last executing test programs: 4.431427188s ago: executing program 0 (id=9818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x1d, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x23) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061117400000000001e000000000000009500000c000000006a2a5e76a13c3fa669e0d9a0f1ef770b1331e53a553f0b5853e8d4a138c118ffa136ab337175978ed8839fb08e80b500d0e3bbff298d75abec744fd1f90510b73d354cef55885790619b2289ed6efd51894ee95166871bff779ec4c64aa8c7d844ca9822bf5fe7013523f1e921009cf28f570d012a04d6b13c06c210cd96019829ec537ad3c645e58327c661810eba684030270e57b865920657c2b47cda3015c89dc3ac833263c3e97639de1da3fb9de72cc0035dd520fd2532318b"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 3.642800223s ago: executing program 3 (id=9827): r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.670429234s ago: executing program 3 (id=9830): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000040)="ff16c777f75fdb661722df72e42e146c4681ceaa3cfa18e652f08751add24333eb745105fe083a", &(0x7f0000000240)=""/16}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="497501060000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x40880) 2.470460881s ago: executing program 0 (id=9833): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.341818634s ago: executing program 3 (id=9837): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8919, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x48, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@xdp={0x2c, 0x11, 0x0, 0x17}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x20004050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 2.217394319s ago: executing program 2 (id=9838): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) socketpair(0xf, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1c, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xaa}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x11}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x40, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[r0, 0x1, r0], &(0x7f00000002c0)=[{0x4, 0x5, 0x7}, {0x4, 0x4, 0x9, 0x5}, {0x1, 0x5, 0xe, 0x6}, {0x0, 0x5, 0xf, 0x6}, {0x4, 0x5, 0x0, 0x1}, {0x1, 0x4, 0xf, 0x1}, {0x0, 0x3, 0x6, 0xb}], 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x1, &(0x7f0000000400)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000440)='GPL\x00', 0xda3f, 0x83, &(0x7f0000000480)=""/131, 0x100, 0x36, '\x00', 0x0, @fallback=0x18, r0, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x1, &(0x7f0000000580)=[r0], &(0x7f00000005c0)=[{0x1, 0x4, 0xa, 0x7}], 0x10, 0x80000000}, 0x94) r4 = gettid() r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x5, 0x2, 0x81, 0x0, 0xff, 0x140084, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000006c0)}, 0x100a00, 0x4, 0x103, 0x0, 0x2, 0x1, 0x7ff, 0x0, 0xe, 0x0, 0x7}, r4, 0x7, r0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000980)={&(0x7f00000007c0)="3a01c4b4b1af6d4a36585151294515157546adf264bf19db0faf414c0e23d7e48d3937b980de8435688838fcb6d2d3425467829aa21ac40c512dac7b35b90c9ecc0a75dd53de88802e5a00767cdeb12ad20583834790194de1aaaf0a95956d1db130817cde8d4ed28781ea595cbde1d7cd8b1e783c7e58c4c1e2a8a7e17a9f5ce39801f7d4e5db7c28c627b88588604ae7721e72f9ccda763ef8fb25a3c69e333652095cceaac2dc809377eadcc026afddcd38e263cccf6bc5ce0db13907618c6771915e553e9f82972745fff5ffcf5059a42883e6f74ed39821722fe0052d2218", &(0x7f00000008c0)=""/64, &(0x7f0000000900)="f16115a341f767b859", &(0x7f0000000940)="4227d12b7148002e2b38eabed9419857efad957d5a71f6a854eb0285bbbca2f913e6d0c9", 0x7, r0}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0xfffffff8, 0x0, 0xb, 0x41, r0, 0x0, '\x00', r6, r0, 0x5, 0x5, 0x4, 0x7}, 0x50) r8 = perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x9, 0x10, 0x2, 0x7, 0x0, 0x7, 0xa0248, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x10000, 0x7f}, 0x1000, 0x3, 0x9, 0x0, 0x0, 0x4, 0xe9b4, 0x0, 0xfffffc01, 0x0, 0x7}, r4, 0xe, r5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x10, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x8b, 0x10, &(0x7f0000000d00)=""/16, 0x0, 0x0, '\x00', r10, 0x25, r0, 0x8, &(0x7f0000001040)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001080)=[r0, r0], &(0x7f00000010c0)=[{0x2, 0x3, 0x9, 0x8}, {0x0, 0x3, 0xd, 0x7}, {0x1, 0x3, 0x6, 0x8}, {0x0, 0x1, 0x9, 0x1}, {0x3, 0x2, 0xb, 0x2}, {0x1, 0x4, 0xf, 0xb}, {0x2, 0x5, 0x0, 0xb}], 0x10, 0x1000}, 0x94) r13 = perf_event_open(&(0x7f0000001200)={0x4, 0x80, 0x3, 0x2, 0xf4, 0x8, 0x0, 0x3, 0x8002e, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xb8, 0x3}, 0x420, 0x0, 0x3, 0x7, 0x0, 0x5, 0x3, 0x0, 0xb1, 0x0, 0x3}, r4, 0xa, r8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r13, 0x2405, r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001380)={@cgroup=r0, 0xc, 0x1, 0xffff, &(0x7f0000001280)=[0x0], 0x1, 0x0, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@ifindex=r10, r0, 0x9, 0x2024, 0xffffffffffffffff, @void, @void, @value=0xffffffffffffffff, @void, r15}, 0x20) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xe, &(0x7f0000001400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_fd={0x18, 0x3, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @exit]}, &(0x7f0000001480)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x24, '\x00', r6, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x4, 0xf, 0x1, 0x10000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001500)=[r9, r9, r9, r7], &(0x7f0000001540)=[{0x4, 0x4, 0xe, 0xc}, {0x1, 0x4, 0xa}, {0x3, 0x4, 0x7, 0x8}, {0x4, 0x5, 0x9, 0x3}, {0x4, 0x2, 0x8, 0x7}, {0x5, 0x5, 0xf, 0xd}, {0x3, 0x2, 0x4, 0xb}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r16, 0x0, 0x0, 0xb8, &(0x7f0000001680), &(0x7f00000016c0)=""/184, 0x5, 0x0, 0xce, 0xac, &(0x7f0000001780)="56c78a7aed105631a5c75a6d3ddbbc5ace466c4c609f6e527e3f561d8fffdcac49f2d946c1a2297c1e4dfc41e1a4ed11ed43771cc4b5cb3b8bb9ae3aa21bded95a439ad9f3b333c5a3edf5f4ebc3df15cb5eb7d3357313c05a18ce5a0a0c556ddd0c3a52473888a523641dba890c0f924eb25af3847cfe97331183524e65fe6a22f94247d398a739ac22af1e5f666feb776e4f1d196ea92a99f791e8274b263848ffb733c05e44e3a0dc3ce6e70328c84447c2924c301fa4dee111a6859b1006f16c6ca3175ce3af6d2a048c4185", &(0x7f0000001880)="81a902969ec669b6b43e48d0f65751745b407719fadba06e650fef50026d7a408f4d6bff429584a28f95fc5b1e934862424b9094646d784ec4eb0c1a8d25a83bb53ccf118d37075d13dc49a28a9713887aa876ff19c3d97a22e490f72014d9fe29ec4e40e417639b2f70b6740c8f69ee6038011aea7d248f88768f32eba1893a9c99db65c2a8f837a8e557dbddc418581a1f43bfe1d742af152e4290ccc385d105dc076628eddb75379103de", 0x6, 0x0, 0x4}, 0x50) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a00)=@generic={&(0x7f00000019c0)='./file0\x00', 0x0, 0x10}, 0x18) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x16, 0x18, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b00)='syzkaller\x00', 0x1, 0xa2, &(0x7f0000001b40)=""/162, 0x41000, 0x8, '\x00', r10, @flow_dissector=0x11, r0, 0x8, &(0x7f0000001c00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001c40)={0x0, 0x10, 0xe2, 0x921b}, 0x10, r11, r12, 0x0, &(0x7f0000001c80)=[r17], 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(r1, &(0x7f0000002180)={&(0x7f0000001d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x4, 0x4, 0x2, 0x1}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e00)="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", 0xfa}, {&(0x7f0000001f00)="cb9f9953003283ece60c3bc15b4d1d884ab8f0399f876d703a31bcaebb159d6e3016b6c08ee32b1b8ff7", 0x2a}], 0x2, &(0x7f0000001f80)=[{0x98, 0x10a, 0x7f, "6fa1c2f2d63ff5662307994cd15afe829a5f09f23deb03a212641455f0499337a4274a7f9c65582375aa6ae89cd0efa72050cccfec2da8ee9e9ff31466bb68586c6f73d1ea9c0150803f18e1e8cb60a08546231e5130d5619992ecf1e0ea8266c676bb93ca3cac2011d1de14624f3347b11892545d5a591c1740c30f3814fb8988d8239e"}, {0x100, 0x111, 0x8000, "659f8bc33014aa9585ef5a58ec0decd1b2ca9abd153753acd9a01561130e17f6203872388ba628832622aa01b78af017701a8ef4751ed7d5395d82e12ead799c2ce18cee8969ffa23d466415380544bd796eb3629adf556b06322351e187dec2bbc7aa0c803235a51c76ca9324b420bb6f404a5bfe3daa56c89da5b3ccccc9c5a60006d9e510dbb008d9a9d284ebba8dde43d59dd36e459f9dca2fab4f9e98954e3e0d46accddeda26391a593782f399835f0b927686194315b215950010d22ea88f7235c638167543e3aa6e44943948accb6538d848ef6d4a17ce2acad58c6beec60458884a55568822f7"}, {0x60, 0x104, 0x4, "4d2faaa789fc1ee601bcad2005518112cd39b83de933eeb389d69aa0a7dc0ea72fcb114a8f480f94e332b99fbe3fc34c10bd81ac369ebe56c09cab20345b368aed43033dd4ed56c2c491"}], 0x1f8}, 0x34000040) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002200)={0xd, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000021c0)={@map=r0, r13, 0x6, 0x2020, 0x0, @void, @void, @value=r19, @void, r15}, 0x20) perf_event_open(&(0x7f0000002240)={0x1, 0x80, 0x1, 0x80, 0x4, 0xd, 0x0, 0x0, 0x5020, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x5}, 0x101000, 0x4, 0xf5, 0x4, 0x1, 0x4baf, 0x0, 0x0, 0x3, 0x0, 0x3}, r4, 0x3, r13, 0x9) r20 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002300)=@o_path={&(0x7f00000022c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r21 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000023c0)=@o_path={&(0x7f0000002380)='./file1\x00', 0x0, 0x18, r1}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002340)={@cgroup=r14, r20, 0x1c, 0x9, r18, @void, @value=r21, @void, @void, r15}, 0x20) 2.129068881s ago: executing program 3 (id=9840): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x8004c03e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.066417943s ago: executing program 2 (id=9841): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xfffff175, 0x0, 0x0, 0x41100, 0x42, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0, r0, r2, r8, r2, r0], 0x0, 0x10, 0x354}, 0x94) socket$kcm(0x2c, 0x3, 0x0) 2.065749713s ago: executing program 0 (id=9842): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.879516269s ago: executing program 0 (id=9843): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000040)="ff16c777f75fdb661722df72e42e146c4681ceaa3cfa18e652f08751add24333eb745105fe083a", &(0x7f0000000240)=""/16}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="497501060000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x40880) 1.458742493s ago: executing program 1 (id=9844): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061119e0000000000850000001a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x3, 0x3, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @func={0xe, 0x0, 0x0, 0xc, 0x5}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x55, 0x0, 0x21, 0x6}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x2e, 0x2d4fbc7534c0b353, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000500)=""/11, 0x80, 0xb, 0x1, 0x1, 0x10000}, 0x28) write$cgroup_int(r4, &(0x7f0000000140), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000580)=[0x0], 0x0, 0xa3, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000740), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r5, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) 1.289277548s ago: executing program 2 (id=9845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x1d, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x23) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061117400000000001e000000000000009500000c000000006a2a5e76a13c3fa669e0d9a0f1ef770b1331e53a553f0b5853e8d4a138c118ffa136ab337175978ed8839fb08e80b500d0e3bbff298d75abec744fd1f90510b73d354cef55885790619b2289ed6efd51894ee95166871bff779ec4c64aa8c7d844ca9822bf5fe7013523f1e921009cf28f570d012a04d6b13c06c210cd96019829ec537ad3c645e58327c661810eba684030270e57b865920657c2b47cda3015c89dc3ac833263c3e97639de1da3fb9de72cc0035dd520fd2532318b"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.269475829s ago: executing program 4 (id=9846): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000000, 0xc93}, 0x0, 0x0, 0xffffff08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000600)="4fddc6438b6edd9311c7327bb6bbb2315a8330d5b7e54e1d25f5771bccb96e58f5b3397e1ced7f0f004bf5b4723beed946b6d940cc98aaa616d1ffe90ca35b8e1528518213f6c70b624d4a520b9983782e082add5abc331b44851c9794bd763e645fbc68f7aeb75284cad6ac8b1f27db3e532d5f09964a3f05994521a3f44a8e779febe10e522f156f35dd12886eeee75c76f8f786ab6ab4bcaa452cbfcfa069d6ff6d180ccc4fb6f99b0222992880c4b92d78831ea67af015e697b2", 0xbc}, {0x0}, {&(0x7f0000002d40)}, {&(0x7f0000003d40)="9b107348e799386f3e8367d0cb62bf84af1942ac1b0a7fe8be9aca772d3dc1a5cc524405f8256e321cb6979e18f08c088b69b92ad3e4b77394d182a006e9a720bd888ada77609a8f3ed2f771bc12630f04eec119e9de712d621aef971680c5bbf2a66c1b5ff476775c1139ce51878c63c82a998e1ec13802130f", 0x7a}], 0x4, &(0x7f0000003e40)=ANY=[@ANYBLOB="380000000000000001000000000000008c890c2090de3655f7fa8a49a870f9847db9c351af7458d94b73b742d2d6e79f5cc200000000000008010000000000000e0100007f000000fbddd70a60cd7ae9dff9c1b0904cc0225bf1a8ae83e02fd0c0c123c0263dab3ab208d32bce989e0b4376430fa5c9bba9d414f19cf9a2370b3c2ec93c2fc401230adca3b248f9b211b97988abd2f574bc89488834e992b4fa160f7e1ce4e4fb1e4c385d6ad2b3d3cacc93f2532c61eb45436365e42eb3503fc2fdb1c7a58225406f4060022a1445897802db28273b6c7e0baa989654f987908ed776b5d960fc45c7220e46701d"], 0x230}, 0x80) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000015c0)="58091a", 0x3}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 1.229117781s ago: executing program 0 (id=9847): r0 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x6568, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000500)=[@rights={{0x10}}], 0x10}, 0x41) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x3, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x200440e4) 1.106697384s ago: executing program 1 (id=9848): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000040)="ff16c777f75fdb661722df72e42e146c4681ceaa3cfa18e652f08751add24333eb745105fe083a", &(0x7f0000000240)=""/16}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="497501060000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x40880) 1.106335724s ago: executing program 3 (id=9849): socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x10, 0xc, &(0x7f0000001000)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xb, 0x0, 0x957}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20003}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d", 0x18}], 0x2, 0x0, 0xfe}, 0x0) 929.71155ms ago: executing program 4 (id=9850): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8919, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x48, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@xdp={0x2c, 0x11, 0x0, 0x17}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x20004050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 906.664041ms ago: executing program 3 (id=9851): r0 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x6568, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000500)=[@rights={{0x10}}], 0x10}, 0x41) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x3, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x200440e4) 814.031014ms ago: executing program 2 (id=9852): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x20, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x80}]}, &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000800)=""/4096, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001840)={0x5, 0x10, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001880)=[r1, r1, r1], &(0x7f00000018c0)=[{0x1, 0x1, 0xd, 0xc}, {0x1, 0x4, 0xf, 0x1}, {0x4, 0x4, 0xb, 0xb}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000019c0)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000340)="ccb67b73077ab4cb684ef335f9879328038fecb31e10eca875a5a4ad105c15e21b137ad3bcd110317703002b746e280d2f6b640970882449bd945bdb6905c46baab2a29130596f3fec625dea38f048e6cd78627cd002e0e07b4b0026492705030e9117289a738512d321e3682059a39d7f8dc0b3aa83397aaaa95e2fc21fbf364e5e63d2f6e8a23eb8821041653ae0a081b135b35ae12a8227080f1e9064644a21d8a2ad1ca49bb4b0916f58d717b2255f5cb370b7d631b6b48549efe9b61e41c779a104c3d7d84de582f92c40a9f8e4b3123a7aec36fa", &(0x7f0000000440)=""/141}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'veth1_to_bridge\x00', @random="9c6f64da01fe"}) r7 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000ffffffffa000f2710063d2ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000100)={'some', 0x20, 0x0, 0x20, 0x97d5}, 0x2f) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x20008040) 798.152814ms ago: executing program 4 (id=9853): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 698.692937ms ago: executing program 1 (id=9854): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000440)="2e00000024008f866b29924a6f130000005e14060800000000000000f1ffffff000280a71802dd0000", 0x29}, {&(0x7f00000010c0)="018d4561b6", 0x5}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088481bffffff00004000633a77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000}, 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000040000000300000000010000060100000000000fffff00000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x1) sendmsg$kcm(r3, 0x0, 0xc0004) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) socketpair(0x10, 0x3, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x65}, 0x28) 631.67829ms ago: executing program 4 (id=9855): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) gettid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800000afffc}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x7, 0x40, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 477.319094ms ago: executing program 1 (id=9856): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xfffff175, 0x0, 0x0, 0x41100, 0x42, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0, r0, r2, r8, r2, r0], 0x0, 0x10, 0x354}, 0x94) socket$kcm(0x2c, 0x3, 0x0) 476.735605ms ago: executing program 2 (id=9857): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8054) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfe1b) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20004081) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r3], 0x10b8}, 0x106) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 352.172318ms ago: executing program 4 (id=9858): socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000040)="ff16c777f75fdb661722df72e42e146c4681ceaa3cfa18e652f08751add24333eb745105fe083a", &(0x7f0000000240)=""/16}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x5, 0xfffffffe, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x2, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x13, 0x20, 0x0, @void, @void, @void, @value, r5}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="497501060000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05"], 0x30}, 0x40880) 308.14367ms ago: executing program 2 (id=9859): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ee, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 289.43442ms ago: executing program 1 (id=9860): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000000, 0xc93}, 0x0, 0x0, 0xffffff08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000000600)="4fddc6438b6edd9311c7327bb6bbb2315a8330d5b7e54e1d25f5771bccb96e58f5b3397e1ced7f0f004bf5b4723beed946b6d940cc98aaa616d1ffe90ca35b8e1528518213f6c70b624d4a520b9983782e082add5abc331b44851c9794bd763e645fbc68f7aeb75284cad6ac8b1f27db3e532d5f09964a3f05994521a3f44a8e779febe10e522f156f35dd12886eeee75c76f8f786ab6ab4bcaa452cbfcfa069d6ff6d180ccc4fb6f99b0222992880c4b92d78831ea67af015e697b2", 0xbc}, {0x0}, {&(0x7f0000002d40)}, {&(0x7f0000003d40)="9b107348e799386f3e8367d0cb62bf84af1942ac1b0a7fe8be9aca772d3dc1a5cc524405f8256e321cb6979e18f08c088b69b92ad3e4b77394d182a006e9a720bd888ada77609a8f3ed2f771bc12630f04eec119e9de712d621aef971680c5bbf2a66c1b5ff476775c1139ce51878c63c82a998e1ec13802130f", 0x7a}], 0x4, &(0x7f0000003e40)=ANY=[@ANYBLOB="380000000000000001000000000000008c890c2090de3655f7fa8a49a870f9847db9c351af7458d94b73b742d2d6e79f5cc200000000000008010000000000000e0100007f000000fbddd70a60cd7ae9dff9c1b0904cc0225bf1a8ae83e02fd0c0c123c0263dab3ab208d32bce989e0b4376430fa5c9bba9d414f19cf9a2370b3c2ec93c2fc401230adca3b248f9b211b97988abd2f574bc89488834e992b4fa160f7e1ce4e4fb1e4c385d6ad2b3d3cacc93f2532c61eb45436365e42eb3503fc2fdb1c7a58225406f4060022a1445897802db28273b6c7e0baa989654f987908ed776b5d960fc45c7220e46701d"], 0x230}, 0x80) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000015c0)="58091a", 0x3}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 210.029373ms ago: executing program 0 (id=9861): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001240), 0x1}, 0x10c002, 0x100000001, 0x0, 0x5, 0x9dae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) syz_clone(0x410e4400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18) syz_clone(0x104000, 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000001bc0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x20000040) recvmsg$kcm(r0, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xc900) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4080) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 121.556176ms ago: executing program 4 (id=9862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x1d, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x23) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r5, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/108) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061117400000000001e000000000000009500000c000000006a2a5e76a13c3fa669e0d9a0f1ef770b1331e53a553f0b5853e8d4a138c118ffa136ab337175978ed8839fb08e80b500d0e3bbff298d75abec744fd1f90510b73d354cef55885790619b2289ed6efd51894ee95166871bff779ec4c64aa8c7d844ca9822bf5fe7013523f1e921009cf28f570d012a04d6b13c06c210cd96019829ec537ad3c645e58327c661810eba684030270e57b865920657c2b47cda3015c89dc3ac833263c3e97639de1da3fb9de72cc0035dd520fd2532318b"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 0s ago: executing program 1 (id=9863): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8919, &(0x7f0000000000)={'wlan1\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x30, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x48, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@xdp={0x2c, 0x11, 0x0, 0x17}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x20004050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): idge: link becomes ready [ 1850.987891][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1851.001593][T24352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.008891][T24352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1851.051135][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1851.061813][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1851.081314][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1851.118668][T24352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.125861][T24352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.169648][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1851.196616][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1851.231709][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1851.253730][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1851.269834][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1851.303334][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1851.314813][T31678] pimreg: tun_chr_ioctl cmd 1074025673 [ 1851.342500][T31573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1851.381331][T31573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1851.412549][T31674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8814'. [ 1851.432407][T31681] pimreg: tun_chr_ioctl cmd 2147767520 [ 1851.439774][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1851.459366][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1851.478563][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1851.508803][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1851.528456][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1851.558553][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1852.011712][T31694] netlink: 'syz.3.8818': attribute type 25 has an invalid length. [ 1852.040963][T31694] netlink: 'syz.3.8818': attribute type 29 has an invalid length. [ 1852.114588][T31698] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1852.519865][T31705] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1852.525944][T31705] syzkaller1: linktype set to 786 [ 1852.597993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1852.617342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1852.776945][T31573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.795482][T31712] netlink: 'syz.4.8821': attribute type 16 has an invalid length. [ 1852.809700][T31712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8821'. [ 1852.903225][T31712] netlink: 'syz.4.8821': attribute type 10 has an invalid length. [ 1853.077918][T31712] device macvlan0 entered promiscuous mode [ 1853.112506][T31712] team0: Port device macvlan0 added [ 1853.142525][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.148952][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.171626][T31709] delete_channel: no stack [ 1853.200460][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1853.244726][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1853.288029][T31720] netlink: 'syz.3.8824': attribute type 25 has an invalid length. [ 1853.296007][T31720] netlink: 'syz.3.8824': attribute type 29 has an invalid length. [ 1853.406035][T31719] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1853.440228][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1853.454516][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1853.520352][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1853.570166][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1853.679695][T31730] netlink: 'syz.3.8829': attribute type 29 has an invalid length. [ 1856.379821][T31727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8828'. [ 1856.391287][T31732] netlink: 'syz.1.8830': attribute type 21 has an invalid length. [ 1856.407464][T31732] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8830'. [ 1856.425417][T31730] netlink: 'syz.3.8829': attribute type 29 has an invalid length. [ 1856.436639][T31573] device veth0_vlan entered promiscuous mode [ 1856.496850][T31573] device veth1_vlan entered promiscuous mode [ 1856.611152][T31573] device veth0_macvtap entered promiscuous mode [ 1856.628869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1856.651527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1856.683043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1856.719343][T31573] device veth1_macvtap entered promiscuous mode [ 1856.875861][T31573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.886248][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1856.918986][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1856.966046][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1856.987585][T31573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.024052][T31573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.042534][T31573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.084405][T31573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.143432][T31573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.163004][T31573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.173827][T31573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1857.186861][T31573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1857.204683][T31573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1857.225436][T31745] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1857.243106][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1857.264051][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1857.301009][T31573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.327106][T31573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.356527][T31573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.386708][T31573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.609479][T31756] device syzkaller0 entered promiscuous mode [ 1857.643732][T31755] delete_channel: no stack [ 1857.659348][T29796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.678187][T29796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.699811][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1860.197635][T31762] netlink: 'syz.3.8838': attribute type 25 has an invalid length. [ 1860.207767][T31762] netlink: 'syz.3.8838': attribute type 29 has an invalid length. [ 1860.228347][T31765] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8838'. [ 1860.278008][T29796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.293378][T29796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.333808][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1860.452524][T31778] netlink: 'syz.3.8843': attribute type 39 has an invalid length. [ 1860.491006][T31778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8843'. [ 1860.760487][T31784] netlink: 'syz.1.8844': attribute type 16 has an invalid length. [ 1860.776158][T31784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8844'. [ 1860.837564][T31784] netlink: 'syz.1.8844': attribute type 10 has an invalid length. [ 1861.490765][T31782] delete_channel: no stack [ 1861.731388][T31784] team0: Port device macvlan0 added [ 1862.062369][T31804] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8851'. [ 1862.454089][T31808] netlink: 'syz.0.8853': attribute type 25 has an invalid length. [ 1862.462758][T31808] netlink: 'syz.0.8853': attribute type 29 has an invalid length. [ 1862.474604][T31808] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8853'. [ 1862.525203][T31812] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.8855'. [ 1862.537405][T31812] netlink: zone id is out of range [ 1862.544130][T31812] netlink: zone id is out of range [ 1862.550615][T31812] netlink: zone id is out of range [ 1862.569832][T31812] netlink: zone id is out of range [ 1862.581239][T31812] netlink: zone id is out of range [ 1862.617058][T31812] netlink: zone id is out of range [ 1862.643773][T31812] netlink: zone id is out of range [ 1862.671491][T31812] netlink: zone id is out of range [ 1862.692618][T31812] netlink: zone id is out of range [ 1862.769955][T31812] netlink: zone id is out of range [ 1862.855986][T31816] tipc: Started in network mode [ 1862.879581][T31816] tipc: Node identity 9215a268, cluster identity 4711 [ 1862.914759][T31816] tipc: Node number set to 2450891368 [ 1862.997522][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1863.004194][T31818] netlink: 'syz.2.8857': attribute type 29 has an invalid length. [ 1863.108633][T31818] netlink: 'syz.2.8857': attribute type 29 has an invalid length. [ 1863.118351][T31820] netlink: 'syz.2.8857': attribute type 29 has an invalid length. [ 1863.300203][T31825] FAULT_INJECTION: forcing a failure. [ 1863.300203][T31825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1863.338359][T31825] CPU: 1 PID: 31825 Comm: syz.1.8859 Not tainted syzkaller #0 [ 1863.345895][T31825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1863.356013][T31825] Call Trace: [ 1863.359330][T31825] [ 1863.362315][T31825] dump_stack_lvl+0x188/0x24e [ 1863.367036][T31825] ? show_regs_print_info+0x12/0x12 [ 1863.372273][T31825] ? load_image+0x400/0x400 [ 1863.376821][T31825] ? __lock_acquire+0x7d10/0x7d10 [ 1863.381893][T31825] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1863.387760][T31825] should_fail_ex+0x399/0x4d0 [ 1863.392485][T31825] _copy_from_user+0x2c/0x170 [ 1863.397212][T31825] ___sys_sendmsg+0x1c3/0x360 [ 1863.401941][T31825] ? __sys_sendmsg+0x290/0x290 [ 1863.406797][T31825] __se_sys_sendmsg+0x1bb/0x2a0 [ 1863.411701][T31825] ? __x64_sys_sendmsg+0x80/0x80 [ 1863.416689][T31825] do_syscall_64+0x4c/0xa0 [ 1863.421128][T31825] ? clear_bhb_loop+0x60/0xb0 [ 1863.425835][T31825] ? clear_bhb_loop+0x60/0xb0 [ 1863.430568][T31825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.436492][T31825] RIP: 0033:0x7fac95d9ce59 [ 1863.440929][T31825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.460563][T31825] RSP: 002b:00007fac96b98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1863.469006][T31825] RAX: ffffffffffffffda RBX: 00007fac96015fa0 RCX: 00007fac95d9ce59 [ 1863.477013][T31825] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1863.485009][T31825] RBP: 00007fac96b98090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.493027][T31825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.501022][T31825] R13: 00007fac96016038 R14: 00007fac96015fa0 R15: 00007ffde28d52e8 [ 1863.509029][T31825] [ 1863.967945][T31838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8862'. [ 1864.605132][T31835] delete_channel: no stack [ 1865.203618][T31866] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8871'. [ 1865.380549][T31863] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.8870'. [ 1865.414275][T31870] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8873'. [ 1866.295920][T31876] validate_nla: 7 callbacks suppressed [ 1866.296016][T31876] netlink: 'syz.2.8874': attribute type 10 has an invalid length. [ 1866.665415][T31888] netlink: 'syz.2.8879': attribute type 10 has an invalid length. [ 1866.780764][T31888] team0: Port device bridge0 removed [ 1866.836802][T31888] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1868.060206][T31913] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.8888'. [ 1868.113461][T31913] net_ratelimit: 7105 callbacks suppressed [ 1868.113499][T31913] netlink: zone id is out of range [ 1868.150224][T31915] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1868.213498][T31913] netlink: zone id is out of range [ 1868.260750][T31913] netlink: zone id is out of range [ 1868.295770][T31913] netlink: zone id is out of range [ 1868.319364][T31913] netlink: zone id is out of range [ 1868.329993][T31913] netlink: zone id is out of range [ 1868.350419][T31913] netlink: zone id is out of range [ 1868.371926][T31913] netlink: zone id is out of range [ 1868.398259][T31913] netlink: zone id is out of range [ 1868.409512][T31913] netlink: zone id is out of range [ 1868.774574][T31927] netlink: 'syz.3.8891': attribute type 10 has an invalid length. [ 1868.880112][T31927] device wlan1 left promiscuous mode [ 1869.124231][T31932] netlink: 'syz.4.8893': attribute type 2 has an invalid length. [ 1869.143420][T31933] netlink: 'syz.4.8893': attribute type 2 has an invalid length. [ 1869.262984][T31932] device 0 entered promiscuous mode [ 1869.317493][T31933] device 1 entered promiscuous mode [ 1869.588522][T31937] netlink: 'syz.0.8904': attribute type 10 has an invalid length. [ 1869.914139][T31952] netlink: 'syz.1.8898': attribute type 25 has an invalid length. [ 1869.930162][T31952] netlink: 'syz.1.8898': attribute type 29 has an invalid length. [ 1869.971508][T31955] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8898'. [ 1870.043581][T31954] netlink: 'syz.3.8899': attribute type 10 has an invalid length. [ 1870.086357][T31954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.186048][T31954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.193660][T31954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.277056][T31954] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1870.318738][T31964] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1870.692207][T31976] netlink: 'syz.3.8906': attribute type 21 has an invalid length. [ 1870.716203][T31976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8906'. [ 1871.447246][T31997] validate_nla: 1 callbacks suppressed [ 1871.447283][T31997] netlink: 'syz.4.8912': attribute