ 763.729504][T15274] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2872'. [ 763.971532][T15282] netlink: 'syz.5.2873': attribute type 13 has an invalid length. [ 763.995133][T15282] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2873'. [ 764.073925][T15282] syz_tun: refused to change device tx_queue_len [ 764.082205][T15282] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 764.128561][T15277] netlink: 'syz.5.2873': attribute type 10 has an invalid length. [ 764.241325][T15277] device netdevsim0 entered promiscuous mode [ 764.267639][T15277] team0: Port device netdevsim0 added [ 764.943475][T15312] netlink: 'syz.2.2884': attribute type 22 has an invalid length. [ 764.983682][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 765.027652][T15310] netlink: 'syz.2.2884': attribute type 2 has an invalid length. [ 765.061462][T15310] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2884'. [ 765.163655][T15314] netlink: 'syz.5.2886': attribute type 39 has an invalid length. [ 765.878153][T15333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 765.895063][T15333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 765.904341][T15333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 765.913680][T15333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 765.921587][T15333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 765.929652][T15333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 766.031068][T15331] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2890'. [ 766.038793][ T4337] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.315935][T15340] netlink: 'syz.5.2892': attribute type 1 has an invalid length. [ 766.336132][ T4337] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.352040][T15340] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2892'. [ 766.485027][ T4337] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.662295][ T4337] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.832342][T15367] netlink: 'syz.4.2896': attribute type 16 has an invalid length. [ 766.937067][T15332] chnl_net:caif_netlink_parms(): no params data found [ 767.422462][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.431371][T15332] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.454441][T15332] device bridge_slave_0 entered promiscuous mode [ 767.468380][T15332] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.490216][T15332] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.508046][T15332] device bridge_slave_1 entered promiscuous mode [ 768.006318][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 770.084412][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 770.558937][T15332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.596444][T15332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.749245][T15332] team0: Port device team_slave_0 added [ 770.789171][T15424] __nla_validate_parse: 3 callbacks suppressed [ 770.789188][T15424] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.2907'. [ 770.823579][T15332] team0: Port device team_slave_1 added [ 770.864812][T15332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.878264][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.952617][T15332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.093270][T15332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.101441][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.203071][T15332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.278746][T15439] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2910'. [ 771.453091][T15446] netlink: 'syz.2.2909': attribute type 10 has an invalid length. [ 771.566975][T15446] device veth0_vlan left promiscuous mode [ 771.598646][T15446] device veth0_vlan entered promiscuous mode [ 771.624098][T15446] team0: Device veth0_vlan failed to register rx_handler [ 772.163580][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 772.168363][T15332] device hsr_slave_0 entered promiscuous mode [ 772.201308][T15332] device hsr_slave_1 entered promiscuous mode [ 772.274373][T15465] device wlan1 entered promiscuous mode [ 772.417053][T15466] netlink: 'syz.3.2913': attribute type 3 has an invalid length. [ 772.457363][T15466] netlink: 'syz.3.2913': attribute type 1 has an invalid length. [ 772.489567][T15466] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2913'. [ 772.919844][ T4337] team0: Port device wlan1 removed [ 773.266088][T15498] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2922'. [ 773.316994][ T4337] device hsr_slave_0 left promiscuous mode [ 773.328435][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.340975][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.363724][ T4337] bridge0: port 3(dummy0) entered disabled state [ 773.406668][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.422236][ T4337] device bridge_slave_0 left promiscuous mode [ 773.437407][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.518820][ T4337] device veth1_macvtap left promiscuous mode [ 773.525041][ T4337] device veth0_macvtap left promiscuous mode [ 773.531552][ T4337] device veth0_vlan left promiscuous mode [ 773.721431][T15513] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2926'. [ 773.731467][T15513] netlink: zone id is out of range [ 773.737478][T15513] netlink: zone id is out of range [ 773.749604][T15513] netlink: del zone limit has 4 unknown bytes [ 774.242713][T15333] Bluetooth: hci0: command 0x0419 tx timeout [ 774.282490][T15519] netlink: 'syz.5.2928': attribute type 1 has an invalid length. [ 774.290628][T15519] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.2928'. [ 776.107687][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 776.147121][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 776.511233][T15502] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2924'. [ 778.389965][T15332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 778.426464][T15572] netlink: 'syz.4.2938': attribute type 3 has an invalid length. [ 778.455324][T15332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 778.468260][T15573] netlink: 'syz.4.2938': attribute type 3 has an invalid length. [ 778.493375][T15332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 778.519889][T15572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2938'. [ 778.521841][T15332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.556683][T15573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2938'. [ 778.790949][T15332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.850703][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 778.863444][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 778.893096][T15332] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.934618][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 778.955421][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 778.997182][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.004429][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.077386][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 779.131726][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 779.150632][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.176247][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.184434][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.221438][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 779.249754][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 779.303533][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 779.352863][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 779.467636][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 779.498042][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 779.518454][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 779.545214][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 779.607859][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 779.625660][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 779.644476][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 779.667533][T15332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 780.798309][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 780.826756][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 780.870211][T15332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.028730][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.057288][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.119273][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.142041][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.170109][T15332] device veth0_vlan entered promiscuous mode [ 781.189183][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.214243][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.256313][T15332] device veth1_vlan entered promiscuous mode [ 781.387351][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 781.405445][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 781.448231][T15332] device veth0_macvtap entered promiscuous mode [ 781.468346][T15332] device veth1_macvtap entered promiscuous mode [ 781.526698][T15332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.572668][T15332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.604698][T15332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.640451][T15332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.683073][T15332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.724032][T15332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.758261][T15332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.785933][T15332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.814448][T15332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.842822][T15332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.875187][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 781.899112][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 781.921406][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 781.962438][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 781.980253][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 782.001294][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 782.046070][T15332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.078499][T15332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.112954][T15332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.131936][T15332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.346719][T15662] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.2958'. [ 782.755786][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.812628][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.904739][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 782.950378][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.984640][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.039055][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 783.422116][T15680] netlink: 