last executing test programs: 21.572764763s ago: executing program 0 (id=3968): r0 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x0) 21.297674508s ago: executing program 0 (id=3974): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000a56237ede19315692165096c6454c8f0c49c4d53964e9e6af4c0303144fda25165fe2d3a51ad143fb79a370e6d92877762ce6dec08a2f6a8917f44520eeffadeb0ee3ac1ebb174c2343879b22961c984cd8d52dc4637a55f2cb23c053140195d9129546f72bbb7f8060fe89c45ec588eb83ac302ee48ba619d5eb7259271085bf8160000bdfb5c11a6fbfcf4b4bbb4968f35e3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1d) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000340)={'syzkaller1', 0x32, 0x35}, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.233785363s ago: executing program 0 (id=3978): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRESDEC], 0x27) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x200009, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000000), 0xea1, r5}, 0x38) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x5dc}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x2, 0xf5f, 0x3, 0x2800, r2, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0xf}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r7, &(0x7f0000000880)="67334f20f2f85d0095f1723848d661cac65d12a9f38ab4e4632707098184bb0c7b62d487c409373c05d4c5cd409088f3a507b9b6d811c28f"}, 0x20) recvmsg(r4, &(0x7f0000000780)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4092, 0xffc}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f00000007c0)=""/2, 0x2}], 0x8, &(0x7f0000003380)=""/4096, 0x1000}, 0x2000) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) 20.025371604s ago: executing program 3 (id=3984): r0 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) 19.848837543s ago: executing program 4 (id=3986): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2584, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000900000000010000000000000e0100000000000000002e"], 0x0, 0x37}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x40043fc) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000500)='\x1c\xdd\n\xde\x10o \xda\xc1hTe\x9d\xc5wG[!uf\x13\xcc\xe2\x9b`\x9c)\xcc(\xc5\xe2\x84\x86\xce\n$)$\x1c\xcd\x16#\xb6}\xf1;\x8d\x97-\xb9_\xee\x83\a\xb3x\x93%\xd6Y\xe60\xdc\x00\xf9\xda\r\xbd \x94N3\x9b\x04.\xc3;4\x8f\xc3\x86\x880xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) mkdir(&(0x7f0000000100)='./file0\x00', 0x8) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034001410000002000179215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 19.797577746s ago: executing program 3 (id=3988): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2aaa12fb1c658c08}, 0x4000041) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) r6 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xe0ffffff}, 0x80, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000600)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x3}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="f4b65ebbbe21647ea84d1eea74df391bd20a042812f75786dc0058bb73fb36b7b2c9434e728cb2f5d0334eee366cc95c13080875c1068c38abc4a238ce178e6ce3b290a4330b602666bc9a5ac71a587430e076222f144f23bc987f", 0x5b}, {&(0x7f00000002c0)="71584df7852f5fe83d6a47c2135225e98e8d649778a1138613230de1f99a7e049a7050d9e8113c02f5e348e182844c28e637f0656aede8bcdf12ace4650183e9180cb0181cb4cabae0e6cccef9adc51cfb565cd3deb136aafb2c94bfedd47cac539b6ef4ccb590d0fdb6ea410c11c1a12fb99d57a73959ed5aad543a49d1f318044964d2dd5d4756b4ab8711c9283d42cca8939cdd704d93fc3ac3920a0258c544f97709", 0xa4}, {&(0x7f0000000380)="e75338acf40d1098b6ad366e724f9c0ff97e45a351666ba1507a47a8af", 0x1d}, {&(0x7f00000003c0)="692168c59f42728583a9bacce8e051b9d38256de72ebf286b4087c3757c109cda43e553b37f738bae1fddc61dafef33763eb855ea30bdb1f9d6ead76c73bd06a13b60af39d069a201ac9d822656ecb655ebe2720359e0ab9b92206031dc55551d95974dcdcfca0e1acf1232068aa30918e2845d1e3b42d1c7844c62de17f9809225fd72a3f20a6b432a651ab243c5321325f216d441f6756251b96", 0x9b}], 0x4, &(0x7f0000000580)="173bb8dbcb0f178a24f18880b5ecca3870632869968d3ff4e8ea78ec6ab6e69187053e438c25119cda023a8806382f9d25f9cffa1b35c64d40fa5233b4de494f1515c5b77d478ce8253c076caaf4145e84ccc3c9d7b919be9ae233f531d78f2e1d7951cb0c4425724de11f47f199517c3926d9e748d60035", 0x78, 0x200000c0}, 0x840) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, r0, 0x4) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 19.652075203s ago: executing program 2 (id=3989): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x101, 0x80000001}, 0x11c002, 0x100000000ac60, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000fe9c80c3bd29d8d1576873000000000500"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000c064e2e6000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000020"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x26, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x40}, 0x106050, 0x4, 0xffffffff, 0x4, 0x1000000000000000, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000100"], 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) 19.549234588s ago: executing program 4 (id=3990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000e000001000000000400000007010000080700207500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0xa}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000180)=r4, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_devices(r3, &(0x7f0000000500)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x28, 0x10001, 0x0, 0x2000, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x53, 0xae, &(0x7f0000000240)=""/174, 0x41100, 0x12, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1cf07, r0, 0x1, &(0x7f0000000480)=[r7, r8], &(0x7f00000004c0)=[{0x0, 0x2, 0x7, 0xb}], 0x10, 0xac2}, 0x94) 19.410515886s ago: executing program 3 (id=3991): syz_clone(0x10ab27f280, 0x0, 0x37, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x7, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007007604"], 0x50) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000007000000080000000b"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, &(0x7f0000000280), 0x0}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000000640), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="1c00000033000b122900", 0xa}], 0x1}, 0x800) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00010008aaaaaaaaaa8610001c6d09e4f288aa"]) syz_clone(0xbc368000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.226542645s ago: executing program 2 (id=3993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000002c0)=@raw=[@jmp={0x5, 0x1, 0xb863d94a5438b1f6, 0x7, 0x0, 0xfffffffffffffffc}, @generic={0x27, 0x5, 0xb, 0x4, 0x3c}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000300)='GPL\x00', 0x9, 0xe5, &(0x7f0000000580)=""/229, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x1, 0x200, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x1, 0xb, 0x1}, {0x3, 0x3, 0xd, 0xc}, {0x3, 0x1, 0xc, 0xa}, {0x2, 0x3, 0x9, 0x1}], 0x10, 0xf675}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800040000000401a80016000800014009001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3}}, @func={0x6}, @union]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x50}, 0x28) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 19.009021576s ago: executing program 0 (id=3995): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x840, 0xac5d, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0x3, &(0x7f0000001b00)=ANY=[@ANYRES32=r4, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000040000002950000000000000085100000fcffffff95", @ANYRES64=r3], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/97, 0x67, 0x61, 0x1, 0x0, 0x10000, @value=r7}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x56863fb1d28d748b}, 0x104e62, 0xc78, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r9}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e77f4188e112c5350000000000000000000000000000b2000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) r11 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r11) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) recvmsg(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/81, 0x51}, {&(0x7f00000008c0)=""/213, 0xd5}, {&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000b80)=""/33, 0x21}], 0x6, &(0x7f0000000c40)=""/235, 0xeb}, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=""/236, 0xec}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x0) 18.798450548s ago: executing program 3 (id=3997): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x8, 0x8, 0xfd, 0xffffffff}, {0x4, 0x2, 0x81, 0x3}, {0x6, 0xcc, 0x6, 0x3ff}, {0x2, 0x0, 0x6, 0xd}, {0x3, 0x4, 0x6, 0x6}]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'sit0\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x8, 0x8, 0xfd, 0xffffffff}, {0x4, 0x2, 0x81, 0x3}, {0x6, 0xcc, 0x6, 0x3ff}, {0x2, 0x0, 0x6, 0xd}, {0x3, 0x4, 0x6, 0x6}]}) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40002182) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'sit0\x00', @broadcast}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 18.765638079s ago: executing program 2 (id=3998): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0xff, 0x80, 0x8c, 0x0, 0x2, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x58, 0x7, 0x6, 0x0, 0x9, 0x9, 0x401, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) close(r1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="1400000028000100c21400002fbd6c193d970000", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2a, 0x2, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0xff, 0x80, 0x8c, 0x0, 0x2, 0x20000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x58, 0x7, 0x6, 0x0, 0x9, 0x9, 0x401, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) close(r1) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="1400000028000100c21400002fbd6c193d970000", 0x14}], 0x1}, 0x0) (async) 18.486468124s ago: executing program 4 (id=4000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r0, 0x58, &(0x7f0000001600)}, 0xe) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0xefffffff, 0x0, 0x2, 0x40000503, {0xa, 0x4e20, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x740a, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007007604"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004b2530cb4c7db5e0e25752d28c7e88b6c8b4f27d179f0c2deab54eb05de9ae951775d4586446fef118e1d5f568f24baa90406e97d982090c557224d210d4cb972f425abba95fba99e56fe6d81b05e69ce107466b6101f764fa3eefe7affbc914041ef0101749a8191a6c913a5d8ac82cff1602ad296d9b75564d0ca6139df7e0c5eaf8e1b44793d88813897c485f0fb5bbd2500ea92c6a6a415875090118695ef176ea1a3e543890ba80819fa24a00e7bd72"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRESDEC, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14ec77c6fdb8c1ea, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) 18.480743354s ago: executing program 3 (id=4001): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001e00810ce00f80ecdb4cb9f207c804a00d000000010006fb0a0002000a0ada1b40d80500c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000840), 0x0, 0x0, 0x4c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) r4 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000daffffd301000000010000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x38, 0x800}, 0x40000) close(r3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="19000000040000"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) write$cgroup_type(r8, &(0x7f0000000240), 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4050) 18.449050885s ago: executing program 2 (id=4002): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000400)='memory.max\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb3bfc721360705aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c0"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x32, r0, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000000c0)=0x2) write$cgroup_devices(r4, &(0x7f0000000740)=ANY=[], 0xffdd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r6, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000040)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c300050000000000000000e27b03693200946710c70900"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000f7ffffff850000007b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000090000000300000006000093010000000100000003000200010000000200000007000000010000000500000009000000030000000500000002000000030000000400000078000000000000000c0000000a00000002d30000002e61615f5f612e0051ab615fc73f29a707e6aea41be5b890560afd13e18402a5a6d5619a3790716356ddd48ce5466a07a086ee55516a13037f6ac1398047853fd6f8bfb16943b6d8b19ca538752d501b49f54e528b69dc5741861777f2053ee8f00f0b967c908279473c6068d05804cc1128c7d65b5e871a44b0514de79e94626d0641dda13773c6f6052d08ccd07e2e68816e15affe787cb5396296760a5b7d1f3ab01bc247185be8767e5366d7e4cfb54aac78453b143de32353a19caf9f7250ef999fed294bff0273187309ffbc176fe4ca31afbef35cb79ca6f7a962d9ff4028f6190e73993c7b1ef1f8cd5e691a875ade5216114a27abec6508e80fc1a50dae2e2ded72d734c380af0d8adb5a45d60bb560"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.030740147s ago: executing program 1 (id=4004): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000fff00c239f5eb12862885ed553e4c42e920055d5934a6f3c971a9a4fcbcf0280bab1156778ab52f163fac76e429121a2aac773d6684e87224fe1e207424ade2a1dc0ca8f8e4cb02a3f50c33b3a7d9a6ed77118012258e06266e09ca3b033053330bbf75f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="b305e37ae9a96a0f04c589abeb731602", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000000000695"], &(0x7f0000000000)='GPL\x00'}, 0x90) 17.805719859s ago: executing program 0 (id=4005): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x5e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000b40)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="cdaf0f977fe1931f6cb47ad869cb", 0x0, 0xa2c, 0x0, 0xcc, 0x0, &(0x7f0000000a40)="b84de233f8140fdb19446df0bb7f324fd4d15a29598633b78c8f619ad277fb74403e4b3d0f88635f75a29a5f08af7d20d874d55fcd61151f28c4291c848153c7c492e77e31a0f6498111f8f8425cef1ae1a481935fb9f61f7aab50dd0a4b0752fe1b1891e0701bc659b112dd3ebf8b24016d57938bee5183a3a9b319a304d30e5a81947eac859dbb2318b869d2452fae396f60a6a7836e99c5b39270643405facd27a9b0ed5ae7420319f5421aa9cf993dc6597d1e668d28fa7186531c4c940306f7a769347c652dbab28e85", 0x0, 0x2, 0x0, 0x400}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000005240)=""/4106, 0x100a}, {&(0x7f0000004200)=""/4089, 0xff9}, {&(0x7f0000001800)=""/156, 0x9c}], 0x3}, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002780)=""/197, 0xc5}], 0x6, &(0x7f0000002880)=""/4096, 0x1000}, 0x10000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/214, 0xdb, 0xd6, 0x0, 0xffff8000, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x1, 0x2, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x8, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) 17.754418032s ago: executing program 1 (id=4006): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x80000001}, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0xed, &(0x7f0000000280)=""/237, 0x41000, 0x80, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x492}, 0x94) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000340)=@raw=[@generic={0xfd, 0x3, 0x6, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x80}, @alu={0x4, 0x1, 0x0, 0xa, 0x1, 0xffffffffffffffe0, 0xfffffffffffffffc}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, 0x0, 0x12) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002c7703c1d728fc63f87bb72a3d40372b977ea3f4dd5652fde444d5d548f816ba42343867e73c4418829463c17c9bb2c4df540729176a91c9d59c8519e3dd2b262c5d70cf85c4656967333a783376676f73f9634098f1b10e87ee3dff3ca95146cb08a1cb04e9291d2f8da981cc7a88d1d934a5b730adf6adce7f53c6ed1c56591904ab259e111cf3082a262169f26faaa5c7573ec9c203455e4840574f1820ce7e074645f584535b9f5ac3ae679bed8f28348526ad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000001c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000000c5090000fbffffff7baaf0ff00000000bf27000000000000070800", @ANYRES32=r4, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff51}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r8, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="d20bd47ef30c5cdea6cee6b72013368a686e9ade65ea555a64dbafdee4b5a204b998eaad964c218dcc1ac10e3318407fbb87415da3dc541524b3f634795452af3a7bd9db4407327aad13842f840e7bb97f45db5948f256c3fe3403555599c51fc506e882c158e177f97c0403a1f820eb8d81824f27de76a0b27f4843aee45064d7e5728fb8b4eead25", 0x89}], 0x1, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x446b}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xbf}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xf0}, 0x4000014) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x3f, 0xc5, 0x4, 0x3, 0x7, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x201, 0x1, @perf_bp={0x0, 0x13}, 0x10424, 0x6, 0x9, 0x9, 0x3, 0x5, 0x9, 0x0, 0x7e, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 17.724403763s ago: executing program 4 (id=4007): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) 17.715041563s ago: executing program 3 (id=4008): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x800002, '\x00', r1, r0}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r3, r4}) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 17.562540121s ago: executing program 2 (id=4009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000011"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) 17.527129403s ago: executing program 4 (id=4010): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x1000, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x1000, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x400000002, 