type 10 has an invalid length. [ 1871.514623][T31997] device bond0 left promiscuous mode [ 1871.528866][T31997] device bond_slave_0 left promiscuous mode [ 1871.550433][T31997] device bond_slave_1 left promiscuous mode [ 1871.567822][T31997] device batadv_slave_0 left promiscuous mode [ 1871.595155][T31997] device team0 left promiscuous mode [ 1871.656839][T31997] device team_slave_0 left promiscuous mode [ 1871.669124][T31997] device team_slave_1 left promiscuous mode [ 1871.676163][T31997] device wlan1 left promiscuous mode [ 1871.685028][T31997] device macvlan0 left promiscuous mode [ 1871.936915][T32010] netlink: 'syz.1.8915': attribute type 25 has an invalid length. [ 1871.952447][T32010] netlink: 'syz.1.8915': attribute type 29 has an invalid length. [ 1871.970096][T32010] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8915'. [ 1873.045872][T32026] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8919'. [ 1873.083270][T32022] netlink: 'syz.0.8918': attribute type 10 has an invalid length. [ 1873.111461][T32022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.120350][T32022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.196491][T32022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.204077][T32022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.212307][T32022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.219870][T32022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.275937][T32022] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1873.793421][T32040] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8925'. [ 1875.745640][T32048] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.8928'. [ 1875.906325][T32050] netlink: 'syz.1.8929': attribute type 10 has an invalid length. [ 1876.263066][T32055] netlink: 'syz.2.8932': attribute type 25 has an invalid length. [ 1876.282557][T32055] netlink: 'syz.2.8932': attribute type 29 has an invalid length. [ 1876.305229][T32055] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8932'. [ 1876.539241][T32071] netlink: 'syz.0.8938': attribute type 29 has an invalid length. [ 1876.547438][T32071] netlink: 'syz.0.8938': attribute type 29 has an invalid length. [ 1876.586340][T32067] netlink: 'syz.3.8937': attribute type 21 has an invalid length. [ 1876.598251][T32067] netlink: 'syz.3.8937': attribute type 1 has an invalid length. [ 1876.606030][T32067] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8937'. [ 1876.636483][T32076] netlink: 'syz.0.8938': attribute type 29 has an invalid length. [ 1876.681664][T32071] netlink: 'syz.0.8938': attribute type 29 has an invalid length. [ 1877.501509][T32079] device syzkaller0 entered promiscuous mode [ 1882.376024][T32094] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8943'. [ 1882.405529][T32094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1882.415148][T32094] net_ratelimit: 3549 callbacks suppressed [ 1882.415163][T32094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1887.472618][T32107] netlink: 'syz.0.8946': attribute type 25 has an invalid length. [ 1887.480535][T32107] netlink: 'syz.0.8946': attribute type 29 has an invalid length. [ 1887.489011][T32104] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8946'. [ 1887.516767][T32124] netlink: 'syz.2.8952': attribute type 39 has an invalid length. [ 1887.816902][T32131] netlink: 'syz.3.8956': attribute type 25 has an invalid length. [ 1887.853338][T32131] netlink: 'syz.3.8956': attribute type 29 has an invalid length. [ 1887.882318][T32136] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1892.094051][T32169] netlink: 'syz.2.8967': attribute type 10 has an invalid length. [ 1892.120020][T32169] device netdevsim0 entered promiscuous mode [ 1892.131072][T32171] netlink: 'syz.0.8979': attribute type 25 has an invalid length. [ 1892.149212][T32171] netlink: 'syz.0.8979': attribute type 29 has an invalid length. [ 1892.193358][T32176] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8979'. [ 1892.535495][T32185] netlink: 'syz.1.8970': attribute type 39 has an invalid length. [ 1894.633883][T18008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1896.252702][T32219] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8983'. [ 1896.340470][T32224] FAULT_INJECTION: forcing a failure. [ 1896.340470][T32224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.416875][T32224] CPU: 0 PID: 32224 Comm: syz.4.8984 Not tainted syzkaller #0 [ 1896.424412][T32224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1896.434513][T32224] Call Trace: [ 1896.437826][T32224] [ 1896.440793][T32224] dump_stack_lvl+0x188/0x24e [ 1896.445515][T32224] ? show_regs_print_info+0x12/0x12 [ 1896.450772][T32224] ? load_image+0x400/0x400 [ 1896.455337][T32224] ? __lock_acquire+0x7d10/0x7d10 [ 1896.460432][T32224] should_fail_ex+0x399/0x4d0 [ 1896.465163][T32224] _copy_from_user+0x2c/0x170 [ 1896.469897][T32224] ___sys_sendmsg+0x1c3/0x360 [ 1896.474620][T32224] ? __sys_sendmsg+0x290/0x290 [ 1896.479448][T32224] ? __lock_acquire+0x7d10/0x7d10 [ 1896.481433][T32226] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8985'. [ 1896.484566][T32224] __se_sys_sendmsg+0x1bb/0x2a0 [ 1896.498255][T32224] ? __x64_sys_sendmsg+0x80/0x80 [ 1896.503280][T32224] ? lockdep_hardirqs_on+0x94/0x140 [ 1896.508527][T32224] do_syscall_64+0x4c/0xa0 [ 1896.512970][T32224] ? clear_bhb_loop+0x60/0xb0 [ 1896.517690][T32224] ? clear_bhb_loop+0x60/0xb0 [ 1896.522407][T32224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.528327][T32224] RIP: 0033:0x7f3ccff9ce59 [ 1896.532758][T32224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1896.552391][T32224] RSP: 002b:00007f3cd0db0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1896.560864][T32224] RAX: ffffffffffffffda RBX: 00007f3cd0215fa0 RCX: 00007f3ccff9ce59 [ 1896.568873][T32224] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1896.576857][T32224] RBP: 00007f3cd0db0090 R08: 0000000000000000 R09: 0000000000000000 [ 1896.584845][T32224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1896.592840][T32224] R13: 00007f3cd0216038 R14: 00007f3cd0215fa0 R15: 00007ffd481d2f18 [ 1896.600842][T32224] [ 1896.693459][T32229] netlink: 'syz.3.8986': attribute type 16 has an invalid length. [ 1896.746570][T32229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8986'. [ 1896.816922][T32232] netlink: 'syz.3.8986': attribute type 10 has an invalid length. [ 1896.872386][T32227] delete_channel: no stack [ 1896.938624][T32231] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8987'. [ 1900.768473][T32267] netlink: 'syz.4.8999': attribute type 10 has an invalid length. [ 1900.796120][T32267] device netdevsim0 entered promiscuous mode [ 1901.281831][T31574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1901.298485][T31574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1901.310859][T31574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1901.319981][T31574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1901.327956][T31574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1901.338997][T31574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1903.378585][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1904.505075][T18008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.653092][T18008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.729866][T18008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1904.827686][T18008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.176134][T32287] chnl_net:caif_netlink_parms(): no params data found [ 1905.229861][T32319] netlink: 'syz.3.9015': attribute type 10 has an invalid length. [ 1905.243137][T32319] device netdevsim0 entered promiscuous mode [ 1905.383459][T18008] tipc: Left network mode [ 1905.458413][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 1905.806378][T32287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.842723][T32287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.860041][T32287] device bridge_slave_0 entered promiscuous mode [ 1905.924635][T32347] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1905.962930][T32287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.978222][T32287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.996922][T32287] device bridge_slave_1 entered promiscuous mode [ 1906.243410][T32344] netlink: 'syz.1.9020': attribute type 2 has an invalid length. [ 1906.266346][T32357] netlink: 'syz.1.9020': attribute type 10 has an invalid length. [ 1906.365150][T32348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9020'. [ 1907.189911][T32287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.254578][T32287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.340146][T32372] FAULT_INJECTION: forcing a failure. [ 1907.340146][T32372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1907.410138][T32287] team0: Port device team_slave_0 added [ 1907.416761][T32372] CPU: 0 PID: 32372 Comm: syz.3.9028 Not tainted syzkaller #0 [ 1907.424309][T32372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1907.434411][T32372] Call Trace: [ 1907.437721][T32372] [ 1907.440685][T32372] dump_stack_lvl+0x188/0x24e [ 1907.445410][T32372] ? show_regs_print_info+0x12/0x12 [ 1907.450648][T32372] ? load_image+0x400/0x400 [ 1907.455196][T32372] ? __lock_acquire+0x7d10/0x7d10 [ 1907.460270][T32372] should_fail_ex+0x399/0x4d0 [ 1907.465022][T32372] _copy_from_user+0x2c/0x170 [ 1907.469746][T32372] get_user_ifreq+0x67/0x170 [ 1907.474372][T32372] sock_ioctl+0x637/0x710 [ 1907.478742][T32372] ? sock_poll+0x410/0x410 [ 1907.483206][T32372] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1907.488189][T32372] ? security_file_ioctl+0x7c/0xa0 [ 1907.493338][T32372] ? sock_poll+0x410/0x410 [ 1907.497784][T32372] __se_sys_ioctl+0xfa/0x170 [ 1907.502412][T32372] do_syscall_64+0x4c/0xa0 [ 1907.506855][T32372] ? clear_bhb_loop+0x60/0xb0 [ 1907.511576][T32372] ? clear_bhb_loop+0x60/0xb0 [ 1907.516297][T32372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1907.522228][T32372] RIP: 0033:0x7f89feb9ce59 [ 1907.526676][T32372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.546326][T32372] RSP: 002b:00007f89ff9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1907.554776][T32372] RAX: ffffffffffffffda RBX: 00007f89fee15fa0 RCX: 00007f89feb9ce59 [ 1907.562791][T32372] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005 [ 1907.570805][T32372] RBP: 00007f89ff9e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1907.578819][T32372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.586821][T32372] R13: 00007f89fee16038 R14: 00007f89fee15fa0 R15: 00007ffc2e293cf8 [ 1907.594853][T32372] [ 1907.600134][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 1907.640423][T32287] team0: Port device team_slave_1 added [ 1907.737984][T32287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1907.755457][T32287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1907.809813][T32287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1907.899171][T32374] netlink: 'syz.0.9027': attribute type 10 has an invalid length. [ 1907.907856][T32374] device netdevsim0 entered promiscuous mode [ 1907.943901][T32287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1907.965702][T32287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1908.038672][T32287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.209122][T32389] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1908.280313][T32287] device hsr_slave_0 entered promiscuous mode [ 1908.313391][T32287] device hsr_slave_1 entered promiscuous mode [ 1908.320715][T32287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1908.343661][T32287] Cannot create hsr debugfs directory [ 1908.643227][T32406] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9038'. [ 1909.063842][T18008] device hsr_slave_0 left promiscuous mode [ 1909.083704][T18008] device hsr_slave_1 left promiscuous mode [ 1909.100308][T18008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1909.116731][T18008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1909.133606][T18008] device bridge_slave_0 left promiscuous mode [ 1909.147876][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1909.229023][T18008] device veth1_macvtap left promiscuous mode [ 1909.241971][T18008] device veth0_macvtap left promiscuous mode [ 1909.255052][T18008] device veth1_vlan left promiscuous mode [ 1909.268787][T18008] device veth0_vlan left promiscuous mode [ 1909.622844][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 1912.807718][T32457] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.9047'. [ 1913.166635][T18008] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1913.239334][T18008] team0 (unregistering): Port device team_slave_1 removed [ 1913.304419][T18008] team0 (unregistering): Port device team_slave_0 removed [ 1913.363875][T18008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1913.420929][T18008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.466885][T18008] team0 (unregistering): Port device bridge_slave_1 removed [ 1913.732309][T18008] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1913.741401][T18008] bond0 (unregistering): Released all slaves [ 1913.835401][T32410] netlink: 'syz.0.9039': attribute type 2 has an invalid length. [ 1913.844390][T32415] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9039'. [ 1913.908896][T32422] netlink: 'syz.0.9039': attribute type 10 has an invalid length. [ 1913.926995][T32422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.943295][T32422] device bridge_slave_1 left promiscuous mode [ 1913.952001][T32422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.966102][T32422] team0: Port device bridge_slave_1 added [ 1914.582707][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.589124][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.347605][T32508] netlink: 'syz.3.9060': attribute type 2 has an invalid length. [ 1915.384081][T32508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9060'. [ 1915.427445][T32508] netlink: 'syz.3.9060': attribute type 10 has an invalid length. [ 1915.473372][T32508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.642287][T32287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1915.700229][T32287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1915.741828][T32287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1915.782764][T32287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1915.983176][T32287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.012178][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1916.024469][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1916.048940][T32287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.083029][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1916.109905][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1916.131002][T24352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.138193][T24352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.152283][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1916.173023][T12412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1916.182796][T12412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1916.191713][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.198942][T12412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1916.211165][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1916.243031][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1916.274409][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1916.297399][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1916.312783][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1916.339737][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1916.365251][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1916.391007][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1916.405540][T24352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1916.440070][T32287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1916.475568][T32287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1916.507760][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1916.526051][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1916.793145][T32537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1918.082847][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1918.101132][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1918.219508][T32287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.318629][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1918.343261][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1918.453940][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1918.470730][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1918.511511][T32287] device veth0_vlan entered promiscuous mode [ 1918.528519][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1918.549489][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1918.579053][T32287] device veth1_vlan entered promiscuous mode [ 1918.669184][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1918.679330][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1918.721026][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1918.749152][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1918.769903][T32287] device veth0_macvtap entered promiscuous mode [ 1918.805612][T32287] device veth1_macvtap entered promiscuous mode [ 