'syz.0.2885': attribute type 21 has an invalid length. [ 783.824641][T15687] Q6`Ҙ: renamed from lo [ 783.868146][T15687] netlink: 'syz.0.2964': attribute type 16 has an invalid length. [ 783.943395][T15687] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2964'. [ 784.516827][T15703] netlink: 'syz.0.2968': attribute type 39 has an invalid length. [ 784.962444][T15708] netlink: 'syz.0.2968': attribute type 13 has an invalid length. [ 784.982385][T15708] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2968'. [ 785.025037][T15720] netlink: 'syz.5.2969': attribute type 3 has an invalid length. [ 785.033817][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 785.046887][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 785.055199][T15708] syz_tun: refused to change device tx_queue_len [ 785.056245][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 785.061570][T15708] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 785.103934][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 785.116390][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 785.123762][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 785.162711][T15720] netlink: 'syz.5.2969': attribute type 1 has an invalid length. [ 785.223515][T15720] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2969'. [ 785.337160][T15720] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2969'. [ 785.548471][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.666114][T15720] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 785.718346][T15720] CPU: 0 PID: 15720 Comm: syz.5.2969 Not tainted syzkaller #0 [ 785.725897][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.735995][T15720] Call Trace: [ 785.739312][T15720] [ 785.742370][T15720] dump_stack_lvl+0x188/0x24e [ 785.747105][T15720] ? show_regs_print_info+0x12/0x12 [ 785.752364][T15720] ? load_image+0x400/0x400 [ 785.756937][T15720] sysfs_warn_dup+0x8a/0xa0 [ 785.761504][T15720] sysfs_do_create_link_sd+0xc0/0x110 [ 785.766932][T15720] device_add+0x7f6/0x1000 [ 785.771408][T15720] wiphy_register+0x1d9f/0x2ac0 [ 785.776379][T15720] ? cfg80211_event_work+0x40/0x40 [ 785.781543][T15720] ? minstrel_ht_alloc+0x894/0xa20 [ 785.786757][T15720] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 785.792886][T15720] ieee80211_register_hw+0x2d00/0x39f0 [ 785.798435][T15720] ? ieee80211_register_hw+0xec1/0x39f0 [ 785.804049][T15720] ? ieee80211_register_hw+0xec1/0x39f0 [ 785.809674][T15720] ? ieee80211_tasklet_handler+0x20/0x20 [ 785.815371][T15720] ? memset+0x1e/0x40 [ 785.819417][T15720] ? __hrtimer_init+0x186/0x270 [ 785.824340][T15720] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 785.830147][T15720] hwsim_new_radio_nl+0xafa/0xce0 [ 785.835238][T15720] genl_family_rcv_msg_doit+0x22a/0x330 [ 785.840834][T15720] ? end_current_label_crit_section+0x170/0x170 [ 785.847157][T15720] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 785.853112][T15720] ? bpf_lsm_capable+0x5/0x10 [ 785.857841][T15720] ? security_capable+0x85/0xb0 [ 785.862744][T15720] genl_rcv_msg+0x604/0x790 [ 785.867310][T15720] ? genl_bind+0x360/0x360 [ 785.871779][T15720] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 785.878167][T15720] netlink_rcv_skb+0x1fb/0x450 [ 785.882990][T15720] ? genl_bind+0x360/0x360 [ 785.887452][T15720] ? netlink_ack+0x1170/0x1170 [ 785.892272][T15720] ? down_read+0x1a8/0x2d0 [ 785.896740][T15720] genl_rcv+0x24/0x40 [ 785.900768][T15720] netlink_unicast+0x74d/0x8d0 [ 785.905591][T15720] netlink_sendmsg+0x8ad/0xbd0 [ 785.910416][T15720] ? netlink_getsockopt+0x550/0x550 [ 785.915758][T15720] ? aa_sock_msg_perm+0x94/0x150 [ 785.920732][T15720] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 785.926051][T15720] ? security_socket_sendmsg+0x7c/0xa0 [ 785.931551][T15720] ? netlink_getsockopt+0x550/0x550 [ 785.936823][T15720] ____sys_sendmsg+0x5be/0x970 [ 785.941638][T15720] ? __sys_sendmsg_sock+0x30/0x30 [ 785.946740][T15720] ? __import_iovec+0x315/0x500 [ 785.951645][T15720] ? import_iovec+0x6f/0xa0 [ 785.956226][T15720] ___sys_sendmsg+0x2a2/0x360 [ 785.960956][T15720] ? sock_write_iter+0x30f/0x3e0 [ 785.965935][T15720] ? __sys_sendmsg+0x290/0x290 [ 785.970791][T15720] __se_sys_sendmsg+0x1bb/0x2a0 [ 785.975692][T15720] ? __x64_sys_sendmsg+0x80/0x80 [ 785.980696][T15720] ? lockdep_hardirqs_on+0x94/0x140 [ 785.985960][T15720] do_syscall_64+0x4c/0xa0 [ 785.990419][T15720] ? clear_bhb_loop+0x60/0xb0 [ 785.995164][T15720] ? clear_bhb_loop+0x60/0xb0 [ 785.999892][T15720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.005837][T15720] RIP: 0033:0x7ff15819ce59 [ 786.010293][T15720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.030037][T15720] RSP: 002b:00007ff158fa9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.038532][T15720] RAX: ffffffffffffffda RBX: 00007ff158416270 RCX: 00007ff15819ce59 [ 786.046546][T15720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 786.054555][T15720] RBP: 00007ff158232d6f R08: 0000000000000000 R09: 0000000000000000 [ 786.062573][T15720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.070597][T15720] R13: 00007ff158416308 R14: 00007ff158416270 R15: 00007fff43feebc8 [ 786.078749][T15720] [ 786.178494][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.382271][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.543741][ T56] team0: Port device netdevsim0 removed [ 786.552066][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.849090][ T56] device 0 left promiscuous mode [ 786.899287][T15722] chnl_net:caif_netlink_parms(): no params data found [ 787.007308][ T56] device 0 left promiscuous mode [ 787.083282][ T56] device 1 left promiscuous mode [ 787.202762][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 787.216831][T15722] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.282746][T15722] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.334549][T15722] device bridge_slave_0 entered promiscuous mode [ 787.733200][T15722] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.747512][T15722] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.820097][T15722] device bridge_slave_1 entered promiscuous mode [ 787.978382][T15771] netlink: 'syz.5.2978': attribute type 16 has an invalid length. [ 788.011898][T15771] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2978'. [ 788.377805][T15722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.440943][T15722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.819534][T15722] team0: Port device team_slave_0 added [ 788.841872][T15722] team0: Port device team_slave_1 added [ 788.988056][T15722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.062586][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.178448][T15722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.282721][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 789.975103][T15722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.982126][T15722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.108707][T15722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.218007][T15833] netlink: 'syz.3.2988': attribute type 3 has an invalid length. [ 790.233855][T15833] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 790.244207][T15722] device hsr_slave_0 entered promiscuous mode [ 790.250908][T15833] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2988'. [ 790.272054][T15722] device hsr_slave_1 entered promiscuous mode [ 790.301298][T15722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.320048][T15722] Cannot create hsr debugfs directory [ 790.348898][T15833] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2988'. [ 790.538601][T15833] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 790.811340][T15850] netlink: 'syz.5.2991': attribute type 16 has an invalid length. [ 790.822833][T15850] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2991'. [ 791.363118][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 791.532364][T15869] netlink: 'syz.3.2994': attribute type 1 has an invalid length. [ 791.549212][T15869] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2994'. [ 791.562761][ T56] team0: Port device wlan1 removed [ 792.006471][ T56] device hsr_slave_0 left promiscuous mode [ 792.021383][ T56] device hsr_slave_1 left promiscuous mode [ 792.041391][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.069898][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.079250][ T56] batman_adv: batadv0: Interface deactivated: macvlan1 [ 792.092695][ T56] batman_adv: batadv0: Removing interface: macvlan1 [ 792.100716][ T56] device bridge_slave_0 left promiscuous mode [ 792.107549][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.133410][ T56] device veth1_macvtap left promiscuous mode [ 792.139811][ T56] device veth1_vlan left promiscuous mode [ 792.889606][ T56] team0 (unregistering): Port device team_slave_1 removed [ 793.442889][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 793.556932][ T56] team0 (unregistering): Port device bridge_slave_1 removed [ 793.972805][T15886] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2999'. [ 793.991533][T15886] ksmbd: Unknown IPC event: 10, ignore. [ 794.156760][T15722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 794.204824][T15722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 794.384417][T15722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 794.438385][T15918] netlink: 'syz.3.3007': attribute type 10 has an invalid length. [ 794.557364][T15918] device wg1 entered promiscuous mode [ 794.583912][T15918] team0: Device wg1 is of different type [ 794.655169][T15722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 794.851167][T15924] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.3009'. [ 794.878904][T15722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.904607][T15924] openvswitch: netlink: Message has 48126 unknown bytes. [ 794.928762][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 794.943801][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 794.954745][T15722] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.002280][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 795.028064][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 795.069217][T11493] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.076407][T11493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.131606][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 795.142437][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 795.194604][T11493] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.201760][T11493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.253224][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 795.312598][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 795.362154][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 795.418452][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 795.440049][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 