0x0) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r2, 0x0, 0x10122) (async) recvmsg$kcm(r2, 0x0, 0x10122) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x83) socket$kcm(0x10, 0x2, 0x2) (async) r3 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)='\x00', 0x1}], 0x1}, 0x480d0) close(r3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x2e) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x2e) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700", 0x2c}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f00000011c0)='%pi6 \x00'}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000001240)={0x0, r6}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.462507906s ago: executing program 2 (id=4011): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10901a, 0xac5d, 0x10000200, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005dc900000000000000000000000000010000000000008000000000874929cac708d78e4b1d36cee76e215184437cb2807a0f984aeff6fd07a4f63b72c0e6cfd2c8efd1322f86cec55d8a99fc997502d82796063ecad389c84a59da7dd658e25d52ca6782c1697de77e9c25e261ce8afc98f9c5081be9389ffac210582630e48a446f87f2697d4219f00bfe98d6191e7f3e1f2e3d26b50ed2fecadc6bde7ea1f565250f3d76ae967e118d71e013fe24149d4fd16b5c85de2454ddd7e59008f2c797bb203e3374ce46db7800e1c40a310799ab7d8f872e24b2ab1e7733eb377df71de907e11538"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0xba9, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x2000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001700000000000000000000000000000000f1ffffffffffffff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b700000000000000850000009a648cfea338"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.354542712s ago: executing program 1 (id=4012): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x2000}, 0xc020) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r0, &(0x7f0000000300), &(0x7f00000003c0)=""/178, 0x4}, 0x20) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0xf, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r3, r0, 0x25, 0x2025, r0, @void, @void, @value=r4}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xcc0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x0, 0xbe, 0x8, 0x7}, {0x0, 0x5f, 0x8, 0x7fb}, {0x5, 0x9, 0x7, 0x8}, {0x6, 0x1, 0xb, 0x7}, {0x4, 0x7, 0x0, 0x9ef4}]}) 17.271039006s ago: executing program 1 (id=4013): r0 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0xf5) 17.153074923s ago: executing program 1 (id=4014): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 16.702125866s ago: executing program 4 (id=4015): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r3, 0x2, 0xffffffffffffffff, 0x1) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x43, 0x2d, 0x6, 0x77, 0x0, 0x1200000000000000, 0x6, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000b40), 0x7}, 0x8104, 0x2, 0x10, 0x0, 0xd3ed, 0x6, 0xa, 0x0, 0x20000000, 0x0, 0x80000000}, r3, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ac0), 0x3}, 0x10c002, 0x2, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0x103, 0x150, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x50) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x1, 0x0, 0x1, 0x0, 0x1000000002, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x8a7a, 0x1, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000b00), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x10, 0x3, 0x10) r11 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="06", 0x1}], 0x1}, 0x4c040) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000040000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a0000000600009f2f09d0d50c7fc2d2fc46e0d55cb8156f5dc87c9f0b0402e3d34e3ee269e84b755b91710aec6d14b849c1eed80fd512a74690df6cfa29ed5e8a82afef2c00c939103cf1c91272d8ceac58e1defa1a43ba132052bb899215ae32bd7b77206d1cdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) 16.582736292s ago: executing program 1 (id=4016): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001000)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x8, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="e78e05572c1cdbb7910e4a1fd16bdd38613a61ecf46a04690a3855c5b0625b5ee32cab74379affffff7f0000000004a329de4ad7795f5ccf1c357f5eec81b99ac06bd7abb8eda30e59e22c195a8757", 0x4f}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x41) close(r1) 16.565035343s ago: executing program 0 (id=4017): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f00000002c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/25, 0x19}], 0x1}, 0x2002) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x20}, 0x80d1) 2.499026871s ago: executing program 32 (id=4008): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x800002, '\x00', r1, r0}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r3, r4}) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8081, 0x0, 0x9, 0x0, 0x3, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.070159714s ago: executing program 33 (id=4017): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f00000002c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/25, 0x19}], 0x1}, 0x2002) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x20}, 0x80d1) 595.160999ms ago: executing program 34 (id=4016): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001000)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x8, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="e78e05572c1cdbb7910e4a1fd16bdd38613a61ecf46a04690a3855c5b0625b5ee32cab74379affffff7f0000000004a329de4ad7795f5ccf1c357f5eec81b99ac06bd7abb8eda30e59e22c195a8757", 0x4f}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x41) close(r1) 490.351054ms ago: executing program 35 (id=4011): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10901a, 0xac5d, 0x10000200, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005dc900000000000000000000000000010000000000008000000000874929cac708d78e4b1d36cee76e215184437cb2807a0f984aeff6fd07a4f63b72c0e6cfd2c8efd1322f86cec55d8a99fc997502d82796063ecad389c84a59da7dd658e25d52ca6782c1697de77e9c25e261ce8afc98f9c5081be9389ffac210582630e48a446f87f2697d4219f00bfe98d6191e7f3e1f2e3d26b50ed2fecadc6bde7ea1f565250f3d76ae967e118d71e013fe24149d4fd16b5c85de2454ddd7e59008f2c797bb203e3374ce46db7800e1c40a310799ab7d8f872e24b2ab1e7733eb377df71de907e11538"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0xba9, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, 0x0, 0x2000000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001700000000000000000000000000000000f1ffffffffffffff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b700000000000000850000009a648cfea338"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 36 (id=4015): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, r3, 0x2, 0xffffffffffffffff, 0x1) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x43, 0x2d, 0x6, 0x77, 0x0, 0x1200000000000000, 0x6, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000b40), 0x7}, 0x8104, 0x2, 0x10, 0x0, 0xd3ed, 0x6, 0xa, 0x0, 0x20000000, 0x0, 0x80000000}, r3, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000ac0), 0x3}, 0x10c002, 0x2, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0x103, 0x150, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x50) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x1, 0x0, 0x1, 0x0, 0x1000000002, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x8a7a, 0x1, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000b00), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x8, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x10, 0x3, 0x10) r11 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="06", 0x1}], 0x1}, 0x4c040) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000040000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a0000000600009f2f09d0d50c7fc2d2fc46e0d55cb8156f5dc87c9f0b0402e3d34e3ee269e84b755b91710aec6d14b849c1eed80fd512a74690df6cfa29ed5e8a82afef2c00c939103cf1c91272d8ceac58e1defa1a43ba132052bb899215ae32bd7b77206d1cdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) kernel console output (not intermixed with test programs): oth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.773495][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 604.781211][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 605.020510][ T4694] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.116533][ T4694] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.424249][ T4694] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.469253][T14808] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 605.537315][T14804] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 605.674200][ T4694] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.761404][T14825] netlink: 'syz.0.2924': attribute type 21 has an invalid length. [ 606.133138][ T4694] device 0 left promiscuous mode [ 606.752752][T14847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2929'. [ 606.884400][T14425] Bluetooth: hci3: command 0x0409 tx timeout [ 606.931718][T14790] chnl_net:caif_netlink_parms(): no params data found [ 607.103794][ T4694] device 1 left promiscuous mode [ 607.283592][ T4694] tipc: Left network mode [ 607.355932][T14870] netlink: 'syz.3.2933': attribute type 2 has an invalid length. [ 607.372516][T14870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2933'. [ 607.394684][T14790] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.420644][T14790] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.436178][T14790] device bridge_slave_0 entered promiscuous mode [ 607.573925][ T4694] device ip6gretap0 left promiscuous mode [ 607.593022][ T4694] : port 1(ip6gretap0) entered disabled state [ 608.665971][T14790] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.687365][T14790] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.695948][T14790] device bridge_slave_1 entered promiscuous mode [ 608.804627][T14790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.849986][T14790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.927492][T14425] Bluetooth: hci3: command 0x041b tx timeout [ 608.950114][T14790] team0: Port device team_slave_0 added [ 608.991680][T14790] team0: Port device team_slave_1 added [ 609.039850][T14790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.057265][T14790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.157307][T14790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.203416][T14790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.221088][T14790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.268831][T14790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.733375][T14920] netlink: 'syz.3.2939': attribute type 4 has an invalid length. [ 609.758016][T14920] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2939'. [ 610.204235][T14790] device hsr_slave_0 entered promiscuous mode [ 610.280272][T14790] device hsr_slave_1 entered promiscuous mode [ 610.318253][T14790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.362275][T14790] Cannot create hsr debugfs directory [ 610.853212][T14946] netlink: 'syz.2.2944': attribute type 21 has an invalid length. [ 611.007368][T14425] Bluetooth: hci3: command 0x040f tx timeout [ 611.103617][T14955] netlink: 'syz.0.2946': attribute type 2 has an invalid length. [ 611.113745][T14955] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2946'. [ 611.205144][T14952] Ÿë: port 1(ip6gretap0) entered blocking state [ 611.222602][T14952] Ÿë: port 1(ip6gretap0) entered disabled state [ 611.245395][T14952] device ip6gretap0 entered promiscuous mode [ 611.433095][ T4694] device gretap0 left promiscuous mode [ 611.441673][ T4694] Ÿë: port 1(gretap0) entered disabled state [ 612.189343][T14975] netlink: 'syz.4.2950': attribute type 4 has an invalid length. [ 612.236012][T14975] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2950'. [ 613.023046][T14985] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2951'. [ 613.057882][T14985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.066135][T14985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.087338][T14425] Bluetooth: hci3: command 0x0419 tx timeout [ 613.206547][T14985] bond0: (slave batadv0): Releasing backup interface [ 613.593357][T15004] netlink: 'syz.4.2956': attribute type 10 has an invalid length. [ 613.645585][T15004] device wlan1 left promiscuous mode [ 614.763949][ T4694] device hsr_slave_0 left promiscuous mode [ 614.783769][ T4694] device hsr_slave_1 left promiscuous mode [ 614.832862][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.877853][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.898509][ T4694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.922514][ T4694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.944069][ T4694] batman_adv: batadv0: Interface deactivated: vlan1 [ 614.962566][ T4694] batman_adv: batadv0: Removing interface: vlan1 [ 614.981925][ T4694] device bridge_slave_1 left promiscuous mode [ 614.992928][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.018399][T15038] netlink: 'syz.2.2962': attribute type 4 has an invalid length. [ 615.039088][T15038] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2962'. [ 615.056605][ T4694] device veth1_vlan left promiscuous mode [ 616.442916][T15034] netlink: 'syz.4.2963': attribute type 2 has an invalid length. [ 616.450975][T15034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2963'. [ 616.488451][T14790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 616.514384][T14790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 616.555299][T14790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 616.580942][T14790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 616.856989][T14790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.891517][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 616.905330][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 616.971031][T14790] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.979683][T15064] syz.2.2969[15064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.979806][T15064] syz.2.2969[15064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.030815][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.082266][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.109787][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.117038][T14688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.152081][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.171311][T15069] syz.2.2969[15069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.171432][T15069] syz.2.2969[15069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.203450][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.286797][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.305082][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.312407][T14680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.327961][T15068] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2970'. [ 617.424584][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.444826][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 617.493868][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 617.525373][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 617.555192][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 617.574415][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 617.585086][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 617.646447][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 617.659663][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 617.675908][T14790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.689940][T14790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 617.699567][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 617.715551][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.992111][T15090] netlink: 'syz.0.2974': attribute type 4 has an invalid length. [ 618.017823][T15090] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2974'. [ 618.644146][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 618.663683][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 618.701228][T14790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.802953][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.818895][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.965606][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 618.991853][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.023052][T14790] device veth0_vlan entered promiscuous mode [ 619.051504][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.069071][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.108000][T14790] device veth1_vlan entered promiscuous mode [ 619.155366][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 619.168428][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 619.200282][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.229276][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.254394][T14790] device veth0_macvtap entered promiscuous mode [ 619.301239][T14790] device veth1_macvtap entered promiscuous mode [ 619.539004][T15113] device syzkaller0 entered promiscuous mode [ 622.267769][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 622.276540][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 622.289325][T15125] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2983'. [ 622.299503][T15125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.309340][T15125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.317899][T15125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.325409][T15125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.358092][T15125] bond0: (slave batadv0): Releasing backup interface [ 622.381900][T14790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.401666][T14790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.456578][T15130] netlink: 