1918.854281][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.885542][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.934389][T32287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.962566][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1918.973323][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1919.039783][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1919.088978][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1919.109390][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.151907][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.193536][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.238484][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.278503][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.313857][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.354651][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.395834][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.456461][T32287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.600604][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1919.623255][T18008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1919.663714][T32287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.726381][T32287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.762324][T32287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.804630][T32287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.134453][T29795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.173135][T29795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.239102][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1920.277569][T12412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.318233][T12412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.354600][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1923.438341][T32680] netlink: 'syz.2.8998': attribute type 25 has an invalid length. [ 1923.472795][T32680] netlink: 'syz.2.8998': attribute type 29 has an invalid length. [ 1923.552254][T32681] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8998'. [ 1925.560098][T32735] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9102'. [ 1926.173737][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1926.350245][T32741] netlink: 'syz.2.9107': attribute type 25 has an invalid length. [ 1926.389301][T32741] netlink: 'syz.2.9107': attribute type 29 has an invalid length. [ 1926.446161][T32744] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9107'. [ 1929.670998][T32764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9117'. [ 1937.598003][ T319] netlink: 'syz.1.9124': attribute type 25 has an invalid length. [ 1937.606026][ T319] netlink: 'syz.1.9124': attribute type 29 has an invalid length. [ 1937.614344][ T321] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9124'. [ 1938.157669][ T355] FAULT_INJECTION: forcing a failure. [ 1938.157669][ T355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1938.228619][ T355] CPU: 1 PID: 355 Comm: syz.0.9134 Not tainted syzkaller #0 [ 1938.236006][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1938.246117][ T355] Call Trace: [ 1938.249447][ T355] [ 1938.252433][ T355] dump_stack_lvl+0x188/0x24e [ 1938.257172][ T355] ? show_regs_print_info+0x12/0x12 [ 1938.262449][ T355] ? load_image+0x400/0x400 [ 1938.267025][ T355] ? __lock_acquire+0x7d10/0x7d10 [ 1938.272126][ T355] should_fail_ex+0x399/0x4d0 [ 1938.276880][ T355] strncpy_from_user+0x32/0x350 [ 1938.281822][ T355] getname_flags+0xf2/0x500 [ 1938.286402][ T355] __x64_sys_mkdirat+0x78/0x90 [ 1938.291258][ T355] do_syscall_64+0x4c/0xa0 [ 1938.295740][ T355] ? clear_bhb_loop+0x60/0xb0 [ 1938.300458][ T355] ? clear_bhb_loop+0x60/0xb0 [ 1938.305175][ T355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1938.311108][ T355] RIP: 0033:0x7f7137d9ce59 [ 1938.315562][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1938.335199][ T355] RSP: 002b:00007f7138d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1938.343648][ T355] RAX: ffffffffffffffda RBX: 00007f7138015fa0 RCX: 00007f7137d9ce59 [ 1938.351653][ T355] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 000000000000004b [ 1938.359671][ T355] RBP: 00007f7138d30090 R08: 0000000000000000 R09: 0000000000000000 [ 1938.367675][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1938.375673][ T355] R13: 00007f7138016038 R14: 00007f7138015fa0 R15: 00007ffc92014558 [ 1938.383700][ T355] [ 1938.783754][ T371] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1938.818386][ T366] netlink: 6767 bytes leftover after parsing attributes in process `syz.1.9139'. [ 1938.885789][ T374] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9141'. [ 1938.943564][ T374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1941.931691][ T379] netlink: 'syz.2.9143': attribute type 25 has an invalid length. [ 1941.942802][ T379] netlink: 'syz.2.9143': attribute type 29 has an invalid length. [ 1941.954335][ T379] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1942.009666][ T385] tc_dump_action: action bad kind [ 1942.074553][ T386] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.9145'. [ 1942.842177][ T418] netlink: 'syz.2.9155': attribute type 5 has an invalid length. [ 1942.861074][ T418] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9155'. [ 1943.195560][ T427] netlink: 'syz.2.9158': attribute type 25 has an invalid length. [ 1943.207101][ T427] netlink: 'syz.2.9158': attribute type 29 has an invalid length. [ 1943.220972][ T427] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1943.286606][ T430] FAULT_INJECTION: forcing a failure. [ 1943.286606][ T430] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.301035][ T430] CPU: 0 PID: 430 Comm: syz.1.9159 Not tainted syzkaller #0 [ 1943.308370][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1943.318462][ T430] Call Trace: [ 1943.321781][ T430] [ 1943.324744][ T430] dump_stack_lvl+0x188/0x24e [ 1943.329461][ T430] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1943.335655][ T430] ? show_regs_print_info+0x12/0x12 [ 1943.340885][ T430] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1943.347091][ T430] should_fail_ex+0x399/0x4d0 [ 1943.351802][ T430] should_failslab+0x5/0x20 [ 1943.356334][ T430] slab_pre_alloc_hook+0x59/0x310 [ 1943.361390][ T430] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1943.367406][ T430] kmem_cache_alloc+0x56/0x2f0 [ 1943.372198][ T430] ? skb_clone+0x1e7/0x370 [ 1943.376666][ T430] skb_clone+0x1e7/0x370 [ 1943.381048][ T430] bpf_clone_redirect+0x163/0x4a0 [ 1943.386107][ T430] bpf_prog_d409a89945114960+0x19/0x1d [ 1943.391588][ T430] bpf_test_run+0x4c1/0x830 [ 1943.396143][ T430] ? dst_hold+0xb0/0xb0 [ 1943.400330][ T430] ? bpf_prog_test_run_skb+0xd46/0x1890 [ 1943.405909][ T430] bpf_prog_test_run_skb+0xd88/0x1890 [ 1943.411324][ T430] ? cpu_online+0xa0/0xa0 [ 1943.415688][ T430] bpf_prog_test_run+0x31e/0x390 [ 1943.420661][ T430] __sys_bpf+0x62b/0x780 [ 1943.424935][ T430] ? bpf_link_show_fdinfo+0x380/0x380 [ 1943.430352][ T430] ? lock_chain_count+0x20/0x20 [ 1943.435231][ T430] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1943.441249][ T430] __x64_sys_bpf+0x78/0x90 [ 1943.445706][ T430] do_syscall_64+0x4c/0xa0 [ 1943.450166][ T430] ? clear_bhb_loop+0x60/0xb0 [ 1943.454895][ T430] ? clear_bhb_loop+0x60/0xb0 [ 1943.459604][ T430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.465536][ T430] RIP: 0033:0x7fac95d9ce59 [ 1943.469971][ T430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.489602][ T430] RSP: 002b:00007fac96b98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1943.498047][ T430] RAX: ffffffffffffffda RBX: 00007fac96015fa0 RCX: 00007fac95d9ce59 [ 1943.506045][ T430] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1943.514043][ T430] RBP: 00007fac96b98090 R08: 0000000000000000 R09: 0000000000000000 [ 1943.522212][ T430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1943.530205][ T430] R13: 00007fac96016038 R14: 00007fac96015fa0 R15: 00007ffde28d52e8 [ 1943.538218][ T430] [ 1947.522037][ T470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9171'. [ 1948.491719][ T487] netlink: 'syz.1.9175': attribute type 25 has an invalid length. [ 1948.508167][ T487] netlink: 'syz.1.9175': attribute type 29 has an invalid length. [ 1948.522253][ T487] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9175'. [ 1949.169643][ T490] netlink: 'syz.4.9176': attribute type 3 has an invalid length. [ 1949.213561][ T490] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9176'. [ 1949.797206][ T510] device syzkaller0 entered promiscuous mode [ 1949.954560][ T511] can: request_module (can-proto-0) failed. [ 1954.946095][ T524] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1955.114479][ T538] netlink: 'syz.2.9188': attribute type 25 has an invalid length. [ 1955.145559][ T538] netlink: 'syz.2.9188': attribute type 29 has an invalid length. [ 1955.232693][ T545] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1958.470189][ T555] syz.1.9193[555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1958.470780][ T555] syz.1.9193[555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1958.509128][ T565] netlink: 'syz.0.9195': attribute type 29 has an invalid length. [ 1958.544528][ T565] netlink: 'syz.0.9195': attribute type 29 has an invalid length. [ 1958.555343][ T568] netlink: 'syz.0.9195': attribute type 29 has an invalid length. [ 1958.736161][T24352] tipc: Left network mode [ 1958.979429][ T579] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9201'. [ 1959.004466][ T581] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1959.093437][ T579] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1959.102275][ T579] CPU: 0 PID: 579 Comm: syz.4.9201 Not tainted syzkaller #0 [ 1959.109613][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1959.119698][ T579] Call Trace: [ 1959.123006][ T579] [ 1959.125959][ T579] dump_stack_lvl+0x188/0x24e [ 1959.130674][ T579] ? show_regs_print_info+0x12/0x12 [ 1959.135900][ T579] ? load_image+0x400/0x400 [ 1959.140446][ T579] sysfs_warn_dup+0x8a/0xa0 [ 1959.145017][ T579] sysfs_do_create_link_sd+0xc0/0x110 [ 1959.150422][ T579] device_add+0x7f6/0x1000 [ 1959.154877][ T579] wiphy_register+0x1d9f/0x2ac0 [ 1959.159768][ T579] ? cfg80211_event_work+0x40/0x40 [ 1959.164902][ T579] ? minstrel_ht_alloc+0x894/0xa20 [ 1959.170041][ T579] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1959.176156][ T579] ieee80211_register_hw+0x2d00/0x39f0 [ 1959.181685][ T579] ? lockdep_hardirqs_on+0x94/0x140 [ 1959.186942][ T579] ? ieee80211_register_hw+0xec1/0x39f0 [ 1959.192517][ T579] ? ieee80211_register_hw+0xec1/0x39f0 [ 1959.198093][ T579] ? ieee80211_tasklet_handler+0x20/0x20 [ 1959.203759][ T579] ? memset+0x1e/0x40 [ 1959.207770][ T579] ? __hrtimer_init+0x186/0x270 [ 1959.212654][ T579] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1959.218440][ T579] hwsim_new_radio_nl+0xafa/0xce0 [ 1959.223514][ T579] genl_family_rcv_msg_doit+0x22a/0x330 [ 1959.229095][ T579] ? end_current_label_crit_section+0x170/0x170 [ 1959.235369][ T579] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1959.241302][ T579] ? bpf_lsm_capable+0x5/0x10 [ 1959.246006][ T579] ? security_capable+0x85/0xb0 [ 1959.250900][ T579] genl_rcv_msg+0x604/0x790 [ 1959.255433][ T579] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1959.261629][ T579] ? genl_bind+0x360/0x360 [ 1959.266102][ T579] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1959.272466][ T579] ? lock_acquire+0x225/0x4a0 [ 1959.277180][ T579] netlink_rcv_skb+0x1fb/0x450 [ 1959.282000][ T579] ? genl_bind+0x360/0x360 [ 1959.286447][ T579] ? netlink_ack+0x1170/0x1170 [ 1959.291316][ T579] ? down_read+0x1a8/0x2d0 [ 1959.295760][ T579] genl_rcv+0x24/0x40 [ 1959.299762][ T579] netlink_unicast+0x74d/0x8d0 [ 1959.304558][ T579] netlink_sendmsg+0x8ad/0xbd0 [ 1959.309362][ T579] ? netlink_getsockopt+0x550/0x550 [ 1959.314583][ T579] ? ____sys_sendmsg+0x71/0x970 [ 1959.319461][ T579] ? aa_sock_msg_perm+0x94/0x150 [ 1959.324425][ T579] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1959.329733][ T579] ? security_socket_sendmsg+0x7c/0xa0 [ 1959.335217][ T579] ? netlink_getsockopt+0x550/0x550 [ 1959.340447][ T579] ____sys_sendmsg+0x5be/0x970 [ 1959.345252][ T579] ? __sys_sendmsg_sock+0x30/0x30 [ 1959.350305][ T579] ? __import_iovec+0x315/0x500 [ 1959.355197][ T579] ? import_iovec+0x6f/0xa0 [ 1959.359769][ T579] ___sys_sendmsg+0x2a2/0x360 [ 1959.364471][ T579] ? __sys_sendmsg+0x290/0x290 [ 1959.369275][ T579] ? rcu_is_watching+0x11/0xa0 [ 1959.374104][ T579] __se_sys_sendmsg+0x1bb/0x2a0 [ 1959.378983][ T579] ? __x64_sys_sendmsg+0x80/0x80 [ 1959.383957][ T579] ? lockdep_hardirqs_on+0x94/0x140 [ 1959.389185][ T579] do_syscall_64+0x4c/0xa0 [ 1959.393629][ T579] ? clear_bhb_loop+0x60/0xb0 [ 1959.398347][ T579] ? clear_bhb_loop+0x60/0xb0 [ 1959.403097][ T579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1959.409023][ T579] RIP: 0033:0x7f3ccff9ce59 [ 1959.413474][ T579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1959.433119][ T579] RSP: 002b:00007f3cd0d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1959.441559][ T579] RAX: ffffffffffffffda RBX: 00007f3cd0216090 RCX: 00007f3ccff9ce59 [ 1959.449555][ T579] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1959.457549][ T579] RBP: 00007f3cd0032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1959.465544][ T579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1959.473540][ T579] R13: 00007f3cd0216128 R14: 00007f3cd0216090 R15: 00007ffd481d2f18 [ 1959.481558][ T579] [ 1959.518661][T12407] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1963.022632][ T612] netlink: 'syz.2.9207': attribute type 25 has an invalid length. [ 1963.041408][ T612] netlink: 'syz.2.9207': attribute type 29 has an invalid length. [ 1963.168367][ T612] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9207'. [ 1963.550420][T24352] team0: Port device wlan1 removed [ 1963.595081][ T629] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1966.757694][T24352] bridge0: port 3(bond0) entered disabled state [ 1966.806390][T24352] device bridge_slave_0 left promiscuous mode [ 1966.837143][T24352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.979554][T24352] device veth1_macvtap left promiscuous mode [ 1966.985737][T24352] device veth0_macvtap left promiscuous mode [ 1967.068465][T24352] device veth1_vlan left promiscuous mode [ 1967.873860][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 1968.034387][T24352] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1968.043741][T24352] device batadv_slave_0 left promiscuous mode [ 1968.090685][T24352] team0 (unregistering): Port device team_slave_1 removed [ 1968.144635][T24352] team0 (unregistering): Port device team_slave_0 removed [ 1968.190988][T24352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.199915][T24352] device bond_slave_1 left promiscuous mode [ 1968.245293][T24352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1968.255267][T24352] device bond_slave_0 left promiscuous mode [ 1968.301500][T24352] team0 (unregistering): Port device bridge_slave_1 removed [ 1968.524086][T24352] team0 (unregistering): Port device bridge0 removed [ 1968.554652][T24352] bond0 (unregistering): Released all slaves [ 1968.651177][ T681] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1968.862164][ T687] netlink: 'syz.4.9234': attribute type 21 has an invalid length. [ 1968.892251][ T687] netlink: 'syz.4.9234': attribute type 2 has an invalid length. [ 1972.790193][ T720] netlink: 'syz.4.9247': attribute type 21 has an invalid length. [ 1972.827367][ T720] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1973.051072][ T726] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1973.106669][ T733] netlink: 'syz.0.9250': attribute type 21 has an invalid length. [ 1973.118139][ T733] netlink: 'syz.0.9250': attribute type 2 has an invalid length. [ 1973.971472][ T756] netlink: 'syz.3.9258': attribute type 25 has an invalid length. [ 1973.980341][ T756] netlink: 'syz.3.9258': attribute type 29 has an invalid length. [ 1973.990461][ T756] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9258'. [ 1974.553727][ T760] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1974.578173][ T760] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1974.662865][ T760] bond0: (slave bond_slave_0): Releasing backup interface [ 1974.781678][ T760] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1975.094794][ T771] netlink: 'syz.2.9266': attribute type 21 has an invalid length. [ 1975.159504][ T771] netlink: 'syz.2.9266': attribute type 2 has an invalid length. [ 1975.326572][ T781] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1975.381255][T31574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1975.390683][T31574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1975.411311][T31574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1975.419602][T31574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1975.427599][T31574] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1975.435562][T31574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1975.610457][T18008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1975.715130][ T789] netlink: 'syz.2.9270': attribute type 25 has an invalid length. [ 1975.733596][ T789] netlink: 'syz.2.9270': attribute type 29 has an invalid length. [ 1975.765042][ T794] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9270'. [ 1975.812817][T18008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.033138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.039645][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.095092][T18008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.199946][T18008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.403200][T18008] device 0 left promiscuous mode [ 1976.468983][ T807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9274'. [ 1976.538964][ T807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1976.611458][ T782] chnl_net:caif_netlink_parms(): no params data found [ 1976.674061][ T810] bond0: (slave team0): Error: Slave device does not support XDP [ 