795.450034][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 795.471240][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 795.504276][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 795.534236][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 795.563580][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 795.582683][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 795.593451][T11493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 795.628318][T15722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 796.372103][T15963] netlink: 'syz.3.3019': attribute type 2 has an invalid length. [ 796.392740][T15963] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3019'. [ 796.574441][T15966] netlink: 'syz.5.3020': attribute type 2 has an invalid length. [ 796.592911][T15966] netlink: 'syz.5.3020': attribute type 8 has an invalid length. [ 796.600951][T15966] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.3020'. [ 798.984508][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.003671][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.038442][T15722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.133960][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 799.172765][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 799.241761][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 799.280801][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 799.305742][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 799.319264][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 799.365444][T15722] device veth0_vlan entered promiscuous mode [ 799.410305][T15722] device veth1_vlan entered promiscuous mode [ 799.471883][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 799.481069][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 799.490721][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 799.501040][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 799.513418][T15722] device veth0_macvtap entered promiscuous mode [ 799.526349][T15722] device veth1_macvtap entered promiscuous mode [ 799.564790][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.585661][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.605477][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.638635][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.656825][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.679081][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.723453][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.740308][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.774183][T15722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.808114][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 799.830013][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 799.840174][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 799.866715][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 799.901512][T15722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.930962][T15722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.948553][T15722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.995371][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 800.020987][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 800.062374][T15722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.102583][T15722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.121204][T15722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.140219][T15722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.199303][T16005] netlink: 'syz.3.3031': attribute type 10 has an invalid length. [ 800.234810][T16005] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.3031'. [ 800.348447][T16013] netlink: 'syz.4.3032': attribute type 46 has an invalid length. [ 800.396012][T16013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3032'. [ 800.446089][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.467692][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.529726][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 800.577187][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.591066][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.619336][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 801.634624][T16026] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3037'. [ 801.815586][T16035] sctp: [Deprecated]: syz.0.3038 (pid 16035) Use of int in maxseg socket option. [ 801.815586][T16035] Use struct sctp_assoc_value instead [ 802.529166][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 802.553213][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 802.561474][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 802.570516][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 802.587311][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 802.594852][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 802.625474][ T4300] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.906604][ T4300] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.121674][ T4300] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.301251][ T4300] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.421719][T16067] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 803.450616][T16067] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3046'. [ 803.865523][ T4300] device 0 left promiscuous mode [ 804.012964][ T4300] tipc: Left network mode [ 804.034090][T16050] chnl_net:caif_netlink_parms(): no params data found [ 804.642979][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 804.769646][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.782858][T16050] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.806879][T16050] device bridge_slave_0 entered promiscuous mode [ 804.942970][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.950137][T16050] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.978040][T16050] device bridge_slave_1 entered promiscuous mode [ 805.181615][T16050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.226275][T16050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.358155][T16050] team0: Port device team_slave_0 added [ 805.494227][T16050] team0: Port device team_slave_1 added [ 805.593530][T16050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.600561][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.674000][T16050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.713500][T16050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.730922][T16050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.832819][T16050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.019530][T16050] device hsr_slave_0 entered promiscuous mode [ 806.054481][T16050] device hsr_slave_1 entered promiscuous mode [ 806.063510][T16050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.081401][T16050] Cannot create hsr debugfs directory [ 806.113533][T16122] netlink: 'syz.5.3056': attribute type 21 has an invalid length. [ 806.138357][T16127] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3056'. [ 806.334030][ T4300] team0: Port device wlan1 removed [ 806.722986][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 806.808394][ T4300] device hsr_slave_0 left promiscuous mode [ 806.820683][ T4300] device hsr_slave_1 left promiscuous mode [ 806.856726][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.871545][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.884424][ T4300] bridge0: port 3(team0) entered disabled state [ 806.900211][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.955323][ T4286] Bluetooth: hci5: ISO packet for unknown connection handle 2366 [ 806.964609][ T4300] device bridge_slave_0 left promiscuous mode [ 806.970891][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.100410][ T4300] device veth1_macvtap left promiscuous mode [ 807.144474][ T4300] device veth0_macvtap left promiscuous mode [ 807.169460][ T4300] device veth1_vlan left promiscuous mode [ 808.645893][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.652353][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.800363][ T4300] device geneve1 left promiscuous mode [ 808.813134][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 808.821171][ T4300] team0 (unregistering): Port device geneve1 removed [ 809.686278][ T4300] device team_slave_1 left promiscuous mode [ 809.698642][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 810.885263][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 811.046408][T16208] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3072'. [ 811.802361][T16050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 811.840239][T16050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 811.958867][T16050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 811.973983][T16050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 812.033022][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'. [ 812.268181][T16050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.326760][T16050] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.354651][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.365497][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.608847][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 812.638853][T16255] sctp: [Deprecated]: syz.5.3082 (pid 16255) Use of int in maxseg socket option. [ 812.638853][T16255] Use struct sctp_assoc_value instead [ 812.673262][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 812.681750][T16256] sctp: [Deprecated]: syz.5.3082 (pid 16256) Use of int in maxseg socket option. [ 812.681750][T16256] Use struct sctp_assoc_value instead [ 812.717134][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.724363][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.751833][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 812.770182][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 812.794789][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.801957][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.323297][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 815.331561][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 815.347618][T16271] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3086'. [ 815.389258][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 815.405707][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 815.449424][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 815.507539][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 815.549052][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 815.579563][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 815.604097][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 815.623322][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 815.637344][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 815.657585][T16283] netlink: 'syz.2.3088': attribute type 2 has an invalid