'syz.4.2987': attribute type 2 has an invalid length. [ 622.460439][T14790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.487503][T15130] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 622.495380][T15130] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2987'. [ 622.517996][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 622.546041][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 622.567700][T14790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.584811][T14790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.599763][T14790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.610252][T15131] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2995'. [ 622.633662][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.670840][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.691916][T14790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.710507][T14790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.737815][T14790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.746897][T14790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.948352][T14681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.956366][T14681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.991029][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 623.050733][T14681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.059421][T14681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.071965][T15140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2999'. [ 623.084007][T15140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.094531][T15140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.115229][T15140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.128906][T15140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.386544][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.207044][T15167] netlink: 'syz.1.2990': attribute type 4 has an invalid length. [ 624.278191][T15167] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2990'. [ 624.467051][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.473545][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.049913][T14425] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 625.059971][T14425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 625.071443][T14425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 625.099436][T14425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 625.107627][T14425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 625.114960][T14425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 625.413585][T15189] netlink: 'syz.1.2997': attribute type 3 has an invalid length. [ 625.487748][T15189] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2997'. [ 626.135213][T15212] tap0: tun_chr_ioctl cmd 1074025677 [ 626.141848][T15212] tap0: linktype set to 270 [ 626.163664][T15175] chnl_net:caif_netlink_parms(): no params data found [ 626.191356][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3013'. [ 626.272330][T14686] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.447042][T14686] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.651781][T14686] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.969178][T14686] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.981399][T15231] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3007'. [ 627.031064][T15231] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 627.167720][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 627.276345][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.295830][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.325245][T15175] device bridge_slave_0 entered promiscuous mode [ 627.496812][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.522430][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.556630][T15175] device bridge_slave_1 entered promiscuous mode [ 627.645987][T15242] netlink: 'syz.3.3011': attribute type 21 has an invalid length. [ 627.808633][T15242] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 627.816579][T15242] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3011'. [ 628.230449][T15175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.263735][T15175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.352841][T15175] team0: Port device team_slave_0 added [ 628.390796][T15175] team0: Port device team_slave_1 added [ 628.443415][T15175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.463416][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.512962][T15175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.539927][T15175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.557290][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.609917][T15175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.247308][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 630.514426][T15175] device hsr_slave_0 entered promiscuous mode [ 630.548215][T15175] device hsr_slave_1 entered promiscuous mode [ 630.566153][T15175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.592211][T15175] Cannot create hsr debugfs directory [ 630.982057][T15280] netlink: 'syz.0.3018': attribute type 2 has an invalid length. [ 631.027462][T15280] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3018'. [ 631.237822][T15288] netlink: 'syz.2.3019': attribute type 1 has an invalid length. [ 631.272335][T15288] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3019'. [ 631.327578][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 632.339704][T15175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 632.378535][T15175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 632.433772][T15175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 632.524138][T15332] netlink: 'syz.2.3028': attribute type 10 has an invalid length. [ 632.539150][T15332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3028'. [ 632.551027][T15332] device team0 entered promiscuous mode [ 632.557057][T15332] device team_slave_0 entered promiscuous mode [ 632.566383][T15332] device team_slave_1 entered promiscuous mode [ 632.596637][T15332] bridge0: port 3(team0) entered blocking state [ 632.610561][T15332] bridge0: port 3(team0) entered disabled state [ 632.636717][T15332] bridge0: port 3(team0) entered blocking state [ 632.643423][T15332] bridge0: port 3(team0) entered forwarding state [ 632.659986][T15175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 633.407580][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 633.767695][T15357] netlink: 'syz.1.3034': attribute type 10 has an invalid length. [ 633.782931][T15357] bond0: (slave bond_slave_0): Releasing backup interface [ 633.946759][T15175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.163785][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 634.196663][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.233338][T15175] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.310094][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 634.335838][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.369309][T14680] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.376837][T14680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.426929][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 634.624761][T15383] netlink: 'syz.2.3040': attribute type 4 has an invalid length. [ 634.650142][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 634.672205][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.728062][T14680] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.735303][T14680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.786617][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 634.941483][T14686] device veth1_vlan left promiscuous mode [ 636.650239][T14686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.659532][T14686] device bond_slave_1 left promiscuous mode [ 636.705931][T14686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.715447][T14686] device bond_slave_0 left promiscuous mode [ 637.039744][T14686] bond0 (unregistering): Released all slaves [ 637.077422][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.087073][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.107828][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.116699][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.129543][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.139788][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.162337][T15411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3046'. [ 637.227533][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 637.256538][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.309899][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 637.330526][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.365897][T15175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 637.400802][T15427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3050'. [ 637.651744][T15439] netlink: 'syz.0.3053': attribute type 3 has an invalid length. [ 637.698048][T15439] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.3053'. [ 638.784491][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.795415][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.835192][T15175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.041661][T15481] netlink: 'syz.3.3064': attribute type 8 has an invalid length. [ 639.091305][T15481] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3064'. [ 640.291959][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.321126][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.376375][T15532] netlink: 'syz.3.3073': attribute type 11 has an invalid length. [ 640.422580][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.442962][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.483023][T15175] device veth0_vlan entered promiscuous mode [ 640.490141][T15532] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3073'. [ 640.521006][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.538213][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.604356][T15175] device veth1_vlan entered promiscuous mode [ 640.729960][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.746483][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.777041][T15175] device veth0_macvtap entered promiscuous mode [ 640.862443][T15175] device veth1_macvtap entered promiscuous mode [ 641.163356][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.242508][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.311915][T15175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.384440][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 641.419818][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 641.470434][T15522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.484600][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.530275][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.581992][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.623505][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.703050][T15175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.739458][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.755118][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.805885][T15552] device wlan1 entered promiscuous mode [ 641.824605][T15175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.863968][T15175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.903433][T15175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.927444][T15175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.178949][T14685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.193781][T14685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.246253][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.330528][T14680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.372583][T14680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.400684][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.707408][T15584] device sit0 entered promiscuous mode [ 643.344497][T15598] netlink: 'syz.2.3089': attribute type 11 has an invalid length. [ 643.397356][T15598] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3089'. [ 643.412280][T15603] netlink: 'syz.1.3099': attribute type 2 has an invalid length. [ 643.445502][T15603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3099'. [ 643.472344][T15606] netlink: 'syz.0.3091': attribute type 3 has an invalid length. [ 643.522904][T15606] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3091'. [ 644.071880][T14680] wlan1: Trigger new scan to find an IBSS to join [ 644.251253][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.286050][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.306147][T15600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.319365][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.339796][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.348645][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 644.352499][ T4268] team0: Port device syz_tun removed [ 644.362612][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.570567][T14683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.649887][T15613] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3093'. [ 644.795862][T14683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.046754][T14683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.082776][T15608] chnl_net:caif_netlink_parms(): no params data found [ 645.218900][T15632] device syzkaller0 entered promiscuous mode [ 645.255880][T14683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.354823][T15608] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.363459][T15608] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.372557][T15608] device bridge_slave_0 entered promiscuous mode [ 645.504490][T15608] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.513108][T15608] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.517695][T15643] netlink: 'syz.0.3101': attribute type 3 has an invalid length. [ 645.528604][T15643] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3101'. [ 645.539123][T15608] device bridge_slave_1 entered promiscuous mode [ 646.454461][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 647.859286][T14683] device 0 left promiscuous mode [ 647.899445][T15608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.919134][T14683] device 0 left promiscuous mode [ 647.932436][T15647] netlink: 'syz.1.3112': attribute type 11 has an invalid length. [ 647.950749][T15647] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3112'. [ 647.965669][T15608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.040445][T15647] netlink: 'syz.1.3112': attribute type 11 has an invalid length. [ 648.122444][T15647] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3112'. [ 648.182699][T15608] team0: Port device team_slave_0 added [ 648.197963][T15650] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3105'. [ 648.249713][T15645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.530391][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 648.713496][T15608] team0: Port device team_slave_1 added [ 648.744529][T15650] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 648.787661][T15650] CPU: 1 PID: 15650 Comm: syz.0.3105 Not tainted syzkaller #0 [ 648.795318][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.805525][T15650] Call Trace: [ 648.808846][T15650] [ 648.811823][T15650] dump_stack_lvl+0x188/0x24e [ 648.816561][T15650] ? show_regs_print_info+0x12/0x12 [ 648.821909][T15650] ? load_image+0x400/0x400 [ 648.826583][T15650] sysfs_warn_dup+0x8a/0xa0 [ 648.831226][T15650] sysfs_do_create_link_sd+0xc0/0x110 [ 648.836660][T15650] device_add+0x7ed/0xfb0 [ 648.841038][T15650] wiphy_register+0x1d9f/0x2ac0 [ 648.845955][T15650] ? cfg80211_event_work+0x40/0x40 [ 648.851205][T15650] ? minstrel_ht_alloc+0x894/0xa20 [ 648.856451][T15650] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 648.862608][T15650] ieee80211_register_hw+0x2d00/0x39f0 [ 648.868226][T15650] ? ieee80211_register_hw+0xf21/0x39f0 [ 648.873815][T15650] ? ieee80211_register_hw+0xf21/0x39f0 [ 648.879426][T15650] ? ieee80211_tasklet_handler+0x20/0x20 [ 648.885158][T15650] ? memset+0x1e/0x40 [ 648.889192][T15650] ? __hrtimer_init+0x186/0x270 [ 648.894107][T15650] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 648.899908][T15650] hwsim_new_radio_nl+0xafa/0xce0 [ 648.905002][T15650] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.910585][T15650] ? end_current_label_crit_section+0x170/0x170 [ 648.916868][T15650] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 648.922812][T15650] ? bpf_lsm_capable+0x5/0x10 [ 648.927521][T15650] ? security_capable+0x85/0xb0 [ 648.932508][T15650] genl_rcv_msg+0x604/0x790 [ 648.937071][T15650] ? genl_bind+0x360/0x360 [ 648.941523][T15650] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 648.948124][T15650] netlink_rcv_skb+0x1fb/0x450 [ 648.952985][T15650] ? genl_bind+0x360/0x360 [ 648.957498][T15650] ? netlink_ack+0x1170/0x1170 [ 648.962329][T15650] ? down_read+0x1a8/0x2d0 [ 648.966802][T15650] genl_rcv+0x24/0x40 [ 648.970936][T15650] netlink_unicast+0x74d/0x8d0 [ 648.975796][T15650] netlink_sendmsg+0x8ad/0xbd0 [ 648.980665][T15650] ? netlink_getsockopt+0x550/0x550 [ 648.985930][T15650] ? aa_sock_msg_perm+0x94/0x150 [ 648.991002][T15650] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 648.996410][T15650] ? security_socket_sendmsg+0x7c/0xa0 [ 649.002038][T15650] ? netlink_getsockopt+0x550/0x550 [ 649.007299][T15650] ____sys_sendmsg+0x5be/0x970 [ 649.012127][T15650] ? __sys_sendmsg_sock+0x30/0x30 [ 649.017206][T15650] ? __import_iovec+0x315/0x500 [ 