1976.727592][T18008] tipc: Left network mode [ 1976.847097][ T810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1977.235005][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.264441][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.289543][ T782] device bridge_slave_0 entered promiscuous mode [ 1977.378391][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.385568][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.428371][ T782] device bridge_slave_1 entered promiscuous mode [ 1977.454584][ T838] netlink: 'syz.0.9282': attribute type 25 has an invalid length. [ 1977.468290][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 1977.521550][ T838] netlink: 'syz.0.9282': attribute type 29 has an invalid length. [ 1977.605763][ T840] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9282'. [ 1977.862471][ T852] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1977.957088][ T782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1979.548216][T31574] Bluetooth: hci3: command 0x041b tx timeout [ 1980.981234][ T782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.127743][ T782] team0: Port device team_slave_0 added [ 1981.206406][ T782] team0: Port device team_slave_1 added [ 1981.266001][T18008] device gretap0 left promiscuous mode [ 1981.284164][T18008] : port 1(gretap0) entered disabled state [ 1981.345296][ T782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1981.368667][ T782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.404180][ T782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1981.487853][ T782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1981.500903][ T782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.536786][ T782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1981.576274][ T911] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.9294'. [ 1981.589343][ T906] netlink: 'syz.2.9294': attribute type 29 has an invalid length. [ 1981.600083][ T914] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9295'. [ 1981.613129][ T914] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9295'. [ 1981.622815][T31574] Bluetooth: hci3: command 0x040f tx timeout [ 1981.632731][ T914] bond0: (slave bond_slave_0): Releasing backup interface [ 1981.667272][ T914] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1981.705240][ T906] netlink: 'syz.2.9294': attribute type 29 has an invalid length. [ 1981.771568][ T911] netlink: 'syz.2.9294': attribute type 29 has an invalid length. [ 1981.851189][ T782] device hsr_slave_0 entered promiscuous mode [ 1981.869828][ T782] device hsr_slave_1 entered promiscuous mode [ 1981.889735][ T782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1981.897361][ T782] Cannot create hsr debugfs directory [ 1982.677638][T18008] device hsr_slave_0 left promiscuous mode [ 1982.718290][T18008] device hsr_slave_1 left promiscuous mode [ 1982.738827][T18008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1982.782428][T18008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.807347][T18008] device bridge_slave_0 left promiscuous mode [ 1982.834943][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.919591][T18008] device veth1_macvtap left promiscuous mode [ 1982.925815][T18008] device veth0_macvtap left promiscuous mode [ 1982.978664][T18008] device veth1_vlan left promiscuous mode [ 1983.707676][T31574] Bluetooth: hci3: command 0x0419 tx timeout [ 1985.708648][T18008] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1985.841260][T18008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1985.884969][T18008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1986.166223][T18008] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1986.175854][T18008] bond0 (unregistering): Released all slaves [ 1986.304211][ T954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9305'. [ 1986.313748][ T959] netlink: 'syz.0.9308': attribute type 25 has an invalid length. [ 1986.322587][ T959] netlink: 'syz.0.9308': attribute type 29 has an invalid length. [ 1986.348381][ T966] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9308'. [ 1987.291018][ T782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1987.323549][ T782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1987.359859][ T782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1987.391996][ T782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1987.642496][ T782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.691426][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1987.708953][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1987.723166][ T782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.749108][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1987.763865][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1987.785311][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.792618][T12407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1987.834389][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1987.856228][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1987.871900][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1987.881820][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.888991][T12407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1987.897416][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1987.924235][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1987.943734][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1987.985722][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1988.023349][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1988.051235][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1988.063745][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1988.072905][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1988.081873][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1988.092819][ T1037] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1988.115975][T12412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1988.130541][T12412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1988.147823][ T782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1988.964300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1988.979294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1989.003107][ T782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.087895][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1989.113515][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1989.186720][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1989.239241][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1989.275903][ T782] device veth0_vlan entered promiscuous mode [ 1989.315832][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1989.334414][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1989.374415][ T782] device veth1_vlan entered promiscuous mode [ 1989.467201][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1989.477767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1989.497043][ T782] device veth0_macvtap entered promiscuous mode [ 1989.517166][ T782] device veth1_macvtap entered promiscuous mode [ 1989.577181][ T782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1989.592597][ T782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.607980][ T782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1989.645091][ T782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.674987][ T782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1989.699600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1989.717791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1989.751155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1989.772184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1989.799083][ T1080] netlink: 'syz.0.9335': attribute type 25 has an invalid length. [ 1989.818415][ T1080] netlink: 'syz.0.9335': attribute type 29 has an invalid length. [ 1989.851268][ T782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1989.876054][ T782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.886378][ T782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1989.915400][ T782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1989.932193][ T782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1989.995585][ T782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.033221][ T782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1990.057388][ T782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1990.071006][ T782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.080569][ T1083] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9335'. [ 1990.132103][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1990.159534][T29796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1990.183574][ T782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.193860][ T782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.214617][ T782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.241892][ T782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.466890][T29796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.503157][T29796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.532716][T12412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1990.589237][T18008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1990.597122][T18008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1990.625393][T12412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1991.520988][ T1129] netlink: 'syz.1.9346': attribute type 25 has an invalid length. [ 1991.569161][ T1129] netlink: 'syz.1.9346': attribute type 29 has an invalid length. [ 1991.588113][ T1134] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9346'. [ 1991.959524][ T1141] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.9349'. [ 1992.205847][ T1153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1992.433573][ T1158] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1992.509516][ T1162] netlink: 'syz.2.9364': attribute type 10 has an invalid length. [ 1992.550915][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.558578][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.637186][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.644833][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1992.654119][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.661376][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1992.765580][ T1162] team0: Port device bridge0 added [ 1993.761439][ T1198] netlink: 'syz.0.9361': attribute type 3 has an invalid length. [ 1993.806812][ T1198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1994.503045][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1994.519322][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1994.527372][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1994.549062][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1994.556870][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1994.565031][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1995.005998][ T1213] chnl_net:caif_netlink_parms(): no params data found [ 1995.270560][T18008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.352981][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1995.360519][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1995.369418][ T1213] device bridge_slave_0 entered promiscuous mode [ 1995.460839][T18008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.474908][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1995.482394][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.491583][ T1213] device bridge_slave_1 entered promiscuous mode [ 1995.505879][ T1238] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1995.546612][T18008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.587595][ T1213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1995.607570][ T1213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1995.655222][T18008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.771472][ T1213] team0: Port device team_slave_0 added [ 1995.797183][ T1213] team0: Port device team_slave_1 added [ 1995.861775][ T1213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1995.888187][ T1213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1995.984362][ T1213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.049663][ T1213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.064053][ T1213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.097597][ T1213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.308832][ T1213] device hsr_slave_0 entered promiscuous mode [ 1996.328921][ T1213] device hsr_slave_1 entered promiscuous mode [ 1996.339194][ T1213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1996.356514][ T1213] Cannot create hsr debugfs directory [ 1996.372463][T18008] device 0 left promiscuous mode [ 1996.658408][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 1996.664899][T18008] tipc: Left network mode [ 1997.335390][ T1283] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9387'. [ 1997.636432][ T1296] FAULT_INJECTION: forcing a failure. [ 1997.636432][ T1296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1997.705487][ T1296] CPU: 0 PID: 1296 Comm: syz.2.9389 Not tainted syzkaller #0 [ 1997.712967][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1997.723062][ T1296] Call Trace: [ 1997.726373][ T1296] [ 1997.729346][ T1296] dump_stack_lvl+0x188/0x24e [ 1997.734078][ T1296] ? show_regs_print_info+0x12/0x12 [ 1997.739320][ T1296] ? load_image+0x400/0x400 [ 1997.743877][ T1296] ? __lock_acquire+0x7d10/0x7d10 [ 1997.748972][ T1296] should_fail_ex+0x399/0x4d0 [ 1997.753720][ T1296] _copy_from_user+0x2c/0x170 [ 1997.758481][ T1296] ____sys_sendmsg+0x30a/0x970 [ 1997.763326][ T1296] ? __sys_sendmsg_sock+0x30/0x30 [ 1997.768389][ T1296] ? __import_iovec+0x315/0x500 [ 1997.773309][ T1296] ? import_iovec+0x6f/0xa0 [ 1997.777863][ T1296] ___sys_sendmsg+0x2a2/0x360 [ 1997.782596][ T1296] ? __sys_sendmsg+0x290/0x290 [ 1997.787451][ T1296] ? __lock_acquire+0x7d10/0x7d10 [ 1997.792590][ T1296] __se_sys_sendmsg+0x1bb/0x2a0 [ 1997.797485][ T1296] ? __x64_sys_sendmsg+0x80/0x80 [ 1997.802497][ T1296] ? lockdep_hardirqs_on+0x94/0x140 [ 1997.807746][ T1296] do_syscall_64+0x4c/0xa0 [ 1997.812193][ T1296] ? clear_bhb_loop+0x60/0xb0 [ 1997.816912][ T1296] ? clear_bhb_loop+0x60/0xb0 [ 1997.821641][ T1296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1997.827579][ T1296] RIP: 0033:0x7fb47579ce59 [ 1997.832037][ T1296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1997.851672][ T1296] RSP: 002b:00007fb4765b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1997.860145][ T1296] RAX: ffffffffffffffda RBX: 00007fb475a15fa0 RCX: 00007fb47579ce59 [ 1997.868162][ T1296] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1997.876171][ T1296] RBP: 00007fb4765b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1997.884179][ T1296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1997.892197][ T1296] R13: 00007fb475a16038 R14: 00007fb475a15fa0 R15: 00007ffc2ee0ba58 [ 1997.900255][ T1296] [ 1998.698622][ T1305] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1998.738973][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 1999.025440][ T1213] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1999.099849][ T1213] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1999.241372][ T1213] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1999.471521][T18008] team0: Port device wlan1 removed [ 1999.514968][ T1213] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1999.781385][T18008] device vlan0 left promiscuous mode [ 1999.793839][T18008] À: port 1(vlan0) entered disabled state [ 1999.824097][T18008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1999.833323][T18008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1999.842365][T18008] device batadv0 left promiscuous mode [ 1999.849695][T18008] bridge0: port 3(batadv0) entered disabled state [ 1999.864606][T18008] device bridge_slave_0 left promiscuous mode [ 1999.884916][T18008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.972842][T18008] device veth1_macvtap left promiscuous mode [ 1999.982993][T18008] device veth0_macvtap left promiscuous mode [ 1999.993322][T18008] device veth1_vlan left promiscuous mode [ 2000.361881][T18008] team0 (unregistering): Port device macvlan0 removed [ 2000.672258][T18008] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2000.720191][T18008] team0 (unregistering): Port device team_slave_1 removed [ 2000.772093][T18008] team0 (unregistering): Port device team_slave_0 removed [ 2000.814605][T18008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2000.834366][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 2000.906178][T18008] team0 (unregistering): Port device bridge_slave_1 removed [ 2001.160497][T18008] bond0 (unregistering): Released all slaves [ 2001.446860][ T1213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2001.497411][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2001.506714][T29795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2001.529904][ T1213] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.537658][ T1344] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.9402'. [ 2001.583822][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2001.597593][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2001.615230][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.622496][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2002.002124][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2002.036282][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2002.164558][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2002.228485][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state [ 