length. [ 815.675904][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 815.697484][T16283] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 815.719091][T16283] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.3088'. [ 815.744522][T16050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 815.758621][T16285] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3089'. [ 816.797936][T16317] netlink: 'syz.5.3096': attribute type 2 has an invalid length. [ 816.846507][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 816.880827][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 816.949413][T16050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.039524][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 817.075299][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 817.171182][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 817.211376][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 817.261302][T16050] device veth0_vlan entered promiscuous mode [ 817.286806][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 817.325474][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 817.360512][T16050] device veth1_vlan entered promiscuous mode [ 817.401967][T16333] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 817.432672][T16333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3102'. [ 817.503344][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 817.543373][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 817.570155][T16050] device veth0_macvtap entered promiscuous mode [ 817.591251][T16333] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3102'. [ 817.674900][T16050] device veth1_macvtap entered promiscuous mode [ 817.685068][T16333] netlink: 'syz.0.3102': attribute type 27 has an invalid length. [ 817.714769][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.725697][T16333] netlink: 'syz.0.3102': attribute type 3 has an invalid length. [ 817.808056][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.830786][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.852950][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.872800][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.897240][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.956805][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.977860][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.000342][T16050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.051611][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.108710][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.172655][T16050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.212601][T16050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.267484][T16050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.312362][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 818.341162][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 818.369809][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 818.419638][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 818.459907][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 818.500651][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 818.554198][T16050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.584753][T16050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.628615][T16050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.677316][T16050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.237050][T11491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.277973][T11491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.301833][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.362340][T11491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.384865][T11491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.427341][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 821.384783][T16410] netlink: 'syz.3.3113': attribute type 2 has an invalid length. [ 821.424689][T16410] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3113'. [ 821.555950][T16419] netlink: 'syz.0.3115': attribute type 21 has an invalid length. [ 821.599061][T16419] IPv6: NLM_F_CREATE should be specified when creating new route [ 821.631086][T16419] IPv6: Can't replace route, no match found [ 822.040881][T15333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 822.050057][T15333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 822.060624][T15333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 822.068722][T15333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 822.077347][T15333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 822.088296][T15333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 822.230764][T16424] Q6`Ҙ: renamed from lo [ 822.251078][T16434] netlink: 'syz.2.3116': attribute type 16 has an invalid length. [ 822.269601][T16434] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3116'. [ 822.303215][T16441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3121'. [ 822.409483][ T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.649116][ T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.973374][ T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.565152][ T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.884196][T16435] chnl_net:caif_netlink_parms(): no params data found [ 824.059525][ T32] tipc: Left network mode [ 824.137479][T16496] Q6`Ҙ: renamed from lo [ 824.163448][T15333] Bluetooth: hci3: command 0x0409 tx timeout [ 824.497547][T16507] netlink: 'syz.3.3133': attribute type 16 has an invalid length. [ 824.514217][T16507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3133'. [ 825.017093][T16517] device syzkaller0 entered promiscuous mode [ 826.252753][T15333] Bluetooth: hci3: command 0x041b tx timeout [ 827.538893][T16538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3139'. [ 827.548355][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 827.575228][T16435] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.582365][T16435] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.592424][T16435] device bridge_slave_0 entered promiscuous mode [ 827.601516][T16543] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3141'. [ 827.637419][T16435] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.672749][T16435] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.682933][T16435] device bridge_slave_1 entered promiscuous mode [ 827.920338][T16435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.255048][T16435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.334113][T15333] Bluetooth: hci3: command 0x040f tx timeout [ 828.554123][T16435] team0: Port device team_slave_0 added [ 828.687954][T16435] team0: Port device team_slave_1 added [ 829.160514][T16435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.203360][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.365031][T16435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.724084][T16435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.731140][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.828425][T16435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.111155][T16596] netlink: 'syz.2.3150': attribute type 16 has an invalid length. [ 830.153411][T16596] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3150'. [ 830.404544][T15333] Bluetooth: hci3: command 0x0419 tx timeout [ 830.490695][T16435] device hsr_slave_0 entered promiscuous mode [ 830.613734][T16435] device hsr_slave_1 entered promiscuous mode [ 830.836307][T16435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.844096][T16435] Cannot create hsr debugfs directory [ 831.136256][T16601] netlink: 'syz.0.3160': attribute type 7 has an invalid length. [ 831.243717][T16601] netlink: 'syz.0.3160': attribute type 7 has an invalid length. [ 831.298373][T16601] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.3160'. [ 831.647127][T16620] netlink: 'syz.5.3153': attribute type 10 has an invalid length. [ 831.698045][T16620] bridge0: port 3(team0) entered disabled state [ 831.990964][T16620] bridge0: port 3(team0) entered disabled state [ 832.156612][T16620] device team_slave_0 left promiscuous mode [ 832.338551][T16620] team0 (unregistering): Port device team_slave_0 removed [ 832.395776][T16620] device team_slave_1 left promiscuous mode [ 832.545872][T16620] team0 (unregistering): Port device team_slave_1 removed [ 832.603579][T16620] device vlan0 left promiscuous mode [ 832.689151][T16620] team0 (unregistering): Port device vlan0 removed [ 832.745178][T16620] device geneve1 left promiscuous mode [ 832.770258][T16620] team0 (unregistering): Port device geneve1 removed [ 832.821036][T16620] device netdevsim0 left promiscuous mode [ 832.882832][T16620] team0 (unregistering): Port device netdevsim0 removed [ 833.174267][ T32] team0: Port device wlan1 removed [ 834.007489][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.022216][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.054035][ T32] device team0 left promiscuous mode [ 834.070427][ T32] device team_slave_1 left promiscuous mode [ 834.092003][ T32] bridge0: port 3(team0) entered disabled state [ 834.142458][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.206464][ T32] device bridge_slave_0 left promiscuous mode [ 834.220178][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.362027][ T32] device veth1_macvtap left promiscuous mode [ 836.731764][ T32] team0 (unregistering): Port device team_slave_1 removed [ 837.767560][T16666] netlink: 'syz.0.3164': attribute type 16 has an invalid length. [ 837.792668][T16666] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3164'. [ 839.160300][T16435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 839.219306][T16435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 839.248893][T16435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 839.330324][T16435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 839.424631][T16708] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3172'. [ 839.770334][T16435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.801010][T16729] netlink: 'syz.5.3175': attribute type 16 has an invalid length. [ 839.819623][T16729] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3175'. [ 839.907509][T16435] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.952280][T16730] netlink: 'syz.2.3177': attribute type 39 has an invalid length. [ 840.611205][T16742] netlink: 'syz.3.3179': attribute type 2 has an invalid length. [ 840.620072][T16742] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3179'. [ 840.639832][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 840.660296][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 840.674129][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 840.683391][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 