649.022299][T15650] ? import_iovec+0x6f/0xa0 [ 649.027059][T15650] ___sys_sendmsg+0x2a2/0x360 [ 649.031822][T15650] ? try_to_wake_up+0x67c/0x1080 [ 649.036812][T15650] ? __sys_sendmsg+0x290/0x290 [ 649.041674][T15650] __se_sys_sendmsg+0x1bb/0x2a0 [ 649.046845][T15650] ? __x64_sys_sendmsg+0x80/0x80 [ 649.051939][T15650] ? lockdep_hardirqs_on+0x94/0x140 [ 649.057282][T15650] do_syscall_64+0x4c/0xa0 [ 649.061748][T15650] ? clear_bhb_loop+0x60/0xb0 [ 649.066502][T15650] ? clear_bhb_loop+0x60/0xb0 [ 649.071320][T15650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.077353][T15650] RIP: 0033:0x7fd470f9cdd9 [ 649.081818][T15650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.101515][T15650] RSP: 002b:00007fd46f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.110117][T15650] RAX: ffffffffffffffda RBX: 00007fd471215fa0 RCX: 00007fd470f9cdd9 [ 649.121733][T15650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 649.131239][T15650] RBP: 00007fd471032d69 R08: 0000000000000000 R09: 0000000000000000 [ 649.139562][T15650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.147791][T15650] R13: 00007fd471216038 R14: 00007fd471215fa0 R15: 00007fff50415fd8 [ 649.155923][T15650] [ 649.168197][T14681] wlan1: Trigger new scan to find an IBSS to join [ 649.394769][T15663] device sit0 entered promiscuous mode [ 649.542741][T15608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.555895][T15608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.582962][T15608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.596923][T15608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.604414][T15608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.654509][T15608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.717969][T15672] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 649.940720][T15675] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3110'. [ 649.971519][T15608] device hsr_slave_0 entered promiscuous mode [ 649.981478][T15608] device hsr_slave_1 entered promiscuous mode [ 649.999019][T15608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.017647][T15608] Cannot create hsr debugfs directory [ 650.078184][T14681] wlan1: Creating new IBSS network, BSSID aa:a6:d2:27:e2:4d [ 650.182754][T14680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.384858][T15699] netlink: 'syz.0.3114': attribute type 21 has an invalid length. [ 650.411356][T15699] netlink: 'syz.0.3114': attribute type 6 has an invalid length. [ 650.442888][T15699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3114'. [ 650.526363][T15693] can: request_module (can-proto-0) failed. [ 650.617488][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 650.877715][T15708] netlink: 'syz.4.3116': attribute type 3 has an invalid length. [ 650.899523][T15708] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3116'. [ 651.241987][T15729] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3120'. [ 651.352523][T15731] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3121'. [ 652.234110][T14683] device hsr_slave_0 left promiscuous mode [ 652.248218][T14683] bridge0: port 3(hsr0) entered disabled state [ 652.289466][T14683] device bridge_slave_1 left promiscuous mode [ 652.295831][T14683] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.328985][T14683] device bridge_slave_0 left promiscuous mode [ 652.335319][T14683] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.631466][T15765] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3126'. [ 652.691831][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 653.220900][T14683] team0 (unregistering): Port device team_slave_1 removed [ 653.332560][T14683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.787325][T14683] bond0 (unregistering): (slave team0): Releasing backup interface [ 653.842594][T14683] bond0 (unregistering): Released all slaves [ 653.987088][T15760] device sit0 entered promiscuous mode [ 654.070614][T15762] netlink: 'syz.4.3127': attribute type 10 has an invalid length. [ 654.141408][T15608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 654.244989][T15608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 654.302407][T15608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 654.340115][T15608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 654.915089][T15608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.967137][T15785] netlink: 'syz.1.3131': attribute type 3 has an invalid length. [ 654.988522][T15785] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3131'. [ 655.001788][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.030622][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.052330][T15608] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.087623][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.099443][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.110067][T14681] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.117315][T14681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.144467][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.176411][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.210746][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.236389][T14681] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.243769][T14681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.282509][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.309310][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.357388][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.381960][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.409649][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.443974][T15801] netlink: 'syz.1.3134': attribute type 10 has an invalid length. [ 655.497369][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.519641][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.546854][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.588940][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.613329][T15608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.649430][T15608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.683308][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.707080][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.756892][T15807] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3137'. [ 655.848799][T15807] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 656.708108][T15831] device sit0 entered promiscuous mode [ 657.093192][T15835] netlink: 'syz.4.3141': attribute type 10 has an invalid length. [ 657.155092][T15835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3141'. [ 657.178569][T15835] bridge0: port 3(veth0_vlan) entered blocking state [ 657.191987][T15835] bridge0: port 3(veth0_vlan) entered disabled state [ 657.202151][T15835] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 657.348325][T15608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.497721][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.510824][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.623217][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.650651][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.693966][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.708530][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.740015][T15608] device veth0_vlan entered promiscuous mode [ 657.749761][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.768446][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.795818][T15608] device veth1_vlan entered promiscuous mode [ 657.874922][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.894189][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.918690][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.958216][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.982319][T15608] device veth0_macvtap entered promiscuous mode [ 658.028733][T15608] device veth1_macvtap entered promiscuous mode [ 658.108363][T15608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.132331][T15608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.159492][T15608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.193491][T15608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.230308][T15608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.256365][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 658.274005][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.328276][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.349498][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.379157][T15608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.426891][T15608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.471951][T15608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.498748][T15608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.545539][T15608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.595419][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.650324][T14686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.695067][T15608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.747494][T15608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.756398][T15608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.799729][T15608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.020252][T14686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.049957][T14686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.081553][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 659.140220][T15877] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 659.169588][T15879] netlink: 'syz.4.3147': attribute type 21 has an invalid length. [ 659.187412][T14681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.195553][T14681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.208331][T15877] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3144'. [ 659.219118][T15879] netlink: 'syz.4.3147': attribute type 1 has an invalid length. [ 659.239221][T15879] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3147'. [ 659.279765][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.596509][T15944] netlink: 'syz.3.3164': attribute type 3 has an invalid length. [ 661.614496][T15944] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3164'. [ 661.926184][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.961185][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.970429][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.979199][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.988166][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 661.992419][T15952] netlink: 'syz.1.3166': attribute type 2 has an invalid length. [ 662.003592][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.017110][T14689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.271483][T14689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.460785][T14689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.709562][T14689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.032113][T15988] IPv6: õš: Disabled Multicast RS [ 663.102372][T15982] cgroup: fork rejected by pids controller in /syz2 [ 664.057806][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 666.138609][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 667.247009][T16104] netlink: 'syz.3.3179': attribute type 39 has an invalid length. [ 667.470291][T15947] chnl_net:caif_netlink_parms(): no params data found [ 667.669716][T14689] device 0 left promiscuous mode [ 667.771292][T14689] device 0 left promiscuous mode [ 667.882755][T14689] device 1 left promiscuous mode [ 667.956427][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.971793][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.001222][T15947] device bridge_slave_0 entered promiscuous mode [ 668.025264][T14689] device 1 left promiscuous mode [ 668.207326][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 669.118795][T14425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.128906][T14425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.138841][T14425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.146838][T14425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.156445][T14425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 669.164358][T14425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 669.246223][T16133] netlink: 'syz.4.3187': attribute type 21 has an invalid length. [ 669.257738][T16133] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3187'. [ 669.268102][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.275970][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.332551][T15947] device bridge_slave_1 entered promiscuous mode [ 669.378257][T14689] tipc: Left network mode [ 669.697013][T16159] netlink: 'syz.4.3192': attribute type 1 has an invalid length. [ 669.716746][T16159] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3192'. [ 669.776285][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.849481][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.000785][T16166] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 670.038823][T16166] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.062196][T16166] device bridge_slave_1 left promiscuous mode [ 670.079846][T16166] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.171289][T16166] team0: Port device bridge_slave_1 added [ 670.188015][T16165] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 670.287859][T14425] Bluetooth: hci0: command 0x0419 tx timeout [ 670.507547][T16179] netlink: 'syz.1.3196': attribute type 10 has an invalid length. [ 670.579941][T16179] device veth0_macvtap left promiscuous mode [ 670.819249][T15947] team0: Port device team_slave_0 added [ 670.921477][T15947] team0: Port device team_slave_1 added [ 671.240257][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.247611][T14425] Bluetooth: hci2: command 0x0409 tx timeout [ 671.255440][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.317268][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.331213][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.338838][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.365371][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.389349][T16202] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3201'. [ 671.599125][T16210] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3202'. [ 671.634295][T15947] device hsr_slave_0 entered promiscuous mode [ 671.657935][T15947] device hsr_slave_1 entered promiscuous mode [ 671.771371][T16150] chnl_net:caif_netlink_parms(): no params data found [ 672.357310][T16150] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.385009][T16150] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.406475][T16150] device bridge_slave_0 entered promiscuous mode [ 672.464264][T16235] netlink: 'syz.1.3205': attribute type 30 has an invalid length. [ 672.496023][T16150] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.510539][T16150] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.521653][T16150] device bridge_slave_1 entered promiscuous mode [ 672.655511][T16150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.689569][T16150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.746602][T16246] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 672.759472][T16246] syzkaller1: linktype set to 786 [ 672.804927][T16150] team0: Port device team_slave_0 added [ 672.836837][T16150] team0: Port device team_slave_1 added [ 673.327876][T14425] Bluetooth: hci2: command 0x041b tx timeout [ 674.346539][T16150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.367660][T16150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.473444][T16150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.496986][T16150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.540015][T16150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.582258][T16150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.201339][T16150] device hsr_slave_0 entered promiscuous mode [ 675.213071][T16150] device hsr_slave_1 entered promiscuous mode [ 675.231060][T16150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.268163][T16150] Cannot create hsr debugfs directory [ 675.407479][T14425] Bluetooth: hci2: command 0x040f tx timeout [ 675.856154][T16282] netlink: 'syz.3.3214': attribute type 21 has an invalid length. [ 675.971723][T14689] device hsr_slave_0 left promiscuous mode [ 676.003746][T14689] device hsr_slave_1 left promiscuous mode [ 676.052640][T14689] device veth1_macvtap left promiscuous mode [ 676.067537][T14689] device veth0_macvtap left promiscuous mode [ 676.291544][T16310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3222'. [ 677.485329][T14689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.494069][T14425] Bluetooth: hci2: command 0x0419 tx timeout [ 677.913442][T14689] bond0 (unregistering): Released all slaves [ 678.100321][T16333] team0: Port device team_slave_0 removed [ 678.106760][T16334] netlink: 'syz.4.3225': attribute type 10 has an invalid length. [ 678.223275][T16334] team0 (unregistering): Port device team_slave_1 removed [ 680.454906][T16150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.699773][T16150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.746473][T16379] netlink: 'syz.3.3230': attribute type 33 has an invalid length. [ 680.755335][T16379] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3230'. [ 680.867421][T16150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.046581][T16150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.461030][T15947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 681.514471][T16401] device wg2 entered promiscuous mode [ 681.549710][T15947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 681.611821][T15947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 