2002.235735][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2002.295115][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2002.309219][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2002.344660][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2002.381235][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2002.401892][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2002.433121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2002.456964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2002.482191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2002.497444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2002.515118][ T1213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2002.557040][ T1213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2002.586215][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2002.606049][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2002.908256][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 2003.031751][ T1370] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2003.514368][ T1376] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.9406'. [ 2003.927362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2003.936644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2003.962214][ T1213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.022875][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2004.042147][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2004.106396][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2004.126864][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2004.152096][ T1213] device veth0_vlan entered promiscuous mode [ 2004.159532][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2004.168648][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2004.183513][ T1213] device veth1_vlan entered promiscuous mode [ 2004.213993][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2004.225311][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2004.234002][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2004.244108][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2004.256468][ T1213] device veth0_macvtap entered promiscuous mode [ 2004.270873][ T1213] device veth1_macvtap entered promiscuous mode [ 2004.292317][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.305459][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.315866][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.327047][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.338991][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.350077][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.362422][ T1213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2004.385201][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2004.398000][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2004.425593][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2004.441121][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2004.455045][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2004.466347][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.483107][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2004.495602][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.517715][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2004.535620][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.547003][ T1213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2004.565603][ T1213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.577879][ T1213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2004.599998][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2004.617888][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2004.639037][ T1213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.647789][ T1213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.669807][ T1213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.685803][ T1213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2004.877243][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2004.938685][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2004.985982][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2005.010758][ T1252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.045323][ T1252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.091295][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2005.318246][ T1419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2005.325344][ T1419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2005.412311][ T1423] FAULT_INJECTION: forcing a failure. [ 2005.412311][ T1423] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.462761][ T1423] CPU: 0 PID: 1423 Comm: syz.3.9419 Not tainted syzkaller #0 [ 2005.470248][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2005.480363][ T1423] Call Trace: [ 2005.483698][ T1423] [ 2005.486691][ T1423] dump_stack_lvl+0x188/0x24e [ 2005.491456][ T1423] ? show_regs_print_info+0x12/0x12 [ 2005.496731][ T1423] ? load_image+0x400/0x400 [ 2005.501324][ T1423] ? perf_trace_lock+0x301/0x390 [ 2005.506362][ T1423] should_fail_ex+0x399/0x4d0 [ 2005.511126][ T1423] should_failslab+0x5/0x20 [ 2005.515700][ T1423] slab_pre_alloc_hook+0x59/0x310 [ 2005.520814][ T1423] kmem_cache_alloc+0x56/0x2f0 [ 2005.525632][ T1423] ? skb_clone+0x1e7/0x370 [ 2005.530128][ T1423] skb_clone+0x1e7/0x370 [ 2005.534446][ T1423] __netlink_deliver_tap+0x3ed/0x800 [ 2005.539840][ T1423] ? netlink_deliver_tap+0x2e/0x1b0 [ 2005.545125][ T1423] netlink_deliver_tap+0x19c/0x1b0 [ 2005.550308][ T1423] netlink_dump+0x832/0xd00 [ 2005.554915][ T1423] ? netlink_lookup+0x200/0x200 [ 2005.559844][ T1423] ? netlink_recvmsg+0x5e3/0xe00 [ 2005.564826][ T1423] ? kmem_cache_free+0xf7/0x290 [ 2005.569737][ T1423] netlink_recvmsg+0x68f/0xe00 [ 2005.574567][ T1423] ? netlink_sendmsg+0xbd0/0xbd0 [ 2005.579562][ T1423] ? aa_af_perm+0x340/0x340 [ 2005.584147][ T1423] ? __might_fault+0xa6/0x120 [ 2005.588902][ T1423] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2005.594230][ T1423] ? security_socket_recvmsg+0x85/0xb0 [ 2005.599768][ T1423] ? netlink_sendmsg+0xbd0/0xbd0 [ 2005.604761][ T1423] ____sys_recvmsg+0x2cb/0x5e0 [ 2005.609603][ T1423] ? __sys_recvmsg_sock+0x40/0x40 [ 2005.614717][ T1423] ? import_iovec+0x6f/0xa0 [ 2005.619284][ T1423] ___sys_recvmsg+0x212/0x590 [ 2005.624030][ T1423] ? __sys_recvmsg+0x290/0x290 [ 2005.628940][ T1423] ? common_file_perm+0x171/0x1c0 [ 2005.634042][ T1423] ? __fget_files+0x43d/0x4b0 [ 2005.638841][ T1423] __x64_sys_recvmsg+0x205/0x2e0 [ 2005.643845][ T1423] ? ___sys_recvmsg+0x590/0x590 [ 2005.648807][ T1423] ? lockdep_hardirqs_on+0x94/0x140 [ 2005.654062][ T1423] do_syscall_64+0x4c/0xa0 [ 2005.658517][ T1423] ? clear_bhb_loop+0x60/0xb0 [ 2005.663255][ T1423] ? clear_bhb_loop+0x60/0xb0 [ 2005.667990][ T1423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2005.673939][ T1423] RIP: 0033:0x7f131ed9ce59 [ 2005.678398][ T1423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2005.698046][ T1423] RSP: 002b:00007f131fcd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2005.706505][ T1423] RAX: ffffffffffffffda RBX: 00007f131f016090 RCX: 00007f131ed9ce59 [ 2005.714515][ T1423] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000006 [ 2005.722550][ T1423] RBP: 00007f131fcd3090 R08: 0000000000000000 R09: 0000000000000000 [ 2005.730554][ T1423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2005.738553][ T1423] R13: 00007f131f016128 R14: 00007f131f016090 R15: 00007ffcfb01d928 [ 2005.746601][ T1423] [ 2006.774324][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2006.784345][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2006.793177][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2006.801795][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2006.811210][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2006.820560][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2008.908192][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 2009.574852][ T1433] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9423'. [ 2010.066089][ T1438] chnl_net:caif_netlink_parms(): no params data found [ 2010.181724][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.189379][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.199078][ T1438] device bridge_slave_0 entered promiscuous mode [ 2010.215437][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.223151][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.231722][ T1438] device bridge_slave_1 entered promiscuous mode [ 2010.275732][ T1438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2010.288458][ T1438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2010.325032][ T1438] team0: Port device team_slave_0 added [ 2010.346657][ T1438] team0: Port device team_slave_1 added [ 2010.429487][ T1438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2010.436536][ T1438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2010.477837][ T1438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2010.516570][ T1438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2010.523854][ T1438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2010.613059][ T1438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2010.840260][ T1438] device hsr_slave_0 entered promiscuous mode [ 2010.869887][ T1438] device hsr_slave_1 entered promiscuous mode [ 2010.900813][ T1438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2010.915505][ T1438] Cannot create hsr debugfs directory [ 2010.981927][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 2010.997945][ T1474] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2011.084487][T18008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.154536][T18008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.306064][T18008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.451323][T18008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.587667][ T1487] FAULT_INJECTION: forcing a failure. [ 2011.587667][ T1487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.643279][T18008] device 0 left promiscuous mode [ 2011.648493][ T1487] CPU: 1 PID: 1487 Comm: syz.2.9436 Not tainted syzkaller #0 [ 2011.655917][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2011.666019][ T1487] Call Trace: [ 2011.669345][ T1487] [ 2011.672314][ T1487] dump_stack_lvl+0x188/0x24e [ 2011.677042][ T1487] ? show_regs_print_info+0x12/0x12 [ 2011.682290][ T1487] ? load_image+0x400/0x400 [ 2011.686854][ T1487] ? __lock_acquire+0x7d10/0x7d10 [ 2011.691939][ T1487] ? snprintf+0xe5/0x140 [ 2011.696240][ T1487] should_fail_ex+0x399/0x4d0 [ 2011.700966][ T1487] _copy_to_user+0x2c/0x130 [ 2011.705591][ T1487] simple_read_from_buffer+0xe3/0x150 [ 2011.711041][ T1487] proc_fail_nth_read+0x1a6/0x220 [ 2011.716132][ T1487] ? proc_fault_inject_write+0x310/0x310 [ 2011.721826][ T1487] ? fsnotify_perm+0x248/0x550 [ 2011.726647][ T1487] ? proc_fault_inject_write+0x310/0x310 [ 2011.732423][ T1487] vfs_read+0x2de/0xa00 [ 2011.736657][ T1487] ? kernel_read+0x1e0/0x1e0 [ 2011.741308][ T1487] ? __fget_files+0x28/0x4b0 [ 2011.745961][ T1487] ? __fget_files+0x28/0x4b0 [ 2011.750614][ T1487] ? __fget_files+0x43d/0x4b0 [ 2011.755401][ T1487] ? __fdget_pos+0x2ae/0x360 [ 2011.760049][ T1487] ? ksys_read+0x71/0x250 [ 2011.764442][ T1487] ksys_read+0x14c/0x250 [ 2011.768751][ T1487] ? vfs_write+0xa30/0xa30 [ 2011.773226][ T1487] ? lockdep_hardirqs_on+0x94/0x140 [ 2011.778475][ T1487] do_syscall_64+0x4c/0xa0 [ 2011.782925][ T1487] ? clear_bhb_loop+0x60/0xb0 [ 2011.787654][ T1487] ? clear_bhb_loop+0x60/0xb0 [ 2011.792385][ T1487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2011.798350][ T1487] RIP: 0033:0x7fb47575d68e [ 2011.802804][ T1487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2011.822461][ T1487] RSP: 002b:00007fb47658ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2011.830924][ T1487] RAX: ffffffffffffffda RBX: 00007fb4765906c0 RCX: 00007fb47575d68e [ 2011.838947][ T1487] RDX: 000000000000000f RSI: 00007fb4765900a0 RDI: 0000000000000004 [ 2011.846967][ T1487] RBP: 00007fb476590090 R08: 0000000000000000 R09: 0000000000000000 [ 2011.854989][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2011.862998][ T1487] R13: 00007fb475a16128 R14: 00007fb475a16090 R15: 00007ffc2ee0ba58 [ 2011.871031][ T1487] [ 2011.986842][T18008] device 1 left promiscuous mode [ 2012.802982][ T1252] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2013.058465][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 2015.119381][T18008] tipc: Left network mode [ 2015.124010][ T1501] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9439'. [ 2015.138477][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 2015.981939][ T1532] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2016.015660][ T1438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2016.128632][ T1438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2016.151542][ T1438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2016.210876][ T1438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2016.230304][ T1545] netlink: 'syz.2.9451': attribute type 15 has an invalid length. [ 2016.255235][ T1545] netlink: 'syz.2.9451': attribute type 7 has an invalid length. [ 2016.783120][ T1561] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2016.945385][ T1438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2017.154902][T18008] team0: Port device wlan1 removed [ 2017.196463][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2017.215925][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2017.274543][ T1438] 8021q: adding VLAN 0 to HW filter on device team0 [ 2017.572921][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2017.613638][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2017.669164][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.676375][ T1252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2017.728721][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2017.759938][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2017.808880][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state [ 2017.816091][ T1252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2017.878848][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2017.927368][T18008] device vlan0 left promiscuous mode [ 2017.968424][T18008] À: port 1(vlan0) entered disabled state [ 2018.038360][T18008] device hsr_slave_0 left promiscuous mode [ 2018.065010][T18008] device hsr_slave_1 left promiscuous mode [ 2018.085354][T18008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2018.126512][T18008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2018.302050][T18008] device veth1_macvtap left promiscuous mode [ 2018.314159][T18008] device veth0_macvtap left promiscuous mode [ 2018.335481][T18008] device veth1_vlan left promiscuous mode [ 2018.352565][T18008] device veth0_vlan left promiscuous mode [ 2018.858469][T18008] team0 (unregistering): Port device macvlan0 removed [ 2019.135173][T18008] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2019.183475][T18008] team0 (unregistering): Port device team_slave_1 removed [ 2019.229636][T18008] team0 (unregistering): Port device team_slave_0 removed [ 2019.273987][T18008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.580612][T18008] bond0 (unregistering): (slave team0): Releasing backup interface [ 2019.614192][T18008] bond0 (unregistering): Released all slaves [ 2019.655515][ T1585] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2019.680489][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2019.708182][ T1585] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2019.728657][ T1585] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2019.732393][ T1598] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2019.749901][ T1599] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2019.787800][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2019.839346][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2019.886520][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2019.933284][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2019.969539][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2019.990145][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2020.019436][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2020.049119][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2020.094008][ T1438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2020.140329][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2020.163085][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2020.179895][T12407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2020.353040][ T1615] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2020.389016][ T1623] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2020.531520][ T1624] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2021.492766][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2021.540490][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2021.566740][ T1438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2023.710850][ T1734] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2024.178588][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 2024.553908][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2024.569591][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2024.616161][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2024.629295][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2024.648673][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2024.667005][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2024.690588][ T1438] device veth0_vlan entered promiscuous mode [ 2024.721686][ T1756] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2024.732062][ T1438] device veth1_vlan entered promiscuous mode [ 2024.793123][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2024.803205][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2024.812830][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2024.822852][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2024.837266][ T1438] device veth0_macvtap entered promiscuous mode [ 2024.863343][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2024.883535][ T1438] device veth1_macvtap entered promiscuous mode [ 2024.895575][ T1761] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9486'. [ 2024.971748][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.046536][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.062182][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.083634][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.094101][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.145733][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.167275][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2025.183664][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.207878][ T1438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2025.233648][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2025.296705][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2025.328966][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2025.353134][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.378264][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2025.402922][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.414580][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2025.430435][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.444309][ T1438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2025.460793][ T1438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2025.483023][ T1438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2025.501048][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2025.520523][ T1710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2025.550667][ T1438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.567604][ T1438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.576872][ T1438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.599838][ T1438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.854227][ T1706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2025.900147][ T1706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.911682][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2025.931322][ T1717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2025.967576][ T1717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2025.988173][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2026.356349][ T1788] delete_channel: no stack [ 2026.544995][ T1795] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2026.633900][ T1796] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2026.664375][ T1798] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2027.850606][ T1820] netlink: 'syz.3.9507': attribute type 2 has an invalid length. [ 2027.882249][ T1820] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9507'. [ 2028.697320][ T1830] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2032.222774][ T1862] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2034.590404][ T1904] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2034.897644][ T1915] tipc: Started in network mode [ 2034.907583][ T1915] tipc: Node identity 9215a268, cluster identity 4711 [ 2034.925040][ T1915] tipc: Node number set to 2450891368 [ 2035.189602][ T1921] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2035.295680][ T1929] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2035.302965][ T1929] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2036.543887][ T1963] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2036.633842][ T1962] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2036.655775][ T1970] FAULT_INJECTION: forcing a failure. [ 2036.655775][ T1970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2036.692806][ T1970] CPU: 1 PID: 1970 Comm: syz.0.9562 Not tainted syzkaller #0 [ 2036.700251][ T1970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2036.710348][ T1970] Call Trace: [ 2036.713670][ T1970] [ 2036.716645][ T1970] dump_stack_lvl+0x188/0x24e [ 2036.721379][ T1970] ? show_regs_print_info+0x12/0x12 [ 2036.726627][ T1970] ? load_image+0x400/0x400 [ 2036.731202][ T1970] ? __lock_acquire+0x7d10/0x7d10 [ 2036.736464][ T1970] should_fail_ex+0x399/0x4d0 [ 2036.741190][ T1970] _copy_from_user+0x2c/0x170 [ 2036.745929][ T1970] iovec_from_user+0x143/0x360 [ 2036.750745][ T1970] __import_iovec+0x6d/0x500 [ 2036.755394][ T1970] import_iovec+0x6f/0xa0 [ 2036.759778][ T1970] ___sys_sendmsg+0x252/0x360 [ 2036.764513][ T1970] ? __sys_sendmsg+0x290/0x290 [ 2036.769342][ T1970] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2036.775144][ T1970] __se_sys_sendmsg+0x1bb/0x2a0 [ 2036.780053][ T1970] ? __x64_sys_sendmsg+0x80/0x80 [ 2036.785055][ T1970] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2036.791004][ T1970] do_syscall_64+0x4c/0xa0 [ 2036.795464][ T1970] ? clear_bhb_loop+0x60/0xb0 [ 2036.800214][ T1970] ? clear_bhb_loop+0x60/0xb0 [ 2036.804931][ T1970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2036.810860][ T1970] RIP: 0033:0x7f7137d9ce59 [ 2036.815306][ T1970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2036.834936][ T1970] RSP: 002b:00007f7138d30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2036.843379][ T1970] RAX: ffffffffffffffda RBX: 00007f7138015fa0 RCX: 00007f7137d9ce59 [ 2036.851383][ T1970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2036.859386][ T1970] RBP: 00007f7138d30090 R08: 0000000000000000 R09: 0000000000000000 [ 2036.867384][ T1970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2036.875387][ T1970] R13: 00007f7138016038 R14: 00007f7138015fa0 R15: 00007ffc92014558 [ 2036.883397][ T1970] [ 2037.473608][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.480075][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.858218][T18008] wlan1: Trigger new scan to find an IBSS to join [ 2038.015869][ T2007] mac80211_hwsim hwsim64 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2038.301981][ T2023] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2041.858422][ T1706] wlan1: Trigger new scan to find an IBSS to join [ 2041.875203][ T1673] wlan1: Trigger new scan to find an IBSS to join [ 2042.552860][ T2083] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.9598'. [ 2042.574948][ T2080] IPv6: Can't replace route, no match found [ 2042.584392][ T2083] openvswitch: netlink: Flow actions attr not present in new flow. [ 2042.797156][ T1673] wlan1: Creating new IBSS network, BSSID f6:22:a1:6d:77:d4 [ 2043.572481][ T2105] netlink: 'syz.4.9609': attribute type 27 has an invalid length. [ 2043.590731][ T2105] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.9609'. [ 2044.316333][ T2118] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.9614'. [ 2044.898151][ T1706] wlan1: Trigger new scan to find an IBSS to join [ 2045.790465][ T2137] netlink: 'syz.2.9619': attribute type 2 has an invalid length. [ 2045.827191][ T1710] wlan1: Creating new IBSS network, BSSID 4a:64:75:62:a4:6b [ 2045.848310][ T2137] netlink: 'syz.2.9619': attribute type 1 has an invalid length. [ 2045.861496][ T2137] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.9619'. [ 2046.031894][ T2130] netlink: 'syz.2.9619': attribute type 10 has an invalid length. [ 2046.124036][ T2130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9619'. [ 2046.190815][ T2130] device ipvlan1 entered promiscuous mode [ 2046.522228][ T2130] bridge0: port 3(ipvlan1) entered blocking state [ 2046.533927][ T2130] bridge0: port 3(ipvlan1) entered disabled state [ 2046.585781][ T2130] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2046.620953][ T2145] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2050.074788][ T2181] FAULT_INJECTION: forcing a failure. [ 2050.074788][ T2181] name failslab, interval 1, probability 0, space 0, times 0 [ 2050.096884][ T2181] CPU: 1 PID: 2181 Comm: syz.0.9636 Not tainted syzkaller #0 [ 2050.104343][ T2181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2050.114442][ T2181] Call Trace: [ 2050.117767][ T2181] [ 2050.120742][ T2181] dump_stack_lvl+0x188/0x24e [ 2050.120779][ T2184] netlink: 'syz.1.9635': attribute type 10 has an invalid length. [ 2050.125452][ T2181] ? show_regs_print_info+0x12/0x12 [ 2050.125479][ T2181] ? load_image+0x400/0x400 [ 2050.143089][ T2181] ? __might_sleep+0xd0/0xd0 [ 2050.147720][ T2181] ? __lock_acquire+0x7d10/0x7d10 [ 2050.152802][ T2181] should_fail_ex+0x399/0x4d0 [ 2050.157547][ T2181] should_failslab+0x5/0x20 [ 2050.162093][ T2181] slab_pre_alloc_hook+0x59/0x310 [ 2050.167182][ T2181] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2050.172968][ T2181] __kmem_cache_alloc_node+0x4f/0x260 [ 2050.178389][ T2181] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 2050.184189][ T2181] __kmalloc+0xa0/0x240 [ 2050.188400][ T2181] tomoyo_realpath_from_path+0xdf/0x5d0 [ 2050.194003][ T2181] ? tomoyo_path_number_perm+0x205/0x650 [ 2050.199685][ T2181] tomoyo_path_number_perm+0x22f/0x650 [ 2050.205201][ T2181] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2050.210705][ T2181] ? ksys_write+0x1c0/0x250 [ 2050.215259][ T2181] ? common_file_perm+0x171/0x1c0 [ 2050.220352][ T2181] ? __fget_files+0x28/0x4b0 [ 2050.224989][ T2181] ? __fget_files+0x28/0x4b0 [ 2050.229642][ T2181] security_file_ioctl+0x6c/0xa0 [ 2050.234640][ T2181] __se_sys_ioctl+0x48/0x170 [ 2050.239279][ T2181] do_syscall_64+0x4c/0xa0 [ 2050.243768][ T2181] ? clear_bhb_loop+0x60/0xb0 [ 2050.248494][ T2181] ? clear_bhb_loop+0x60/0xb0 [ 2050.253242][ T2181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2050.259187][ T2181] RIP: 0033:0x7f7137d9ce59 [ 2050.263637][ T2181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2050.283282][ T2181] RSP: 002b:00007f7138d30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2050.291735][ T2181] RAX: ffffffffffffffda RBX: 00007f7138015fa0 RCX: 00007f7137d9ce59 [ 2050.299736][ T2181] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 2050.307736][ T2181] RBP: 00007f7138d30090 R08: 0000000000000000 R09: 0000000000000000 [ 2050.315733][ T2181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2050.323743][ T2181] R13: 00007f7138016038 R14: 00007f7138015fa0 R15: 00007ffc92014558 [ 2050.331767][ T2181] [ 2050.345575][ T2181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2050.355278][ T2184] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9635'. [ 2050.502033][ T2189] netlink: 'syz.4.9638': attribute type 2 has an invalid length. [ 2050.510032][ T2189] netlink: 'syz.4.9638': attribute type 1 has an invalid length. [ 2050.517805][ T2189] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.9638'. [ 2050.813507][ T2189] netlink: 'syz.4.9638': attribute type 10 has an invalid length. [ 2050.838053][ T2189] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9638'. [ 2050.855361][ T2189] device ipvlan1 entered promiscuous mode [ 2050.922332][ T2189] bridge0: port 3(ipvlan1) entered blocking state [ 2050.948572][ T2189] bridge0: port 3(ipvlan1) entered disabled state [ 2050.956971][ T2189] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2051.359098][ T2209] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.9644'. [ 2052.159193][ T2229] netlink: 'syz.3.9652': attribute type 33 has an invalid length. [ 2052.194587][ T2229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9652'. [ 2052.246129][ T2229] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2052.518163][ T2235] netlink: 'syz.0.9654': attribute type 10 has an invalid length. [ 2052.555158][ T2233] netlink: 'syz.0.9654': attribute type 2 has an invalid length. [ 2052.586231][ T2235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9654'. [ 2052.643996][ T2233] netlink: 'syz.0.9654': attribute type 1 has an invalid length. [ 2052.682521][ T2233] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.9654'. [ 2052.744162][ T2235] device ipvlan1 entered promiscuous mode [ 2052.850275][ T2235] bridge0: port 2(ipvlan1) entered blocking state [ 2052.928178][ T2235] bridge0: port 2(ipvlan1) entered disabled state [ 2052.937539][ T2235] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2053.089112][ T2240] netlink: 'syz.4.9656': attribute type 10 has an invalid length. [ 2053.126326][ T2240] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9656'. [ 2055.657961][ T2262] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2056.286020][ T2280] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2056.365658][ T2279] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2059.810116][ T2314] FAULT_INJECTION: forcing a failure. [ 2059.810116][ T2314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2059.851300][ T2314] CPU: 1 PID: 2314 Comm: syz.3.9675 Not tainted syzkaller #0 [ 2059.858793][ T2314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2059.868891][ T2314] Call Trace: [ 2059.872208][ T2314] [ 2059.875202][ T2314] dump_stack_lvl+0x188/0x24e [ 2059.879937][ T2314] ? show_regs_print_info+0x12/0x12 [ 2059.885182][ T2314] ? load_image+0x400/0x400 [ 2059.889740][ T2314] ? __lock_acquire+0x7d10/0x7d10 [ 2059.894815][ T2314] ? rcu_is_watching+0x11/0xa0 [ 2059.899640][ T2314] should_fail_ex+0x399/0x4d0 [ 2059.904379][ T2314] _copy_to_user+0x2c/0x130 [ 2059.908946][ T2314] ethtool_get_features+0x1a2/0x280 [ 2059.914201][ T2314] ? ethtool_set_rxfh+0xa10/0xa10 [ 2059.919287][ T2314] ? full_name_hash+0x8e/0xe0 [ 2059.924021][ T2314] dev_ethtool+0xde5/0x12f0 [ 2059.928583][ T2314] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2059.934888][ T2314] ? __lock_acquire+0x7d10/0x7d10 [ 2059.939970][ T2314] ? __kmem_cache_free+0xb6/0x1f0 [ 2059.945050][ T2314] ? full_name_hash+0x8e/0xe0 [ 2059.949779][ T2314] ? dev_load+0x1d/0x1e0 [ 2059.954156][ T2314] ? dev_load+0x1d/0x1e0 [ 2059.958463][ T2314] dev_ioctl+0x474/0xe80 [ 2059.962759][ T2314] sock_do_ioctl+0x245/0x320 [ 2059.967404][ T2314] ? sock_show_fdinfo+0xb0/0xb0 [ 2059.972334][ T2314] sock_ioctl+0x4d2/0x710 [ 2059.976714][ T2314] ? sock_poll+0x410/0x410 [ 2059.981190][ T2314] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2059.986176][ T2314] ? security_file_ioctl+0x7c/0xa0 [ 2059.991333][ T2314] ? sock_poll+0x410/0x410 [ 2059.995796][ T2314] __se_sys_ioctl+0xfa/0x170 [ 2060.000453][ T2314] do_syscall_64+0x4c/0xa0 [ 2060.004913][ T2314] ? clear_bhb_loop+0x60/0xb0 [ 2060.009648][ T2314] ? clear_bhb_loop+0x60/0xb0 [ 2060.014413][ T2314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2060.020390][ T2314] RIP: 0033:0x7f131ed9ce59 [ 2060.024845][ T2314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2060.044537][ T2314] RSP: 002b:00007f131fcf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2060.053003][ T2314] RAX: ffffffffffffffda RBX: 00007f131f015fa0 RCX: 00007f131ed9ce59 [ 2060.061012][ T2314] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2060.069005][ T2314] RBP: 00007f131fcf4090 R08: 0000000000000000 R09: 0000000000000000 [ 2060.077000][ T2314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2060.084996][ T2314] R13: 00007f131f016038 R14: 00007f131f015fa0 R15: 00007ffcfb01d928 [ 2060.093028][ T2314] [ 2061.265539][ T2339] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2061.367325][ T2336] netlink: 'syz.3.9692': attribute type 1 has an invalid length. [ 2061.409082][ T2336] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.9692'. [ 2061.846189][ T2350] netlink: 'syz.2.9686': attribute type 10 has an invalid length. [ 2064.794382][ T2350] team0: Port device wlan1 added [ 2064.879207][ T2356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 2064.928145][ T2356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 2064.949899][ T2361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9690'. [ 2066.383943][ T2392] netlink: 'syz.0.9698': attribute type 10 has an invalid length. [ 2066.413844][ T2392] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.487344][ T2392] bond0: (slave bridge0): Releasing backup interface [ 2066.528811][ T2392] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.536803][ T2392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.651075][ T2392] team0: Port device bridge0 added [ 2066.657229][ T2400] netlink: 'syz.1.9699': attribute type 1 has an invalid length. [ 2066.680386][ T2390] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2066.699805][ T2400] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.9699'. [ 2066.975036][ T2408] netlink: 'syz.3.9703': attribute type 10 has an invalid length. [ 2067.261466][ T2416] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2068.219542][ T1717] tipc: Subscription rejected, illegal request [ 2069.312164][ T2479] netlink: 'syz.4.9724': attribute type 10 has an invalid length. [ 2069.324105][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.332854][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.419672][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.428373][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.437724][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.446040][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2069.481889][ T2486] netlink: 'syz.2.9722': attribute type 29 has an invalid length. [ 2069.552229][ T2479] team0: Port device bridge0 added [ 2069.561975][ T2473] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2069.582968][ T2486] netlink: 'syz.2.9722': attribute type 29 has an invalid length. [ 2069.603164][ T2488] netlink: 'syz.2.9722': attribute type 29 has an invalid length. [ 2069.658644][ T2497] netlink: 'syz.2.9722': attribute type 29 has