840.692213][T16056] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.699452][T16056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.733107][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 840.784086][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 840.818874][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 840.843465][T16056] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.850667][T16056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.910843][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 840.940568][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 840.987883][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 841.013360][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 841.043501][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 841.121280][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 841.167682][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 841.193986][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 841.224745][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 841.250808][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 841.284293][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 841.301970][T16435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 842.376887][T16794] netlink: 'syz.0.3189': attribute type 16 has an invalid length. [ 842.392623][T16794] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3189'. [ 842.522407][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 842.548483][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 842.600405][T16435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.856308][T15333] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 844.528656][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 844.555340][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 844.640100][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 844.658897][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 844.683885][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 844.692259][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 844.709635][T16435] device veth0_vlan entered promiscuous mode [ 844.757588][T16435] device veth1_vlan entered promiscuous mode [ 844.838563][T16869] netlink: 'syz.0.3203': attribute type 16 has an invalid length. [ 844.882802][T16869] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3203'. [ 844.958726][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 844.991140][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 845.030661][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 845.081656][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 845.134790][T16435] device veth0_macvtap entered promiscuous mode [ 845.168291][T16435] device veth1_macvtap entered promiscuous mode [ 845.275151][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.322646][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.371119][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.419334][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.430429][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.462553][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.472441][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.521393][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.540839][T16435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.932629][T15333] Bluetooth: hci5: command 0x2016 tx timeout [ 846.832752][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 846.871607][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 846.919540][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 846.940005][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 847.006217][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.027674][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.038508][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.059858][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.071244][T16435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.086102][T16435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.098366][T16435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.105782][T16894] netlink: 92148 bytes leftover after parsing attributes in process `syz.5.3211'. [ 847.116066][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 847.128852][T11490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 847.158886][T16435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.176915][T16435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.202180][T16435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.220410][T16435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.430428][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.449311][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.479448][T11491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 847.519277][T11490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.545722][T11490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.569204][T16055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 847.727919][T16903] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3214'. [ 847.758592][T16903] netlink: 'syz.0.3214': attribute type 10 has an invalid length. [ 847.774760][T16903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3214'. [ 847.821939][T16906] netlink: 'syz.4.3112': attribute type 29 has an invalid length. [ 847.844547][T16903] batman_adv: batadv0: Adding interface: veth1_vlan [ 847.851215][T16903] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.039895][T16903] batman_adv: batadv0: Interface activated: veth1_vlan [ 848.053425][T16906] netlink: 'syz.4.3112': attribute type 29 has an invalid length. [ 848.063397][T16914] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3216'. [ 848.077472][T16914] device hsr_slave_0 left promiscuous mode [ 848.098368][T16906] netlink: 'syz.4.3112': attribute type 9 has an invalid length. [ 848.115939][T16906] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3112'. [ 848.128772][T16914] device hsr_slave_1 left promiscuous mode [ 848.430120][T16921] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3112'. [ 848.447822][T16912] netlink: 'syz.4.3112': attribute type 29 has an invalid length. [ 848.472765][T16915] netlink: 'syz.4.3112': attribute type 29 has an invalid length. [ 848.504515][T16932] netlink: 'syz.3.3219': attribute type 16 has an invalid length. [ 848.551544][T16932] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3219'. [ 849.025653][T16946] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.3224'. [ 849.660971][T16963] netlink: 'syz.3.3227': attribute type 2 has an invalid length. [ 850.359963][T16987] netlink: 'syz.2.3235': attribute type 2 has an invalid length. [ 850.538678][T16998] Q6`Ҙ: renamed from lo [ 850.613511][T17002] netlink: 'syz.4.3237': attribute type 16 has an invalid length. [ 850.621413][T17002] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3237'. [ 850.699330][T17007] netlink: 'syz.3.3240': attribute type 27 has an invalid length. [ 850.937771][T17007] bond0: (slave bond_slave_0): Releasing backup interface [ 851.359645][T17030] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.367241][T17030] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.458336][T17040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3247'. [ 852.513569][T17039] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3248'. [ 852.975310][T17069] netlink: 'syz.2.3256': attribute type 16 has an invalid length. [ 853.002826][T17069] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3256'. [ 853.781584][T17093] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3263'. [ 853.791797][T17093] device hsr_slave_0 left promiscuous mode [ 853.833856][T17093] device hsr_slave_1 left promiscuous mode [ 854.309164][T17110] netlink: 'syz.3.3267': attribute type 2 has an invalid length. [ 854.378497][T17110] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3267'. [ 855.332610][T17132] netlink: 'syz.2.3270': attribute type 16 has an invalid length. [ 855.340525][T17132] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3270'. [ 855.387626][T17134] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 855.460488][T17134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3272'. [ 856.741205][T17147] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3275'. [ 856.812581][T17148] netlink: 'syz.2.3275': attribute type 10 has an invalid length. [ 856.853751][T17148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3275'. [ 856.906417][T17148] batman_adv: batadv0: Adding interface: veth1_vlan [ 856.967716][T17148] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.051356][T17148] batman_adv: batadv0: Interface activated: veth1_vlan [ 857.146553][T17157] netlink: 'syz.3.3277': attribute type 3 has an invalid length. [ 857.205569][T17157] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3277'. [ 857.299410][T17163] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3279'. [ 857.342722][T17163] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3279'. [ 857.365291][T17168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3279'. [ 857.379060][T17168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3279'. [ 857.390943][T17169] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3279'. [ 857.551030][T17177] netlink: 'syz.4.3283': attribute type 2 has an invalid length. [ 857.561932][T17177] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3283'. [ 858.064706][T17191] netlink: 'syz.4.3285': attribute type 16 has an invalid length. [ 858.109562][T17191] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3285'. [ 859.746152][T17221] netlink: 'syz.0.3295': attribute type 10 has an invalid length. [ 860.238626][T17238] netlink: 'syz.4.3300': attribute type 1 has an invalid length. [ 860.656344][T17244] device bond_slave_1 entered promiscuous mode [ 861.152476][T17268] netlink: 'syz.2.3306': attribute type 16 has an invalid length. [ 861.301769][T17271] netlink: 'syz.3.3309': attribute type 10 has an invalid length. [ 862.718209][T17294] IPv6: Can't replace route, no match found [ 862.810303][T15333] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 863.237659][T17305] __nla_validate_parse: 5 callbacks suppressed [ 863.237680][T17305] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3318'. [ 863.324690][T17305] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 863.351971][T17310] netlink: 'syz.0.3320': attribute type 3 has an invalid length. [ 863.376929][T17310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3320'. [ 863.704441][T17321] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 863.712899][T17323] netlink: 'syz.5.3321': attribute type 10 has an invalid length. [ 863.795198][T17323] netlink: 3819 bytes leftover after parsing attributes in process `syz.5.3321'. [ 863.919069][T17330] netlink: 'syz.3.3324': attribute type 16 has an invalid length. [ 863.953067][T17330] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3324'. [ 