681.680577][T15947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 681.716014][T16405] netlink: 'syz.1.3237': attribute type 21 has an invalid length. [ 681.804789][T16150] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 681.885311][T16150] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 681.929236][T16150] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 681.988849][T16150] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 682.058462][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.133776][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 682.164016][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 682.176536][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.206063][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 682.233724][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 682.273781][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.281068][T14689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.328037][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 682.396429][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 682.413121][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 682.456959][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.465065][T14688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.489006][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 682.505575][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 682.571047][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 682.609634][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 682.649860][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 682.683892][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.735940][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.768776][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.808530][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 682.842765][T15947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.878627][T15947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 682.899956][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.914172][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.968720][T16150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.005764][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.026149][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.065445][T16150] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.105282][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.122479][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.148970][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.156204][T14688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.210688][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 683.223476][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.236816][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.253064][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.260350][T14688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.274824][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 683.304047][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 683.322052][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 683.335156][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.359545][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 683.369960][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 683.390287][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.408865][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 683.429224][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.463682][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 683.472846][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.500389][T16150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 683.654845][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 683.663286][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 683.686514][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.722407][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.733862][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.780938][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.794799][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.809131][T15947] device veth0_vlan entered promiscuous mode [ 683.829616][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.858192][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.893621][T15947] device veth1_vlan entered promiscuous mode [ 683.958742][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 683.977586][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 684.008031][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 684.039527][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 684.075953][T15947] device veth0_macvtap entered promiscuous mode [ 684.122626][T15947] device veth1_macvtap entered promiscuous mode [ 684.174129][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.198341][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.228082][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.241509][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.252135][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.265612][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.291285][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.309653][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 684.341294][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 684.363824][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 684.388682][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 684.428569][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.446500][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.463513][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.487656][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.522587][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.547385][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.579050][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.616781][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 684.627892][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.648390][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 684.656086][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 684.694252][T15947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.717275][T15947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.726466][T15947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.757415][T15947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.784149][T16150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.887264][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 684.896293][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.021081][T14688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.037274][T14688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.070717][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 685.091775][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.121539][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.155341][T16150] device veth0_vlan entered promiscuous mode [ 685.181830][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.199046][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.218726][T14688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.234598][T14688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.256481][T14685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 685.267046][T16150] device veth1_vlan entered promiscuous mode [ 685.326093][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.348188][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 685.378812][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.409015][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.436974][T16150] device veth0_macvtap entered promiscuous mode [ 685.489199][T16150] device veth1_macvtap entered promiscuous mode [ 685.655273][T16454] device syzkaller0 entered promiscuous mode [ 685.890069][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.896616][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.685299][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.701797][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.711953][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.723314][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.733448][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.743966][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.753907][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.764426][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.777311][T16150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.793411][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 688.802574][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 688.812700][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 688.890788][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.902304][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.974735][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.004658][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.025910][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.038682][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.049256][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.060435][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.072823][T16150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.085992][T16150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.099921][T16150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.109523][T16150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.118680][T16150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.182303][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 689.195844][T14688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 690.071855][T16508] netlink: 'syz.4.3245': attribute type 25 has an invalid length. [ 690.087820][T16508] netlink: 'syz.4.3245': attribute type 29 has an invalid length. [ 690.327446][T14688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.335367][T14688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.375719][T14690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.394539][T14689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.413052][T14689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.451652][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.843477][T16527] device wg2 entered promiscuous mode [ 691.206046][T16533] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3189'. [ 691.235542][T16530] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3189'. [ 691.305846][T16529] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3254'. [ 691.396117][T16537] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3255'. [ 693.265575][T16584] tap0: tun_chr_ioctl cmd 35108 [ 695.434306][T16603] device wg2 entered promiscuous mode [ 696.361744][T16620] team0: Port device team_slave_0 removed [ 696.553025][T16640] netlink: 'syz.3.3279': attribute type 10 has an invalid length. [ 696.628678][T16640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3279'. [ 696.791707][T16640] batman_adv: batadv0: Adding interface: virt_wifi0 [ 696.844299][T16640] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.048306][T16640] batman_adv: batadv0: Interface activated: virt_wifi0 [ 697.652590][T16669] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3286'. [ 698.653828][T16683] device wg2 entered promiscuous mode [ 699.141352][T16696] netlink: 826 bytes leftover after parsing attributes in process `syz.2.3295'. [ 699.153491][T16697] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3294'. [ 699.236123][T16693] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3290'. [ 699.681596][T16701] device syzkaller0 entered promiscuous mode [ 701.384175][T16726] delete_channel: no stack [ 701.441398][T16726] delete_channel: no stack [ 708.060254][T16790] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 708.349153][T16790] team0: Port device macvlan0 added [ 708.861523][T16808] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 708.920792][T16805] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 709.154881][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.178243][T16800] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3311'. [ 709.348855][T16805] device bridge_slave_1 left promiscuous mode [ 709.399802][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.433843][T16811] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3314'. [ 709.578279][T16805] team0: Port device bridge_slave_1 added [ 710.678889][T16835] sock: sock_set_timeout: `syz.3.3317' (pid 16835) tries to set negative timeout [ 710.692526][T16833] netlink: 'syz.4.3319': attribute type 21 has an invalid length. [ 710.781945][T16833] netlink: 'syz.4.3319': attribute type 5 has an invalid length. [ 711.345938][T16840] device syzkaller0 entered promiscuous mode [ 712.268776][T16861] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 712.277029][T16861] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3326'. [ 713.122299][T16878] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3328'. [ 715.186785][T16854] netlink: 'syz.1.3324': attribute type 10 has an invalid length. [ 715.213056][T16854] team0: Port device macvlan0 added [ 715.252848][T16873] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 715.295593][T16876] netlink: 'syz.0.3328': attribute type 10 has an invalid length. [ 715.347311][T16876] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.387523][T16876] device bridge_slave_1 left promiscuous mode [ 715.393922][T16876] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.449225][T16876] team0: Port device bridge_slave_1 added [ 715.484670][T16888] netlink: 'syz.4.3331': attribute type 1 has an invalid length. [ 715.505184][T16888] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3331'. [ 716.030003][T16908] device wg2 left promiscuous mode [ 716.593229][T16932] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 716.753234][ T48] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 717.166603][T16949] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3347'. [ 717.555444][T16932] team0: Port device macvlan0 added [ 717.569729][T16946] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 717.606087][T16947] netlink: 'syz.1.3347': attribute type 10 has an invalid length. [ 717.682340][T16947] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.708761][T16947] device bridge_slave_1 left promiscuous mode [ 717.715230][T16947] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.758225][T16947] team0: Port device bridge_slave_1 added [ 717.942337][T16962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3351'. [ 719.450421][T17006] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 719.579152][T17006] team0: Port device macvlan0 added [ 719.848103][T17014] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 719.867348][T17016] netlink: 'syz.4.3364': attribute type 10 has an invalid length. [ 719.908785][T17004] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3364'. [ 719.982046][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.033980][T17016] device bridge_slave_1 left promiscuous mode [ 720.063470][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.511424][T17036] netlink: 'syz.0.3380': attribute type 17 has an invalid length. [ 721.484419][T17050] device pim6reg1 entered promiscuous mode [ 721.626162][T17062] syz.0.3381[17062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 721.626289][T17062] syz.0.3381[17062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 723.783729][T17105] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3392'. [ 726.710194][T17099] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3391'. [ 728.271166][T17169] netlink: 'syz.4.3412': attribute type 10 has an invalid length. [ 728.291623][T17169] device syz_tun entered promiscuous mode [ 728.372482][T17169] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 728.768225][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 728.837465][T17185] netlink: 'syz.2.3419': attribute type 3 has an invalid length. [ 728.868471][T17185] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3419'. [ 728.931501][T14425] Bluetooth: hci3: command 0x0406 tx timeout [ 729.204064][T17216] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 729.254103][T17216] syzkaller0: owner set to 0 [ 729.279600][T17219] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 729.654607][T17238] netlink: 'syz.3.3443': attribute type 10 has an invalid length. [ 730.572548][T17246] netlink: 'syz.0.3435': attribute type 10 has an invalid length. [ 730.622057][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.677315][T17246] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 730.696752][T17248] netlink: 'syz.0.3435': attribute type 6 has an invalid length. [ 731.283980][T17293] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3451'. [ 731.854478][T17308] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3452'. [ 732.465884][T17333] FAULT_INJECTION: forcing a failure. [ 732.465884][T17333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.547693][T17333] CPU: 1 PID: 17333 Comm: syz.3.3463 Not tainted syzkaller #0 [ 732.555535][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 732.565746][T17333] Call Trace: [ 732.569079][T17333] [ 732.572060][T17333] dump_stack_lvl+0x188/0x24e [ 732.576823][T17333] ? show_regs_print_info+0x12/0x12 [ 732.582187][T17333] ? load_image+0x400/0x400 [ 732.587021][T17333] ? __lock_acquire+0x7d10/0x7d10 [ 732.592152][T17333] should_fail_ex+0x399/0x4d0 [ 732.596913][T17333] _copy_from_user+0x2c/0x170 [ 