an invalid length. [ 2069.706475][ T2499] FAULT_INJECTION: forcing a failure. [ 2069.706475][ T2499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2069.739778][ T2499] CPU: 0 PID: 2499 Comm: syz.4.9726 Not tainted syzkaller #0 [ 2069.747222][ T2499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2069.757317][ T2499] Call Trace: [ 2069.760635][ T2499] [ 2069.763611][ T2499] dump_stack_lvl+0x188/0x24e [ 2069.768338][ T2499] ? show_regs_print_info+0x12/0x12 [ 2069.773582][ T2499] ? load_image+0x400/0x400 [ 2069.778143][ T2499] ? __lock_acquire+0x7d10/0x7d10 [ 2069.783222][ T2499] ? __mutex_trylock_common+0x155/0x260 [ 2069.788829][ T2499] should_fail_ex+0x399/0x4d0 [ 2069.793560][ T2499] _copy_from_user+0x2c/0x170 [ 2069.798310][ T2499] do_tcp_setsockopt+0x5e4/0x1d40 [ 2069.803418][ T2499] ? __might_sleep+0xd0/0xd0 [ 2069.808046][ T2499] ? tcp_set_window_clamp+0x590/0x590 [ 2069.813473][ T2499] ? smc_setsockopt+0x18c/0xb80 [ 2069.818428][ T2499] ? mutex_lock_nested+0x10/0x10 [ 2069.823404][ T2499] ? aa_sk_perm+0x89/0x950 [ 2069.827875][ T2499] ? aa_sk_perm+0x81f/0x950 [ 2069.832428][ T2499] ? sock_common_setsockopt+0x32/0xb0 [ 2069.837849][ T2499] ? tcp_setsockopt+0x39/0xe0 [ 2069.842592][ T2499] ? tcp_enable_tx_delay+0x70/0x70 [ 2069.847760][ T2499] ? sock_common_recvmsg+0x190/0x190 [ 2069.853107][ T2499] smc_setsockopt+0x235/0xb80 [ 2069.857829][ T2499] ? smc_shutdown+0x9a0/0x9a0 [ 2069.862545][ T2499] ? aa_sock_opt_perm+0x74/0x100 [ 2069.867540][ T2499] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2069.873178][ T2499] ? security_socket_setsockopt+0x7a/0xa0 [ 2069.878936][ T2499] ? smc_shutdown+0x9a0/0x9a0 [ 2069.883655][ T2499] __sys_setsockopt+0x2bf/0x3d0 [ 2069.888561][ T2499] __x64_sys_setsockopt+0xb1/0xc0 [ 2069.893674][ T2499] do_syscall_64+0x4c/0xa0 [ 2069.898142][ T2499] ? clear_bhb_loop+0x60/0xb0 [ 2069.902869][ T2499] ? clear_bhb_loop+0x60/0xb0 [ 2069.907624][ T2499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2069.913675][ T2499] RIP: 0033:0x7f08c999ce59 [ 2069.918218][ T2499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2069.937869][ T2499] RSP: 002b:00007f08ca7d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2069.946339][ T2499] RAX: ffffffffffffffda RBX: 00007f08c9c15fa0 RCX: 00007f08c999ce59 [ 2069.954356][ T2499] RDX: 0000000000000022 RSI: 0000000000000006 RDI: 0000000000000007 [ 2069.962372][ T2499] RBP: 00007f08ca7d0090 R08: 0000000000000004 R09: 0000000000000000 [ 2069.970384][ T2499] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 2069.978400][ T2499] R13: 00007f08c9c16038 R14: 00007f08c9c15fa0 R15: 00007ffe3353e238 [ 2069.986440][ T2499] [ 2070.589085][ T2522] tipc: Started in network mode [ 2070.594116][ T2522] tipc: Node identity 9215a268, cluster identity 4711 [ 2070.679220][T18008] tipc: Subscription rejected, illegal request [ 2070.706160][ T2522] tipc: Node number set to 2450891368 [ 2071.176014][ T2537] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9746'. [ 2071.213548][ T2537] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9746'. [ 2071.247480][ T2549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9746'. [ 2071.365962][ T2547] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2071.401878][ T2542] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2071.874769][ T2568] netlink: 'syz.4.9744': attribute type 10 has an invalid length. [ 2071.980396][ T2568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.988888][ T2568] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.204005][ T1714] tipc: Subscription rejected, illegal request [ 2072.232765][ T2577] tipc: Started in network mode [ 2072.258298][ T2577] tipc: Node identity 9215a268, cluster identity 4711 [ 2072.293149][ T2577] tipc: Node number set to 2450891368 [ 2072.346355][ T2584] tipc: Started in network mode [ 2072.360828][ T2584] tipc: Node identity 9215a268, cluster identity 4711 [ 2072.373518][ T2584] tipc: Node number set to 2450891368 [ 2072.809642][ T1714] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2073.202891][ T2601] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2073.362331][ T2608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9754'. [ 2073.376819][ T2608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9754'. [ 2073.418907][ T2614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9754'. [ 2073.441928][ T2611] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9753'. [ 2073.468476][ T2611] openvswitch: netlink: Message has 6 unknown bytes. [ 2073.633959][ T2622] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9758'. [ 2073.712119][ T2622] openvswitch: netlink: Flow key attr not present in new flow. [ 2074.689702][ T2650] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2075.658580][ T2671] netlink: 'syz.1.9773': attribute type 39 has an invalid length. [ 2076.246272][ T2691] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9779'. [ 2076.405671][ T2694] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2076.723993][ T2714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9786'. [ 2076.749655][ T2714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9786'. [ 2076.805366][ T2719] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9786'. [ 2077.182246][ T2735] FAULT_INJECTION: forcing a failure. [ 2077.182246][ T2735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.195575][ T2735] CPU: 0 PID: 2735 Comm: syz.1.9793 Not tainted syzkaller #0 [ 2077.202994][ T2735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2077.213095][ T2735] Call Trace: [ 2077.216428][ T2735] [ 2077.219399][ T2735] dump_stack_lvl+0x188/0x24e [ 2077.224146][ T2735] ? show_regs_print_info+0x12/0x12 [ 2077.229384][ T2735] ? load_image+0x400/0x400 [ 2077.233950][ T2735] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2077.239987][ T2735] ? lock_chain_count+0x20/0x20 [ 2077.244887][ T2735] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2077.249958][ T2735] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2077.255563][ T2735] should_fail_ex+0x399/0x4d0 [ 2077.260294][ T2735] copy_page_from_iter_atomic+0x21e/0x1280 [ 2077.266156][ T2735] ? pipe_zero+0x140/0x140 [ 2077.270617][ T2735] ? PageHeadHuge+0x8f/0x1c0 [ 2077.275255][ T2735] ? shmem_write_begin+0x1b4/0x3f0 [ 2077.280429][ T2735] generic_perform_write+0x34f/0x5c0 [ 2077.285802][ T2735] ? generic_file_direct_write+0x330/0x330 [ 2077.291666][ T2735] ? __file_remove_privs+0x5f0/0x5f0 [ 2077.297001][ T2735] ? rwsem_write_trylock+0x135/0x1c0 [ 2077.302346][ T2735] ? clear_nonspinnable+0x60/0x60 [ 2077.307432][ T2735] ? generic_write_checks_count+0x3d9/0x4c0 [ 2077.313381][ T2735] __generic_file_write_iter+0x148/0x2a0 [ 2077.319076][ T2735] generic_file_write_iter+0xab/0x2e0 [ 2077.324504][ T2735] vfs_write+0x4b1/0xa30 [ 2077.328810][ T2735] ? file_end_write+0x250/0x250 [ 2077.333724][ T2735] ? __fget_files+0x43d/0x4b0 [ 2077.338472][ T2735] ? __fdget_pos+0x2ae/0x360 [ 2077.343141][ T2735] ? ksys_write+0x71/0x250 [ 2077.347622][ T2735] ksys_write+0x14c/0x250 [ 2077.352010][ T2735] ? __ia32_sys_read+0x80/0x80 [ 2077.356830][ T2735] ? lockdep_hardirqs_on+0x94/0x140 [ 2077.362081][ T2735] do_syscall_64+0x4c/0xa0 [ 2077.366594][ T2735] ? clear_bhb_loop+0x60/0xb0 [ 2077.371325][ T2735] ? clear_bhb_loop+0x60/0xb0 [ 2077.376059][ T2735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2077.382003][ T2735] RIP: 0033:0x7efc8dd9ce59 [ 2077.386461][ T2735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.406134][ T2735] RSP: 002b:00007efc8ec37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2077.414596][ T2735] RAX: ffffffffffffffda RBX: 00007efc8e015fa0 RCX: 00007efc8dd9ce59 [ 2077.422608][ T2735] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000007 [ 2077.430618][ T2735] RBP: 00007efc8ec37090 R08: 0000000000000000 R09: 0000000000000000 [ 2077.438636][ T2735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.446675][ T2735] R13: 00007efc8e016038 R14: 00007efc8e015fa0 R15: 00007ffda691f848 [ 2077.454710][ T2735] [ 2077.860352][ T2752] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2078.879381][ T2789] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9806'. [ 2079.273546][ T2802] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.9811'. [ 2079.733712][ T2826] netlink: 'syz.3.9816': attribute type 13 has an invalid length. [ 2079.741909][ T2826] netlink: 'syz.3.9816': attribute type 58 has an invalid length. [ 2079.750929][ T2826] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9816'. [ 2080.084903][ T2835] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2080.316884][ T2845] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9823'. [ 2083.192441][ T2901] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2083.494561][ T2916] netlink: 'syz.2.9852': attribute type 39 has an invalid length. [ 2083.640038][ T2921] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9854'. [ 2084.576548][ T2945] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 2098.902850][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.913272][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.998323][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 2111.098391][T22624] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2680 jiffies s: 172641 root: 0x2/. [ 2111.128069][T22624] rcu: blocking rcu_node structures (internal RCU debug): [ 2111.135283][T22624] Sending NMI from CPU 0 to CPUs 1: [ 2111.140606][ C1] NMI backtrace for cpu 1 [ 2111.140616][ C1] CPU: 1 PID: 2932 Comm: syz.2.9859 Not tainted syzkaller #0 [ 2111.140633][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2111.140643][ C1] RIP: 0010:perf_trace_buf_alloc+0xa8/0x300 [ 2111.140670][ C1] Code: 41 89 ef 4d 85 f6 0f 84 a9 00 00 00 bf 05 00 00 00 89 ee e8 4a eb f7 ff 83 fd 04 0f 87 27 02 00 00 e8 dc e7 f7 ff 4c 89 3c 24 <4d> 69 ff a8 00 00 00 e8 2c d7 a4 08 41 89 c5 41 89 c4 bf 08 00 00 [ 2111.140684][ C1] RSP: 0018:ffffc900001e08c0 EFLAGS: 00000046 [ 2111.140699][ C1] RAX: ffffffff818a93c4 RBX: 0000000000000014 RCX: ffff888077801e00 [ 2111.140712][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000005 [ 2111.140722][ C1] RBP: 0000000000000001 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 2111.140734][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffffffff8cb80560 [ 2111.140746][ C1] R13: dffffc0000000000 R14: ffffc900001e0940 R15: 0000000000000001 [ 2111.140758][ C1] FS: 00007fb4765b16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2111.140772][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2111.140784][ C1] CR2: 00007fb47656eff8 CR3: 0000000020be5000 CR4: 00000000003506e0 [ 2111.140799][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000008d24 [ 2111.140810][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2111.140821][ C1] Call Trace: [ 2111.140827][ C1] [ 2111.140836][ C1] perf_trace_preemptirq_template+0x143/0x320 [ 2111.140861][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2111.140889][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2111.140914][ C1] ? __irq_exit_rcu+0x147/0x230 [ 2111.140931][ C1] ? irq_exit_rcu+0x20/0x20 [ 2111.140948][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2111.140972][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 2111.140998][ C1] trace_hardirqs_on+0x24/0x40 [ 2111.141030][ C1] asm_sysvec_irq_work+0x16/0x20 [ 2111.141055][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2111.141074][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 82 30 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2111.141088][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 2111.141101][ C1] RAX: 9debe44cf82f5a00 RBX: 1ffff9200003c160 RCX: 9debe44cf82f5a00 [ 2111.141114][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 2111.141127][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 2111.141139][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 2111.141151][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 2111.141202][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.141230][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2111.141268][ C1] __rcu_read_unlock+0x78/0xd0 [ 2111.141283][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 2111.141397][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2111.141418][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 2111.141448][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 2111.141468][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 2111.141492][ C1] ? hw_scan_work+0xf60/0xf60 [ 2111.141514][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2111.141533][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 2111.141560][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 2111.141581][ C1] handle_softirqs+0x2a1/0x930 [ 2111.141619][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 2111.141638][ C1] ? do_softirq+0x210/0x210 [ 2111.141657][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 2111.141675][ C1] __irq_exit_rcu+0x13b/0x230 [ 2111.141691][ C1] ? irq_exit_rcu+0x20/0x20 [ 2111.141714][ C1] irq_exit_rcu+0x5/0x20 [ 2111.141728][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2111.141762][ C1] [ 2111.141767][ C1] [ 2111.141773][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.141798][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 2111.141846][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 30 ba df 08 e8 cb 30 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 2111.141860][ C1] RSP: 0018:ffffc9000fe2edb8 EFLAGS: 00000286 [ 2111.141873][ C1] RAX: 9debe44cf82f5a00 RBX: 0000000000000000 RCX: 9debe44cf82f5a00 [ 2111.141885][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 2111.141897][ C1] RBP: ffffc9000fe2ee10 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 2111.141910][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: ffff888077801e00 [ 2111.141922][ C1] R13: dffffc0000000000 R14: ffff88802e419e00 R15: ffff8880b8f3b5d0 [ 2111.141944][ C1] ? finish_task_switch+0x265/0x8f0 [ 2111.141970][ C1] __schedule+0x11d9/0x40e0 [ 2111.141995][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.142026][ C1] ? __sched_text_start+0x8/0x8 [ 2111.142041][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 2111.142062][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.142089][ C1] ? preempt_schedule+0xbc/0xd0 [ 2111.142103][ C1] ? do_check_common+0x3527/0xc6d0 [ 2111.142129][ C1] preempt_schedule_common+0x82/0xd0 [ 2111.142146][ C1] preempt_schedule+0xbc/0xd0 [ 2111.142161][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 2111.142178][ C1] ? ___slab_alloc+0x20e/0x1240 [ 2111.142199][ C1] preempt_schedule_thunk+0x16/0x18 [ 2111.142256][ C1] __kmem_cache_alloc_node+0x1c7/0x260 [ 2111.142277][ C1] ? do_check_common+0x3527/0xc6d0 [ 2111.142295][ C1] kmalloc_trace+0x26/0xe0 [ 2111.142322][ C1] do_check_common+0x3527/0xc6d0 [ 2111.142368][ C1] ? push_insn+0x670/0x670 [ 2111.142386][ C1] ? do_check_subprogs+0x345/0x390 [ 2111.142408][ C1] bpf_check+0xb08f/0x10db0 [ 2111.142435][ C1] ? __perf_event_overflow+0x4f9/0x610 [ 2111.142466][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 2111.142483][ C1] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 2111.142505][ C1] ? perf_swevent_event+0x4ba/0x570 [ 2111.142532][ C1] ? perf_tp_event+0xc30/0xc30 [ 2111.142557][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 2111.142576][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2111.142601][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 2111.142622][ C1] ? perf_tp_event+0xaac/0xc30 [ 2111.142649][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2111.142709][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 2111.142728][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 2111.142764][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2111.142794][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 2111.142826][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 2111.142843][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2111.142868][ C1] ? lock_chain_count+0x20/0x20 [ 2111.142891][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.142915][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 2111.142935][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.142962][ C1] ? bpf_prog_load+0xff9/0x1560 [ 2111.142987][ C1] bpf_prog_load+0x101a/0x1560 [ 2111.143038][ C1] ? map_freeze+0x390/0x390 [ 2111.143061][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.143087][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 2111.143115][ C1] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 2111.143136][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 2111.143154][ C1] ? security_bpf+0x7a/0xa0 [ 2111.143173][ C1] __sys_bpf+0x5b8/0x780 [ 2111.143197][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 2111.143227][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2111.143259][ C1] __x64_sys_bpf+0x78/0x90 [ 2111.143282][ C1] do_syscall_64+0x4c/0xa0 [ 2111.143298][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2111.143322][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2111.143347][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2111.143371][ C1] RIP: 0033:0x7fb47579ce59 [ 2111.143385][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2111.143399][ C1] RSP: 002b:00007fb4765b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2111.143415][ C1] RAX: ffffffffffffffda RBX: 00007fb475a15fa0 RCX: 00007fb47579ce59 [ 2111.143427][ C1] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 2111.143437][ C1] RBP: 00007fb475832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2111.143447][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2111.143456][ C1] R13: 00007fb475a16038 R14: 00007fb475a15fa0 R15: 00007ffc2ee0ba58 [ 2111.143476][ C1]