865.140636][T17351] netlink: 463 bytes leftover after parsing attributes in process `syz.2.3329'. [ 865.234263][T17348] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 865.283004][T17352] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3328'. [ 865.494580][T17352] team0: Port device team_slave_0 removed [ 865.622466][T17351] tipc: Started in network mode [ 865.628224][T17351] tipc: Node identity 9215a268, cluster identity 4711 [ 865.653011][T17351] tipc: Node number set to 2450891368 [ 865.892549][T17360] netlink: 'syz.3.3332': attribute type 10 has an invalid length. [ 865.979380][T17360] team0: Device hsr_slave_0 failed to register rx_handler [ 866.203408][T17374] netlink: 'syz.4.3335': attribute type 3 has an invalid length. [ 866.273908][T17374] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3335'. [ 866.448078][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 866.608497][T17380] netlink: 'syz.5.3336': attribute type 10 has an invalid length. [ 866.673037][T17380] netlink: 3819 bytes leftover after parsing attributes in process `syz.5.3336'. [ 866.676722][T17377] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3337'. [ 866.983666][T17386] netlink: 'syz.2.3338': attribute type 16 has an invalid length. [ 867.902743][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 868.881922][T17418] __nla_validate_parse: 1 callbacks suppressed [ 868.881941][T17418] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3348'. [ 869.246236][T17426] netlink: 'syz.3.3350': attribute type 10 has an invalid length. [ 869.274532][T17426] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.3350'. [ 869.681234][T17439] netlink: 'syz.5.3352': attribute type 16 has an invalid length. [ 869.734279][T17439] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3352'. [ 870.108910][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.115397][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.080344][T17476] netlink: 'syz.2.3363': attribute type 10 has an invalid length. [ 871.099270][T17476] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.3363'. [ 872.375235][T17497] netlink: 'syz.3.3369': attribute type 2 has an invalid length. [ 872.399702][T17497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3369'. [ 872.666004][T17511] netlink: 'syz.2.3371': attribute type 16 has an invalid length. [ 872.693051][T17511] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3371'. [ 872.802804][ T4300] wlan1: Trigger new scan to find an IBSS to join [ 873.227247][T17530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3378'. [ 873.236462][T17530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3378'. [ 873.263442][T17531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3378'. [ 873.657617][T17541] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3380'. [ 873.755972][T16056] wlan1: Creating new IBSS network, BSSID 7e:24:f2:4c:10:fc [ 873.756853][T17543] device pim6reg1 entered promiscuous mode [ 874.185522][T17558] netlink: 'syz.0.3387': attribute type 1 has an invalid length. [ 874.198532][T17558] netlink: 'syz.0.3387': attribute type 3 has an invalid length. [ 874.208368][T17558] __nla_validate_parse: 1 callbacks suppressed [ 874.208382][T17558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3387'. [ 874.737528][T17577] netlink: 'syz.0.3390': attribute type 16 has an invalid length. [ 874.752932][T17577] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3390'. [ 874.983306][T17580] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3392'. [ 875.902739][T17598] netlink: 'syz.5.3396': attribute type 10 has an invalid length. [ 875.991634][T17598] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3396'. [ 876.881032][T17616] netlink: 'syz.3.3401': attribute type 10 has an invalid length. [ 876.907716][T17616] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3401'. [ 876.953749][T17616] device bond0 entered promiscuous mode [ 876.959680][T17616] device bond_slave_1 entered promiscuous mode [ 876.973434][T17616] bridge0: port 3(bond0) entered blocking state [ 876.984036][T17616] bridge0: port 3(bond0) entered disabled state [ 877.021023][T17616] bridge0: port 3(bond0) entered blocking state [ 877.027886][T17616] bridge0: port 3(bond0) entered forwarding state [ 877.036679][T17597] : port 1(veth0_to_team) entered blocking state [ 877.056802][T17597] : port 1(veth0_to_team) entered disabled state [ 877.070636][T17597] device veth0_to_team entered promiscuous mode [ 877.699657][T17641] netlink: 'syz.5.3407': attribute type 16 has an invalid length. [ 877.713067][T17641] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3407'. [ 877.723651][T17639] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3408'. [ 878.488515][T17654] netlink: 'syz.0.3411': attribute type 6 has an invalid length. [ 878.558970][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 878.846622][T17663] netlink: 'syz.5.3414': attribute type 3 has an invalid length. [ 878.942360][T17663] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3414'. [ 879.301516][T17672] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3417'. [ 879.385009][T17672] tun0: tun_chr_ioctl cmd 1074025675 [ 879.399916][T17672] tun0: persist enabled [ 879.445864][T17681] tun0: tun_chr_ioctl cmd 1074025675 [ 879.471625][T17681] tun0: persist enabled [ 879.854351][T17694] netlink: 'syz.0.3420': attribute type 16 has an invalid length. [ 879.876154][T17694] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3420'. [ 880.179537][T17702] C: renamed from team_slave_0 [ 880.236480][T17702] netlink: 'syz.5.3424': attribute type 1 has an invalid length. [ 880.257924][T17702] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3424'. [ 880.274981][T17702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 880.586196][T17719] netlink: 'syz.4.3429': attribute type 10 has an invalid length. [ 880.678202][T17719] team0: Device wg1 is of different type [ 881.609334][T17765] netlink: 'syz.0.3437': attribute type 16 has an invalid length. [ 881.650515][T17765] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3437'. [ 881.950909][T17771] netlink: 'syz.3.3440': attribute type 275 has an invalid length. [ 882.015348][T17766] delete_channel: no stack [ 882.064465][T17766] delete_channel: no stack [ 882.498917][T17787] device syzkaller0 entered promiscuous mode [ 882.508311][T17787] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 882.509891][T17790] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 882.644175][T17790] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 883.350351][T17819] validate_nla: 1 callbacks suppressed [ 883.350390][T17819] netlink: 'syz.0.3454': attribute type 16 has an invalid length. [ 883.432630][T17819] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3454'. [ 883.536419][T17823] : port 1(veth0_to_team) entered blocking state [ 883.549226][T17823] : port 1(veth0_to_team) entered disabled state [ 883.600157][T17823] device veth0_to_team entered promiscuous mode [ 883.729202][T17832] netlink: 'syz.3.3455': attribute type 16 has an invalid length. [ 883.819063][T17832] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3455'. [ 884.742795][T17847] netlink: 'syz.4.3461': attribute type 1 has an invalid length. [ 884.792799][T17847] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3461'. [ 884.905619][T17857] netlink: 'syz.2.3463': attribute type 21 has an invalid length. [ 884.915815][T17857] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3463'. [ 885.508076][T17862] netlink: 'syz.5.3466': attribute type 39 has an invalid length. [ 886.716110][T17899] FAULT_INJECTION: forcing a failure. [ 886.716110][T17899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.761194][T17899] CPU: 1 PID: 17899 Comm: syz.5.3473 Not tainted syzkaller #0 [ 886.768742][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 886.778837][T17899] Call Trace: [ 886.782150][T17899] [ 886.785123][T17899] dump_stack_lvl+0x188/0x24e [ 886.789856][T17899] ? show_regs_print_info+0x12/0x12 [ 886.795145][T17899] ? load_image+0x400/0x400 [ 886.799726][T17899] ? __lock_acquire+0x7d10/0x7d10 [ 886.804802][T17899] ? trace_call_bpf+0x5d6/0x6b0 [ 886.809747][T17899] should_fail_ex+0x399/0x4d0 [ 886.814470][T17899] _copy_from_user+0x2c/0x170 [ 886.819207][T17899] __sys_bpf+0x2ea/0x780 [ 886.823505][T17899] ? bpf_link_show_fdinfo+0x380/0x380 [ 886.828955][T17899] ? lock_chain_count+0x20/0x20 [ 886.833854][T17899] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 886.840021][T17899] __x64_sys_bpf+0x78/0x90 [ 886.844490][T17899] do_syscall_64+0x4c/0xa0 [ 886.848963][T17899] ? clear_bhb_loop+0x60/0xb0 [ 886.853696][T17899] ? clear_bhb_loop+0x60/0xb0 [ 886.858433][T17899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.864378][T17899] RIP: 0033:0x7ff15819ce59 [ 886.868835][T17899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.888488][T17899] RSP: 002b:00007ff15900c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 886.896954][T17899] RAX: ffffffffffffffda RBX: 00007ff158415fa0 RCX: 00007ff15819ce59 [ 886.904971][T17899] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 886.912984][T17899] RBP: 00007ff15900c090 R08: 0000000000000000 R09: 0000000000000000 [ 886.921037][T17899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.929049][T17899] R13: 00007ff158416038 R14: 00007ff158415fa0 R15: 00007fff43feebc8 [ 886.937096][T17899] [ 887.201403][T17903] can: request_module (can-proto-0) failed. [ 887.681465][T17916] netlink: 'syz.4.3477': attribute type 10 has an invalid length. [ 887.701406][T17916] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3477'. [ 888.110033][T17926] netlink: 'syz.0.3480': attribute type 3 has an invalid length. [ 888.132873][T17926] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3480'. [ 888.748903][T17935] netlink: 'syz.3.3481': attribute type 4 has an invalid length. [ 888.816601][T17935] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.3481'. [ 889.636493][T17967] netlink: 'syz.4.3488': attribute type 25 has an invalid length. [ 889.682748][T17967] netlink: 'syz.4.3488': attribute type 25 has an invalid length. [ 890.818665][T17986] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.3493'. [ 890.839344][T17988] netlink: 'syz.4.3494': attribute type 16 has an invalid length. [ 890.858449][T17988] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3494'. [ 890.958263][T17986] openvswitch: netlink: Key type 386 is out of range max 32 [ 891.436755][T17994] netlink: 'syz.0.3496': attribute type 2 has an invalid length. [ 892.127269][T17994] device syzkaller0 entered promiscuous mode [ 892.162056][T17996] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3496'. [ 892.652967][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 893.773834][T18003] netlink: 'syz.0.3496': attribute type 10 has an invalid length. [ 