732.601752][T17333] ___sys_sendmsg+0x1c3/0x360 [ 732.606522][T17333] ? __sys_sendmsg+0x290/0x290 [ 732.611379][T17333] ? __lock_acquire+0x7d10/0x7d10 [ 732.616540][T17333] __se_sys_sendmsg+0x1bb/0x2a0 [ 732.621535][T17333] ? __x64_sys_sendmsg+0x80/0x80 [ 732.626629][T17333] ? lockdep_hardirqs_on+0x94/0x140 [ 732.632308][T17333] do_syscall_64+0x4c/0xa0 [ 732.636800][T17333] ? clear_bhb_loop+0x60/0xb0 [ 732.641515][T17333] ? clear_bhb_loop+0x60/0xb0 [ 732.646240][T17333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.652183][T17333] RIP: 0033:0x7f762179cdd9 [ 732.656657][T17333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.677350][T17333] RSP: 002b:00007f7622715028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.685812][T17333] RAX: ffffffffffffffda RBX: 00007f7621a15fa0 RCX: 00007f762179cdd9 [ 732.693919][T17333] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 732.701937][T17333] RBP: 00007f7622715090 R08: 0000000000000000 R09: 0000000000000000 [ 732.709941][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.717945][T17333] R13: 00007f7621a16038 R14: 00007f7621a15fa0 R15: 00007ffcd5f18b08 [ 732.726001][T17333] [ 733.484468][T17363] netlink: 'syz.2.3471': attribute type 16 has an invalid length. [ 733.554037][T17363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3471'. [ 734.239239][T17382] netlink: 'syz.0.3476': attribute type 3 has an invalid length. [ 734.281993][T17382] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3476'. [ 734.441793][T17388] FAULT_INJECTION: forcing a failure. [ 734.441793][T17388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.512829][T17388] CPU: 0 PID: 17388 Comm: syz.1.3478 Not tainted syzkaller #0 [ 734.520415][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 734.530980][T17388] Call Trace: [ 734.534308][T17388] [ 734.537288][T17388] dump_stack_lvl+0x188/0x24e [ 734.542034][T17388] ? show_regs_print_info+0x12/0x12 [ 734.547293][T17388] ? load_image+0x400/0x400 [ 734.551860][T17388] ? __lock_acquire+0x7d10/0x7d10 [ 734.556954][T17388] should_fail_ex+0x399/0x4d0 [ 734.561697][T17388] _copy_from_user+0x2c/0x170 [ 734.566453][T17388] __copy_msghdr+0x3b7/0x580 [ 734.571119][T17388] ___sys_sendmsg+0x210/0x360 [ 734.575934][T17388] ? __sys_sendmsg+0x290/0x290 [ 734.580810][T17388] ? __lock_acquire+0x7d10/0x7d10 [ 734.585932][T17388] __se_sys_sendmsg+0x1bb/0x2a0 [ 734.590868][T17388] ? __x64_sys_sendmsg+0x80/0x80 [ 734.596001][T17388] ? lockdep_hardirqs_on+0x94/0x140 [ 734.601283][T17388] do_syscall_64+0x4c/0xa0 [ 734.605763][T17388] ? clear_bhb_loop+0x60/0xb0 [ 734.610505][T17388] ? clear_bhb_loop+0x60/0xb0 [ 734.615233][T17388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.621167][T17388] RIP: 0033:0x7f710579cdd9 [ 734.625617][T17388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.645256][T17388] RSP: 002b:00007f710672c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.653734][T17388] RAX: ffffffffffffffda RBX: 00007f7105a15fa0 RCX: 00007f710579cdd9 [ 734.661842][T17388] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 734.669865][T17388] RBP: 00007f710672c090 R08: 0000000000000000 R09: 0000000000000000 [ 734.677872][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.685907][T17388] R13: 00007f7105a16038 R14: 00007f7105a15fa0 R15: 00007ffcc2565fb8 [ 734.693946][T17388] [ 734.889838][T17393] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3479'. [ 735.335707][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.723874][T17407] netlink: 2759 bytes leftover after parsing attributes in process `syz.0.3484'. [ 735.842562][T17407] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3484'. [ 735.921539][T17402] device bridge_slave_0 left promiscuous mode [ 735.948745][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.168795][T17407] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 736.198159][T17407] CPU: 1 PID: 17407 Comm: syz.0.3484 Not tainted syzkaller #0 [ 736.206005][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.216132][T17407] Call Trace: [ 736.219471][T17407] [ 736.222452][T17407] dump_stack_lvl+0x188/0x24e [ 736.227200][T17407] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 736.233439][T17407] ? show_regs_print_info+0x12/0x12 [ 736.238811][T17407] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 736.245064][T17407] sysfs_warn_dup+0x8a/0xa0 [ 736.249646][T17407] sysfs_do_create_link_sd+0xc0/0x110 [ 736.255102][T17407] device_add+0x7ed/0xfb0 [ 736.259509][T17407] wiphy_register+0x1d9f/0x2ac0 [ 736.264484][T17407] ? cfg80211_event_work+0x40/0x40 [ 736.269683][T17407] ? minstrel_ht_alloc+0x894/0xa20 [ 736.274887][T17407] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 736.281030][T17407] ieee80211_register_hw+0x2d00/0x39f0 [ 736.286575][T17407] ? ieee80211_register_hw+0xf21/0x39f0 [ 736.292194][T17407] ? ieee80211_register_hw+0xf21/0x39f0 [ 736.297825][T17407] ? ieee80211_tasklet_handler+0x20/0x20 [ 736.303546][T17407] ? memset+0x1e/0x40 [ 736.307596][T17407] ? __hrtimer_init+0x186/0x270 [ 736.312516][T17407] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 736.318336][T17407] hwsim_new_radio_nl+0xafa/0xce0 [ 736.323525][T17407] genl_family_rcv_msg_doit+0x22a/0x330 [ 736.329138][T17407] ? end_current_label_crit_section+0x170/0x170 [ 736.335452][T17407] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 736.341501][T17407] ? bpf_lsm_capable+0x5/0x10 [ 736.346245][T17407] ? security_capable+0x85/0xb0 [ 736.351183][T17407] genl_rcv_msg+0x604/0x790 [ 736.355769][T17407] ? genl_bind+0x360/0x360 [ 736.360250][T17407] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 736.366661][T17407] ? netlink_rcv_skb+0x1da/0x450 [ 736.371699][T17407] netlink_rcv_skb+0x1fb/0x450 [ 736.376550][T17407] ? genl_bind+0x360/0x360 [ 736.381140][T17407] ? netlink_ack+0x1170/0x1170 [ 736.386139][T17407] ? down_read+0x1a8/0x2d0 [ 736.390657][T17407] genl_rcv+0x24/0x40 [ 736.394877][T17407] netlink_unicast+0x74d/0x8d0 [ 736.399720][T17407] netlink_sendmsg+0x8ad/0xbd0 [ 736.404580][T17407] ? netlink_getsockopt+0x550/0x550 [ 736.409873][T17407] ? aa_sock_msg_perm+0x94/0x150 [ 736.414933][T17407] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 736.420341][T17407] ? security_socket_sendmsg+0x7c/0xa0 [ 736.426025][T17407] ? netlink_getsockopt+0x550/0x550 [ 736.431327][T17407] ____sys_sendmsg+0x5be/0x970 [ 736.436183][T17407] ? __sys_sendmsg_sock+0x30/0x30 [ 736.441458][T17407] ? __import_iovec+0x315/0x500 [ 736.446420][T17407] ? import_iovec+0x6f/0xa0 [ 736.451004][T17407] ___sys_sendmsg+0x2a2/0x360 [ 736.455759][T17407] ? try_to_wake_up+0x6ae/0x1080 [ 736.460783][T17407] ? __sys_sendmsg+0x290/0x290 [ 736.465665][T17407] ? btf_new_fd+0x396/0x780 [ 736.470271][T17407] __se_sys_sendmsg+0x1bb/0x2a0 [ 736.475218][T17407] ? ct_nmi_exit+0x145/0x1c0 [ 736.479976][T17407] ? __x64_sys_sendmsg+0x80/0x80 [ 736.485019][T17407] ? lockdep_hardirqs_on+0x94/0x140 [ 736.490295][T17407] do_syscall_64+0x4c/0xa0 [ 736.494835][T17407] ? clear_bhb_loop+0x60/0xb0 [ 736.499585][T17407] ? clear_bhb_loop+0x60/0xb0 [ 736.504341][T17407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.510312][T17407] RIP: 0033:0x7f12ceb9cdd9 [ 736.514823][T17407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.534546][T17407] RSP: 002b:00007f12cf9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.543037][T17407] RAX: ffffffffffffffda RBX: 00007f12cee15fa0 RCX: 00007f12ceb9cdd9 [ 736.551084][T17407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 736.559124][T17407] RBP: 00007f12cec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 736.567159][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.575190][T17407] R13: 00007f12cee16038 R14: 00007f12cee15fa0 R15: 00007ffe11ba8a58 [ 736.583247][T17407] [ 736.890099][T17439] FAULT_INJECTION: forcing a failure. [ 736.890099][T17439] name failslab, interval 1, probability 0, space 0, times 0 [ 736.923463][T17439] CPU: 1 PID: 17439 Comm: syz.0.3492 Not tainted syzkaller #0 [ 736.931035][T17439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.941159][T17439] Call Trace: [ 736.944539][T17439] [ 736.947683][T17439] dump_stack_lvl+0x188/0x24e [ 736.952439][T17439] ? show_regs_print_info+0x12/0x12 [ 736.957715][T17439] ? load_image+0x400/0x400 [ 736.962289][T17439] ? __might_sleep+0xd0/0xd0 [ 736.967118][T17439] ? __lock_acquire+0x7d10/0x7d10 [ 736.972215][T17439] should_fail_ex+0x399/0x4d0 [ 736.976984][T17439] should_failslab+0x5/0x20 [ 736.981552][T17439] slab_pre_alloc_hook+0x59/0x310 [ 736.986658][T17439] ? tipc_node_find+0xb0/0x480 [ 736.991498][T17439] kmem_cache_alloc_node+0x5a/0x320 [ 736.996760][T17439] ? __lock_acquire+0x7d10/0x7d10 [ 737.001855][T17439] ? __alloc_skb+0xfc/0x7e0 [ 737.006427][T17439] __alloc_skb+0xfc/0x7e0 [ 737.010951][T17439] tipc_msg_build+0xc9/0xde0 [ 737.015600][T17439] ? tipc_node_get_mtu+0x2a0/0x2a0 [ 737.020781][T17439] ? tipc_nametbl_lookup_anycast+0xca/0x1030 [ 737.027006][T17439] ? tipc_nametbl_lookup_anycast+0x53d/0x1030 [ 737.033152][T17439] __tipc_sendmsg+0x1933/0x2c90 [ 737.038059][T17439] ? rht_lock+0x150/0x150 [ 737.042431][T17439] ? verify_lock_unused+0x140/0x140 [ 737.047678][T17439] ? verify_lock_unused+0x140/0x140 [ 737.052927][T17439] ? perf_trace_lock+0xf8/0x390 [ 737.057866][T17439] ? trace_event_raw_event_lock+0x250/0x250 [ 737.063849][T17439] ? mark_lock+0x94/0x320 [ 737.068235][T17439] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 737.074275][T17439] ? __local_bh_enable_ip+0x136/0x1c0 [ 737.079713][T17439] ? lockdep_hardirqs_on+0x94/0x140 [ 737.084973][T17439] ? wait_woken+0x1c0/0x1c0 [ 737.089611][T17439] ? _local_bh_enable+0xa0/0xa0 [ 737.094527][T17439] tipc_sendmsg+0x51/0x70 [ 737.098904][T17439] ? tipc_recvmsg+0x1400/0x1400 [ 737.103798][T17439] ____sys_sendmsg+0x5be/0x970 [ 737.108616][T17439] ? __sys_sendmsg_sock+0x30/0x30 [ 737.113684][T17439] ? __import_iovec+0x315/0x500 [ 737.118578][T17439] ? import_iovec+0x6f/0xa0 [ 737.123169][T17439] ___sys_sendmsg+0x2a2/0x360 [ 737.127917][T17439] ? __sys_sendmsg+0x290/0x290 [ 737.132759][T17439] ? __lock_acquire+0x7d10/0x7d10 [ 737.137849][T17439] __se_sys_sendmsg+0x1bb/0x2a0 [ 737.142749][T17439] ? __x64_sys_sendmsg+0x80/0x80 [ 737.147750][T17439] ? lockdep_hardirqs_on+0x94/0x140 [ 737.152996][T17439] do_syscall_64+0x4c/0xa0 [ 737.157480][T17439] ? clear_bhb_loop+0x60/0xb0 [ 737.162198][T17439] ? clear_bhb_loop+0x60/0xb0 [ 737.166951][T17439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.172909][T17439] RIP: 0033:0x7f12ceb9cdd9 [ 737.177534][T17439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.197877][T17439] RSP: 002b:00007f12cf9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.206380][T17439] RAX: ffffffffffffffda RBX: 00007f12cee15fa0 RCX: 00007f12ceb9cdd9 [ 737.214392][T17439] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 737.222401][T17439] RBP: 00007f12cf9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 737.230443][T17439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.238454][T17439] R13: 00007f12cee16038 R14: 00007f12cee15fa0 R15: 00007ffe11ba8a58 [ 737.246476][T17439] [ 737.578888][T17453] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 737.668373][T17453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 737.676026][T17453] IPv6: NLM_F_CREATE should be set when creating new route [ 737.683733][T17453] IPv6: NLM_F_CREATE should be set when creating new route [ 737.691438][T17453] IPv6: NLM_F_CREATE should be set when creating new route [ 737.871778][T14425] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 737.881738][T17456] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3496'. [ 738.244011][T17473] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3502'. [ 738.506734][T17479] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 738.587651][T17479] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3503'. [ 738.834462][T17485] netlink: 'syz.4.3506': attribute type 8 has an invalid length. [ 738.887917][T17485] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3506'. [ 739.098496][T17496] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 740.163422][T17518] netlink: 'syz.2.3515': attribute type 7 has an invalid length. [ 740.184176][T17518] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3515'. [ 740.200372][T17521] netlink: 'syz.1.3517': attribute type 10 has an invalid length. [ 740.458301][T17535] FAULT_INJECTION: forcing a failure. [ 740.458301][T17535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.466518][T17536] netlink: 'syz.3.3523': attribute type 1 has an invalid length. [ 740.496085][T17531] netlink: 'syz.0.3520': attribute type 10 has an invalid length. [ 740.506784][T17535] CPU: 1 PID: 17535 Comm: syz.2.3521 Not tainted syzkaller #0 [ 740.514349][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 740.524466][T17535] Call Trace: [ 740.527798][T17535] [ 740.531223][T17535] dump_stack_lvl+0x188/0x24e [ 740.535980][T17535] ? show_regs_print_info+0x12/0x12 [ 740.541277][T17535] ? load_image+0x400/0x400 [ 740.545959][T17535] ? __lock_acquire+0x7d10/0x7d10 [ 740.550132][T17536] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3523'. [ 740.551049][T17535] ? snprintf+0xe5/0x140 [ 740.564666][T17535] should_fail_ex+0x399/0x4d0 [ 740.569403][T17535] _copy_to_user+0x2c/0x130 [ 740.573949][T17535] simple_read_from_buffer+0xe3/0x150 [ 740.579460][T17535] proc_fail_nth_read+0x1a6/0x220 [ 740.584524][T17535] ? proc_fault_inject_write+0x310/0x310 [ 740.590214][T17535] ? fsnotify_perm+0x248/0x550 [ 740.595033][T17535] ? proc_fault_inject_write+0x310/0x310 [ 740.600800][T17535] vfs_read+0x2de/0xa00 [ 740.605012][T17535] ? kernel_read+0x1e0/0x1e0 [ 740.609651][T17535] ? __fget_files+0x28/0x4b0 [ 740.614378][T17535] ? __fget_files+0x28/0x4b0 [ 740.619021][T17535] ? __fget_files+0x43d/0x4b0 [ 740.623755][T17535] ? __fdget_pos+0x2ae/0x360 [ 740.628394][T17535] ? ksys_read+0x71/0x250 [ 740.632767][T17535] ksys_read+0x14c/0x250 [ 740.637059][T17535] ? vfs_write+0xa30/0xa30 [ 740.641522][T17535] ? lockdep_hardirqs_on+0x94/0x140 [ 740.646754][T17535] do_syscall_64+0x4c/0xa0 [ 740.651213][T17535] ? clear_bhb_loop+0x60/0xb0 [ 740.655933][T17535] ? clear_bhb_loop+0x60/0xb0 [ 740.660669][T17535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.666689][T17535] RIP: 0033:0x7f972655d60e [ 740.671157][T17535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 740.690900][T17535] RSP: 002b:00007f97273fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.699391][T17535] RAX: ffffffffffffffda RBX: 00007f97273fe6c0 RCX: 00007f972655d60e [ 740.707399][T17535] RDX: 000000000000000f RSI: 00007f97273fe0a0 RDI: 0000000000000004 [ 740.715418][T17535] RBP: 00007f97273fe090 R08: 0000000000000000 R09: 0000000000000000 [ 740.723424][T17535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.731428][T17535] R13: 00007f9726816038 R14: 00007f9726815fa0 R15: 00007ffc9f255458 [ 740.739463][T17535] [ 740.775719][T17531] device veth0_macvtap left promiscuous mode [ 740.903535][T17544] netlink: 'syz.1.3522': attribute type 8 has an invalid length. [ 740.970389][T17544] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3522'. [ 741.745178][T17570] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3533'. [ 742.451770][T17586] netlink: 'syz.1.3539': attribute type 3 has an invalid length. [ 742.498972][T17586] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.3539'. [ 742.755537][T17596] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 743.044525][T17606] netlink: 'syz.0.3545': attribute type 8 has an invalid length. [ 743.059568][T17606] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3545'. [ 743.123465][T17605] team0: Port device team_slave_0 removed [ 743.276539][T17618] netlink: 'syz.3.3552': attribute type 29 has an invalid length. [ 743.363520][T17621] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.3551'. [ 743.481970][T17627] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3554'. [ 744.193425][T17654] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3562'. [ 744.628250][T17666] team0: Port device team_slave_0 removed [ 744.663488][T17671] validate_nla: 8 callbacks suppressed [ 744.663528][T17671] netlink: 'syz.2.3566': attribute type 8 has an invalid length. [ 744.749283][T17671] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3566'. [ 746.228418][T17740] netlink: 'syz.1.3587': attribute type 27 has an invalid length. [ 746.251609][T17740] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3587'. [ 746.706894][T17748] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 746.729484][T17748] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3590'. [ 747.330489][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.336965][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.452102][T17756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.497695][T17756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.544973][T17756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.596520][T17756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.631729][T17756] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 747.655225][T17766] netlink: 'syz.0.3595': attribute type 2 has an invalid length. [ 747.668066][T17756] batman_adv: batadv0: Removing interface: virt_wifi0 [ 748.185623][T17766] device 0 entered promiscuous mode [ 749.407404][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 749.556668][T17806] netlink: 'syz.4.3608': attribute type 2 has an invalid length. [ 749.576455][T17806] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3608'. [ 749.769263][T17814] netlink: 'syz.0.3611': attribute type 10 has an invalid length. [ 749.842540][T17814] team0: Device hsr_slave_0 failed to register rx_handler [ 