893.815474][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.851622][T18012] netlink: 'syz.4.3499': attribute type 29 has an invalid length. [ 893.895600][T18003] device bridge_slave_1 left promiscuous mode [ 893.909033][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.948441][T18003] team0: Port device bridge_slave_1 added [ 893.965177][T18004] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3496'. [ 896.560476][T18012] netlink: 'syz.4.3499': attribute type 29 has an invalid length. [ 897.485546][T18043] can: request_module (can-proto-0) failed. [ 897.530664][T18045] device syzkaller0 entered promiscuous mode [ 897.545812][T18039] netlink: 'syz.0.3508': attribute type 10 has an invalid length. [ 897.669169][T18039] team0: Device wg1 is of different type [ 897.751227][T18048] netlink: 'syz.3.3510': attribute type 16 has an invalid length. [ 897.783062][T18048] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3510'. [ 903.809571][T11491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 906.352698][T18101] bridge0: port 4(dummy0) entered disabled state [ 906.359544][T18101] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.368644][T18101] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.552064][T18105] netlink: 'syz.4.3523': attribute type 10 has an invalid length. [ 906.596401][T18105] team0: Device wg1 is of different type [ 906.740626][T18108] netlink: 'syz.3.3524': attribute type 10 has an invalid length. [ 907.050059][T18108] team0 (unregistering): Port device team_slave_1 removed [ 907.118086][T18118] netlink: 'syz.4.3528': attribute type 21 has an invalid length. [ 907.131186][T18118] IPv6: NLM_F_CREATE should be specified when creating new route [ 907.156681][T18118] IPv6: Can't replace route, no match found [ 907.194345][T18122] netlink: 'syz.4.3528': attribute type 27 has an invalid length. [ 907.226255][T18122] netlink: 'syz.4.3528': attribute type 25 has an invalid length. [ 908.012743][T15333] Bluetooth: hci1: command 0x0406 tx timeout [ 908.147277][T18142] netlink: 'syz.3.3532': attribute type 29 has an invalid length. [ 908.369323][T18150] netlink: 'syz.4.3535': attribute type 3 has an invalid length. [ 908.388811][T18150] netlink: 'syz.4.3535': attribute type 1 has an invalid length. [ 908.411557][T18150] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3535'. [ 911.323355][T18127] device syzkaller0 entered promiscuous mode [ 913.755280][T18142] netlink: 'syz.3.3532': attribute type 29 has an invalid length. [ 914.650640][T18189] netlink: 'syz.2.3545': attribute type 2 has an invalid length. [ 914.806747][T18189] netlink: 'syz.2.3545': attribute type 29 has an invalid length. [ 914.822173][T18189] netlink: 'syz.2.3545': attribute type 29 has an invalid length. [ 914.840809][T18195] netlink: 'syz.2.3545': attribute type 29 has an invalid length. [ 915.749788][T18217] bridge0: port 3(bond0) entered disabled state [ 915.757499][T18217] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.766803][T18217] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.909352][T18233] device syzkaller0 entered promiscuous mode [ 919.540675][T18266] netlink: 'syz.5.3565': attribute type 3 has an invalid length. [ 919.581461][T18266] netlink: 'syz.5.3565': attribute type 1 has an invalid length. [ 919.601246][T18266] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.3565'. [ 921.545258][T18259] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3562'. [ 921.569155][T18274] netlink: 'syz.5.3566': attribute type 39 has an invalid length. [ 922.711259][T18313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3579'. [ 923.359098][T18324] netlink: 'syz.0.3582': attribute type 2 has an invalid length. [ 923.379933][T18324] netlink: 'syz.0.3582': attribute type 3 has an invalid length. [ 923.392854][T18324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3582'. [ 923.766787][T18344] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3588'. [ 923.784486][T18346] netlink: 'syz.2.3589': attribute type 7 has an invalid length. [ 923.926786][T18346] device syzkaller0 entered promiscuous mode [ 927.142141][T18355] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3591'. [ 927.408556][T18402] netlink: 'syz.0.3602': attribute type 10 has an invalid length. [ 927.430357][T18402] device hsr0 entered promiscuous mode [ 927.509530][T18402] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 927.605122][T18402] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 927.874269][T18402] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 928.033394][T18402] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 928.196271][T18419] netlink: 'syz.3.3607': attribute type 3 has an invalid length. [ 928.221854][T18419] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3607'. [ 928.483336][T15333] Bluetooth: hci2: command 0x0406 tx timeout [ 930.351088][T18410] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3605'. [ 930.399731][T18421] netlink: 'syz.4.3606': attribute type 10 has an invalid length. [ 930.448402][T18421] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 931.537297][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.543899][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.697865][T18477] netlink: 'syz.2.3622': attribute type 3 has an invalid length. [ 933.720124][T18477] netlink: 'syz.2.3622': attribute type 16 has an invalid length. [ 933.729115][T18477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3622'. [ 935.074219][T18502] netlink: 'syz.5.3630': attribute type 4 has an invalid length. [ 935.108434][T18502] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3630'. [ 935.908742][T18526] netlink: 'syz.2.3634': attribute type 7 has an invalid length. [ 936.394210][T18540] netlink: 'syz.5.3639': attribute type 20 has an invalid length. [ 936.604208][T18544] netlink: 'syz.5.3639': attribute type 3 has an invalid length. [ 936.612034][T18544] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3639'. [ 939.566371][ T4286] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 940.587897][T18584] netlink: 'syz.2.3652': attribute type 3 has an invalid length. [ 940.692611][T18584] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.3652'. [ 941.359432][T18597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3657'. [ 941.382592][T18597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3657'. [ 941.416830][T18597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3657'. [ 941.603248][ T4286] Bluetooth: hci3: command 0x2016 tx timeout [ 941.652155][T18606] netlink: 'syz.4.3660': attribute type 21 has an invalid length. [ 941.708145][T18606] netlink: 'syz.4.3660': attribute type 11 has an invalid length. [ 941.955769][T18611] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3662'. [ 942.431161][T18634] netlink: 'syz.5.3668': attribute type 10 has an invalid length. [ 945.782746][T18720] netlink: 'syz.2.3693': attribute type 29 has an invalid length. [ 945.821473][T18720] netlink: 'syz.2.3693': attribute type 29 has an invalid length. [ 947.661099][T18754] netlink: 'syz.3.3703': attribute type 1 has an invalid length. [ 947.712722][T18754] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.3703'. [ 947.800101][T18758] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3705'. [ 948.029608][T18758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.159404][T18758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.238207][T18758] bond0 (unregistering): Released all slaves [ 948.962798][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 949.476531][T18790] netlink: 'syz.0.3712': attribute type 10 has an invalid length. [ 949.539172][T18790] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3712'. [ 949.855389][T18804] netlink: 'syz.0.3717': attribute type 1 has an invalid length. [ 949.902511][T18804] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3717'. [ 950.050151][T18810] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3718'. [ 950.120009][T18810] device macsec0 entered promiscuous mode [ 950.601816][T18836] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3727'. [ 950.849344][T18836] team0: Port device team_slave_0 removed [ 950.937004][T18836] device veth0_to_team left promiscuous mode [ 950.960548][T18836] : port 1(veth0_to_team) entered disabled state [ 951.083883][T18855] delete_channel: no stack [ 951.229879][T18865] netlink: 15039 bytes leftover after parsing attributes in process `syz.0.3736'. [ 952.151562][T18863] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3734'. [ 952.365329][T18858] device syzkaller0 entered promiscuous mode [ 955.191912][T18885] netlink: 'syz.3.3741': attribute type 11 has an invalid length. [ 955.313691][T18895] netlink: 'syz.0.3743': attribute type 21 has an invalid length. [ 955.346444][T18895] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3743'. [ 956.760592][T18926] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 956.873675][T18926] device syzkaller0 entered promiscuous mode [ 957.113571][T18940] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.3758'. [ 959.196972][T18931] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3755'. [ 959.276430][T18953] netlink: 'syz.2.3761': attribute type 1 has an invalid length. [ 959.665551][T18971] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3767'. [ 959.710100][T18972] netlink: 'syz.4.3767': attribute type 3 has an invalid length. [ 959.751098][T18972] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3767'. [ 959.813415][T18975] netlink: 'syz.4.3767': attribute type 3 has an invalid length. [ 959.849402][T18975] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3767'. [ 960.194374][T18993] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3773'. [ 960.200838][T18986] delete_channel: no stack [ 960.423995][T19007] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3776'. [ 960.496891][T19007] device macsec0 entered promiscuous mode [ 960.622433][T19002] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 960.773469][T19002] device syzkaller0 entered promiscuous mode [ 964.037163][T19023] netlink: 'syz.0.3777': attribute type 22 has an invalid length. [ 964.048043][T19023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 964.949680][T19090] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3800'. [ 965.537946][T19104] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 965.717974][T19104] device syzkaller0 entered promiscuous mode [ 966.624945][T19154] netlink: 'syz.4.3818': attribute type 29 has an invalid length. [ 968.458076][T19154] netlink: 'syz.4.3818': attribute type 29 has an invalid length. [ 969.037575][T19170] bridge0: port 4(dummy0) entered disabled state [ 971.811616][T19170] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.837620][T19170] device bridge_slave_0 left promiscuous mode [ 971.904861][T19170] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.118311][T19199] : port 1(ip6gretap0) entered blocking state [ 972.153004][T19199] : port 1(ip6gretap0) entered disabled state [ 972.183629][T19199] device ip6gretap0 entered promiscuous mode [ 972.333381][T19215] netlink: 'syz.2.3837': attribute type 29 has an invalid length. [ 972.365720][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3837'. [ 972.399717][T19215] netlink: 'syz.2.3837': attribute type 29 has an invalid length. [ 972.432713][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3837'. [ 972.595355][T19228] netlink: 'syz.4.3839': attribute type 16 has an invalid length. [ 972.633040][T19228] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3839'. [ 973.440520][T19246] device virt_wifi0 entered promiscuous mode [ 974.733331][T19276] device batadv_slave_0 entered promiscuous mode [ 975.970614][T19286] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3859'. [ 975.988893][T19292] netlink: 'syz.0.3857': attribute type 16 has an invalid length. [ 976.038524][T19292] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3857'. [ 976.199425][T19297] netlink: 'syz.5.3862': attribute type 2 has an invalid length. [ 976.284476][T19301] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3861'. [ 979.527333][T19325] netlink: 'syz.0.3870': attribute type 27 has an invalid length. [ 979.540868][T19327] netlink: 'syz.2.3871': attribute type 21 has an invalid length. [ 979.562746][T19325] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3870'. [ 979.573616][T19327] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3871'. [ 979.886522][T19334] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 980.071437][T19332] netlink: 'syz.4.3873': attribute type 3 has an invalid length. [ 980.122736][T19332] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3873'. [ 982.880556][T19339] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3875'. [ 983.568488][T19362] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3884'. [ 983.648833][T19362] netlink: 'syz.4.3884': attribute type 3 has an invalid length. [ 983.670943][T19367] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3886'. [ 983.680601][T19362] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3884'. [ 983.737495][T19364] FAULT_INJECTION: forcing a failure. [ 983.737495][T19364] name failslab, interval 1, probability 0, space 0, times 0 [ 983.793032][T19364] CPU: 0 PID: 19364 Comm: syz.0.3885 Not tainted syzkaller #0 [ 983.800575][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 983.810708][T19364] Call Trace: [ 983.814034][T19364] [ 983.817003][T19364] dump_stack_lvl+0x188/0x24e [ 983.821729][T19364] ? show_regs_print_info+0x12/0x12 [ 983.826971][T19364] ? load_image+0x400/0x400 [ 983.831528][T19364] ? __might_sleep+0xd0/0xd0 [ 983.836187][T19364] ? __lock_acquire+0x7d10/0x7d10 [ 983.841273][T19364] should_fail_ex+0x399/0x4d0 [ 983.845995][T19364] should_failslab+0x5/0x20 [ 983.850538][T19364] slab_pre_alloc_hook+0x59/0x310 [ 983.855622][T19364] ? apparmor_sk_alloc_security+0x74/0x100 [ 983.861478][T19364] __kmem_cache_alloc_node+0x4f/0x260 [ 983.866899][T19364] ? apparmor_sk_alloc_security+0x74/0x100 [ 983.872798][T19364] kmalloc_trace+0x26/0xe0 [ 983.877276][T19364] apparmor_sk_alloc_security+0x74/0x100 [ 983.882970][T19364] security_sk_alloc+0x6a/0xa0 [ 983.887791][T19364] sk_prot_alloc+0x101/0x210 [ 983.892433][T19364] ? sk_alloc+0x20/0x340 [ 983.896729][T19364] sk_alloc+0x36/0x340 [ 983.900844][T19364] ? bpf_ctx_init+0x163/0x1a0 [ 983.905575][T19364] ? bpf_prog_test_run_skb+0x275/0x1890 [ 983.911178][T19364] bpf_prog_test_run_skb+0x371/0x1890 [ 983.916611][T19364] ? __fget_files+0x28/0x4b0 [ 983.921261][T19364] ? cpu_online+0xa0/0xa0 [ 983.925617][T19364] bpf_prog_test_run+0x31e/0x390 [ 983.930596][T19364] __sys_bpf+0x62b/0x780 [ 983.934876][T19364] ? bpf_link_show_fdinfo+0x380/0x380 [ 983.940297][T19364] ? lock_chain_count+0x20/0x20 [ 983.945182][T19364] __x64_sys_bpf+0x78/0x90 [ 983.949627][T19364] do_syscall_64+0x4c/0xa0 [ 983.954069][T19364] ? clear_bhb_loop+0x60/0xb0 [ 983.958776][T19364] ? clear_bhb_loop+0x60/0xb0 [ 983.963482][T19364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.969406][T19364] RIP: 0033:0x7fea03b9ce59 [ 983.973848][T19364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.993503][T19364] RSP: 002b:00007fea04b4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 984.002045][T19364] RAX: ffffffffffffffda RBX: 00007fea03e15fa0 RCX: 00007fea03b9ce59 [ 984.010046][T19364] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 984.018036][T19364] RBP: 00007fea04b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 984.026019][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.034000][T19364] R13: 00007fea03e16038 R14: 00007fea03e15fa0 R15: 00007ffd5fd38108 [ 984.042006][T19364] [ 984.206197][T19369] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.3887'. [ 984.238422][T19370] netlink: 'syz.2.3887': attribute type 10 has an invalid length. [ 984.598697][T19370] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 984.640053][T19376] netlink: 'syz.5.3890': attribute type 1 has an invalid length. [ 984.668512][T19383] netlink: 'syz.0.3891': attribute type 20 has an invalid length. [ 984.705329][T19380] : port 1(ip6gretap0) entered blocking state [ 984.721323][T19380] : port 1(ip6gretap0) entered disabled state [ 984.737273][T19380] device ip6gretap0 entered promiscuous mode [ 984.765963][T19383] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3891'. [ 985.132092][T19393] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 985.139973][T19393] #PF: supervisor instruction fetch in kernel mode [ 985.146496][T19393] #PF: error_code(0x0010) - not-present page [ 985.152530][T19393] PGD 630df067 P4D 630df067 PUD 0 [ 985.157685][T19393] Oops: 0010 [#1] PREEMPT SMP KASAN [ 985.162915][T19393] CPU: 0 PID: 19393 Comm: syz.4.3895 Not tainted syzkaller #0 [ 985.170397][T19393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 985.180492][T19393] RIP: 0010:0x0 [ 985.183984][T19393] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 985.191373][T19393] RSP: 0018:ffffc9000d8f7458 EFLAGS: 00010246 [ 985.197496][T19393] RAX: 1ffffffff16586fb RBX: 1ffff92001b1ee9c RCX: 0000000000000001 [ 985.205510][T19393] RDX: ffffc9000d8f7500 RSI: 0000000000000001 RDI: ffff888056240000 [ 985.213523][T19393] RBP: ffffc9000d8f7570 R08: ffff88805624003f R09: 1ffff1100ac48007 [ 985.221548][T19393] R10: dffffc0000000000 R11: ffffed100ac48008 R12: ffffe8ffffc62190 [ 985.229567][T19393] R13: ffffffff8b2c37d8 R14: 0000000000000000 R15: ffff888056240000 [ 985.237574][T19393] FS: 00007fb79d9f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 985.246549][T19393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.253198][T19393] CR2: ffffffffffffffd6 CR3: 0000000072dc8000 CR4: 00000000003506f0 [ 985.261211][T19393] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 985.269214][T19393] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 985.277217][T19393] Call Trace: [ 985.280522][T19393] [ 985.283477][T19393] bond_xdp_xmit+0x31e/0x550 [ 985.288113][T19393] ? bond_xdp_xmit+0x94/0x550 [ 985.292875][T19393] ? bond_xdp+0x890/0x890 [ 985.297246][T19393] ? __next_zones_zonelist+0x99/0x120 [ 985.302771][T19393] bq_xmit_all+0xd3f/0x11b0 [ 985.307318][T19393] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 985.313516][T19393] ? rcu_read_lock_bh_held+0x76/0xf0 [ 985.318836][T19393] ? bq_enqueue+0x2ee/0x3d0 [ 985.323389][T19393] ? __dev_flush+0x1b0/0x1b0 [ 985.328022][T19393] ? dev_map_enqueue_multi+0xecf/0x1020 [ 985.333628][T19393] ? dev_map_enqueue+0x340/0x340 [ 985.338642][T19393] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 985.344848][T19393] ? rcu_is_watching+0x11/0xa0 [ 985.349655][T19393] ? trace_xdp_redirect+0xb3/0x2b0 [ 985.354810][T19393] __dev_flush+0xbf/0x1b0 [ 985.359188][T19393] xdp_do_flush+0xa/0x20 [ 985.363478][T19393] bpf_test_run_xdp_live+0x1545/0x1a90 [ 985.368986][T19393] ? 0xffffffffa0004440 [ 985.373178][T19393] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 985.378767][T19393] ? xdp_convert_md_to_buff+0x330/0x330 [ 985.384370][T19393] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 985.390679][T19393] ? bpf_test_init+0x119/0x140 [ 985.395504][T19393] ? xdp_convert_md_to_buff+0x5b/0x330 [ 985.400997][T19393] bpf_prog_test_run_xdp+0x736/0xf10 [ 985.406323][T19393] ? dev_put+0x80/0x80 [ 985.410443][T19393] ? dev_put+0x80/0x80 [ 985.414555][T19393] bpf_prog_test_run+0x31e/0x390 [ 985.419558][T19393] __sys_bpf+0x62b/0x780 [ 985.423837][T19393] ? bpf_link_show_fdinfo+0x380/0x380 [ 985.429256][T19393] ? lock_chain_count+0x20/0x20 [ 985.434145][T19393] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 985.440172][T19393] __x64_sys_bpf+0x78/0x90 [ 985.444630][T19393] do_syscall_64+0x4c/0xa0 [ 985.449088][T19393] ? clear_bhb_loop+0x60/0xb0 [ 985.453820][T19393] ? clear_bhb_loop+0x60/0xb0 [ 985.458543][T19393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.464472][T19393] RIP: 0033:0x7fb79f79ce59 [ 985.468930][T19393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.488570][T19393] RSP: 002b:00007fb79d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 985.497037][T19393] RAX: ffffffffffffffda RBX: 00007fb79fa15fa0 RCX: 00007fb79f79ce59 [ 985.505052][T19393] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 985.513146][T19393] RBP: 00007fb79f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 985.521150][T19393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.529153][T19393] R13: 00007fb79fa16038 R14: 00007fb79fa15fa0 R15: 00007fff897fedd8 [ 985.537186][T19393] [ 985.540245][T19393] Modules linked in: [ 985.544171][T19393] CR2: 0000000000000000 [ 985.548358][T19393] ---[ end trace 0000000000000000 ]--- [ 985.553849][T19393] RIP: 0010:0x0 [ 985.557348][T19393] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 985.564735][T19393] RSP: 0018:ffffc9000d8f7458 EFLAGS: 00010246 [ 985.570831][T19393] RAX: 1ffffffff16586fb RBX: 1ffff92001b1ee9c RCX: 0000000000000001 [ 985.578860][T19393] RDX: ffffc9000d8f7500 RSI: 0000000000000001 RDI: ffff888056240000 [ 985.586876][T19393] RBP: ffffc9000d8f7570 R08: ffff88805624003f R09: 1ffff1100ac48007 [ 985.594895][T19393] R10: dffffc0000000000 R11: ffffed100ac48008 R12: ffffe8ffffc62190 [ 985.602920][T19393] R13: ffffffff8b2c37d8 R14: 0000000000000000 R15: ffff888056240000 [ 985.610929][T19393] FS: 00007fb79d9f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 985.619890][T19393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.626529][T19393] CR2: ffffffffffffffd6 CR3: 0000000072dc8000 CR4: 00000000003506f0 [ 985.634524][T19393] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 985.642524][T19393] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 985.650518][T19393] Kernel panic - not syncing: Fatal exception in interrupt [ 985.657849][T19393] Kernel Offset: disabled [ 985.662179][T19393] Rebooting in 86400 seconds..