750.225981][T17814] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3611'. [ 750.706653][T17844] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.3620'. [ 751.194221][T17851] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3623'. [ 751.932106][T17877] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3631'. [ 753.300588][T17897] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 753.614540][T14689] device ip6gretap0 left promiscuous mode [ 753.630730][T14689] Ÿë: port 1(ip6gretap0) entered disabled state [ 753.806727][T17906] netlink: 'syz.3.3642': attribute type 1 has an invalid length. [ 754.077231][T17916] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3644'. [ 754.134206][T17924] netlink: 'syz.1.3643': attribute type 21 has an invalid length. [ 754.162936][T17924] netlink: 'syz.1.3643': attribute type 6 has an invalid length. [ 754.206965][T17924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3643'. [ 755.029662][T17937] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3649'. [ 755.106394][T17936] netlink: 'syz.0.3649': attribute type 10 has an invalid length. [ 755.256718][T17942] tap0: tun_chr_ioctl cmd 1074025677 [ 755.273586][T17942] tap0: linktype set to 774 [ 755.798563][T17954] netlink: 'syz.2.3654': attribute type 28 has an invalid length. [ 755.812475][T17954] netlink: 'syz.2.3654': attribute type 29 has an invalid length. [ 755.837501][T17954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3654'. [ 755.893215][T17962] netlink: 'syz.3.3657': attribute type 10 has an invalid length. [ 755.939553][T17962] bond0: (slave bond_slave_0): Releasing backup interface [ 756.727350][T14689] device hsr_slave_0 left promiscuous mode [ 756.764618][T14689] device hsr_slave_1 left promiscuous mode [ 756.792421][T14689] bridge0: port 3(team0) entered disabled state [ 756.882095][T14689] device bridge_slave_1 left promiscuous mode [ 756.893135][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.960130][T14689] device bridge_slave_0 left promiscuous mode [ 756.966497][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.308616][T14689] device veth1_macvtap left promiscuous mode [ 757.314806][T14689] device veth0_macvtap left promiscuous mode [ 757.368019][T14689] device veth1_vlan left promiscuous mode [ 757.398219][T14689] device veth0_vlan left promiscuous mode [ 757.827700][T18007] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3671'. [ 759.032345][T14689] device team_slave_1 left promiscuous mode [ 759.048202][T14689] team0 (unregistering): Port device team_slave_1 removed [ 759.119776][T14689] device team_slave_0 left promiscuous mode [ 759.138223][T14689] team0 (unregistering): Port device team_slave_0 removed [ 759.216747][T14689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.300257][T14689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.721506][T14689] bond0 (unregistering): Released all slaves [ 759.862260][T18017] Â: renamed from virt_wifi0 [ 760.948522][T18049] netlink: 'syz.4.3684': attribute type 10 has an invalid length. [ 760.973783][T18052] netlink: 'syz.3.3685': attribute type 2 has an invalid length. [ 760.993254][T18052] netlink: 'syz.3.3685': attribute type 1 has an invalid length. [ 761.024966][T18052] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3685'. [ 761.068225][T18049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 761.873168][T18066] netlink: 'syz.3.3690': attribute type 29 has an invalid length. [ 762.147477][T18063] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3689'. [ 762.178061][T18066] netlink: 'syz.3.3690': attribute type 29 has an invalid length. [ 762.201618][T18069] netlink: 'syz.3.3690': attribute type 29 has an invalid length. [ 762.431710][T18083] netlink: 'syz.4.3694': attribute type 21 has an invalid length. [ 762.554597][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 764.113567][T18122] netlink: 'syz.0.3704': attribute type 1 has an invalid length. [ 764.169143][T18121] netlink: 'syz.3.3705': attribute type 25 has an invalid length. [ 764.177083][T18121] netlink: 'syz.3.3705': attribute type 29 has an invalid length. [ 764.198787][T18122] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3704'. [ 764.239972][T18125] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3705'. [ 766.239445][T18140] netlink: 'syz.2.3708': attribute type 29 has an invalid length. [ 766.261339][T18140] netlink: 'syz.2.3708': attribute type 29 has an invalid length. [ 766.289659][T18143] netlink: 'syz.2.3708': attribute type 29 has an invalid length. [ 766.327795][T18144] netlink: 'syz.1.3710': attribute type 21 has an invalid length. [ 766.501724][T18149] bridge_slave_1: mtu greater than device maximum [ 768.245429][T18179] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3720'. [ 768.271000][T18179] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 768.367017][T18185] netlink: 14478 bytes leftover after parsing attributes in process `syz.0.3722'. [ 769.079329][T18200] netlink: 'syz.1.3723': attribute type 29 has an invalid length. [ 769.125993][T18200] netlink: 'syz.1.3723': attribute type 29 has an invalid length. [ 769.167250][T18201] netlink: 'syz.1.3723': attribute type 29 has an invalid length. [ 769.286362][T18205] netlink: 'syz.2.3726': attribute type 29 has an invalid length. [ 769.343313][T18205] netlink: 'syz.2.3726': attribute type 3 has an invalid length. [ 769.427276][T18205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3726'. [ 769.887479][T14425] Bluetooth: hci1: command 0x0406 tx timeout [ 770.608327][T18236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.677809][T18236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.727927][T18236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.791478][T18236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.157722][T18236] bond0: (slave batadv0): Releasing backup interface [ 771.427532][T18240] netlink: 'syz.3.3738': attribute type 21 has an invalid length. [ 771.549256][T18248] netlink: 'syz.4.3739': attribute type 10 has an invalid length. [ 771.701308][T18248] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3739'. [ 771.807011][T18248] device hsr0 entered promiscuous mode [ 771.860530][T18248] bridge0: port 2(hsr0) entered blocking state [ 771.941602][T18248] bridge0: port 2(hsr0) entered disabled state [ 771.994506][T18248] bridge0: port 2(hsr0) entered blocking state [ 772.000888][T18248] bridge0: port 2(hsr0) entered forwarding state [ 772.472387][T18271] netlink: 'syz.1.3746': attribute type 10 has an invalid length. [ 772.503359][T18277] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3750'. [ 772.654158][T18279] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3749'. [ 772.703608][T18277] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 772.726382][T18277] CPU: 1 PID: 18277 Comm: syz.0.3750 Not tainted syzkaller #0 [ 772.733985][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.744159][T18277] Call Trace: [ 772.747491][T18277] [ 772.750481][T18277] dump_stack_lvl+0x188/0x24e [ 772.755233][T18277] ? show_regs_print_info+0x12/0x12 [ 772.760543][T18277] ? load_image+0x400/0x400 [ 772.765169][T18277] sysfs_warn_dup+0x8a/0xa0 [ 772.769765][T18277] sysfs_do_create_link_sd+0xc0/0x110 [ 772.775209][T18277] device_add+0x7ed/0xfb0 [ 772.779973][T18277] wiphy_register+0x1d9f/0x2ac0 [ 772.785024][T18277] ? cfg80211_event_work+0x40/0x40 [ 772.790297][T18277] ? minstrel_ht_alloc+0x894/0xa20 [ 772.795556][T18277] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 772.801724][T18277] ieee80211_register_hw+0x2d00/0x39f0 [ 772.807542][T18277] ? ieee80211_register_hw+0xf21/0x39f0 [ 772.813178][T18277] ? ieee80211_register_hw+0xf21/0x39f0 [ 772.818985][T18277] ? ieee80211_tasklet_handler+0x20/0x20 [ 772.824715][T18277] ? memset+0x1e/0x40 [ 772.828817][T18277] ? __hrtimer_init+0x186/0x270 [ 772.833725][T18277] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 772.839516][T18277] hwsim_new_radio_nl+0xafa/0xce0 [ 772.844770][T18277] genl_family_rcv_msg_doit+0x22a/0x330 [ 772.850397][T18277] ? end_current_label_crit_section+0x170/0x170 [ 772.856691][T18277] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 772.862641][T18277] ? bpf_lsm_capable+0x5/0x10 [ 772.867450][T18277] ? security_capable+0x85/0xb0 [ 772.872432][T18277] genl_rcv_msg+0x604/0x790 [ 772.877023][T18277] ? genl_bind+0x360/0x360 [ 772.881476][T18277] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 772.887972][T18277] netlink_rcv_skb+0x1fb/0x450 [ 772.892801][T18277] ? genl_bind+0x360/0x360 [ 772.897297][T18277] ? netlink_ack+0x1170/0x1170 [ 772.902159][T18277] ? down_read+0x1a8/0x2d0 [ 772.906676][T18277] genl_rcv+0x24/0x40 [ 772.910966][T18277] netlink_unicast+0x74d/0x8d0 [ 772.915828][T18277] netlink_sendmsg+0x8ad/0xbd0 [ 772.920694][T18277] ? netlink_getsockopt+0x550/0x550 [ 772.925983][T18277] ? aa_sock_msg_perm+0x94/0x150 [ 772.930972][T18277] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 772.936332][T18277] ? security_socket_sendmsg+0x7c/0xa0 [ 772.941868][T18277] ? netlink_getsockopt+0x550/0x550 [ 772.947116][T18277] ____sys_sendmsg+0x5be/0x970 [ 772.952475][T18277] ? __sys_sendmsg_sock+0x30/0x30 [ 772.957549][T18277] ? __import_iovec+0x315/0x500 [ 772.962472][T18277] ? import_iovec+0x6f/0xa0 [ 772.967043][T18277] ___sys_sendmsg+0x2a2/0x360 [ 772.971870][T18277] ? try_to_wake_up+0x6ae/0x1080 [ 772.976993][T18277] ? __sys_sendmsg+0x290/0x290 [ 772.981865][T18277] __se_sys_sendmsg+0x1bb/0x2a0 [ 772.986797][T18277] ? ct_nmi_exit+0x145/0x1c0 [ 772.991473][T18277] ? __x64_sys_sendmsg+0x80/0x80 [ 772.996769][T18277] ? lockdep_hardirqs_on+0x94/0x140 [ 773.002047][T18277] do_syscall_64+0x4c/0xa0 [ 773.006637][T18277] ? clear_bhb_loop+0x60/0xb0 [ 773.011390][T18277] ? clear_bhb_loop+0x60/0xb0 [ 773.016148][T18277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.022131][T18277] RIP: 0033:0x7f12ceb9cdd9 [ 773.026881][T18277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.046550][T18277] RSP: 002b:00007f12cf9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.055018][T18277] RAX: ffffffffffffffda RBX: 00007f12cee15fa0 RCX: 00007f12ceb9cdd9 [ 773.063113][T18277] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 773.071224][T18277] RBP: 00007f12cec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 773.079256][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.087307][T18277] R13: 00007f12cee16038 R14: 00007f12cee15fa0 R15: 00007ffe11ba8a58 [ 773.095497][T18277] [ 773.662066][T18294] delete_channel: no stack [ 773.761313][T18304] netlink: 'syz.4.3757': attribute type 5 has an invalid length. [ 773.790980][T18304] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3757'. [ 774.491656][T18319] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3762'. [ 775.289661][T18334] netlink: 'syz.3.3766': attribute type 10 has an invalid length. [ 775.728258][T18350] netlink: 'syz.0.3771': attribute type 10 has an invalid length. [ 775.815191][T18350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.894139][T18350] team0: Port device bond0 added [ 775.925461][T18352] netlink: 'syz.3.3773': attribute type 5 has an invalid length. [ 776.610148][T18371] netlink: 'syz.4.3778': attribute type 10 has an invalid length. [ 776.728757][T18371] bridge0: port 2(hsr0) entered disabled state [ 776.735469][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.593619][T18397] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3786'. [ 777.763448][T18396] netlink: 'syz.2.3784': attribute type 10 has an invalid length. [ 778.372434][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3792'. [ 778.429407][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.443516][T18418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.510841][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.559905][T18418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.782691][T18454] netlink: 'syz.2.3805': attribute type 10 has an invalid length. [ 780.105033][T18464] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3816'. [ 780.186912][T18460] netlink: 'syz.4.3806': attribute type 10 has an invalid length. [ 780.418097][T18474] netlink: 'syz.4.3811': attribute type 10 has an invalid length. [ 780.782448][T18473] delete_channel: no stack [ 780.811816][T18472] netlink: 'syz.0.3810': attribute type 4 has an invalid length. [ 780.827817][T18472] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3810'. [ 781.561294][T18512] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3819'. [ 782.114032][T18536] netlink: 'syz.0.3828': attribute type 21 has an invalid length. [ 782.144092][T18540] netlink: 'syz.4.3830': attribute type 2 has an invalid length. [ 782.161160][T18536] netlink: 'syz.0.3828': attribute type 22 has an invalid length. [ 782.179447][T18540] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3830'. [ 782.200023][T18536] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.3828'. [ 782.408035][T18529] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3825'. [ 782.461614][T18546] netlink: 'syz.3.3832': attribute type 10 has an invalid length. [ 782.542101][T18545] netlink: 'syz.3.3832': attribute type 10 has an invalid length. [ 783.867688][T18584] tap0: tun_chr_ioctl cmd 2147767517 [ 784.233577][T18587] netlink: 'syz.0.3843': attribute type 1 has an invalid length. [ 784.311071][T18587] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3843'. [ 785.189033][T18622] syz.4.3857[18622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.189220][T18622] syz.4.3857[18622] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.511183][T18636] netlink: 'syz.4.3860': attribute type 2 has an invalid length. [ 785.807981][T14425] Bluetooth: hci0: command 0x0406 tx timeout [ 786.141223][T18664] tap0: tun_chr_ioctl cmd 2147767517 [ 786.216445][T18670] netlink: 'syz.2.3871': attribute type 6 has an invalid length. [ 786.233282][T18670] netlink: 'syz.2.3871': attribute type 3 has an invalid length. [ 786.241732][T18670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3871'. [ 786.768799][T18687] netlink: 'syz.3.3872': attribute type 1 has an invalid length. [ 786.909348][T18682] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3875'. [ 786.994198][T18682] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 787.985559][T18709] netlink: 'syz.2.3882': attribute type 10 has an invalid length. [ 788.408331][T18729] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.3889'. [ 788.495490][T18709] team0: Port device wlan1 added [ 788.567495][T18713] netlink: 'syz.0.3883': attribute type 17 has an invalid length. [ 788.587413][T18713] netlink: 'syz.0.3883': attribute type 16 has an invalid length. [ 788.595355][T18713] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3883'. [ 788.816212][T18731] netlink: 'syz.4.3890': attribute type 1 has an invalid length. [ 788.865783][T18731] netlink: 'syz.4.3890': attribute type 4 has an invalid length. [ 788.889578][T18731] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3890'. [ 788.925971][T18737] netlink: 'syz.1.3891': attribute type 21 has an invalid length. [ 788.944863][T18737] netlink: 'syz.1.3891': attribute type 2 has an invalid length. [ 788.967854][T18737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3891'. [ 789.400611][T18750] netlink: 'syz.2.3897': attribute type 46 has an invalid length. [ 789.429983][T18750] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3897'. [ 789.855640][T18767] netlink: 'syz.1.3903': attribute type 10 has an invalid length. [ 789.870638][T18765] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.3904'. [ 789.936620][T18767] team0: Port device wlan1 added [ 789.951227][T18769] netlink: 'syz.4.3902': attribute type 10 has an invalid length. [ 792.348593][T18801] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3911'. [ 793.157632][T18820] validate_nla: 4 callbacks suppressed [ 793.157653][T18820] netlink: 'syz.2.3919': attribute type 29 has an invalid length. [ 793.261999][T18820] netlink: 'syz.2.3919': attribute type 29 has an invalid length. [ 793.279778][T18824] netlink: 'syz.4.3918': attribute type 10 has an invalid length. [ 793.344892][T18823] netlink: 'syz.2.3919': attribute type 29 has an invalid length. [ 793.716543][T18832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3922'. [ 794.312430][T18844] FAULT_INJECTION: forcing a failure. [ 794.312430][T18844] name failslab, interval 1, probability 0, space 0, times 0 [ 794.348544][T18844] CPU: 0 PID: 18844 Comm: syz.4.3926 Not tainted syzkaller #0 [ 794.356104][T18844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.366710][T18844] Call Trace: [ 794.370123][T18844] [ 794.373164][T18844] dump_stack_lvl+0x188/0x24e [ 794.378448][T18844] ? show_regs_print_info+0x12/0x12 [ 794.383732][T18844] ? load_image+0x400/0x400 [ 794.388358][T18844] ? __might_sleep+0xd0/0xd0 [ 794.393011][T18844] ? __lock_acquire+0x7d10/0x7d10 [ 794.398154][T18844] should_fail_ex+0x399/0x4d0 [ 794.403162][T18844] should_failslab+0x5/0x20 [ 794.407729][T18844] slab_pre_alloc_hook+0x59/0x310 [ 794.412817][T18844] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 794.418612][T18844] __kmem_cache_alloc_node+0x4f/0x260 [ 794.424053][T18844] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 794.429847][T18844] __kmalloc+0xa0/0x240 [ 794.434069][T18844] tomoyo_realpath_from_path+0xdf/0x5d0 [ 794.439793][T18844] ? tomoyo_path_number_perm+0x205/0x650 [ 794.445491][T18844] tomoyo_path_number_perm+0x22f/0x650 [ 794.451025][T18844] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 794.456564][T18844] ? ksys_write+0x1c0/0x250 [ 794.461392][T18844] ? common_file_perm+0x171/0x1c0 [ 794.466516][T18844] ? __fget_files+0x28/0x4b0 [ 794.471178][T18844] ? __fget_files+0x28/0x4b0 [ 794.475843][T18844] security_file_ioctl+0x6c/0xa0 [ 794.480847][T18844] __se_sys_ioctl+0x48/0x170 [ 794.485523][T18844] do_syscall_64+0x4c/0xa0 [ 794.490019][T18844] ? clear_bhb_loop+0x60/0xb0 [ 794.494763][T18844] ? clear_bhb_loop+0x60/0xb0 [ 794.499519][T18844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.505686][T18844] RIP: 0033:0x7f4e0d99cdd9 [ 794.510166][T18844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.529925][T18844] RSP: 002b:00007f4e0e940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.539555][T18844] RAX: ffffffffffffffda RBX: 00007f4e0dc15fa0 RCX: 00007f4e0d99cdd9 [ 794.547595][T18844] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 794.555627][T18844] RBP: 00007f4e0e940090 R08: 0000000000000000 R09: 0000000000000000 [ 794.563746][T18844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.571770][T18844] R13: 00007f4e0dc16038 R14: 00007f4e0dc15fa0 R15: 00007ffeafcbd998 [ 794.579823][T18844] [ 794.933636][T18844] ERROR: Out of memory at tomoyo_realpath_from_path. [ 795.178246][T18864] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 795.186690][T18864] netlink: 'syz.1.3933': attribute type 4 has an invalid length. [ 795.223177][T18864] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3933'. [ 795.312270][T18862] netlink: 'syz.3.3934': attribute type 10 has an invalid length. [ 795.487292][T14425] Bluetooth: hci2: command 0x0406 tx timeout [ 795.604311][T18862] team0: Port device wlan1 added [ 796.741042][T18907] FAULT_INJECTION: forcing a failure. [ 796.741042][T18907] name failslab, interval 1, probability 0, space 0, times 0 [ 796.791871][T18897] device syzkaller0 entered promiscuous mode [ 796.808712][T18907] CPU: 0 PID: 18907 Comm: syz.1.3946 Not tainted syzkaller #0 [ 796.816331][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.826515][T18907] Call Trace: [ 796.829852][T18907] [ 796.832832][T18907] dump_stack_lvl+0x188/0x24e [ 796.837586][T18907] ? show_regs_print_info+0x12/0x12 [ 796.842861][T18907] ? load_image+0x400/0x400 [ 796.847444][T18907] ? __might_sleep+0xd0/0xd0 [ 796.852347][T18907] ? __lock_acquire+0x7d10/0x7d10 [ 796.857542][T18907] should_fail_ex+0x399/0x4d0 [ 796.862301][T18907] should_failslab+0x5/0x20 [ 796.867042][T18907] slab_pre_alloc_hook+0x59/0x310 [ 796.872138][T18907] ? tomoyo_encode+0x27e/0x540 [ 796.876968][T18907] __kmem_cache_alloc_node+0x4f/0x260 [ 796.882411][T18907] ? tomoyo_encode+0x27e/0x540 [ 796.887336][T18907] __kmalloc+0xa0/0x240 [ 796.891543][T18907] tomoyo_encode+0x27e/0x540 [ 796.896197][T18907] tomoyo_realpath_from_path+0x58e/0x5d0 [ 796.901925][T18907] ? tomoyo_path_number_perm+0x205/0x650 [ 796.907614][T18907] tomoyo_path_number_perm+0x22f/0x650 [ 796.913120][T18907] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 796.918622][T18907] ? ksys_write+0x1c0/0x250 [ 796.923175][T18907] ? common_file_perm+0x171/0x1c0 [ 796.928271][T18907] ? __fget_files+0x28/0x4b0 [ 796.932903][T18907] ? __fget_files+0x28/0x4b0 [ 796.937583][T18907] security_file_ioctl+0x6c/0xa0 [ 796.942567][T18907] __se_sys_ioctl+0x48/0x170 [ 796.947230][T18907] do_syscall_64+0x4c/0xa0 [ 796.951691][T18907] ? clear_bhb_loop+0x60/0xb0 [ 796.956408][T18907] ? clear_bhb_loop+0x60/0xb0 [ 796.961161][T18907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.967255][T18907] RIP: 0033:0x7f710579cdd9 [ 796.971754][T18907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.991402][T18907] RSP: 002b:00007f710672c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.999860][T18907] RAX: ffffffffffffffda RBX: 00007f7105a15fa0 RCX: 00007f710579cdd9 [ 797.007870][T18907] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 797.015881][T18907] RBP: 00007f710672c090 R08: 0000000000000000 R09: 0000000000000000 [ 797.023977][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.031991][T18907] R13: 00007f7105a16038 R14: 00007f7105a15fa0 R15: 00007ffcc2565fb8 [ 797.040017][T18907] [ 797.063831][T18911] netlink: 'syz.4.3948': attribute type 3 has an invalid length. [ 797.087219][T18911] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3948'. [ 797.099286][T18907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 797.399105][T18912] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3948'. [ 799.990727][T18933] netlink: 'syz.4.3952': attribute type 4 has an invalid length. [ 800.015367][T18933] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3952'. [ 800.295483][T18954] netlink: 'syz.4.3959': attribute type 21 has an invalid length. [ 800.383825][T18950] netlink: 'syz.2.3957': attribute type 1 has an invalid length. [ 800.441578][T18950] netlink: 'syz.2.3957': attribute type 4 has an invalid length. [ 800.504935][T18950] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3957'. [ 801.015846][T18977] netlink: 'syz.0.3965': attribute type 9 has an invalid length. [ 801.056451][T18977] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3965'. [ 801.097314][T18978] netlink: 'syz.0.3965': attribute type 9 has an invalid length. [ 801.105694][T18978] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3965'. [ 801.895601][T18994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3970'. [ 803.172808][T19024] device wg2 left promiscuous mode [ 803.306834][T19027] device wg2 entered promiscuous mode [ 803.335361][T19026] netlink: 'syz.0.3978': attribute type 1 has an invalid length. [ 803.356564][T19026] netlink: 'syz.0.3978': attribute type 4 has an invalid length. [ 803.393730][T19026] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3978'. [ 803.899196][T19050] @: port 1(gretap0) entered blocking state [ 803.912671][T19050] @: port 1(gretap0) entered disabled state [ 803.930177][T19050] device gretap0 entered promiscuous mode [ 804.186896][T19062] netlink: 'syz.2.3993': attribute type 21 has an invalid length. [ 804.213220][T19062] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3993'. [ 804.252434][T19065] netlink: 'syz.1.3994': attribute type 3 has an invalid length. [ 804.291982][T19065] netlink: 85736 bytes leftover after parsing attributes in process `syz.1.3994'. [ 804.415734][T19070] netlink: 'syz.0.3995': attribute type 11 has an invalid length. [ 804.437389][T19070] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3995'. [ 805.268867][T19097] validate_nla: 1 callbacks suppressed [ 805.268891][T19097] netlink: 'syz.2.4002': attribute type 10 has an invalid length. [ 806.261164][T19126] netlink: 'syz.1.4014': attribute type 2 has an invalid length. [ 806.285366][T19126] netlink: 196452 bytes leftover after parsing attributes in process `syz.1.4014'. [ 821.230183][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 821.242157][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 821.252139][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 821.260984][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 821.269616][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 821.277376][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 821.600448][T19149] chnl_net:caif_netlink_parms(): no params data found [ 821.785082][T19149] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.794302][T19149] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.805500][T19149] device bridge_slave_0 entered promiscuous mode [ 821.820600][T19149] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.829955][T19149] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.841868][T19149] device bridge_slave_1 entered promiscuous mode [ 821.890213][T19149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.905622][T19149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.951556][T19149] team0: Port device team_slave_0 added [ 821.964929][T19149] team0: Port device team_slave_1 added [ 822.006580][T19149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.014628][T19149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.045862][T19149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.063998][T19149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.071434][T19149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.104067][T19149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.328000][T14425] Bluetooth: hci4: command 0x0409 tx timeout [ 823.522468][T14425] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 823.532914][T14425] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 823.547378][T14425] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 823.555846][T14425] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 823.572031][T14425] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 823.582363][T14425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 823.794635][T14425] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 823.806723][T14425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 823.820071][T14425] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 823.828822][T14425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 823.837013][T14425] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 823.848848][T14425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 823.961115][T14425] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 823.975909][T14425] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 823.985859][T14425] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 824.001735][T14425] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 824.013484][T14425] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 824.022190][T14425] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 825.415813][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 825.647320][ T48] Bluetooth: hci6: command 0x0409 tx timeout [ 825.887413][ T48] Bluetooth: hci7: command 0x0409 tx timeout [ 826.048275][T14425] Bluetooth: hci8: command 0x0409 tx timeout [ 826.120986][T14425] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 826.134733][T14425] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 826.146446][T14425] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 826.156974][T14425] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 826.167283][T14425] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 826.179095][T14425] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 827.487815][T14425] Bluetooth: hci4: command 0x040f tx timeout [ 827.727313][T14425] Bluetooth: hci6: command 0x041b tx timeout [ 827.967272][T14425] Bluetooth: hci7: command 0x041b tx timeout [ 828.127811][T14425] Bluetooth: hci8: command 0x041b tx timeout [ 828.207591][T14425] Bluetooth: hci9: command 0x0409 tx timeout [ 829.567753][T14425] Bluetooth: hci4: command 0x0419 tx timeout [ 829.807284][T14425] Bluetooth: hci6: command 0x040f tx timeout [ 830.047220][T14425] Bluetooth: hci7: command 0x040f tx timeout [ 830.207334][T14425] Bluetooth: hci8: command 0x040f tx timeout [ 830.287973][T14425] Bluetooth: hci9: command 0x041b tx timeout [ 831.887270][T14425] Bluetooth: hci6: command 0x0419 tx timeout [ 832.127286][T14425] Bluetooth: hci7: command 0x0419 tx timeout [ 832.287323][T14425] Bluetooth: hci8: command 0x0419 tx timeout [ 832.367558][T14425] Bluetooth: hci9: command 0x040f tx timeout [ 832.447414][T14851] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2668 jiffies s: 70589 root: 0x1/. [ 832.470150][T14851] rcu: blocking rcu_node structures (internal RCU debug): [ 832.478974][T14851] Sending NMI from CPU 1 to CPUs 0: [ 832.484766][ C0] NMI backtrace for cpu 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 832.484779][ C0] CPU: 0 PID: 19111 Comm: syz.3.4008 Not tainted syzkaller #0 [ 832.484800][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 832.484811][ C0] RIP: 0010:irq_work_queue_on+0xbe/0x260 [ 832.484849][ C0] Code: e8 27 aa f3 ff 4c 8d 7b 08 4c 89 ff be 04 00 00 00 e8 f6 b7 44 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 3e 01 00 00 <45> 8b 37 44 89 f1 83 c9 23 31 f6 44 89 f0 f0 41 0f b1 0f 41 89 c4 [ 832.484866][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00000046 [ 832.484884][ C0] RAX: 0000000000000000 RBX: ffff8880b8e3b9f0 RCX: ffffffff818ecb3a [ 832.484898][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8880b8e3b9f8 [ 832.484911][ C0] RBP: 0000000000000000 R08: ffff8880b8e3b9fb R09: 1ffff110171c773f [ 832.484925][ C0] R10: dffffc0000000000 R11: ffffed10171c7740 R12: dffffc0000000000 [ 832.484940][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8e3b9f8 [ 832.484954][ C0] FS: 00007f76227156c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 832.484971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.484985][ C0] CR2: 0000001b2de23ffc CR3: 00000000580cb000 CR4: 00000000003506f0 [ 832.485003][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 832.485014][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 832.485027][ C0] Call Trace: [ 832.485033][ C0] [ 832.485043][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 832.485068][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 832.485090][ C0] ? __cant_sleep+0x220/0x220 [ 832.485113][ C0] __rcu_read_unlock+0x78/0xd0 [ 832.485131][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 832.485160][ C0] trace_call_bpf+0x5bb/0x6b0 [ 832.485187][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 832.485218][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 832.485249][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 832.485267][ C0] ? sched_clock_cpu+0x6e/0x260 [ 832.485293][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 832.485329][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 832.485358][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 832.485385][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 832.485415][ C0] ? __irq_exit_rcu+0x147/0x230 [ 832.485434][ C0] ? irq_exit_rcu+0x20/0x20 [ 832.485454][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 832.485479][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 832.485509][ C0] trace_hardirqs_on+0x24/0x40 [ 832.485534][ C0] asm_sysvec_irq_work+0x16/0x20 [ 832.485559][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 832.485587][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 832.485604][ C0] RSP: 0018:ffffc90000007c20 EFLAGS: 00000206 [ 832.485619][ C0] RAX: ce3b7c7f9bac9000 RBX: 1ffff92000000f8c RCX: ce3b7c7f9bac9000 [ 832.485634][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf13a0 [ 832.485649][ C0] RBP: ffffc90000007d08 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 832.485664][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 832.485678][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 832.485706][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 832.485732][ C0] __rcu_read_unlock+0x78/0xd0 [ 832.485752][ C0] rebalance_domains+0x8da/0xa10 [ 832.485784][ C0] ? rebalance_domains+0x132/0xa10 [ 832.485815][ C0] handle_softirqs+0x2a1/0x930 [ 832.485837][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 832.485858][ C0] ? do_softirq+0x210/0x210 [ 832.485879][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 832.485899][ C0] __irq_exit_rcu+0x13b/0x230 [ 832.485917][ C0] ? irq_exit_rcu+0x20/0x20 [ 832.485942][ C0] irq_exit_rcu+0x5/0x20 [ 832.485959][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 832.485981][ C0] [ 832.485986][ C0] [ 832.485992][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 832.486018][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 832.486042][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f dd 20 f7 65 8b 05 80 60 ca 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 832.486058][ C0] RSP: 0018:ffffc9000666fb60 EFLAGS: 00000206 [ 832.486073][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ce3b7c7f9bac9000 [ 832.486088][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: 0000000000000001 [ 832.486101][ C0] RBP: ffffc9000666fbe0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 832.486117][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: dffffc0000000000 [ 832.486132][ C0] R13: ffffffff7fffffff R14: ffff8880174409c0 R15: 1ffff92000ccdf6c [ 832.486156][ C0] ? _raw_spin_unlock+0x40/0x40 [ 832.486182][ C0] __unfreeze_partials+0x161/0x200 [ 832.486212][ C0] put_cpu_partial+0x17c/0x250 [ 832.486234][ C0] ? put_cpu_partial+0x6e/0x250 [ 832.486259][ C0] qlist_free_all+0x76/0xe0 [ 832.486281][ C0] kasan_quarantine_reduce+0x144/0x160 [ 832.486304][ C0] __kasan_slab_alloc+0x1e/0x80 [ 832.486332][ C0] slab_post_alloc_hook+0x4b/0x480 [ 832.486354][ C0] ? slab_pre_alloc_hook+0x2e7/0x310 [ 832.486376][ C0] ? slab_pre_alloc_hook+0xb6/0x310 [ 832.486399][ C0] kmem_cache_alloc_lru+0x11a/0x2e0 [ 832.486420][ C0] ? sock_alloc_inode+0x24/0xc0 [ 832.486444][ C0] sock_alloc_inode+0x24/0xc0 [ 832.486463][ C0] ? sockfs_init_fs_context+0xa0/0xa0 [ 832.486483][ C0] new_inode_pseudo+0x5f/0x1c0 [ 832.486508][ C0] __sock_create+0x129/0x940 [ 832.486535][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 832.486570][ C0] __sys_socket+0xc4/0x190 [ 832.486599][ C0] __x64_sys_socket+0x76/0x80 [ 832.486627][ C0] do_syscall_64+0x4c/0xa0 [ 832.486654][ C0] ? clear_bhb_loop+0x60/0xb0 [ 832.486679][ C0] ? clear_bhb_loop+0x60/0xb0 [ 832.486706][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.486731][ C0] RIP: 0033:0x7f762179cdd9 [ 832.486748][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.486764][ C0] RSP: 002b:00007f7622715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 832.486783][ C0] RAX: ffffffffffffffda RBX: 00007f7621a15fa0 RCX: 00007f762179cdd9 [ 832.486797][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 832.486809][ C0] RBP: 00007f7621832d69 R08: 0000000000000000 R09: 0000000000000000 [ 832.486821][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.486833][ C0] R13: 00007f7621a16038 R14: 00007f7621a15fa0 R15: 00007ffcd5f18b08 [ 832.486856][ C0] [ 834.447687][T14425] Bluetooth: hci9: command 0x0419 tx timeout